$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft File: 209BC812EEDDC6074713463D5583CB221EADC76F.mft (raw, json) Hash identifier: Ip9+TR+a0277uTRMJUBg4PpAe+xCoCutP+xYisGUfDw= Subject key identifier: 7A:FD:A8:17:B0:5E:D7:DA:79:55:F7:51:2A:D2:2E:3A:AD:3B:11:CA Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F Certificate serial: 10B7B9AF3ADB87E50EEE0E5DE3D7F1F078EE6BEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft Manifest number: 55 Signing time: Fri 28 Aug 2026 09:13:39 +0000 Manifest this update: Fri 28 Aug 2026 09:08:39 +0000 Manifest next update: Mon 31 Aug 2026 09:47:39 +0000 Files and hashes: 1: 209BC812EEDDC6074713463D5583CB221EADC76F.crl (hash: rkCBqMEoxvjycC+QkPKEZHeRczfw0BD4kvS0aPWZgfA=) 2: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (hash: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b7:b9:af:3a:db:87:e5:0e:ee:0e:5d:e3:d7:f1:f0:78:ee:6b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F Validity Not Before: Aug 28 09:08:39 2026 GMT Not After : Aug 31 09:47:39 2026 GMT Subject: CN=7AFDA817B05ED7DA7955F7512AD22E3AAD3B11CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:b0:0e:26:3c:60:61:e8:ab:ff:8f:0a:6b: 9a:43:5f:7a:0f:2d:d0:45:6b:08:cc:c2:4a:fd:f4: 0d:80:83:0e:4a:91:55:c9:db:d9:d6:79:17:3c:fe: ce:2b:1b:2b:37:91:81:6c:4f:f8:b9:c5:21:67:59: 04:d2:5c:2d:99:ad:64:c9:5e:47:d4:f7:69:8c:2c: 68:ec:b3:c3:46:8b:c2:b8:f7:b3:a1:70:06:a8:92: 04:4c:20:26:f5:a3:a1:00:91:b3:2b:8b:64:28:44: 2a:e9:06:d5:97:c2:fc:6d:49:91:a2:af:88:ab:40: 01:5a:fd:f3:77:3a:7a:83:0b:54:65:c3:40:5f:0d: 4d:49:04:ad:6a:2f:e4:a8:0a:5d:35:26:8d:09:c3: d1:bd:0e:cd:d2:79:e1:30:fa:e1:d8:8e:d1:58:00: 2e:01:e6:c6:c4:d5:15:c1:19:0f:36:36:bc:4e:23: 62:85:30:56:99:00:2a:12:91:e2:76:1d:2d:9c:9f: 8c:8d:f3:88:24:8b:a6:8a:4a:9a:da:97:fb:f6:79: d4:aa:b3:1c:a7:2f:ce:1a:f6:50:e4:a6:8c:64:36: a8:d2:b4:45:44:3e:4c:f4:c5:9b:c3:3b:90:d0:f8: 4e:87:7e:f2:0c:36:2f:34:c3:77:6c:7a:e7:54:6f: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FD:A8:17:B0:5E:D7:DA:79:55:F7:51:2A:D2:2E:3A:AD:3B:11:CA X509v3 Authority Key Identifier: keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:26:91:5c:d5:b7:f9:3c:41:ae:bf:c5:b0:6e:5d:75:d8:07: 4b:a6:7f:87:1f:a8:db:cc:89:22:9b:3d:6e:f3:ea:1b:18:a7: c3:9e:18:dc:c0:40:0f:3f:99:cb:0c:6d:50:62:27:36:68:cc: ff:ba:d7:92:65:64:80:8b:00:b2:5d:ee:34:1b:2b:45:8b:1b: 39:7b:56:98:93:ba:79:eb:89:bc:9e:2d:52:44:6d:86:85:c5: 99:ef:3c:97:af:3b:8d:90:80:30:3b:2b:5f:1f:54:16:ba:65: 8b:5e:c2:2b:fd:46:2d:56:a9:8e:c2:75:49:0d:18:2e:eb:cf: 17:a6:6c:3a:31:a4:5d:02:30:77:88:91:6a:6c:1f:03:4a:4c: aa:ca:07:7d:44:49:99:ca:37:57:7b:c7:75:06:09:6a:a7:6c: e9:d1:76:90:5a:fa:af:03:26:49:6f:15:54:96:73:66:ea:20: 57:1d:e5:20:e5:19:82:9a:45:62:cc:7c:e3:c5:cb:fb:4e:82: ac:fc:1a:30:46:ae:f5:a8:1f:ed:08:a1:65:08:5c:d3:af:77: c1:ac:06:d8:51:79:7c:5b:4d:24:dc:84:e9:3c:b3:c2:9a:11: 98:20:5f:e7:45:6e:e6:9a:d2:03:d1:8f:2f:3c:87:c0:31:5c: d4:cf:d0:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUELe5rzrbh+UO7g5d49fx8Hjua+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIx RUFEQzc2RjAeFw0yNjA4MjgwOTA4MzlaFw0yNjA4MzEwOTQ3MzlaMDMxMTAvBgNV BAMTKDdBRkRBODE3QjA1RUQ3REE3OTU1Rjc1MTJBRDIyRTNBQUQzQjExQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvbAOJjxgYeir/48Ka5pDX3oP LdBFawjMwkr99A2Agw5KkVXJ29nWeRc8/s4rGys3kYFsT/i5xSFnWQTSXC2ZrWTJ XkfU92mMLGjss8NGi8K497OhcAaokgRMICb1o6EAkbMri2QoRCrpBtWXwvxtSZGi r4irQAFa/fN3OnqDC1Rlw0BfDU1JBK1qL+SoCl01Jo0Jw9G9Ds3SeeEw+uHYjtFY AC4B5sbE1RXBGQ82NrxOI2KFMFaZACoSkeJ2HS2cn4yN84gki6aKSpral/v2edSq sxynL84a9lDkpoxkNqjStEVEPkz0xZvDO5DQ+E6HfvIMNi80w3dseudUb7ALAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUev2oF7Be19p5VfdRKtIuOq07EcowHwYDVR0j BBgwFoAUIJvIEu7dxgdHE0Y9VYPLIh6tx28wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzI4MTMyNTg0MzgwODI5NS8wLzIwOUJDODEyRUVEREM2MDc0NzEzNDYzRDU1ODND QjIyMUVBREM3NkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjMyODEzMjU4NDM4MDgyOTUvMC8yMDlCQzgxMkVFRERD NjA3NDcxMzQ2M0Q1NTgzQ0IyMjFFQURDNzZGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyaRXNW3+TxB rr/FsG5dddgHS6Z/hx+o28yJIps9bvPqGxinw54Y3MBADz+ZywxtUGInNmjM/7rX kmVkgIsAsl3uNBsrRYsbOXtWmJO6eeuJvJ4tUkRthoXFme88l687jZCAMDsrXx9U Frpli17CK/1GLVapjsJ1SQ0YLuvPF6ZsOjGkXQIwd4iRamwfA0pMqsoHfURJmco3 V3vHdQYJaqds6dF2kFr6rwMmSW8VVJZzZuogVx3lIOUZgppFYsx848XL+06CrPwa MEau9agf7QihZQhc0693wawG2FF5fFtNJNyE6TyzwpoRmCBf50Vu5prSA9GPLzyH wDFc1M/Q9g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:48 2026 by rpki-client