$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: TE8ziPW3/wEHKiBskaFNevifYO97DXTUAZ6OaihBUbg= Subject key identifier: 6B:5A:B1:B3:D6:75:A8:28:0F:39:0C:46:C3:D7:24:FA:F4:4A:DF:6F Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 35E5D7206C26E316323E2572D3311099BEB4C867 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: C3 Signing time: Fri 04 Sep 2026 01:14:30 +0000 Manifest this update: Fri 04 Sep 2026 01:09:30 +0000 Manifest next update: Mon 07 Sep 2026 02:29:30 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: uLE5fO04wb/atiI6/oj9rWOYwJBvLIzhAV4Wb+VBUss=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e5:d7:20:6c:26:e3:16:32:3e:25:72:d3:31:10:99:be:b4:c8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Sep 4 01:09:30 2026 GMT Not After : Sep 7 02:29:30 2026 GMT Subject: CN=6B5AB1B3D675A8280F390C46C3D724FAF44ADF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:86:77:f2:a0:77:71:3f:f7:b0:51:af:3e: ff:9e:9d:1d:0d:16:6f:73:0e:12:34:b2:79:25:66: e2:b9:4f:d6:54:bc:2b:da:36:f9:c6:92:63:b1:db: 5f:b3:ca:17:7f:d0:81:af:5d:04:6e:23:b1:b9:cc: a2:2c:34:96:62:38:ad:e4:52:b2:62:e0:f6:92:9d: 0e:49:21:17:0e:1e:79:ee:50:ba:7b:1c:05:40:22: 69:7a:a5:ce:b5:97:d4:9d:d2:ef:30:b9:0f:cc:06: ea:b7:b3:81:48:73:5c:5a:14:96:a4:8d:a7:0d:3f: 2e:8c:65:bb:80:9d:a7:a2:98:02:6e:65:9e:8a:c6: b2:69:ae:5d:4e:ff:48:55:0b:a4:e5:76:1d:a0:1d: 7e:93:4a:5f:c2:7e:10:6d:56:61:29:28:7c:6f:bc: 4f:84:09:78:78:ad:35:3e:1c:6f:d7:c3:9f:9f:bc: 55:e3:77:af:61:f4:5a:06:3a:dc:0f:5e:86:c2:61: 03:ed:4f:ee:f8:93:f7:df:45:5e:15:43:35:00:cf: 22:58:c2:29:a9:35:82:96:35:0d:67:47:73:be:7b: e5:b8:af:cc:6a:8b:55:29:1d:59:22:96:31:fa:d3: 06:66:c8:96:61:b8:61:47:c5:81:4d:38:c2:72:89: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:B1:B3:D6:75:A8:28:0F:39:0C:46:C3:D7:24:FA:F4:4A:DF:6F X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:d0:db:c2:f9:9a:fc:a0:f8:2c:f1:a0:bb:7e:56:0a:24:c6: 68:bd:28:f3:f5:ca:b2:03:ac:fc:f9:93:7e:89:1c:f9:f8:f3: 67:8f:e4:2b:6e:45:e7:ef:fc:93:a3:b1:62:d6:ef:99:df:15: 02:e8:8a:4b:c9:1e:dd:88:55:66:f9:ad:2e:f7:85:d7:70:56: 5d:63:dc:70:dc:a5:30:58:10:4c:9a:93:16:82:04:31:8d:29: 3c:e4:76:d9:67:02:80:91:5a:09:13:6e:78:eb:80:51:a8:8a: a3:00:00:3b:54:d3:69:d9:34:59:5e:56:24:e0:92:8d:1a:b9: 1f:2e:92:86:dc:c7:fd:9a:de:23:d8:8c:bf:60:15:3b:bc:03: d2:b5:49:d3:81:47:e9:51:45:a6:07:7e:c3:7b:69:37:09:8b: e7:47:16:fc:6e:b4:c2:c6:ac:9c:e3:18:d8:61:3c:7d:46:fe: 65:47:97:b7:52:8e:9c:6e:e9:72:c2:b3:13:4b:e1:f5:33:4b: 5b:58:c2:08:51:dd:09:8e:f3:82:c5:da:24:8c:24:ad:83:20: 30:33:9e:21:3b:99:76:d0:d8:25:96:0a:09:de:da:6c:c0:80: 67:ce:c0:0d:81:6f:6b:45:e7:b9:71:5e:d6:48:e3:e1:1c:14: 55:9d:e2:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNeXXIGwm4xYyPiVy0zEQmb60yGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA5MDQwMTA5MzBaFw0yNjA5MDcwMjI5MzBaMDMxMTAvBgNV BAMTKDZCNUFCMUIzRDY3NUE4MjgwRjM5MEM0NkMzRDcyNEZBRjQ0QURGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHIZ38qB3cT/3sFGvPv+enR0N Fm9zDhI0snklZuK5T9ZUvCvaNvnGkmOx21+zyhd/0IGvXQRuI7G5zKIsNJZiOK3k UrJi4PaSnQ5JIRcOHnnuULp7HAVAIml6pc61l9Sd0u8wuQ/MBuq3s4FIc1xaFJak jacNPy6MZbuAnaeimAJuZZ6KxrJprl1O/0hVC6Tldh2gHX6TSl/CfhBtVmEpKHxv vE+ECXh4rTU+HG/Xw5+fvFXjd69h9FoGOtwPXobCYQPtT+74k/ffRV4VQzUAzyJY wimpNYKWNQ1nR3O+e+W4r8xqi1UpHVkiljH60wZmyJZhuGFHxYFNOMJyiZeZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa1qxs9Z1qCgPOQxGw9ck+vRK328wHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA19Dbwvma/KD4 LPGgu35WCiTGaL0o8/XKsgOs/PmTfokc+fjzZ4/kK25F5+/8k6OxYtbvmd8VAuiK S8ke3YhVZvmtLveF13BWXWPccNylMFgQTJqTFoIEMY0pPOR22WcCgJFaCRNueOuA UaiKowAAO1TTadk0WV5WJOCSjRq5Hy6ShtzH/ZreI9iMv2AVO7wD0rVJ04FH6VFF pgd+w3tpNwmL50cW/G60wsasnOMY2GE8fUb+ZUeXt1KOnG7pcsKzE0vh9TNLW1jC CFHdCY7zgsXaJIwkrYMgMDOeITuZdtDYJZYKCd7abMCAZ87ADYFva0XnuXFe1kjj 4RwUVZ3igA== -----END CERTIFICATE-----Generated at Sat Sep 5 08:55:21 2026 by rpki-client