$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft File: 4484F3893797207C9981D7E181BC150543E7839F.mft (raw, json) Hash identifier: esUcX8qrsU8qvVMfNLsBZbx6mwbU0eQ9BBIFvNICp1M= Subject key identifier: DC:36:E9:1C:AA:5E:AF:82:5C:ED:6E:02:6E:55:8E:90:67:D8:FF:74 Authority key identifier: 44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F Certificate issuer: /CN=4484F3893797207C9981D7E181BC150543E7839F Certificate serial: 7609EEE7509A2470EDEDDA6B8F80AB04E7F4ACE3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft Manifest number: AE Signing time: Fri 28 Aug 2026 06:48:04 +0000 Manifest this update: Fri 28 Aug 2026 06:43:04 +0000 Manifest next update: Mon 31 Aug 2026 15:59:04 +0000 Files and hashes: 1: 36302e3230302e302e302f31362d3234203d3e203234343135.roa (hash: uS10l6UUbs4SLFXK3xXOjj3+hPOUh9ZMUoFB5ixu0C0=) 2: 4484F3893797207C9981D7E181BC150543E7839F.crl (hash: ET6QVWlipERfkFqhyjL7KqEC9/yIJedkkPWyhIzgSRQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:09:ee:e7:50:9a:24:70:ed:ed:da:6b:8f:80:ab:04:e7:f4:ac:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4484F3893797207C9981D7E181BC150543E7839F Validity Not Before: Aug 28 06:43:04 2026 GMT Not After : Aug 31 15:59:04 2026 GMT Subject: CN=DC36E91CAA5EAF825CED6E026E558E9067D8FF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:41:e5:0d:d2:f4:33:84:67:d1:6c:f0:87: 38:27:92:60:29:e3:c8:e8:c2:08:20:74:d1:9b:ed: a6:0e:bb:73:b9:9d:35:8a:b7:92:2c:d0:85:0e:32: 30:cf:bb:d6:3d:d5:81:6f:51:86:15:c9:32:67:b0: aa:23:f7:ed:05:25:b4:71:02:d8:c3:8d:9c:9b:68: d7:a7:c1:9d:e4:66:6f:f9:06:03:f7:95:4f:57:72: f3:d2:12:d1:b1:63:29:d8:41:2f:82:e2:9b:f9:25: 29:21:d9:57:5d:7e:21:0d:74:91:8d:67:8b:12:5b: 3d:2a:dd:4b:88:26:89:76:9a:b2:c0:9a:6c:cf:17: 24:c9:df:35:9c:91:e5:6d:39:97:58:f0:31:80:c1: af:6b:f9:5c:58:7f:8b:b6:64:e6:f2:67:09:12:ea: 78:ab:85:ae:70:30:4a:0a:1b:d2:b3:a8:6f:0b:f4: a1:5d:48:3e:22:b0:97:b8:f8:c2:c6:0e:67:29:be: 50:0a:b1:98:e3:11:5b:cd:b3:05:d6:c4:47:5c:0e: c7:08:6b:57:01:27:1f:a5:50:91:38:cb:10:1b:6c: 98:a7:7b:a3:5e:0f:50:fe:3b:d8:a9:21:4e:55:13: e3:dd:da:bc:91:6f:37:1c:5e:04:e5:97:59:37:6f: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:36:E9:1C:AA:5E:AF:82:5C:ED:6E:02:6E:55:8E:90:67:D8:FF:74 X509v3 Authority Key Identifier: keyid:44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:65:4c:0b:90:28:84:6b:87:34:da:1c:ae:f7:4b:76:88:03: 08:94:1d:56:3d:53:f7:45:69:67:08:68:6d:8b:66:90:0d:2e: 8d:90:55:bf:db:21:62:f5:29:dc:92:f8:84:35:8d:5a:8d:d2: b1:9e:b4:b1:1b:c2:51:af:ef:b6:08:39:58:cb:c8:1b:16:2e: 8f:62:2f:01:16:26:cd:e4:5c:b7:15:1b:4b:9f:3d:ec:4d:8c: 08:08:00:38:9b:33:31:fb:46:07:38:a0:37:ff:a9:48:98:b0: 60:36:9f:89:2d:80:10:2c:62:3b:92:67:45:bc:47:d3:73:eb: c9:18:7f:f1:56:e4:3b:92:85:6b:92:63:29:d3:8d:2d:7b:2b: 2c:3f:b5:d6:c2:3e:40:38:69:2d:b1:aa:76:26:54:db:cd:38: d4:ae:64:b9:bd:29:72:ae:d6:21:10:f6:5b:dc:93:f5:5e:4e: 82:0d:6f:86:9a:ab:84:1a:b5:52:43:bd:c7:5d:52:5c:dd:f7: 16:8b:db:0c:21:3d:b1:96:08:17:d6:45:fb:43:98:79:91:0a: 40:37:a8:35:64:f8:a5:d0:43:0b:1f:a4:f7:77:af:cd:6a:e7: f1:77:58:90:fd:c5:9d:58:b2:ce:43:ec:59:63:d0:df:49:46: d2:ed:f5:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdgnu51CaJHDt7dprj4CrBOf0rOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ4NEYzODkzNzk3MjA3Qzk5ODFEN0UxODFCQzE1MDU0 M0U3ODM5RjAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzExNTU5MDRaMDMxMTAvBgNV BAMTKERDMzZFOTFDQUE1RUFGODI1Q0VENkUwMjZFNTU4RTkwNjdEOEZGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/EHlDdL0M4Rn0WzwhzgnkmAp 48jowgggdNGb7aYOu3O5nTWKt5Is0IUOMjDPu9Y91YFvUYYVyTJnsKoj9+0FJbRx AtjDjZybaNenwZ3kZm/5BgP3lU9XcvPSEtGxYynYQS+C4pv5JSkh2VddfiENdJGN Z4sSWz0q3UuIJol2mrLAmmzPFyTJ3zWckeVtOZdY8DGAwa9r+VxYf4u2ZObyZwkS 6nirha5wMEoKG9KzqG8L9KFdSD4isJe4+MLGDmcpvlAKsZjjEVvNswXWxEdcDscI a1cBJx+lUJE4yxAbbJine6NeD1D+O9ipIU5VE+Pd2ryRbzccXgTll1k3b8hXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3DbpHKper4Jc7W4CblWOkGfY/3QwHwYDVR0j BBgwFoAURITziTeXIHyZgdfhgbwVBUPng58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTE2MzA4MjI3MTIyNzkwNi8wLzQ0ODRGMzg5Mzc5NzIwN0M5OTgxRDdFMTgxQkMx NTA1NDNFNzgzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQ4NEYzODkzNzk3MjA3Qzk5ODFEN0UxODFCQzE1MDU0M0U3ODM5Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkxNjMwODIyNzEyMjc5MDYvMC80NDg0RjM4OTM3OTcy MDdDOTk4MUQ3RTE4MUJDMTUwNTQzRTc4MzlGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmVMC5AohGuH NNocrvdLdogDCJQdVj1T90VpZwhobYtmkA0ujZBVv9shYvUp3JL4hDWNWo3SsZ60 sRvCUa/vtgg5WMvIGxYuj2IvARYmzeRctxUbS5897E2MCAgAOJszMftGBzigN/+p SJiwYDafiS2AECxiO5JnRbxH03PryRh/8VbkO5KFa5JjKdONLXsrLD+11sI+QDhp LbGqdiZU28041K5kub0pcq7WIRD2W9yT9V5Ogg1vhpqrhBq1UkO9x11SXN33Fovb DCE9sZYIF9ZF+0OYeZEKQDeoNWT4pdBDCx+k93evzWrn8XdYkP3FnViyzkPsWWPQ 30lG0u31Yw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:47 2026 by rpki-client