$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json) Hash identifier: qBvJATuXbV/ZH+6lo7LqB7crCYN1j9LFSzl8KebnQtQ= Subject key identifier: D5:1B:D0:85:D2:BA:2E:B6:DB:87:7E:82:EF:B6:8B:BD:41:06:4E:40 Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Certificate serial: 1D342A4B9C83BBD1F0E8593B0A2808B1D1A7A9E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft Manifest number: 9C Signing time: Fri 28 Aug 2026 06:48:15 +0000 Manifest this update: Fri 28 Aug 2026 06:43:15 +0000 Manifest next update: Mon 31 Aug 2026 14:32:15 +0000 Files and hashes: 1: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=) 2: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: yaqt0eHBxIkvojPvjlqfggu7x/+elQoiv/brFWJ+1nE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:34:2a:4b:9c:83:bb:d1:f0:e8:59:3b:0a:28:08:b1:d1:a7:a9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Validity Not Before: Aug 28 06:43:15 2026 GMT Not After : Aug 31 14:32:15 2026 GMT Subject: CN=D51BD085D2BA2EB6DB877E82EFB68BBD41064E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:f6:cf:9d:18:7d:53:1a:85:f9:f6:84:89: bf:9e:ec:96:1d:ad:2e:7f:19:d6:1a:d1:51:4a:a3: ff:ba:a3:d5:46:a9:a2:d8:8f:91:ef:49:56:8c:e1: 11:f5:e7:6a:4b:1b:16:f4:d2:66:f5:1f:71:92:bd: ee:d2:94:4c:85:a2:a7:bb:c3:06:30:e7:e5:2a:c9: f8:f6:11:64:ba:da:e6:ce:7e:68:b8:e8:35:5d:42: 05:a5:07:e2:2e:44:39:36:7f:ec:46:f5:c3:48:9d: 70:04:fa:ea:4e:90:31:c8:62:2d:8a:38:50:51:5c: fc:75:9d:fd:62:e8:cb:f1:63:e6:fd:13:fa:35:53: dc:b5:34:d8:e2:e0:53:65:20:c4:b0:b9:64:c9:ef: 7a:bf:56:6c:c4:3f:0b:00:43:99:ef:3e:02:3f:b2: 08:17:d7:d4:13:de:e9:01:c5:76:01:26:ee:21:13: b8:c1:2d:af:a2:91:6a:0e:3c:6b:d3:91:d3:b9:fd: 6b:a5:72:83:c7:71:5f:24:d0:af:d0:6a:ab:d3:ad: ee:95:b4:cb:de:6a:a1:1c:12:42:e2:05:8f:95:02: fc:c0:8b:21:16:6f:c2:3d:1b:2d:6b:62:fb:9e:cc: 9a:6a:c9:61:71:cd:55:80:78:58:e1:6f:9a:7f:51: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1B:D0:85:D2:BA:2E:B6:DB:87:7E:82:EF:B6:8B:BD:41:06:4E:40 X509v3 Authority Key Identifier: keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:77:97:da:fa:82:49:a0:34:0d:8f:76:17:f0:d2:07:ba:bb: 10:fb:dd:02:0b:a3:5b:da:81:65:47:ed:65:a2:0c:d9:44:44: 44:e2:5d:02:5c:0b:b2:26:a8:03:f3:47:b3:62:bd:9a:49:95: 7b:2f:03:f5:38:62:61:46:06:93:86:19:94:b5:10:e2:67:95: ed:1b:85:93:81:1e:00:2b:bf:7c:02:2c:24:a1:88:d6:32:7f: c9:dc:11:65:f1:79:62:b6:d6:5a:38:b4:56:20:02:85:6c:04: 37:85:e8:3c:ab:20:f7:b7:4d:f8:76:86:06:c4:c8:13:31:c0: f8:d4:cb:0d:6f:a1:0d:63:3f:1e:5d:04:01:8e:a1:89:c5:5c: a5:4b:ce:30:47:c3:a0:71:63:cd:74:1f:ea:1e:6b:81:35:d7: d3:79:f3:79:75:69:4c:1b:be:c6:a6:ad:a1:0b:b7:a7:94:1b: 0a:2b:61:b9:c3:98:2f:00:0e:65:dc:e1:2b:9a:bc:7e:a1:c8: fe:7b:a0:30:13:3f:7e:48:fe:87:fb:6f:ab:cc:dc:7a:85:90: 8f:e9:59:43:c3:20:0a:98:89:be:5e:8c:ab:a8:c7:9c:e0:62: 74:ef:e5:18:a3:c7:8c:de:8c:20:73:6b:73:3e:2c:ba:a0:38: f8:92:3d:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHTQqS5yDu9Hw6Fk7CigIsdGnqeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5 RjdFRUQwOTAeFw0yNjA4MjgwNjQzMTVaFw0yNjA4MzExNDMyMTVaMDMxMTAvBgNV BAMTKEQ1MUJEMDg1RDJCQTJFQjZEQjg3N0U4MkVGQjY4QkJENDEwNjRFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBvbPnRh9UxqF+faEib+e7JYd rS5/GdYa0VFKo/+6o9VGqaLYj5HvSVaM4RH152pLGxb00mb1H3GSve7SlEyFoqe7 wwYw5+Uqyfj2EWS62ubOfmi46DVdQgWlB+IuRDk2f+xG9cNInXAE+upOkDHIYi2K OFBRXPx1nf1i6MvxY+b9E/o1U9y1NNji4FNlIMSwuWTJ73q/VmzEPwsAQ5nvPgI/ sggX19QT3ukBxXYBJu4hE7jBLa+ikWoOPGvTkdO5/WulcoPHcV8k0K/QaqvTre6V tMveaqEcEkLiBY+VAvzAiyEWb8I9Gy1rYvuezJpqyWFxzVWAeFjhb5p/UWcdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1RvQhdK6Lrbbh36C77aLvUEGTkAwHwYDVR0j BBgwFoAUGyx3Ew16raGEb/7+QW9QWZ9+7QkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAwODYyMzM2MjI0NDYxNS8wLzFCMkM3NzEzMEQ3QUFEQTE4NDZGRkVGRTQxNkY1 MDU5OUY3RUVEMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMDg2MjMzNjIyNDQ2MTUvMC8xQjJDNzcxMzBEN0FB REExODQ2RkZFRkU0MTZGNTA1OTlGN0VFRDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3eX2vqCSaA0 DY92F/DSB7q7EPvdAgujW9qBZUftZaIM2UREROJdAlwLsiaoA/NHs2K9mkmVey8D 9ThiYUYGk4YZlLUQ4meV7RuFk4EeACu/fAIsJKGI1jJ/ydwRZfF5YrbWWji0ViAC hWwEN4XoPKsg97dN+HaGBsTIEzHA+NTLDW+hDWM/Hl0EAY6hicVcpUvOMEfDoHFj zXQf6h5rgTXX03nzeXVpTBu+xqatoQu3p5QbCithucOYLwAOZdzhK5q8fqHI/nug MBM/fkj+h/tvq8zceoWQj+lZQ8MgCpiJvl6Mq6jHnOBidO/lGKPHjN6MIHNrcz4s uqA4+JI9Fg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:39 2026 by rpki-client