$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: 9X/9TaCC5svFncxRR/Cj3zn1Fu4Q2TNuVxIGqTQu1Aw= Subject key identifier: 9E:45:3F:C6:57:CA:76:1A:03:49:CA:5C:79:96:60:06:CA:90:F2:9C Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 2D0DD224CD76CDB7903A7A82B85596430284A0E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: A9 Signing time: Fri 28 Aug 2026 06:48:24 +0000 Manifest this update: Fri 28 Aug 2026 06:43:24 +0000 Manifest next update: Mon 31 Aug 2026 15:55:24 +0000 Files and hashes: 1: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 2: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 3: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 4: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 5: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 6: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: qgV1kwuvAcy3BOnCUfuI5JY3F+vTXZUz9VaGZMEyNZ4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0d:d2:24:cd:76:cd:b7:90:3a:7a:82:b8:55:96:43:02:84:a0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Aug 28 06:43:24 2026 GMT Not After : Aug 31 15:55:24 2026 GMT Subject: CN=9E453FC657CA761A0349CA5C79966006CA90F29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:c3:61:2f:7b:25:3d:6b:e8:d5:61:46:23: 8d:e0:67:80:2b:78:d3:7e:0d:fc:e0:2b:24:74:e5: 2b:56:b1:f0:2f:ba:d2:6e:27:19:6c:d2:1e:b3:06: 71:60:9f:17:8a:12:43:6b:3a:45:9a:fa:aa:82:73: 19:3e:bb:ff:48:83:29:d6:32:ff:89:05:d5:22:e0: e4:92:d9:1a:00:15:11:51:0c:4d:ea:54:8e:76:d6: bf:70:53:4c:6f:c4:cb:59:5f:66:29:15:71:04:5c: cd:9d:80:70:40:5c:5c:b2:fc:92:63:88:7c:c5:3b: 22:eb:39:e8:1d:a7:28:e7:06:3f:94:97:8e:61:13: 35:0b:8c:c5:18:09:f5:ea:8a:d5:b1:ad:95:5b:3c: 33:e9:b7:a3:d6:4d:bf:ca:11:63:61:98:63:4a:a7: 4a:85:ad:85:5b:1f:88:82:33:04:8f:d4:db:5f:a3: a7:7f:61:54:cc:d9:9d:f2:49:e5:7e:5c:4c:cf:e6: c6:3c:b8:9c:95:4f:f5:a2:60:46:f4:9b:a1:04:5e: b6:71:95:e3:de:57:2f:4f:30:c5:f1:8c:42:ff:02: 4c:ab:3a:30:bb:ff:7e:e5:63:ff:54:df:cf:69:89: e2:03:43:fc:20:e1:87:90:18:3c:64:2b:aa:b1:a5: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:3F:C6:57:CA:76:1A:03:49:CA:5C:79:96:60:06:CA:90:F2:9C X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:91:b4:aa:e3:89:7d:95:69:df:16:81:b8:f8:19:d8:7c:48: f4:17:9b:28:55:3d:77:ee:5b:d9:18:1b:92:aa:80:d1:5b:86: 02:ff:05:69:ad:7f:97:a1:e6:41:00:b1:c4:05:31:da:63:e4: b6:3a:c2:a4:37:86:42:45:85:5f:19:99:eb:71:13:59:ce:5f: b6:4e:e2:50:c3:8a:26:a9:5f:20:3e:5d:39:b9:c8:70:4a:97: c6:cd:fb:e0:5e:bb:41:53:2e:e9:fb:ad:96:6a:df:58:79:f7: 5d:89:13:ae:b3:13:d1:e8:57:b0:c8:07:e1:36:7d:d8:b5:75: 10:b7:a2:6f:b5:de:e2:a9:88:39:2c:5f:e4:b3:fc:2e:b0:67: 21:4b:22:9d:8c:74:aa:06:dc:09:b9:82:20:bd:2f:d9:93:2c: 4c:df:48:17:fd:11:7e:ef:96:d4:df:8a:10:f9:91:6a:cb:52: 55:09:2d:46:52:56:e9:4b:a6:14:cf:02:24:54:5b:92:97:0d: 25:d0:01:ff:cc:df:f0:e5:ad:42:a0:1d:ad:d3:0f:98:ea:53: d4:ca:62:92:65:fa:fd:88:f4:5e:c0:c0:9b:6b:fb:1a:87:17: 05:0d:49:8e:a5:66:a4:c2:c3:7f:e0:50:04:2a:43:ea:8e:75: c5:51:ae:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULQ3SJM12zbeQOnqCuFWWQwKEoOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA4MjgwNjQzMjRaFw0yNjA4MzExNTU1MjRaMDMxMTAvBgNV BAMTKDlFNDUzRkM2NTdDQTc2MUEwMzQ5Q0E1Qzc5OTY2MDA2Q0E5MEYyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgn8NhL3slPWvo1WFGI43gZ4Ar eNN+DfzgKyR05StWsfAvutJuJxls0h6zBnFgnxeKEkNrOkWa+qqCcxk+u/9IgynW Mv+JBdUi4OSS2RoAFRFRDE3qVI521r9wU0xvxMtZX2YpFXEEXM2dgHBAXFyy/JJj iHzFOyLrOegdpyjnBj+Ul45hEzULjMUYCfXqitWxrZVbPDPpt6PWTb/KEWNhmGNK p0qFrYVbH4iCMwSP1Ntfo6d/YVTM2Z3ySeV+XEzP5sY8uJyVT/WiYEb0m6EEXrZx lePeVy9PMMXxjEL/AkyrOjC7/37lY/9U389pieIDQ/wg4YeQGDxkK6qxpTPtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnkU/xlfKdhoDScpceZZgBsqQ8pwwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJG0quOJfZVp 3xaBuPgZ2HxI9BebKFU9d+5b2RgbkqqA0VuGAv8Faa1/l6HmQQCxxAUx2mPktjrC pDeGQkWFXxmZ63ETWc5ftk7iUMOKJqlfID5dObnIcEqXxs374F67QVMu6futlmrf WHn3XYkTrrMT0ehXsMgH4TZ92LV1ELeib7Xe4qmIOSxf5LP8LrBnIUsinYx0qgbc CbmCIL0v2ZMsTN9IF/0Rfu+W1N+KEPmRastSVQktRlJW6UumFM8CJFRbkpcNJdAB /8zf8OWtQqAdrdMPmOpT1MpikmX6/Yj0XsDAm2v7GocXBQ1JjqVmpMLDf+BQBCpD 6o51xVGuXA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:30 2026 by rpki-client