$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: 8dEtmJO96Bos/YgeWCLXcbyUCKtsm5QQhnXnDt22eM8= Subject key identifier: 6D:2C:A1:A6:43:A9:66:34:6A:FA:E6:43:1B:07:F7:4C:3F:09:23:97 Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 0FFE37B799B2AA1398E12CF03D660D5B49E23DD5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 4B Signing time: Fri 21 Aug 2026 09:29:17 +0000 Manifest this update: Fri 21 Aug 2026 09:24:17 +0000 Manifest next update: Sat 22 Aug 2026 13:13:17 +0000 Files and hashes: 1: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: SPDD8HIC1JIu7jaAyadU6DZwdrvDAUbZRY25LCtxR/U=) 2: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 13:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fe:37:b7:99:b2:aa:13:98:e1:2c:f0:3d:66:0d:5b:49:e2:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Aug 21 09:24:17 2026 GMT Not After : Aug 22 13:13:17 2026 GMT Subject: CN=6D2CA1A643A966346AFAE6431B07F74C3F092397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:b5:73:1c:04:9b:e9:84:32:37:db:c5:3b: b6:ef:cc:27:5a:b0:04:0d:19:23:5c:eb:92:e9:9a: 51:08:0c:9d:03:bd:97:0f:c8:e0:cd:58:16:f3:ed: ad:84:b1:9c:dd:e6:1b:d8:91:74:ba:70:ad:b3:03: 21:ad:5c:f7:ae:5a:5f:6e:59:63:f8:df:cd:41:d8: 2b:24:fe:ca:4e:44:43:18:a9:ca:e3:af:bb:35:6b: 3d:6c:87:50:93:fc:59:ab:00:1e:59:72:f8:65:08: be:5c:5f:9f:85:55:4a:63:2f:28:98:6f:8f:2d:bd: 02:8d:ad:ab:9f:44:b6:2b:2e:a0:00:62:b0:bd:40: 01:79:ad:0c:23:7f:82:f9:43:20:8b:5f:e7:b0:fc: 4d:9e:47:70:cf:08:7d:c9:36:fb:46:38:ac:e3:13: ec:2a:77:ef:65:5c:1d:a2:85:e0:46:e9:8b:06:64: ba:1e:51:bd:28:fa:e3:bf:57:f1:66:cd:c6:a9:6b: de:b0:87:77:f2:9d:db:e5:9b:15:62:cf:11:4d:f7: 87:6f:3e:1e:6f:38:c6:db:bc:af:24:de:08:12:13: 62:57:4c:2f:60:3c:75:3e:ff:a4:01:aa:c9:05:b4: cb:90:66:74:eb:de:84:4a:74:fc:71:78:62:4d:ad: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:A1:A6:43:A9:66:34:6A:FA:E6:43:1B:07:F7:4C:3F:09:23:97 X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:60:2d:06:fd:e3:cf:a3:99:50:1e:40:bb:90:e9:74:1d:c3: 11:09:15:76:ca:6b:e4:ae:8c:b4:0d:4d:62:1c:60:63:b4:b7: 62:8d:04:53:f7:78:8c:6b:7a:60:45:ef:c6:10:69:e9:5b:1f: 15:8a:22:24:40:70:db:9f:ad:15:2d:bf:03:91:0a:cb:22:9a: d1:a8:56:58:df:93:3d:7d:0c:0f:d6:c7:0c:54:81:db:d4:03: f3:f8:ed:54:76:c7:d5:2a:9e:aa:f7:0f:ed:e3:ce:81:f6:c9: 74:83:08:39:41:6d:fb:0e:8a:1b:a6:7b:4a:61:cd:98:f5:82: 4b:bf:0a:72:a7:72:f5:5e:04:ed:67:0d:6b:0d:c9:e3:d0:22: 1b:ed:28:38:0d:7a:06:3b:30:ef:57:d2:b8:18:f5:9a:21:5d: 4f:58:71:13:d6:a7:79:0e:df:18:8f:5e:11:be:97:b2:34:ce: 70:f3:8a:3b:45:7a:19:9a:f5:fc:48:12:8b:d0:cb:1e:23:3f: 34:26:99:96:d2:57:60:d3:f5:c7:36:ad:11:ad:ed:75:ef:be: e9:57:ad:dd:4e:68:b4:77:d9:da:16:59:8f:33:d6:da:4f:f5: d7:f4:50:eb:65:f1:06:8b:c5:47:42:a3:37:7c:40:87:3c:d0: 82:60:95:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD/43t5myqhOY4SzwPWYNW0niPdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjA4MjEwOTI0MTdaFw0yNjA4MjIxMzEzMTdaMDMxMTAvBgNV BAMTKDZEMkNBMUE2NDNBOTY2MzQ2QUZBRTY0MzFCMDdGNzRDM0YwOTIzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkLVzHASb6YQyN9vFO7bvzCda sAQNGSNc65LpmlEIDJ0DvZcPyODNWBbz7a2EsZzd5hvYkXS6cK2zAyGtXPeuWl9u WWP4381B2Csk/spOREMYqcrjr7s1az1sh1CT/FmrAB5ZcvhlCL5cX5+FVUpjLyiY b48tvQKNraufRLYrLqAAYrC9QAF5rQwjf4L5QyCLX+ew/E2eR3DPCH3JNvtGOKzj E+wqd+9lXB2iheBG6YsGZLoeUb0o+uO/V/Fmzcapa96wh3fyndvlmxVizxFN94dv Ph5vOMbbvK8k3ggSE2JXTC9gPHU+/6QBqskFtMuQZnTr3oRKdPxxeGJNrXyDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbSyhpkOpZjRq+uZDGwf3TD8JI5cwHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2AtBv3jz6OZ UB5Au5DpdB3DEQkVdspr5K6MtA1NYhxgY7S3Yo0EU/d4jGt6YEXvxhBp6VsfFYoi JEBw25+tFS2/A5EKyyKa0ahWWN+TPX0MD9bHDFSB29QD8/jtVHbH1SqeqvcP7ePO gfbJdIMIOUFt+w6KG6Z7SmHNmPWCS78Kcqdy9V4E7WcNaw3J49AiG+0oOA16Bjsw 71fSuBj1miFdT1hxE9aneQ7fGI9eEb6XsjTOcPOKO0V6GZr1/EgSi9DLHiM/NCaZ ltJXYNP1xzatEa3tde++6Vet3U5otHfZ2hZZjzPW2k/11/RQ62XxBovFR0KjN3xA hzzQgmCVEQ== -----END CERTIFICATE-----Generated at Sat Aug 22 04:33:45 2026 by rpki-client