$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft File: 94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json) Hash identifier: 5BHEXDwLU/zZUqjM/2fVGgQq+VHj5/j027av5dFMKOM= Subject key identifier: 53:30:29:BD:1A:80:0B:F3:F3:2D:F6:F0:6D:A5:2A:45:71:B4:88:F6 Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 Certificate issuer: /CN=94CD4C01C346E7777BF9874A62B37929003445D7 Certificate serial: 4140546EED9B004DB4630E3414104404DD447977 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft Manifest number: 8F Signing time: Fri 21 Aug 2026 19:15:32 +0000 Manifest this update: Fri 21 Aug 2026 19:10:31 +0000 Manifest next update: Sat 22 Aug 2026 20:44:31 +0000 Files and hashes: 1: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: Tom+7EoaxVprcZ/pVBlgNcdBzjyFrGJa99mKccOdgyY=) 2: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:40:54:6e:ed:9b:00:4d:b4:63:0e:34:14:10:44:04:dd:44:79:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7 Validity Not Before: Aug 21 19:10:31 2026 GMT Not After : Aug 22 20:44:31 2026 GMT Subject: CN=533029BD1A800BF3F32DF6F06DA52A4571B488F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:74:45:a8:af:5b:25:ca:7d:f1:77:04:3f: 3a:a6:05:f8:84:a0:82:7b:22:e9:44:95:55:b9:f9: 50:b9:b4:41:42:37:c9:bd:8d:eb:25:d8:c7:04:7e: 34:12:09:14:82:52:52:2d:d4:21:42:4b:e8:9c:b4: a2:63:72:e0:1a:2e:7c:0a:cc:fa:dd:c4:5d:57:0f: f7:9a:fd:8f:41:78:17:b0:ce:e0:69:75:aa:39:7a: 53:56:47:2c:33:be:a8:24:2d:7c:f3:af:5b:67:2f: 2f:3d:51:2b:6d:6f:35:e3:6f:7d:8e:56:1d:ad:b0: 0e:c1:12:25:1d:f9:c6:fe:93:a5:ab:5a:1d:66:09: 3a:03:a8:4a:1c:f0:20:6a:93:22:c9:74:da:6f:77: 76:18:7d:cf:24:b6:3f:8c:5f:92:07:ce:e6:d5:9d: 7d:e4:2f:54:1a:a4:14:a4:ee:10:ce:64:f6:74:99: a6:6f:dc:a9:0e:e1:f6:99:22:90:dd:2e:cf:fa:fa: 99:76:2b:16:77:b4:45:a9:db:a5:32:25:1f:bf:f9: 2b:c4:4d:0d:b2:fb:f6:66:53:9b:95:99:ff:9c:d2: b9:f0:f3:6b:aa:a2:33:8a:ab:18:03:ef:77:ba:d8: 0f:bc:26:d2:a8:d7:fb:7d:b4:80:e3:c2:50:8b:a2: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:29:BD:1A:80:0B:F3:F3:2D:F6:F0:6D:A5:2A:45:71:B4:88:F6 X509v3 Authority Key Identifier: keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:29:e3:4f:3b:fd:5a:f4:d7:02:c7:a8:c2:6e:5b:d0:98:56: 11:3f:3d:32:58:8b:87:14:d4:ad:92:d9:d6:54:e4:bb:7f:e4: 13:2b:f6:b7:45:93:29:0f:fc:2a:56:2c:b6:8f:52:e3:50:01: eb:4f:16:0b:9b:6f:4d:4c:6f:ee:65:b7:7e:c0:d7:30:23:64: 6b:ed:bf:75:af:81:52:f1:15:28:25:24:ed:54:99:37:ad:00: 45:95:34:fe:6b:e7:4c:9f:cd:24:a4:43:d3:55:d1:69:29:e8: 5e:75:31:5a:f8:fe:1c:75:d0:5a:bd:d2:89:3c:b6:8f:4e:76: 21:5e:1e:76:8e:56:98:51:0c:06:df:26:2a:4f:7d:f8:59:6d: 5d:c4:d9:a8:ac:96:6e:06:4c:db:c3:f0:4b:16:42:cc:7a:88: de:aa:de:b4:99:28:e4:9e:a6:4d:de:e5:08:12:64:1e:b9:a7: ca:08:12:a1:6c:64:38:6d:d8:44:cc:b6:69:3f:53:c3:87:3d: 8d:c4:b4:1e:d6:db:b2:35:18:a7:7b:9b:64:b1:fc:d0:3c:73: 2e:6a:f8:0b:61:67:db:7b:cd:14:00:81:3d:90:d8:8f:1e:e4: c4:55:57:c4:60:be:f2:bc:9e:38:69:17:ac:71:1d:e1:e8:1f: 7a:80:a3:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQUBUbu2bAE20Yw40FBBEBN1EeXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRDRDRDMDFDMzQ2RTc3NzdCRjk4NzRBNjJCMzc5Mjkw MDM0NDVENzAeFw0yNjA4MjExOTEwMzFaFw0yNjA4MjIyMDQ0MzFaMDMxMTAvBgNV BAMTKDUzMzAyOUJEMUE4MDBCRjNGMzJERjZGMDZEQTUyQTQ1NzFCNDg4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bnRFqK9bJcp98XcEPzqmBfiE oIJ7IulElVW5+VC5tEFCN8m9jesl2McEfjQSCRSCUlIt1CFCS+ictKJjcuAaLnwK zPrdxF1XD/ea/Y9BeBewzuBpdao5elNWRywzvqgkLXzzr1tnLy89USttbzXjb32O Vh2tsA7BEiUd+cb+k6WrWh1mCToDqEoc8CBqkyLJdNpvd3YYfc8ktj+MX5IHzubV nX3kL1QapBSk7hDOZPZ0maZv3KkO4faZIpDdLs/6+pl2KxZ3tEWp26UyJR+/+SvE TQ2y+/ZmU5uVmf+c0rnw82uqojOKqxgD73e62A+8JtKo1/t9tIDjwlCLolxPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUzApvRqAC/PzLfbwbaUqRXG0iPYwHwYDVR0j BBgwFoAUlM1MAcNG53d7+YdKYrN5KQA0RdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1NTc0NDIwNzY4MzU5My8wLzk0Q0Q0QzAxQzM0NkU3Nzc3QkY5ODc0QTYyQjM3 OTI5MDAzNDQ1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRDRDRDMDFDMzQ2RTc3NzdCRjk4NzRBNjJCMzc5MjkwMDM0NDVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNTU3NDQyMDc2ODM1OTMvMC85NENENEMwMUMzNDZF Nzc3N0JGOTg3NEE2MkIzNzkyOTAwMzQ0NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1CnjTzv9WvTX Aseowm5b0JhWET89MliLhxTUrZLZ1lTku3/kEyv2t0WTKQ/8KlYsto9S41AB608W C5tvTUxv7mW3fsDXMCNka+2/da+BUvEVKCUk7VSZN60ARZU0/mvnTJ/NJKRD01XR aSnoXnUxWvj+HHXQWr3SiTy2j052IV4edo5WmFEMBt8mKk99+FltXcTZqKyWbgZM 28PwSxZCzHqI3qretJko5J6mTd7lCBJkHrmnyggSoWxkOG3YRMy2aT9Tw4c9jcS0 HtbbsjUYp3ubZLH80DxzLmr4C2Fn23vNFACBPZDYjx7kxFVXxGC+8ryeOGkXrHEd 4egfeoCj7g== -----END CERTIFICATE-----Generated at Sat Aug 22 00:05:32 2026 by rpki-client