$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: 33lxoucfRSJfPnEQzrS4rzr9/f/roptsUIrLZIPdpa0= Subject key identifier: 4B:2D:78:D6:0C:1B:ED:45:AF:73:56:1D:26:8B:C8:A7:2C:2F:AA:2F Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 13AFC0E33598F4607B32F005E0F16D8E7325F450 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: DD Signing time: Fri 28 Aug 2026 07:48:35 +0000 Manifest this update: Fri 28 Aug 2026 07:43:35 +0000 Manifest next update: Mon 31 Aug 2026 11:21:35 +0000 Files and hashes: 1: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=) 2: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=) 3: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 4: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=) 5: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=) 6: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=) 7: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=) 8: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=) 9: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: P0vnmEJTQOoi+7LHmKrn8/pHg4sADGF9mepHgyeFUwI=) 10: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 11: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:af:c0:e3:35:98:f4:60:7b:32:f0:05:e0:f1:6d:8e:73:25:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: Aug 28 07:43:35 2026 GMT Not After : Aug 31 11:21:35 2026 GMT Subject: CN=4B2D78D60C1BED45AF73561D268BC8A72C2FAA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:78:67:2f:d6:f5:88:8e:38:77:6e:94:ac: fe:4e:01:8d:d3:1e:fc:99:ae:df:a5:de:61:8f:06: fe:3b:84:3f:27:df:df:83:85:0e:12:b5:bc:44:02: e8:92:aa:5f:e6:e5:f4:c6:17:50:43:a6:28:4c:0f: af:d7:ea:23:c9:c0:63:58:51:68:66:d4:c3:c7:f9: a6:8c:07:e7:d2:c0:db:d9:98:9a:85:95:56:48:39: 91:05:b3:87:06:5c:4f:ff:45:e6:ff:d9:5f:d4:bf: db:0b:d2:45:4a:8c:d1:fd:60:9f:24:9a:71:1e:f3: 7f:9b:5b:93:ca:e5:f6:cd:67:7d:60:c9:b7:e0:e3: 39:8a:26:c2:5e:4e:3a:83:91:45:7c:e4:58:c1:c8: 4d:41:1f:fa:24:8e:66:bf:e2:dd:7b:5d:87:6e:2e: 64:25:d2:96:ba:bd:77:3f:f3:ed:66:b1:77:f3:5c: 17:05:3a:fa:d1:f2:91:ed:6f:46:eb:ae:21:66:f6: 39:db:01:24:50:99:ce:f2:a8:2b:11:99:fd:60:fd: 0e:fb:73:d3:cd:30:75:a9:2f:95:00:82:ff:ae:65: c9:4e:a3:1c:37:34:94:a7:90:a8:b4:dd:dc:b2:92: 9d:ef:89:bc:35:d7:cf:51:a5:f3:b7:e8:2a:a4:8b: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:78:D6:0C:1B:ED:45:AF:73:56:1D:26:8B:C8:A7:2C:2F:AA:2F X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ae:b9:b0:a9:ae:99:15:c7:22:52:6d:49:80:7a:d6:ee:7c: 4b:b3:d1:45:0f:38:04:72:9a:8f:63:42:06:a4:7b:38:62:d9: 71:7a:7c:fa:d5:97:48:b0:44:69:ce:ff:c8:be:c7:fa:db:5a: f9:8d:71:b9:95:1e:cf:88:00:5f:08:66:2e:94:9e:90:a1:39: 84:a3:ab:b2:ba:2d:b4:d6:8f:fc:31:af:e1:62:99:ff:5b:91: 92:43:85:dd:89:5a:f3:d8:b2:77:4c:fd:d3:dc:1e:73:c4:04: 4a:fe:fc:ee:20:ac:cf:8b:12:d3:67:0f:3f:75:a1:21:9d:02: 7c:7a:1f:60:f2:9c:9c:53:dc:eb:e2:8a:bc:01:c0:a9:6f:41: 1a:a0:84:ae:53:f1:e1:1b:35:fa:59:cc:8c:24:a6:88:a4:3e: 07:52:ed:6f:6a:e3:17:17:2e:2c:95:b0:db:7b:43:b4:94:35: 63:e4:4f:d5:20:24:f4:36:85:8c:0b:7d:b2:a4:95:d6:7d:d8: 57:65:52:47:d0:01:a8:91:32:8d:cd:5c:24:97:20:9e:de:13: b7:6a:14:98:f6:dc:a2:2b:34:7e:85:51:e8:db:62:f6:17:73: e6:03:1e:5d:d1:c3:c1:80:bd:fe:7f:5d:7f:8b:fa:f9:8f:2e: f0:64:a4:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE6/A4zWY9GB7MvAF4PFtjnMl9FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA4MjgwNzQzMzVaFw0yNjA4MzExMTIxMzVaMDMxMTAvBgNV BAMTKDRCMkQ3OEQ2MEMxQkVENDVBRjczNTYxRDI2OEJDOEE3MkMyRkFBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+nhnL9b1iI44d26UrP5OAY3T HvyZrt+l3mGPBv47hD8n39+DhQ4StbxEAuiSql/m5fTGF1BDpihMD6/X6iPJwGNY UWhm1MPH+aaMB+fSwNvZmJqFlVZIOZEFs4cGXE//Reb/2V/Uv9sL0kVKjNH9YJ8k mnEe83+bW5PK5fbNZ31gybfg4zmKJsJeTjqDkUV85FjByE1BH/okjma/4t17XYdu LmQl0pa6vXc/8+1msXfzXBcFOvrR8pHtb0brriFm9jnbASRQmc7yqCsRmf1g/Q77 c9PNMHWpL5UAgv+uZclOoxw3NJSnkKi03dyykp3vibw1189RpfO36Cqki/c7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSy141gwb7UWvc1YdJovIpywvqi8wHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq65sKmumRXH IlJtSYB61u58S7PRRQ84BHKaj2NCBqR7OGLZcXp8+tWXSLBEac7/yL7H+tta+Y1x uZUez4gAXwhmLpSekKE5hKOrsrottNaP/DGv4WKZ/1uRkkOF3Yla89iyd0z909we c8QESv787iCsz4sS02cPP3WhIZ0CfHofYPKcnFPc6+KKvAHAqW9BGqCErlPx4Rs1 +lnMjCSmiKQ+B1Ltb2rjFxcuLJWw23tDtJQ1Y+RP1SAk9DaFjAt9sqSV1n3YV2VS R9ABqJEyjc1cJJcgnt4Tt2oUmPbcois0foVR6Nti9hdz5gMeXdHDwYC9/n9df4v6 +Y8u8GSkAw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:39 2026 by rpki-client