$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft File: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft (raw, json) Hash identifier: XJczEwDvhPgPHr7otwtu9batJ6uJNgfOS5bAhkYYhYc= Subject key identifier: 7C:4A:7B:E9:12:80:09:17:94:83:73:38:33:DA:12:5E:C8:AA:8C:19 Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 Certificate issuer: /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Certificate serial: 4AA340F2206F6EDCD3A0BF295A6202659DA596C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft Manifest number: 2B Signing time: Fri 28 Aug 2026 06:47:45 +0000 Manifest this update: Fri 28 Aug 2026 06:42:45 +0000 Manifest next update: Mon 31 Aug 2026 08:30:45 +0000 Files and hashes: 1: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl (hash: zjsEpMGd16ZU3i1YYn7vnVWvMdgOA3SMgaZrJ+nUtPI=) 2: 3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (hash: CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=) 3: 3130312e34392e3230372e302f32342d3234203d3e203539303638.roa (hash: mJK27tVfbdIF1xBAouziK7x1YNs7RUiymoSR83PrbWw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a3:40:f2:20:6f:6e:dc:d3:a0:bf:29:5a:62:02:65:9d:a5:96:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Validity Not Before: Aug 28 06:42:45 2026 GMT Not After : Aug 31 08:30:45 2026 GMT Subject: CN=7C4A7BE9128009179483733833DA125EC8AA8C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:47:e4:06:de:69:c2:80:20:04:39:9c:7b: 40:b7:a2:40:86:28:f3:bf:96:ae:3d:83:65:a9:c3: 4b:58:eb:4f:74:1b:3e:4b:17:08:d4:3c:c8:41:70: 4d:42:08:b1:ff:3c:0a:dd:9a:ac:b1:22:da:4e:66: 88:1b:92:24:6a:b4:87:fb:f0:20:b5:72:5e:17:55: e3:55:f3:f7:2d:81:84:78:00:f4:e9:e0:67:7b:4e: c5:97:76:fc:8c:58:c4:a8:f4:0e:8e:8e:09:4a:f5: b1:72:df:65:4c:90:b6:d3:4f:34:b8:47:f1:fc:f3: c6:38:53:d3:27:c3:41:44:b4:22:a6:e8:92:47:33: 27:ac:44:ef:93:ca:ca:1f:6c:43:c0:f6:27:8e:7f: 73:42:d2:bc:15:35:9e:75:dd:96:dd:58:41:d1:c1: a6:5c:3a:f6:77:b3:ee:a8:48:4c:53:ce:37:c7:2b: 75:42:8d:00:54:a7:e9:b0:2a:1e:ca:ab:fd:5e:07: 15:08:ed:06:0a:37:33:3e:06:30:cd:03:f7:5b:21: ed:7f:c6:94:4c:cf:e0:bd:a8:ae:47:05:a3:eb:91: 71:bf:e6:57:82:35:7e:3e:70:0a:13:5d:6a:9d:d8: 45:23:92:84:7f:6f:bf:d9:35:2c:91:8d:4d:90:22: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:7B:E9:12:80:09:17:94:83:73:38:33:DA:12:5E:C8:AA:8C:19 X509v3 Authority Key Identifier: keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:33:c8:3e:29:29:41:b6:df:26:eb:a9:a0:0f:1c:3f:94:53: fe:a3:c1:74:2f:cc:be:50:c6:06:b8:7b:cf:b7:64:cf:25:db: 8d:89:85:80:bc:22:9f:eb:c1:f4:b1:03:25:4c:36:69:77:28: b4:4f:07:c8:c0:56:3d:f2:9c:75:99:8f:6d:28:59:b5:73:0b: 5e:6d:53:37:c9:e4:76:fa:41:1e:5b:11:38:e6:a5:0b:55:4d: 99:89:75:9d:9b:f0:9f:be:5a:40:67:7e:66:7b:89:f0:f0:f4: d8:65:f0:a0:a2:68:2a:73:f5:65:38:8b:11:d2:df:d7:57:ce: ca:36:ca:a6:0d:94:5c:26:a6:24:ca:30:68:6b:78:73:bd:e9: 0b:83:f5:fd:95:7f:b1:22:27:c2:2b:e7:16:37:28:f9:5a:57: f8:de:66:04:57:62:b5:fc:f7:66:43:57:b7:65:44:e8:b4:e2: 63:d9:94:2b:9c:d0:bb:40:1d:9f:36:83:51:36:f0:4a:c5:6f: aa:dc:b8:17:d3:a5:32:c6:c2:34:f5:0e:49:c5:fb:5f:c6:a6: a1:86:f2:b1:b1:5c:1e:53:9c:af:2f:b9:c5:94:24:7b:4f:6b: cc:cc:6b:b1:9f:ab:a4:cc:09:84:ce:7d:a6:71:16:52:34:9b: 15:1f:f5:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSqNA8iBvbtzToL8pWmICZZ2llsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5 MzE5RTU1OTAeFw0yNjA4MjgwNjQyNDVaFw0yNjA4MzEwODMwNDVaMDMxMTAvBgNV BAMTKDdDNEE3QkU5MTI4MDA5MTc5NDgzNzMzODMzREExMjVFQzhBQThDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDEfkBt5pwoAgBDmce0C3okCG KPO/lq49g2Wpw0tY6090Gz5LFwjUPMhBcE1CCLH/PArdmqyxItpOZogbkiRqtIf7 8CC1cl4XVeNV8/ctgYR4APTp4Gd7TsWXdvyMWMSo9A6OjglK9bFy32VMkLbTTzS4 R/H888Y4U9Mnw0FEtCKm6JJHMyesRO+TysofbEPA9ieOf3NC0rwVNZ513ZbdWEHR waZcOvZ3s+6oSExTzjfHK3VCjQBUp+mwKh7Kq/1eBxUI7QYKNzM+BjDNA/dbIe1/ xpRMz+C9qK5HBaPrkXG/5leCNX4+cAoTXWqd2EUjkoR/b7/ZNSyRjU2QIhcVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfEp76RKACReUg3M4M9oSXsiqjBkwHwYDVR0j BBgwFoAUuK+2lsFavE/++z6x6hDv1JMZ5VkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NDY5MjY2MjUwNzQ3MDg5My8wL0I4QUZCNjk2QzE1QUJDNEZGRUZCM0VCMUVBMTBF RkQ0OTMxOUU1NTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5MzE5RTU1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzQ2OTI2NjI1MDc0NzA4OTMvMC9COEFGQjY5NkMxNUFC QzRGRkVGQjNFQjFFQTEwRUZENDkzMTlFNTU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTPIPikpQbbf JuupoA8cP5RT/qPBdC/MvlDGBrh7z7dkzyXbjYmFgLwin+vB9LEDJUw2aXcotE8H yMBWPfKcdZmPbShZtXMLXm1TN8nkdvpBHlsROOalC1VNmYl1nZvwn75aQGd+ZnuJ 8PD02GXwoKJoKnP1ZTiLEdLf11fOyjbKpg2UXCamJMowaGt4c73pC4P1/ZV/sSIn wivnFjco+VpX+N5mBFditfz3ZkNXt2VE6LTiY9mUK5zQu0AdnzaDUTbwSsVvqty4 F9OlMsbCNPUOScX7X8amoYbysbFcHlOcry+5xZQke09rzMxrsZ+rpMwJhM59pnEW UjSbFR/1MQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:52 2026 by rpki-client