$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: P1By2TiK4nrguGAUBm4PImt13XfXMZJmyM2UoaYz4L8= Subject key identifier: 70:7A:9E:BE:7A:E6:1E:53:98:5D:D7:93:27:9E:6F:D5:F7:84:B8:0C Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 115DF428DE09C3BC5B98540336858751A9A60D09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 84 Signing time: Fri 28 Aug 2026 06:48:14 +0000 Manifest this update: Fri 28 Aug 2026 06:43:14 +0000 Manifest next update: Mon 31 Aug 2026 16:44:14 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: lf8JyTh1fg+fQErC+LtturTCrTFn20BsDDBRJOzgTB0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5d:f4:28:de:09:c3:bc:5b:98:54:03:36:85:87:51:a9:a6:0d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Aug 28 06:43:14 2026 GMT Not After : Aug 31 16:44:14 2026 GMT Subject: CN=707A9EBE7AE61E53985DD793279E6FD5F784B80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:fa:08:ad:84:4f:49:ac:ca:88:49:98:e9: 52:c8:d3:a3:90:ac:66:9d:ae:9a:b2:f6:59:37:25: 4b:cf:29:6b:dc:9d:be:da:9a:68:b4:e7:6f:d2:0b: 8e:51:0b:cf:85:d7:0f:1d:9c:cb:18:1a:f5:36:a1: 5a:87:59:7e:2c:eb:0b:1c:13:75:1a:f8:eb:97:f7: 7f:fc:62:03:9c:22:f4:c1:85:be:bd:1d:50:7f:ee: 3c:a1:5c:c2:8e:91:b4:a5:cb:7a:a2:69:79:2e:66: 7a:97:de:c4:4c:2c:14:00:75:1e:04:c2:5e:e8:65: 49:26:31:3f:bb:5d:ac:84:d9:6e:bf:85:8b:e2:ed: 91:3b:3f:3a:f4:86:2e:f2:40:cf:07:a3:c1:88:7b: 88:ae:a6:df:2c:f9:c1:d9:57:43:b9:5c:99:63:b6: 15:ec:89:ba:24:9c:da:59:9c:86:52:c1:91:9e:eb: 5e:d7:10:c9:f9:09:5c:bd:00:57:ec:e2:2d:38:f3: 35:08:a3:50:f2:ff:ac:85:19:7d:78:a4:fa:8a:4e: c7:5f:46:27:c3:af:67:57:99:f4:fa:10:9b:f0:87: fd:69:f4:a5:97:42:5e:5d:1b:69:5c:cb:d4:ff:1d: 12:73:62:77:88:6e:5b:7c:89:e5:bc:a9:dd:9c:da: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7A:9E:BE:7A:E6:1E:53:98:5D:D7:93:27:9E:6F:D5:F7:84:B8:0C X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:88:fd:ae:d1:ef:f6:3f:78:28:7c:a7:1e:02:b8:03:92:b7: 3f:ea:dc:d2:79:da:1a:21:ca:cd:bc:d1:a9:05:98:8d:c5:00: b8:95:9d:a9:bf:df:79:6b:c9:fb:17:6a:44:2c:0b:75:58:ff: cf:5c:54:e5:af:ff:e8:e6:33:fb:45:bd:8c:ee:96:02:05:4c: fa:d1:e2:d6:a8:67:28:72:41:12:f9:2b:0c:72:9d:53:eb:12: b9:e2:67:a1:f3:d2:52:01:6e:92:7f:92:84:d0:48:f4:6b:3c: dc:0b:5a:7e:57:10:96:cd:b7:56:bf:f7:bb:2a:02:03:c6:c7: 05:d6:7c:b0:62:81:39:90:41:50:b9:c6:c2:99:56:a1:ba:8f: 0d:5b:c6:87:4f:6e:43:7d:71:b5:d2:54:b4:c0:de:be:2b:c4: 95:2b:ae:44:e2:87:d3:90:47:b4:06:34:32:a8:49:f8:f8:14: 4f:f0:42:5a:e0:ff:84:6c:bb:a6:59:f0:0f:93:3e:d4:c7:96: 03:f8:56:51:34:64:fc:76:e8:81:e5:cb:25:dd:c0:b9:e4:fa: 28:70:33:17:67:7b:e0:e3:e9:80:31:71:14:c4:b7:c2:48:93: 1e:08:d0:52:a1:9b:e7:5e:ad:4f:c3:0b:6a:8b:a8:13:6e:4d: 4e:ef:43:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEV30KN4Jw7xbmFQDNoWHUammDQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA4MjgwNjQzMTRaFw0yNjA4MzExNjQ0MTRaMDMxMTAvBgNV BAMTKDcwN0E5RUJFN0FFNjFFNTM5ODVERDc5MzI3OUU2RkQ1Rjc4NEI4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMfoIrYRPSazKiEmY6VLI06OQ rGadrpqy9lk3JUvPKWvcnb7ammi052/SC45RC8+F1w8dnMsYGvU2oVqHWX4s6wsc E3Ua+OuX93/8YgOcIvTBhb69HVB/7jyhXMKOkbSly3qiaXkuZnqX3sRMLBQAdR4E wl7oZUkmMT+7XayE2W6/hYvi7ZE7Pzr0hi7yQM8Ho8GIe4iupt8s+cHZV0O5XJlj thXsiboknNpZnIZSwZGe617XEMn5CVy9AFfs4i048zUIo1Dy/6yFGX14pPqKTsdf RifDr2dXmfT6EJvwh/1p9KWXQl5dG2lcy9T/HRJzYneIblt8ieW8qd2c2kYJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcHqevnrmHlOYXdeTJ55v1feEuAwwHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIj9rtHv9j94 KHynHgK4A5K3P+rc0nnaGiHKzbzRqQWYjcUAuJWdqb/feWvJ+xdqRCwLdVj/z1xU 5a//6OYz+0W9jO6WAgVM+tHi1qhnKHJBEvkrDHKdU+sSueJnofPSUgFukn+ShNBI 9Gs83AtaflcQls23Vr/3uyoCA8bHBdZ8sGKBOZBBULnGwplWobqPDVvGh09uQ31x tdJUtMDevivElSuuROKH05BHtAY0MqhJ+PgUT/BCWuD/hGy7plnwD5M+1MeWA/hW UTRk/HbogeXLJd3AueT6KHAzF2d74OPpgDFxFMS3wkiTHgjQUqGb516tT8MLaouo E25NTu9Dlg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:48 2026 by rpki-client