$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft File: F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json) Hash identifier: jqujdgm2qV43oUWoyzPYJZ3iaUNdqHVbPPTvYt9Oumo= Subject key identifier: E5:B4:42:FC:06:1B:33:AF:15:13:DB:07:8F:CC:4E:76:17:88:A8:03 Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8 Certificate serial: 7ABC1EEF1A5A799210D6FFF1F40521B57E2B66FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft Manifest number: AF Signing time: Fri 28 Aug 2026 06:48:22 +0000 Manifest this update: Fri 28 Aug 2026 06:43:22 +0000 Manifest next update: Mon 31 Aug 2026 07:55:22 +0000 Files and hashes: 1: 34332e3234312e3138302e302f32322d3232203d3e2034383337.roa (hash: HKZbwobn+gowp0+1ObLCg/VAVmOykGsCqjAowrBRE0A=) 2: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: Lw/NqOquvHOSMKQZ6jI8fAz9ZZXRMx9JG29JwG+M0vc=) 3: 3130332e3233332e342e302f32322d3232203d3e203338303139.roa (hash: G3uzsK+ftbNUs4VTtZx4TroDdTxpDx+jmVLFQkNfjTo=) 4: 34332e3234312e3138302e302f32322d3232203d3e203338303139.roa (hash: zoSIijyIzxMHIyqM6fuIarjhtGW5rdAeJUWmqZfTCYQ=) 5: 3130332e3233332e342e302f32322d3232203d3e203538353432.roa (hash: yUlphJlkuTSXzbxuiNjSCxRtLT2/lWkCZPIq0oU9I+A=) 6: 34332e3234312e3138302e302f32322d3232203d3e203538353432.roa (hash: Rn7Hf2921Dc5UYgYrqbetrAyxHkG4VSopTyreGn+WM0=) 7: 3130332e3233332e342e302f32322d3232203d3e2034383337.roa (hash: jzL4NyHKET0uOb1qzgeUXQdh1sHLteXwDrGX2TWrytY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bc:1e:ef:1a:5a:79:92:10:d6:ff:f1:f4:05:21:b5:7e:2b:66:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8 Validity Not Before: Aug 28 06:43:22 2026 GMT Not After : Aug 31 07:55:22 2026 GMT Subject: CN=E5B442FC061B33AF1513DB078FCC4E761788A803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:cb:6d:26:c3:73:6f:b8:a7:d4:35:9c:1d: d6:31:26:73:c0:7f:ea:26:52:68:6e:2a:e4:13:4d: 25:68:56:d7:2a:ad:5f:07:b5:60:92:ab:11:b1:44: b8:75:b7:ee:a7:1b:9e:bb:33:15:e9:43:7c:ce:4f: 45:70:85:95:37:58:05:3e:23:4e:2a:9a:a7:dd:d2: 60:34:9d:45:d7:e5:64:0e:1d:d6:86:99:28:6e:3e: e5:38:ed:ce:fc:5f:7d:10:e3:3d:41:5f:f5:60:88: 65:d0:72:fb:24:20:6d:a0:0c:2c:dc:2a:b8:1a:ae: 92:58:61:74:5a:75:fc:a8:d4:7e:51:d8:7d:57:c9: 94:b7:00:b6:0b:9f:59:5b:da:93:da:f7:fc:4c:4c: 66:90:2d:61:4c:78:fa:04:95:c3:a5:2d:0c:04:12: 45:5b:1f:3a:44:09:76:e1:57:04:44:f5:7b:01:e8: 61:b2:59:b9:60:62:33:a3:02:9e:02:7c:c5:8c:ef: a0:9c:1f:63:b8:b7:37:47:f1:ac:a8:8e:d2:93:69: 31:3c:e0:01:f0:d7:ba:97:9c:6e:b9:10:11:a7:f4: 92:97:e2:ef:77:7c:dc:96:3e:86:65:97:fb:57:87: 68:5f:22:3a:79:b8:a7:6d:4b:cb:05:1c:70:79:f9: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:42:FC:06:1B:33:AF:15:13:DB:07:8F:CC:4E:76:17:88:A8:03 X509v3 Authority Key Identifier: keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:50:8f:5c:2c:5b:3e:a3:df:41:76:39:a0:b4:d6:07:68: e0:1b:26:2c:ad:b8:92:c9:bb:ef:eb:04:8b:9e:b3:99:c0:de: c4:f7:5e:f5:c3:7a:16:23:4d:91:07:54:b8:48:dd:e7:7c:a9: 77:03:6a:20:54:2e:84:ed:31:78:33:60:96:5c:11:6f:11:2f: 7f:73:af:cc:c7:4c:86:3a:2c:fa:1b:a2:af:3d:75:e6:35:33: 9a:03:be:a9:e6:34:d6:21:e8:2b:2e:44:25:cd:33:41:ae:7d: 58:80:05:2b:35:09:67:60:8a:46:2c:7e:00:e9:24:56:ad:c8: 34:e4:b1:41:1f:09:64:c8:9d:f2:69:f9:ca:56:19:d2:ec:d6: 7a:3b:09:96:2f:02:46:7f:ac:4f:a8:0a:87:be:92:bf:64:e8: ed:54:d1:e3:aa:48:4d:5d:1d:03:95:8d:51:57:66:c3:b6:9b: e1:27:fb:d9:0c:33:bd:0e:29:23:1d:c1:f5:58:91:1d:a0:c1: 5f:1b:74:d8:75:41:b0:5e:50:cc:96:4a:78:81:1e:29:14:26: 10:13:ba:6b:05:57:2e:1a:11:f3:9f:eb:59:fa:16:bf:bb:93: fc:b9:2a:38:0d:15:d0:18:2d:6b:3a:f3:02:bb:7e:c3:72:21: a5:66:16:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUerwe7xpaeZIQ1v/x9AUhtX4rZv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz QjEwNUNEODAeFw0yNjA4MjgwNjQzMjJaFw0yNjA4MzEwNzU1MjJaMDMxMTAvBgNV BAMTKEU1QjQ0MkZDMDYxQjMzQUYxNTEzREIwNzhGQ0M0RTc2MTc4OEE4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mMttJsNzb7in1DWcHdYxJnPA f+omUmhuKuQTTSVoVtcqrV8HtWCSqxGxRLh1t+6nG567MxXpQ3zOT0VwhZU3WAU+ I04qmqfd0mA0nUXX5WQOHdaGmShuPuU47c78X30Q4z1BX/VgiGXQcvskIG2gDCzc KrgarpJYYXRadfyo1H5R2H1XyZS3ALYLn1lb2pPa9/xMTGaQLWFMePoElcOlLQwE EkVbHzpECXbhVwRE9XsB6GGyWblgYjOjAp4CfMWM76CcH2O4tzdH8ayojtKTaTE8 4AHw17qXnG65EBGn9JKX4u93fNyWPoZll/tXh2hfIjp5uKdtS8sFHHB5+dcFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5bRC/AYbM68VE9sHj8xOdheIqAMwHwYDVR0j BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5Nzg1MTUzMjQ4NjI0NjcvMC9GOTE2RDcxQ0YyOEE3 RkMzMEU3MDVGRTExNDc2RkY0NzNCMTA1Q0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzpQj1wsWz6j 30F2OaC01gdo4BsmLK24ksm77+sEi56zmcDexPde9cN6FiNNkQdUuEjd53ypdwNq IFQuhO0xeDNgllwRbxEvf3OvzMdMhjos+huirz115jUzmgO+qeY01iHoKy5EJc0z Qa59WIAFKzUJZ2CKRix+AOkkVq3INOSxQR8JZMid8mn5ylYZ0uzWejsJli8CRn+s T6gKh76Sv2To7VTR46pITV0dA5WNUVdmw7ab4Sf72QwzvQ4pIx3B9ViRHaDBXxt0 2HVBsF5QzJZKeIEeKRQmEBO6awVXLhoR85/rWfoWv7uT/LkqOA0V0BgtazrzArt+ w3IhpWYWUw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:28:35 2026 by rpki-client