$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: io4Jawz0d7MneJrozjUoIPwPO4V7OJip1v6WIqDMEBg= Subject key identifier: E2:DE:F2:45:29:F0:4A:60:04:8B:78:30:AB:F8:62:29:DD:44:B5:C1 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 4DE68B00C06259A77062942BBB4377A6806DFCE1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 88 Signing time: Fri 28 Aug 2026 06:47:39 +0000 Manifest this update: Fri 28 Aug 2026 06:42:39 +0000 Manifest next update: Mon 31 Aug 2026 11:13:39 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: g/5mIDrFRdQqU2uGZ2LFvt3FQ4CttO7088CqtZYL0aw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:8b:00:c0:62:59:a7:70:62:94:2b:bb:43:77:a6:80:6d:fc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Aug 28 06:42:39 2026 GMT Not After : Aug 31 11:13:39 2026 GMT Subject: CN=E2DEF24529F04A60048B7830ABF86229DD44B5C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:db:2c:bc:d9:9f:69:7a:a3:69:b0:04:b1: 60:d1:50:33:7a:f9:76:0b:6c:d7:b4:bc:34:b8:35: 70:bf:b1:be:4f:f8:75:3f:57:52:13:e8:03:36:bf: 86:aa:6c:86:cc:4b:cc:56:98:66:f0:ad:94:4e:5a: de:d2:5f:22:36:f8:17:92:e4:7a:9a:15:d9:5c:b8: 34:7b:83:d9:74:4d:5b:43:93:a6:cf:1a:ff:c6:40: 79:f5:e9:2c:86:8a:84:5b:66:8e:22:1f:e8:01:e5: e3:c0:b7:a7:ad:b1:c1:57:94:ca:7d:7e:af:4f:1d: c0:d1:19:a7:d4:4e:e4:b2:34:a0:39:3a:9d:bc:22: 87:5d:a8:3d:62:e1:dd:fb:c6:e3:94:4d:a4:03:2d: c9:71:de:e3:f1:15:aa:a6:5a:db:aa:3a:2d:e5:b2: 3a:8d:81:88:2c:4a:1b:d7:72:c5:d7:0c:4f:87:3a: 5c:68:2d:58:cc:50:09:0f:35:a4:a3:22:b7:8b:d8: 47:8e:9e:f6:16:eb:4f:84:f4:6b:64:29:53:5c:9d: ef:cb:68:a7:10:3b:5c:4e:2b:d6:2e:c9:b6:83:13: b9:8e:1a:09:4e:4b:bc:df:0b:bc:e8:8c:d0:66:c4: 79:a0:b9:24:9c:cd:1d:8f:14:09:4e:6e:6d:07:45: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DE:F2:45:29:F0:4A:60:04:8B:78:30:AB:F8:62:29:DD:44:B5:C1 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:22:46:0d:9c:fe:09:3a:ec:78:45:f7:56:e0:7b:92:c2:78: 1c:f0:60:6a:ec:14:e0:ff:54:9e:7a:fb:39:c9:47:61:d3:16: 64:22:d9:ef:85:07:f0:4b:69:38:bd:41:82:28:81:8d:90:65: ec:38:54:bf:c5:d6:62:2d:71:ba:56:ce:6c:57:3b:1b:f1:f1: d3:4e:24:15:b4:07:7d:c8:f2:25:a5:e7:6b:2e:16:9b:8f:92: 47:b6:e1:31:3d:5d:6d:02:cf:ca:2d:c3:29:c9:9d:4e:cc:36: e9:b8:8d:15:9a:f3:aa:17:a7:26:e5:85:88:f6:52:49:6b:7c: 5a:41:74:18:4b:06:cd:0d:4a:bc:34:f9:52:f7:ee:ec:3a:dd: 72:d8:e5:e6:83:7c:11:d6:af:b9:a9:96:6b:6d:b6:67:d1:d4: 56:e4:db:d0:7a:3f:96:1e:f7:d8:a3:e4:d9:01:89:46:c9:b9: 05:9c:ed:3e:66:2f:d6:7a:6d:8f:14:8f:b3:5d:b0:77:1e:4f: bc:bf:20:0a:eb:02:f0:76:cf:c6:c9:02:fb:b4:33:27:8a:f1: d2:ae:79:d0:aa:7d:e2:26:03:cc:df:37:be:42:59:5e:83:8b: af:6e:f3:d4:52:95:50:7d:c8:5b:3a:3f:14:db:81:8d:bc:37: d2:8b:9f:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTeaLAMBiWadwYpQru0N3poBt/OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA4MjgwNjQyMzlaFw0yNjA4MzExMTEzMzlaMDMxMTAvBgNV BAMTKEUyREVGMjQ1MjlGMDRBNjAwNDhCNzgzMEFCRjg2MjI5REQ0NEI1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQ9ssvNmfaXqjabAEsWDRUDN6 +XYLbNe0vDS4NXC/sb5P+HU/V1IT6AM2v4aqbIbMS8xWmGbwrZROWt7SXyI2+BeS 5HqaFdlcuDR7g9l0TVtDk6bPGv/GQHn16SyGioRbZo4iH+gB5ePAt6etscFXlMp9 fq9PHcDRGafUTuSyNKA5Op28IoddqD1i4d37xuOUTaQDLclx3uPxFaqmWtuqOi3l sjqNgYgsShvXcsXXDE+HOlxoLVjMUAkPNaSjIreL2EeOnvYW60+E9GtkKVNcne/L aKcQO1xOK9YuybaDE7mOGglOS7zfC7zojNBmxHmguSSczR2PFAlObm0HRW8BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4t7yRSnwSmAEi3gwq/hiKd1EtcEwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiJGDZz+CTrs eEX3VuB7ksJ4HPBgauwU4P9Unnr7OclHYdMWZCLZ74UH8EtpOL1BgiiBjZBl7DhU v8XWYi1xulbObFc7G/Hx004kFbQHfcjyJaXnay4Wm4+SR7bhMT1dbQLPyi3DKcmd Tsw26biNFZrzqhenJuWFiPZSSWt8WkF0GEsGzQ1KvDT5Uvfu7Drdctjl5oN8Edav uamWa222Z9HUVuTb0Ho/lh732KPk2QGJRsm5BZztPmYv1nptjxSPs12wdx5PvL8g CusC8HbPxskC+7QzJ4rx0q550Kp94iYDzN83vkJZXoOLr27z1FKVUH3IWzo/FNuB jbw30oufqw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:24 2026 by rpki-client