$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft File: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft (raw, json) Hash identifier: QkJevavEXdMUeb/tjVkgirx1bmI335iExXZ30kOZBz8= Subject key identifier: C6:63:24:B2:9A:B1:4D:94:5C:03:A3:75:9F:1B:9B:C8:13:28:25:D3 Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Certificate serial: 4285DD97AB3586F040E0DA253304DD7B6680F1B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft Manifest number: 8D Signing time: Fri 21 Aug 2026 09:34:18 +0000 Manifest this update: Fri 21 Aug 2026 09:29:18 +0000 Manifest next update: Sat 22 Aug 2026 11:05:18 +0000 Files and hashes: 1: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl (hash: +q+MWSWKTjIyrJfSb7oImXDVi1ob0SlFG84JowwmhIk=) 2: AS4808.roa (hash: A/3edimCOZBPSpIK5xYGrmqDvuq4JdDc71VER3fVQSE=) 3: AS23724.roa (hash: VrxvW554iSf2GVuzUFyOMwezMHT2fRkfSfE9WYRUSpI=) 4: AS0.roa (hash: EvHOeE0VRoKmj+IkX+G9k6Kw919D0rfcsecsEPiPJNA=) 5: AS9808.roa (hash: isSsUjIqBqLwcnpLClZ+srBakUgI8KxcUiPPayd08pY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 11:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:85:dd:97:ab:35:86:f0:40:e0:da:25:33:04:dd:7b:66:80:f1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Validity Not Before: Aug 21 09:29:18 2026 GMT Not After : Aug 22 11:05:18 2026 GMT Subject: CN=C66324B29AB14D945C03A3759F1B9BC8132825D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:e9:d3:11:61:fd:a9:29:08:b5:6b:8e:7d: da:44:0f:ea:9e:8e:a4:c6:dc:3e:16:98:c8:30:d8: 30:7a:2f:09:9a:68:f6:2c:48:8b:cd:16:ab:1e:46: 78:a8:b7:93:35:96:32:9c:2e:59:cd:93:29:7e:b2: ed:e1:71:f9:eb:a4:aa:36:83:b1:d2:74:e3:6d:39: c6:4e:65:3b:71:24:43:8a:a0:d2:28:31:31:8d:b5: 89:fe:e7:19:d3:ac:51:ac:d4:f5:1f:bd:aa:95:1a: 6b:54:37:aa:b5:a7:89:79:40:47:b7:7f:e9:e1:14: fc:ed:d1:68:17:0d:5e:4f:60:49:72:53:d3:83:dc: c8:c5:e7:0d:90:81:b9:55:e3:d0:d3:62:67:17:f3: 4f:e1:56:42:58:1b:61:1a:94:51:51:1c:ca:0f:57: 18:6b:85:a8:9c:d6:4a:69:ba:fa:c4:4b:83:18:8b: 2d:50:b5:dd:fb:3e:b7:b5:24:5d:55:83:64:80:60: a0:5c:bb:62:ed:f6:ff:08:ea:a1:62:53:fe:f8:16: b0:34:72:e4:ab:89:98:2c:66:1c:fd:39:18:38:04: 3b:a1:eb:29:53:63:d8:5f:d5:2b:a7:8e:08:69:b5: 8e:46:54:cf:8f:cc:40:4d:e8:18:b6:23:d6:81:51: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:24:B2:9A:B1:4D:94:5C:03:A3:75:9F:1B:9B:C8:13:28:25:D3 X509v3 Authority Key Identifier: keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:e4:f9:75:31:bf:3d:f3:a8:d8:f4:a7:f4:40:02:e7:e7:6e: e0:d4:e4:e8:a5:5f:4d:ef:f1:c3:e5:e7:2b:5b:72:0b:c5:15: 83:c8:71:6d:ec:41:27:73:60:80:11:1c:56:fc:4a:e1:12:58: 8d:c1:f9:3f:9a:b9:50:2c:fb:c4:99:20:33:d8:fd:fe:92:07: 6c:3c:61:fc:84:8e:ba:99:61:0a:f6:44:a9:ec:cd:d2:2e:59: 08:32:86:ba:6e:83:df:c0:a4:e2:49:41:25:e2:b5:55:be:f2: 66:66:e0:aa:37:8f:1f:24:23:3a:0e:a4:a6:ec:c3:94:73:d0: 6b:4a:a5:11:f3:51:bb:a9:ba:34:12:53:3f:e7:5d:de:26:e4: 3d:ec:d1:6e:48:12:6b:cd:6d:49:9a:74:5e:90:5b:4c:95:84: a7:34:32:66:04:e3:00:22:80:2f:5b:d5:52:38:ef:0b:fa:f9: db:55:4b:d2:81:ec:c8:29:72:c5:9d:9a:75:f3:8a:89:f2:ea: 79:37:83:b0:19:5a:93:fd:28:da:6c:da:6f:d1:24:e4:c2:be: 8f:ea:52:ab:ce:e1:7f:64:2b:f4:c3:86:0f:61:d6:c3:70:6a: d6:bb:12:b5:d0:00:04:d5:d3:4e:7d:e1:95:29:4a:4f:62:60: fb:41:ef:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQoXdl6s1hvBA4NolMwTde2aA8bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNG RUFCRTlFMjAeFw0yNjA4MjEwOTI5MThaFw0yNjA4MjIxMTA1MThaMDMxMTAvBgNV BAMTKEM2NjMyNEIyOUFCMTREOTQ1QzAzQTM3NTlGMUI5QkM4MTMyODI1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDunTEWH9qSkItWuOfdpED+qe jqTG3D4WmMgw2DB6LwmaaPYsSIvNFqseRniot5M1ljKcLlnNkyl+su3hcfnrpKo2 g7HSdONtOcZOZTtxJEOKoNIoMTGNtYn+5xnTrFGs1PUfvaqVGmtUN6q1p4l5QEe3 f+nhFPzt0WgXDV5PYElyU9OD3MjF5w2QgblV49DTYmcX80/hVkJYG2EalFFRHMoP Vxhrhaic1kppuvrES4MYiy1Qtd37Pre1JF1Vg2SAYKBcu2Lt9v8I6qFiU/74FrA0 cuSriZgsZhz9ORg4BDuh6ylTY9hf1SunjghptY5GVM+PzEBN6Bi2I9aBURzZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxmMkspqxTZRcA6N1nxubyBMoJdMwHwYDVR0j BBgwFoAU9vsF9A4hHqnY04Wm4B12rP6r6eIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYzMDUxMjUxMzA1Njc4Ny8wL0Y2RkIwNUY0MEUyMTFFQTlEOEQzODVBNkUwMUQ3 NkFDRkVBQkU5RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNGRUFCRTlFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MzA1MTI1MTMwNTY3ODcvMC9GNkZCMDVGNDBFMjEx RUE5RDhEMzg1QTZFMDFENzZBQ0ZFQUJFOUUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweT5dTG/PfOo 2PSn9EAC5+du4NTk6KVfTe/xw+XnK1tyC8UVg8hxbexBJ3NggBEcVvxK4RJYjcH5 P5q5UCz7xJkgM9j9/pIHbDxh/ISOuplhCvZEqezN0i5ZCDKGum6D38Ck4klBJeK1 Vb7yZmbgqjePHyQjOg6kpuzDlHPQa0qlEfNRu6m6NBJTP+dd3ibkPezRbkgSa81t SZp0XpBbTJWEpzQyZgTjACKAL1vVUjjvC/r521VL0oHsyClyxZ2adfOKifLqeTeD sBlak/0o2mzab9Ek5MK+j+pSq87hf2Qr9MOGD2HWw3Bq1rsStdAABNXTTn3hlSlK T2Jg+0HvEA== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:52 2026 by rpki-client