$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: 1Z/FLFAs+u1uBNCCnfgTsgrQ0MnxT/9XkaQdJ5TvCeE= Subject key identifier: 8E:38:4E:35:83:DA:87:BF:2B:91:FE:C6:F9:1B:B7:65:F4:D6:CB:3C Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 11217DE0DDC3C521FEF2DB8CC5B9D16F6637AC85 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 99 Signing time: Fri 28 Aug 2026 06:48:03 +0000 Manifest this update: Fri 28 Aug 2026 06:43:03 +0000 Manifest next update: Mon 31 Aug 2026 08:54:03 +0000 Files and hashes: 1: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: s6pwn1uLPoe5HY9ktR9eYVs0sO8VF0ltWZxzx0LTf3k=) 2: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:21:7d:e0:dd:c3:c5:21:fe:f2:db:8c:c5:b9:d1:6f:66:37:ac:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Aug 28 06:43:03 2026 GMT Not After : Aug 31 08:54:03 2026 GMT Subject: CN=8E384E3583DA87BF2B91FEC6F91BB765F4D6CB3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:77:0a:5e:c9:74:67:0b:5c:62:ed:49:88: 96:c6:ce:de:23:c8:ea:51:ef:d1:2c:17:7d:37:90: 36:d6:6c:90:e7:1a:e0:20:85:8c:35:04:e4:3e:19: a6:e6:dc:9f:eb:90:a6:97:76:a2:bd:c9:82:96:6d: 32:47:a4:9c:68:45:84:b9:cf:8c:dc:79:21:9b:70: 11:39:de:fa:14:90:ef:06:6c:27:44:34:24:76:94: e8:86:de:2f:82:c7:a6:24:ee:be:6c:17:d4:d5:a8: 14:8b:c6:62:fa:87:59:09:6c:e6:51:57:5d:48:2f: 59:e1:7a:bb:00:ee:ea:f0:7e:0c:36:f0:30:7e:ba: 60:1a:43:4c:f9:86:69:89:16:6c:88:7a:68:37:cb: fe:81:6f:3b:26:ac:12:43:99:ba:1f:5c:d3:d0:2b: ff:2f:6c:4a:e8:f3:ce:23:7b:27:64:83:94:42:bc: 0c:fd:03:a3:e3:b4:9e:3a:97:ce:65:23:99:10:58: 15:72:0a:ed:75:1e:1d:05:bc:8a:8e:dd:de:65:b4: 61:6f:9e:d5:6a:3b:4b:b1:1f:88:3f:ef:11:aa:01: 16:08:1f:d7:64:ee:95:5c:ea:71:58:9d:6e:27:82: 7b:07:fe:e5:68:44:9e:3c:2f:ad:c1:d4:8d:a4:5f: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:4E:35:83:DA:87:BF:2B:91:FE:C6:F9:1B:B7:65:F4:D6:CB:3C X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c7:8e:5d:ca:4c:66:8b:ef:cf:38:8e:1c:ad:67:cb:74:26: d0:3a:83:64:44:f5:a2:db:5a:a3:e3:c9:f3:45:a0:20:f3:04: 57:b0:b0:ce:36:99:7c:47:40:2f:5e:5e:42:01:46:6c:9f:a4: ae:75:cf:0f:bd:6c:a2:a9:a3:26:dc:c7:e1:b9:06:52:52:f7: 33:88:52:f9:1b:a4:55:c3:70:13:10:56:de:4b:25:b6:8d:38: ea:7c:37:61:2a:7f:2d:f1:82:c3:9a:aa:da:cc:f9:91:d3:40: 0b:4a:d2:1a:e3:d0:e1:aa:f1:ae:6d:33:98:47:2a:11:e5:df: 72:44:30:9f:ca:77:c1:73:b1:aa:ee:06:e1:0a:f3:dd:9a:a2: 71:04:60:c8:8f:5e:b7:26:60:6a:3e:60:e0:17:ac:73:3f:f2: 10:6d:1c:21:11:a3:66:0b:5e:a6:47:fe:ff:5e:7a:91:ea:c9: 0e:1b:28:74:26:ae:13:d3:84:3c:1f:b1:bb:77:3e:10:05:c1: 27:4e:04:9c:19:92:e5:8c:1a:16:a3:bb:92:8e:39:3b:6c:0b: 2d:cd:0e:9d:f7:b5:31:a8:03:5d:f1:a5:c0:c1:a9:3a:02:e1: dd:7f:2a:75:6b:7b:dd:e9:85:61:07:d9:19:1c:51:99:98:23: 28:6b:f7:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUESF94N3DxSH+8tuMxbnRb2Y3rIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA4MjgwNjQzMDNaFw0yNjA4MzEwODU0MDNaMDMxMTAvBgNV BAMTKDhFMzg0RTM1ODNEQTg3QkYyQjkxRkVDNkY5MUJCNzY1RjRENkNCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswHcKXsl0ZwtcYu1JiJbGzt4j yOpR79EsF303kDbWbJDnGuAghYw1BOQ+Gabm3J/rkKaXdqK9yYKWbTJHpJxoRYS5 z4zceSGbcBE53voUkO8GbCdENCR2lOiG3i+Cx6Yk7r5sF9TVqBSLxmL6h1kJbOZR V11IL1nhersA7urwfgw28DB+umAaQ0z5hmmJFmyIemg3y/6BbzsmrBJDmbofXNPQ K/8vbEro884jeydkg5RCvAz9A6PjtJ46l85lI5kQWBVyCu11Hh0FvIqO3d5ltGFv ntVqO0uxH4g/7xGqARYIH9dk7pVc6nFYnW4ngnsH/uVoRJ48L63B1I2kX/XpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjjhONYPah78rkf7G+Ru3ZfTWyzwwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeseOXcpMZovv zziOHK1ny3Qm0DqDZET1ottao+PJ80WgIPMEV7CwzjaZfEdAL15eQgFGbJ+krnXP D71soqmjJtzH4bkGUlL3M4hS+RukVcNwExBW3kslto046nw3YSp/LfGCw5qq2sz5 kdNAC0rSGuPQ4arxrm0zmEcqEeXfckQwn8p3wXOxqu4G4Qrz3ZqicQRgyI9etyZg aj5g4Bescz/yEG0cIRGjZgtepkf+/156kerJDhsodCauE9OEPB+xu3c+EAXBJ04E nBmS5YwaFqO7ko45O2wLLc0Onfe1MagDXfGlwMGpOgLh3X8qdWt73emFYQfZGRxR mZgjKGv3mA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:43 2026 by rpki-client