$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: 8FfMjSPT0B27zBBkJpX7lW83SrND46VoWFNQ+wQKZWU= Subject key identifier: 4C:83:B7:D6:13:CB:E2:9C:0A:51:BC:A8:84:F9:66:D0:9F:40:A8:6B Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 3926E45D50B108B36BCDE479859CD93BF3095623 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: B2 Signing time: Tue 08 Sep 2026 21:45:03 +0000 Manifest this update: Tue 08 Sep 2026 21:40:03 +0000 Manifest next update: Sat 12 Sep 2026 03:26:03 +0000 Files and hashes: 1: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: AyUKWWjririZJHueQfVtq/zKoZ1h1az4d/otCRqbX9E=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:e4:5d:50:b1:08:b3:6b:cd:e4:79:85:9c:d9:3b:f3:09:56:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Sep 8 21:40:03 2026 GMT Not After : Sep 12 03:26:03 2026 GMT Subject: CN=4C83B7D613CBE29C0A51BCA884F966D09F40A86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:ab:b1:b4:da:18:83:ed:39:ee:61:a5:82: 4a:87:d3:d7:c5:f3:68:a6:aa:fa:8c:05:86:7a:46: 3c:c0:e0:0e:80:d2:46:fd:fd:dd:24:cf:85:ec:04: 23:ee:3c:52:ff:1d:cd:22:94:16:98:9b:93:35:0c: 42:ef:8a:ca:a8:df:a5:5e:79:e0:ae:d6:1c:45:04: 8b:37:89:f2:6d:b6:39:79:7e:f1:ba:87:04:fa:de: b1:9c:dc:b8:ce:19:55:8b:ce:ed:c8:89:cc:73:1f: 8e:0f:ea:80:76:1b:63:54:4f:5e:5a:1a:85:0a:97: 4f:62:bf:f1:75:83:eb:14:71:bc:fc:96:aa:0d:bd: e9:df:a0:c1:e5:cd:54:e5:49:6d:29:91:3b:45:dc: 0d:cc:65:06:59:be:9a:f7:65:16:0d:5c:1e:6c:79: 8c:0c:81:db:f6:ef:69:24:62:63:34:d4:05:e8:1a: 6e:95:62:b9:cf:20:98:ac:06:13:e2:fe:86:40:b4: 8a:4c:e5:36:b4:c7:89:5a:b7:ef:31:da:c2:91:c2: a2:67:a7:e4:85:c8:29:c5:e7:32:c3:9b:a6:62:d1: 05:3b:65:3a:df:08:94:1a:e8:c9:28:c5:41:4a:1f: 38:35:e4:8d:62:f4:16:42:b3:32:7a:92:c3:14:28: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:83:B7:D6:13:CB:E2:9C:0A:51:BC:A8:84:F9:66:D0:9F:40:A8:6B X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:23:74:1a:21:ee:d7:bc:99:d9:3b:33:11:96:1f:75:7b:e6: 16:78:23:a2:93:46:ce:ce:03:24:0f:81:e7:b0:d2:23:9d:01: a8:87:b9:30:3a:c1:eb:c8:c1:9c:0d:1e:3c:da:9e:69:74:ac: aa:bc:67:41:09:80:33:e3:a3:ca:04:08:f5:a3:2a:7b:9c:aa: 0f:78:05:2e:80:3a:bf:1e:cc:58:72:43:e9:50:ec:e5:c6:eb: b2:84:b0:af:db:2b:b6:20:6e:f3:35:40:1b:56:60:20:01:e7: 71:ed:61:d4:0d:0f:9d:6b:cc:26:ee:94:10:fd:0f:2c:f4:ff: 63:0a:ff:e4:91:73:4e:d7:ce:8e:27:00:77:60:a1:60:8d:7b: 79:fb:60:b7:bd:23:49:32:c3:df:c0:56:17:0c:7f:74:d8:f2: bd:17:bf:84:e3:1b:e9:69:cf:f7:d3:5a:6a:3c:ca:47:b8:d1: 1b:f8:a6:32:f7:bb:0d:3e:c1:f3:53:5b:cf:c6:be:ee:9c:96: 04:24:76:0e:c8:12:64:18:31:62:df:9c:80:76:1f:31:f0:36: e5:6d:85:3f:a6:7e:5a:98:24:ee:59:20:ea:aa:9e:70:52:37: 70:f0:6e:0b:31:b3:c1:f5:ed:5c:4f:2b:b3:3e:ec:9d:66:da: e6:7e:81:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOSbkXVCxCLNrzeR5hZzZO/MJViMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA5MDgyMTQwMDNaFw0yNjA5MTIwMzI2MDNaMDMxMTAvBgNV BAMTKDRDODNCN0Q2MTNDQkUyOUMwQTUxQkNBODg0Rjk2NkQwOUY0MEE4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bKuxtNoYg+057mGlgkqH09fF 82imqvqMBYZ6RjzA4A6A0kb9/d0kz4XsBCPuPFL/Hc0ilBaYm5M1DELvisqo36Ve eeCu1hxFBIs3ifJttjl5fvG6hwT63rGc3LjOGVWLzu3IicxzH44P6oB2G2NUT15a GoUKl09iv/F1g+sUcbz8lqoNvenfoMHlzVTlSW0pkTtF3A3MZQZZvpr3ZRYNXB5s eYwMgdv272kkYmM01AXoGm6VYrnPIJisBhPi/oZAtIpM5Ta0x4lat+8x2sKRwqJn p+SFyCnF5zLDm6Zi0QU7ZTrfCJQa6MkoxUFKHzg15I1i9BZCszJ6ksMUKAIFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTIO31hPL4pwKUbyohPlm0J9AqGswHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCN0GiHu17yZ 2TszEZYfdXvmFngjopNGzs4DJA+B57DSI50BqIe5MDrB68jBnA0ePNqeaXSsqrxn QQmAM+OjygQI9aMqe5yqD3gFLoA6vx7MWHJD6VDs5cbrsoSwr9srtiBu8zVAG1Zg IAHnce1h1A0PnWvMJu6UEP0PLPT/Ywr/5JFzTtfOjicAd2ChYI17eftgt70jSTLD 38BWFwx/dNjyvRe/hOMb6WnP99NaajzKR7jRG/imMve7DT7B81Nbz8a+7pyWBCR2 DsgSZBgxYt+cgHYfMfA25W2FP6Z+Wpgk7lkg6qqecFI3cPBuCzGzwfXtXE8rsz7s nWba5n6BMg== -----END CERTIFICATE-----Generated at Thu Sep 10 17:38:41 2026 by rpki-client