$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json) Hash identifier: lC9fsbVxREGVcC+SOh9mvMGZqNK2C/6HCzz6VF9QC3g= Subject key identifier: 4E:4B:C7:1E:81:3E:F6:E3:2B:46:99:B1:33:DE:40:06:01:A4:6A:DB Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Certificate serial: 4650598AF6E7E93F9A04294410A78CBC280D758B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft Manifest number: A2 Signing time: Fri 28 Aug 2026 06:48:24 +0000 Manifest this update: Fri 28 Aug 2026 06:43:24 +0000 Manifest next update: Mon 31 Aug 2026 07:03:24 +0000 Files and hashes: 1: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: PO0DWtmKkyuM1qqEXucZemBf+3xgw9kNDTCipqNdP3c=) 2: AS0.roa (hash: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE=) 3: AS131562.roa (hash: lyeaZzzsA1wNSTES7Ho+HHZ+RzXLaE47z3sSRZstjus=) 4: AS56047.roa (hash: sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:50:59:8a:f6:e7:e9:3f:9a:04:29:44:10:a7:8c:bc:28:0d:75:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Validity Not Before: Aug 28 06:43:24 2026 GMT Not After : Aug 31 07:03:24 2026 GMT Subject: CN=4E4BC71E813EF6E32B4699B133DE400601A46ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:cb:50:91:8f:4a:ac:54:5a:16:0a:e0:1d: 54:b4:16:36:80:8a:18:e3:b8:16:74:6f:59:bc:b5: 6f:39:bd:9d:99:7f:fd:b8:99:4d:f7:ca:39:e9:7e: 51:03:47:f1:7a:56:0c:54:2b:d5:d6:99:00:06:60: 45:f3:f4:0b:9c:0f:89:e2:f2:09:fc:3a:fd:0d:36: 3e:e6:f5:7b:90:eb:11:cc:8b:1f:50:8d:36:f4:7f: cc:8a:a1:c3:d5:a8:41:ef:d4:49:45:51:4f:d3:28: 21:54:58:74:21:e8:d1:45:a4:ee:7c:11:6a:83:47: d4:8e:5f:44:78:7d:a7:8c:e0:8c:fa:11:8e:e3:9f: e7:bb:6a:58:43:38:d7:f9:da:f1:0e:95:da:e5:8f: af:3a:bf:8d:90:90:62:10:b3:00:43:1d:bf:76:c1: 7e:79:6d:b5:ed:9d:8c:dc:8f:a1:de:ce:62:a4:fc: bb:df:e4:bb:f8:fb:86:5e:a6:17:8d:4d:25:75:94: 6e:87:57:b1:14:39:bb:67:4e:42:30:9c:27:d4:02: 17:10:ab:08:ae:04:1a:cc:2b:3a:da:0e:85:b1:de: c7:f4:3c:be:0e:fe:d7:df:a4:ff:71:db:5e:82:4f: e6:b2:a1:d6:22:82:fa:28:27:2e:b0:27:fb:cb:8b: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4B:C7:1E:81:3E:F6:E3:2B:46:99:B1:33:DE:40:06:01:A4:6A:DB X509v3 Authority Key Identifier: keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:56:66:5a:3b:35:8a:2e:7e:d2:1d:34:e6:01:c0:5b:cb:f5: bc:e1:f5:75:05:86:9a:fe:f3:d3:1f:c6:83:52:2a:cc:fe:ae: ae:62:cf:6a:88:f5:b6:48:e4:cf:b6:d1:7c:dd:6f:b1:f1:76: 48:f9:8c:b9:e2:fc:e6:c1:a0:b8:d0:27:11:e0:94:0d:45:c4: e4:66:bc:4a:51:a4:30:72:fc:8b:e5:a6:a8:d0:4b:9b:ea:cb: 42:5b:82:85:fd:a3:62:ee:92:dc:b8:37:40:ce:2e:a1:46:72: 06:fd:b8:df:b5:89:a3:dd:c9:7a:8a:97:2d:30:19:22:4d:3f: d4:e2:4f:e3:06:ed:92:07:31:05:65:fa:eb:f7:a1:f3:e4:3e: 20:33:b4:34:45:4d:57:2e:18:9b:e9:b1:23:04:64:d9:1d:03: 5a:bd:67:59:89:e9:90:1e:b7:0e:c6:41:c7:af:d1:84:01:24: 70:45:e7:6e:70:30:9a:ad:b2:18:bc:50:16:bb:25:1b:c2:d4: ce:a5:21:88:7d:5c:88:75:ba:61:a7:3e:30:96:5f:41:99:a6: f2:b9:6a:cc:08:35:4b:c5:1e:af:4b:52:44:3c:54:52:6b:5b: d2:0e:11:e9:15:8c:54:6c:63:2c:2e:11:78:f6:0f:d4:15:5c: b4:8f:6a:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURlBZivbn6T+aBClEEKeMvCgNdYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzND MzNBMEI4RDAeFw0yNjA4MjgwNjQzMjRaFw0yNjA4MzEwNzAzMjRaMDMxMTAvBgNV BAMTKDRFNEJDNzFFODEzRUY2RTMyQjQ2OTlCMTMzREU0MDA2MDFBNDZBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeectQkY9KrFRaFgrgHVS0FjaA ihjjuBZ0b1m8tW85vZ2Zf/24mU33yjnpflEDR/F6VgxUK9XWmQAGYEXz9AucD4ni 8gn8Ov0NNj7m9XuQ6xHMix9QjTb0f8yKocPVqEHv1ElFUU/TKCFUWHQh6NFFpO58 EWqDR9SOX0R4faeM4Iz6EY7jn+e7alhDONf52vEOldrlj686v42QkGIQswBDHb92 wX55bbXtnYzcj6HezmKk/Lvf5Lv4+4ZepheNTSV1lG6HV7EUObtnTkIwnCfUAhcQ qwiuBBrMKzraDoWx3sf0PL4O/tffpP9x216CT+ayodYigvooJy6wJ/vLixc5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTkvHHoE+9uMrRpmxM95ABgGkatswHwYDVR0j BBgwFoAU8HG9z9APF7DSy3oE459/w8M6C40wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTQ2OTI0MjIxMDg0NDY5My8wL0YwNzFCRENGRDAwRjE3QjBEMkNCN0EwNEUzOUY3 RkMzQzMzQTBCOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE0NjkyNDIyMTA4NDQ2OTMvMC9GMDcxQkRDRkQwMEYx N0IwRDJDQjdBMDRFMzlGN0ZDM0MzM0EwQjhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVZmWjs1ii5+ 0h005gHAW8v1vOH1dQWGmv7z0x/Gg1IqzP6urmLPaoj1tkjkz7bRfN1vsfF2SPmM ueL85sGguNAnEeCUDUXE5Ga8SlGkMHL8i+WmqNBLm+rLQluChf2jYu6S3Lg3QM4u oUZyBv2437WJo93JeoqXLTAZIk0/1OJP4wbtkgcxBWX66/eh8+Q+IDO0NEVNVy4Y m+mxIwRk2R0DWr1nWYnpkB63DsZBx6/RhAEkcEXnbnAwmq2yGLxQFrslG8LUzqUh iH1ciHW6Yac+MJZfQZmm8rlqzAg1S8Uer0tSRDxUUmtb0g4R6RWMVGxjLC4RePYP 1BVctI9qzg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:28 2026 by rpki-client