$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: 269ie+5CIXNYsEYkpdHcPh2Rac4E1YZEXKAeX22m86g= Subject key identifier: 98:4C:CE:13:5D:B4:B1:E5:96:78:C9:A6:09:D0:EA:41:75:F6:FF:CB Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 340BFADC04ADFA76A44C2EDC6B6F2405FEAE6A4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: A6 Signing time: Fri 28 Aug 2026 06:47:41 +0000 Manifest this update: Fri 28 Aug 2026 06:42:41 +0000 Manifest next update: Mon 31 Aug 2026 12:09:41 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 2: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) 3: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 4: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: Ya13HeKNmUglPEdU0kgecBP7HD9sG3s+XkDfWjXcDlg=) 5: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0b:fa:dc:04:ad:fa:76:a4:4c:2e:dc:6b:6f:24:05:fe:ae:6a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Aug 28 06:42:41 2026 GMT Not After : Aug 31 12:09:41 2026 GMT Subject: CN=984CCE135DB4B1E59678C9A609D0EA4175F6FFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:20:51:fa:0a:1a:d7:27:8d:fd:86:09:e5: c9:ef:6e:af:c1:2a:35:be:1c:b8:15:72:8a:2f:a5: 7a:60:4b:e7:51:6d:9e:7f:46:a9:53:f6:ae:53:b6: c5:f1:02:b1:c2:e2:6b:fe:22:6c:52:69:f1:f7:10: 48:80:ab:a4:10:08:e0:52:6d:39:2a:c5:7d:b3:f2: 53:a2:51:37:d5:0d:56:b7:4f:39:fe:4c:90:74:eb: 06:7f:c8:85:33:fb:8b:45:5c:7d:8b:ef:c0:fe:39: 0a:3d:b0:76:f8:b1:cc:b4:28:07:de:3e:a0:23:8c: 9a:81:0b:25:27:f4:11:e6:4c:9a:0d:8b:7a:bc:9f: 44:22:68:27:cf:0d:eb:2c:03:36:ac:ed:4b:ff:bc: 7d:a1:bb:88:f2:96:57:28:6e:a7:94:9b:2d:8b:c4: ca:c5:5f:dc:fc:cc:58:fc:35:4a:55:92:23:0e:ac: a2:59:8d:e1:a5:a0:33:c3:50:8d:b9:e4:71:61:94: bb:8c:ca:e0:e6:8f:81:92:08:57:68:fa:a1:6f:27: 8e:b6:b6:17:31:f5:45:98:6d:7f:78:6a:fb:85:d2: 67:5d:0c:cb:13:7c:4d:53:04:c9:e6:f3:d5:e4:60: ad:ce:97:6d:cb:3d:b2:e0:8c:f9:5b:94:d2:89:72: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:CE:13:5D:B4:B1:E5:96:78:C9:A6:09:D0:EA:41:75:F6:FF:CB X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:83:25:36:da:1c:d2:f6:ed:d9:7b:8a:16:d9:40:cf:99:71: 48:ba:e0:72:75:1f:8f:14:c4:1a:31:a6:6d:04:43:b4:b8:c2: 72:aa:c0:3e:7c:9a:94:d5:15:ac:7c:e5:fe:8d:1d:6a:56:63: 1d:2b:8b:37:ec:6a:ec:a9:96:c0:6c:b8:1f:93:1b:a9:60:f4: 4d:19:35:eb:00:c3:62:24:8e:db:88:6b:99:ab:aa:96:bc:99: 6b:70:e9:70:c9:56:3d:da:4d:0c:43:60:30:54:95:01:ed:06: ba:4f:00:4a:bf:7a:dc:dd:47:a1:2d:a9:cc:aa:81:e8:0e:67: 6f:cf:2b:8c:3e:73:f3:fe:96:98:b6:f2:fd:e0:cc:cf:d3:08: ba:f6:ce:f3:34:46:c4:f9:ef:03:88:a8:e8:b8:2c:f9:e0:72: 2a:96:fe:72:39:3f:33:b9:8c:ac:da:1c:16:ec:8b:49:12:58: b8:bf:92:bf:55:cc:58:13:bd:1f:22:7b:05:62:a1:fe:20:0e: 11:16:aa:42:03:93:f2:34:ae:fc:e3:3f:f9:65:4c:db:10:10: c0:b2:b9:0c:14:97:7e:aa:b2:c1:6d:82:e4:7f:a0:53:08:f2: 1e:ce:a1:8d:88:80:ee:e3:a6:63:11:fe:a8:29:c4:1e:fc:7c: be:2f:8b:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNAv63ASt+nakTC7ca28kBf6uakowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA4MjgwNjQyNDFaFw0yNjA4MzExMjA5NDFaMDMxMTAvBgNV BAMTKDk4NENDRTEzNURCNEIxRTU5Njc4QzlBNjA5RDBFQTQxNzVGNkZGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tyBR+goa1yeN/YYJ5cnvbq/B KjW+HLgVcoovpXpgS+dRbZ5/RqlT9q5TtsXxArHC4mv+ImxSafH3EEiAq6QQCOBS bTkqxX2z8lOiUTfVDVa3Tzn+TJB06wZ/yIUz+4tFXH2L78D+OQo9sHb4scy0KAfe PqAjjJqBCyUn9BHmTJoNi3q8n0QiaCfPDessAzas7Uv/vH2hu4jyllcobqeUmy2L xMrFX9z8zFj8NUpVkiMOrKJZjeGloDPDUI255HFhlLuMyuDmj4GSCFdo+qFvJ462 thcx9UWYbX94avuF0mddDMsTfE1TBMnm89XkYK3Ol23LPbLgjPlblNKJcmDXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmEzOE120seWWeMmmCdDqQXX2/8swHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4MlNtoc0vbt 2XuKFtlAz5lxSLrgcnUfjxTEGjGmbQRDtLjCcqrAPnyalNUVrHzl/o0dalZjHSuL N+xq7KmWwGy4H5MbqWD0TRk16wDDYiSO24hrmauqlryZa3DpcMlWPdpNDENgMFSV Ae0Guk8ASr963N1HoS2pzKqB6A5nb88rjD5z8/6WmLby/eDMz9MIuvbO8zRGxPnv A4io6Lgs+eByKpb+cjk/M7mMrNocFuyLSRJYuL+Sv1XMWBO9HyJ7BWKh/iAOERaq QgOT8jSu/OM/+WVM2xAQwLK5DBSXfqqywW2C5H+gUwjyHs6hjYiA7uOmYxH+qCnE Hvx8vi+LLA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:25 2026 by rpki-client