$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft File: C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json) Hash identifier: w2GO0cWjSbL4LP+L0Pz3i4BWjUVVmHXJUyMfBTiL3W8= Subject key identifier: D2:9F:43:50:7E:87:86:ED:60:E7:24:C0:B0:5F:0D:BE:B8:D1:F4:E4 Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B Certificate issuer: /CN=C178E89AC582AE71D7881FC86E201466F09D849B Certificate serial: 74FA516226837DB44BA2E1BF71FD7F26E14C1178 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft Manifest number: 8E Signing time: Fri 28 Aug 2026 06:48:23 +0000 Manifest this update: Fri 28 Aug 2026 06:43:23 +0000 Manifest next update: Mon 31 Aug 2026 06:50:23 +0000 Files and hashes: 1: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=) 2: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: co+BPUVehMxuerzSLN6u8UrLAt3u3nbUSEp5gq+1wl0=) 3: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 06:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fa:51:62:26:83:7d:b4:4b:a2:e1:bf:71:fd:7f:26:e1:4c:11:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B Validity Not Before: Aug 28 06:43:23 2026 GMT Not After : Aug 31 06:50:23 2026 GMT Subject: CN=D29F43507E8786ED60E724C0B05F0DBEB8D1F4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:35:83:67:57:a3:16:05:d8:d4:c2:ba:a2: b2:76:64:97:64:c4:0a:5d:a5:0b:3e:91:35:d9:9e: 19:a4:20:05:1b:4c:a0:81:b2:24:95:4d:99:d6:26: d3:b5:5d:3b:6c:6b:2f:cb:30:17:90:94:bf:d6:1b: 4a:0f:2e:3e:fb:4d:6b:ba:fd:82:eb:37:8e:ec:f9: dd:c7:1f:47:e1:da:d0:98:b5:53:c9:da:2e:e7:6a: 8f:29:64:8a:97:d6:f0:c3:06:ae:bf:d2:6f:52:50: e1:82:eb:62:a2:ec:2b:5a:34:4f:82:6e:0d:23:f2: 11:43:57:f1:91:b4:8f:b4:85:a9:ef:4f:76:ff:14: 14:57:83:a3:80:8a:4b:5f:5b:94:b4:1c:8a:bb:7b: bb:f7:bb:a0:1b:72:4a:e4:5d:9c:2f:04:56:cb:bc: 45:61:75:43:c7:35:17:a0:f0:15:b4:7b:b3:c8:95: 7f:d8:da:20:4e:ca:d5:46:1f:d0:5f:b5:aa:24:de: aa:0f:fc:de:87:79:8e:19:38:42:c1:38:2e:8c:58: 1e:0c:ef:37:99:2b:a1:15:30:45:58:b7:90:67:df: 93:6e:9e:66:51:d0:74:2b:50:b7:fc:3e:e1:f6:fd: 6f:be:c4:d1:1e:46:8b:90:46:1b:7c:25:70:99:57: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:43:50:7E:87:86:ED:60:E7:24:C0:B0:5F:0D:BE:B8:D1:F4:E4 X509v3 Authority Key Identifier: keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2a:65:94:e6:28:3c:5a:ba:b4:b7:2d:f6:32:45:6f:bb:85: 8d:90:3c:22:4d:90:0b:25:ed:86:92:e8:97:93:a5:8b:2a:d0: be:24:b6:a1:09:d0:97:1f:f4:d0:85:59:5e:69:aa:24:0d:37: 46:81:5c:fe:2e:35:0c:77:d4:95:4d:17:d2:a0:c2:19:58:f7: 03:bb:c3:a8:48:b6:d6:5e:32:bb:a3:7d:2e:36:50:b9:3d:3f: 64:13:7c:ba:4b:6f:e0:bd:a5:64:3c:41:33:55:12:18:2e:e7: 6a:02:8c:37:ac:f2:aa:57:5f:7c:73:d4:fa:52:e2:d8:cc:1b: 6f:0b:6a:75:a7:94:c1:f2:9f:c4:e8:5e:36:5c:27:8d:30:03: ed:48:5d:16:27:01:3d:e7:41:cb:ac:83:06:8e:a3:6c:69:c1: 06:d1:98:b4:b6:46:24:eb:5c:48:eb:15:d7:47:d6:82:64:31: 95:40:13:43:79:96:86:be:66:1d:a2:ae:e9:0f:cc:92:dd:82: b1:c0:31:6b:3c:26:8d:e5:dc:a5:39:64:e6:4f:9d:78:31:24: 7f:82:a7:68:0c:94:3b:cf:cf:aa:7e:22:44:33:58:a2:d7:63: a3:5c:c5:8c:49:f3:3a:e8:bd:16:df:d0:2c:a0:4e:c5:02:ed: 97:50:38:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdPpRYiaDfbRLouG/cf1/JuFMEXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZG MDlEODQ5QjAeFw0yNjA4MjgwNjQzMjNaFw0yNjA4MzEwNjUwMjNaMDMxMTAvBgNV BAMTKEQyOUY0MzUwN0U4Nzg2RUQ2MEU3MjRDMEIwNUYwREJFQjhEMUY0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQTWDZ1ejFgXY1MK6orJ2ZJdk xApdpQs+kTXZnhmkIAUbTKCBsiSVTZnWJtO1XTtsay/LMBeQlL/WG0oPLj77TWu6 /YLrN47s+d3HH0fh2tCYtVPJ2i7nao8pZIqX1vDDBq6/0m9SUOGC62Ki7CtaNE+C bg0j8hFDV/GRtI+0hanvT3b/FBRXg6OAiktfW5S0HIq7e7v3u6AbckrkXZwvBFbL vEVhdUPHNReg8BW0e7PIlX/Y2iBOytVGH9Bftaok3qoP/N6HeY4ZOELBOC6MWB4M 7zeZK6EVMEVYt5Bn35NunmZR0HQrULf8PuH2/W++xNEeRouQRht8JXCZV0eLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0p9DUH6Hhu1g5yTAsF8NvrjR9OQwHwYDVR0j BBgwFoAUwXjomsWCrnHXiB/IbiAUZvCdhJswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzUwODI4NTE4NDkzMzkwNS8wL0MxNzhFODlBQzU4MkFFNzFENzg4MUZDODZFMjAx NDY2RjA5RDg0OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZGMDlEODQ5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1MDgyODUxODQ5MzM5MDUvMC9DMTc4RTg5QUM1ODJB RTcxRDc4ODFGQzg2RTIwMTQ2NkYwOUQ4NDlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSpllOYoPFq6 tLct9jJFb7uFjZA8Ik2QCyXthpLol5OliyrQviS2oQnQlx/00IVZXmmqJA03RoFc /i41DHfUlU0X0qDCGVj3A7vDqEi21l4yu6N9LjZQuT0/ZBN8uktv4L2lZDxBM1US GC7nagKMN6zyqldffHPU+lLi2MwbbwtqdaeUwfKfxOheNlwnjTAD7UhdFicBPedB y6yDBo6jbGnBBtGYtLZGJOtcSOsV10fWgmQxlUATQ3mWhr5mHaKu6Q/Mkt2CscAx azwmjeXcpTlk5k+deDEkf4KnaAyUO8/Pqn4iRDNYotdjo1zFjEnzOui9Ft/QLKBO xQLtl1A4ug== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:34 2026 by rpki-client