$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json) Hash identifier: SQuC3SONp+8eS15BSz52dPk/AjS0PlOuGKPOOs7kAhs= Subject key identifier: 3C:02:7F:36:69:71:80:3C:BE:2F:C8:AE:E8:A8:91:5C:38:10:1B:E4 Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Certificate serial: 3A109C6DDD0911BAB0E6721510D3DD83D9962F18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft Manifest number: 6A Signing time: Fri 28 Aug 2026 06:48:25 +0000 Manifest this update: Fri 28 Aug 2026 06:43:25 +0000 Manifest next update: Mon 31 Aug 2026 08:05:25 +0000 Files and hashes: 1: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: 3+i3xoUaKn+EiOjkgDUANgrNE+L+WX81djBrLGv4qJM=) 2: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:10:9c:6d:dd:09:11:ba:b0:e6:72:15:10:d3:dd:83:d9:96:2f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Validity Not Before: Aug 28 06:43:25 2026 GMT Not After : Aug 31 08:05:25 2026 GMT Subject: CN=3C027F366971803CBE2FC8AEE8A8915C38101BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:1f:42:ea:7a:be:8d:78:22:d0:63:5f:eb: f0:54:96:c4:37:e4:3a:29:a4:97:b2:72:b9:67:b5: 68:99:21:3e:ae:a4:59:7d:7a:1a:08:a7:82:0d:38: 39:5e:ac:ae:65:e9:4e:13:a7:e3:45:8b:c9:e3:fe: 4d:f8:e3:d9:d0:6c:a6:32:f9:89:a2:92:87:f8:f2: 9d:e8:6c:09:6b:96:90:9e:61:c1:56:2f:1a:56:dd: 35:63:c5:40:86:e4:2d:60:70:c9:a9:93:62:8d:7b: 56:78:d5:ed:a5:19:f6:ec:72:40:9f:d7:e6:60:6d: 98:d2:d9:af:e7:36:bb:73:3c:f2:a9:78:68:b5:6d: 32:d9:0c:51:60:86:50:16:f1:9e:57:c8:22:d8:de: 4b:96:a0:3f:67:0b:f7:65:e8:77:c6:3c:1b:35:4d: d9:9a:42:66:88:85:66:af:42:4b:87:96:83:40:0a: 24:82:d9:2a:6c:93:81:28:90:12:8b:40:b6:a8:24: e2:85:f2:34:5a:fb:86:ee:09:56:88:00:4d:2d:6e: 26:79:b7:48:fa:11:6c:bd:84:06:d0:4b:1e:0a:f9: 46:ae:d0:ef:25:08:8d:8a:e0:a9:3b:d5:29:c0:2c: 9f:61:90:a5:a8:a7:8d:d8:2d:f1:aa:a1:f9:10:22: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:7F:36:69:71:80:3C:BE:2F:C8:AE:E8:A8:91:5C:38:10:1B:E4 X509v3 Authority Key Identifier: keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:77:50:6c:e1:d8:59:a6:40:80:bb:21:92:17:d0:e9:25:48: a2:4a:5a:3e:ec:bd:4c:ae:61:77:80:00:f5:19:d7:52:bb:d7: ed:cd:c0:0a:68:64:fa:4e:7c:d6:11:b2:a8:82:d2:0f:da:cf: ec:cb:01:8d:eb:69:8f:88:c5:b5:7a:fe:f1:c7:03:71:33:79: b3:33:9a:88:81:82:3d:0a:b3:31:c9:ce:09:8c:3a:45:fc:f3: c3:dd:27:a2:d1:83:58:36:26:78:d7:c9:a1:37:df:61:4d:1a: 88:21:c6:56:11:f4:87:2a:7f:84:07:52:82:99:35:8b:76:3f: 0a:b7:79:c8:34:1a:17:9f:66:54:e1:be:39:38:99:45:c5:98: a9:bc:63:5a:26:cf:b3:e8:65:d6:14:83:f4:23:5f:b9:16:fd: b6:73:b3:42:b2:08:c9:cc:62:eb:f9:01:23:52:30:95:9d:85: 02:99:78:0d:f4:9c:66:75:3b:55:98:9c:3c:af:df:9c:3b:73: 52:19:31:fe:88:57:60:ad:ae:5b:70:d4:35:b7:ff:9b:e0:53: 48:d4:80:58:a8:d5:e1:d3:ce:ca:5b:57:85:94:f4:3b:9c:98: 03:44:f0:3b:67:b9:cd:f3:b1:24:20:84:d6:33:36:f4:4f:6e: b9:66:c9:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOhCcbd0JEbqw5nIVENPdg9mWLxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4 MjJCOEI3MTAeFw0yNjA4MjgwNjQzMjVaFw0yNjA4MzEwODA1MjVaMDMxMTAvBgNV BAMTKDNDMDI3RjM2Njk3MTgwM0NCRTJGQzhBRUU4QTg5MTVDMzgxMDFCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZXR9C6nq+jXgi0GNf6/BUlsQ3 5DoppJeycrlntWiZIT6upFl9ehoIp4INODlerK5l6U4Tp+NFi8nj/k3449nQbKYy +Ymikof48p3obAlrlpCeYcFWLxpW3TVjxUCG5C1gcMmpk2KNe1Z41e2lGfbsckCf 1+ZgbZjS2a/nNrtzPPKpeGi1bTLZDFFghlAW8Z5XyCLY3kuWoD9nC/dl6HfGPBs1 TdmaQmaIhWavQkuHloNACiSC2Spsk4EokBKLQLaoJOKF8jRa+4buCVaIAE0tbiZ5 t0j6EWy9hAbQSx4K+Uau0O8lCI2K4Kk71SnALJ9hkKWop43YLfGqofkQIuhVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPAJ/NmlxgDy+L8iu6KiRXDgQG+QwHwYDVR0j BBgwFoAUHAp8lE25nEQZw+KJ/6mA/4Iri3EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMyMjg5MjU5MDE4NjUyMS8wLzFDMEE3Qzk0NERCOTlDNDQxOUMzRTI4OUZGQTk4 MEZGODIyQjhCNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4MjJCOEI3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMjI4OTI1OTAxODY1MjEvMC8xQzBBN0M5NDREQjk5 QzQ0MTlDM0UyODlGRkE5ODBGRjgyMkI4QjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3dQbOHYWaZA gLshkhfQ6SVIokpaPuy9TK5hd4AA9RnXUrvX7c3ACmhk+k581hGyqILSD9rP7MsB jetpj4jFtXr+8ccDcTN5szOaiIGCPQqzMcnOCYw6Rfzzw90notGDWDYmeNfJoTff YU0aiCHGVhH0hyp/hAdSgpk1i3Y/Crd5yDQaF59mVOG+OTiZRcWYqbxjWibPs+hl 1hSD9CNfuRb9tnOzQrIIycxi6/kBI1IwlZ2FApl4DfScZnU7VZicPK/fnDtzUhkx /ohXYK2uW3DUNbf/m+BTSNSAWKjV4dPOyltXhZT0O5yYA0TwO2e5zfOxJCCE1jM2 9E9uuWbJBg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:32:43 2026 by rpki-client