$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: SHtWU2M+UWHHuMksew9kX/Cheug20DRtc+s8Jq4vw9M= Subject key identifier: 21:36:A9:CD:D5:61:85:9E:52:BB:E9:13:B5:CB:40:CC:8E:8B:C9:D7 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 144197C85B34AA58114C1E91435775DB4BE60B26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 99 Signing time: Fri 28 Aug 2026 06:47:52 +0000 Manifest this update: Fri 28 Aug 2026 06:42:52 +0000 Manifest next update: Mon 31 Aug 2026 10:38:52 +0000 Files and hashes: 1: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 2: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: bOHkUkDgue2oZX5RMGy68SIgUbxHGoPjxUpIAwtg01o=) 3: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:41:97:c8:5b:34:aa:58:11:4c:1e:91:43:57:75:db:4b:e6:0b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Aug 28 06:42:52 2026 GMT Not After : Aug 31 10:38:52 2026 GMT Subject: CN=2136A9CDD561859E52BBE913B5CB40CC8E8BC9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:05:78:c6:15:35:34:da:8f:bb:6f:47:4d: 5b:d0:9a:cc:54:db:5b:9a:a6:dc:ea:97:b5:7d:e0: 3d:dc:18:3c:d0:d6:5e:2e:86:b3:60:91:bc:72:c3: 92:25:2d:90:5f:34:58:fd:3d:c4:63:9f:22:02:d7: f5:3e:59:41:92:49:8d:d2:fc:eb:fd:69:4c:8c:44: 90:2d:9d:62:d8:a2:6c:e8:d1:97:e3:3e:87:18:69: 69:58:c8:96:6e:93:07:d2:0e:d6:53:55:1a:b6:24: f7:09:8c:17:0f:7e:74:72:b2:42:49:a1:47:87:2c: 07:05:ad:a7:55:ab:5a:d9:c0:2c:78:6a:d2:2b:76: af:0a:10:25:d5:ac:9b:45:0f:7d:61:e4:e4:af:9d: ef:ed:ba:b0:21:6f:b3:7e:9e:db:89:c6:8e:33:f0: 30:7b:f9:4b:df:6c:2c:d8:60:51:ad:65:cd:bd:26: 07:00:82:2a:21:dd:4e:a7:dc:9e:ff:13:1d:12:6b: 05:ff:18:cf:cd:fa:9b:c0:d6:c8:f1:3a:ce:01:56: 5e:30:ac:9b:79:c7:ae:9a:8d:6a:74:96:fa:ee:6e: 14:74:ba:2f:58:a4:12:2d:26:e5:7b:65:e0:00:12: 0a:31:cb:b8:48:7b:41:ce:e3:b5:d0:c3:7d:fe:7c: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:A9:CD:D5:61:85:9E:52:BB:E9:13:B5:CB:40:CC:8E:8B:C9:D7 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:ad:5d:be:24:61:14:36:90:12:07:af:b5:93:0a:f7:aa: 29:d1:59:91:68:1c:bc:f4:28:59:db:4c:31:8c:58:97:43:07: 3e:e7:da:2e:f3:c0:27:33:ac:02:31:e4:b0:7f:35:28:bb:1e: f5:99:c1:ed:4a:d1:b5:20:45:3e:f3:83:7d:98:97:ba:3e:9f: a2:63:91:a6:92:ba:07:54:ca:05:4f:69:34:fe:09:64:ef:93: f4:9f:51:56:58:1a:27:9a:92:56:48:8d:90:9d:b4:07:6e:6d: 2b:b7:da:0d:68:75:97:0e:f2:e4:4a:fd:db:8c:d5:bc:e4:b3: da:2a:af:9f:56:d7:2d:3c:f1:20:3f:85:5f:63:c1:15:b7:c0: d6:d1:5c:b0:8a:6a:7a:31:83:c8:b8:e0:28:c2:b0:0c:7c:a3: f3:2d:e6:e0:17:99:1c:4c:ac:e8:44:f9:bc:e0:9b:f6:85:cd: 28:e2:43:9e:8c:77:3e:4d:4d:f0:08:af:90:b3:2d:ad:0a:b2: d5:11:8d:15:c9:9d:08:52:99:97:3f:1e:e9:03:00:a6:18:e6: a2:98:3f:ad:6d:28:3d:7c:77:41:01:a0:5b:57:41:ba:b7:74: ea:ed:40:57:7e:61:3f:c2:6f:0a:df:9e:59:40:d7:16:52:05: 11:c7:d2:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFEGXyFs0qlgRTB6RQ1d120vmCyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA4MjgwNjQyNTJaFw0yNjA4MzExMDM4NTJaMDMxMTAvBgNV BAMTKDIxMzZBOUNERDU2MTg1OUU1MkJCRTkxM0I1Q0I0MENDOEU4QkM5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VgV4xhU1NNqPu29HTVvQmsxU 21uaptzql7V94D3cGDzQ1l4uhrNgkbxyw5IlLZBfNFj9PcRjnyIC1/U+WUGSSY3S /Ov9aUyMRJAtnWLYomzo0ZfjPocYaWlYyJZukwfSDtZTVRq2JPcJjBcPfnRyskJJ oUeHLAcFradVq1rZwCx4atIrdq8KECXVrJtFD31h5OSvne/turAhb7N+ntuJxo4z 8DB7+UvfbCzYYFGtZc29JgcAgioh3U6n3J7/Ex0SawX/GM/N+pvA1sjxOs4BVl4w rJt5x66ajWp0lvrubhR0ui9YpBItJuV7ZeAAEgoxy7hIe0HO47XQw33+fH5dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUITapzdVhhZ5Su+kTtctAzI6LydcwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuytXb4kYRQ2 kBIHr7WTCveqKdFZkWgcvPQoWdtMMYxYl0MHPufaLvPAJzOsAjHksH81KLse9ZnB 7UrRtSBFPvODfZiXuj6fomORppK6B1TKBU9pNP4JZO+T9J9RVlgaJ5qSVkiNkJ20 B25tK7faDWh1lw7y5Er924zVvOSz2iqvn1bXLTzxID+FX2PBFbfA1tFcsIpqejGD yLjgKMKwDHyj8y3m4BeZHEys6ET5vOCb9oXNKOJDnox3Pk1N8AivkLMtrQqy1RGN FcmdCFKZlz8e6QMAphjmopg/rW0oPXx3QQGgW1dBurd06u1AV35hP8JvCt+eWUDX FlIFEcfSXg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:05 2026 by rpki-client