$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft File: 50296D63899E692A0BA1D29C54A95275354500E5.mft (raw, json) Hash identifier: IMgrfELkbW/BBQxykuhRMKQmPL79cNCUteg3hCjNs54= Subject key identifier: 12:BD:20:DC:41:40:30:81:8C:D2:B5:F0:63:BC:55:8D:D3:C0:14:C0 Authority key identifier: 50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5 Certificate issuer: /CN=50296D63899E692A0BA1D29C54A95275354500E5 Certificate serial: 2CC15293ADA9033C2133282FB0BD5799225E501F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft Manifest number: 0C Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 10:33:06 +0000 Files and hashes: 1: 50296D63899E692A0BA1D29C54A95275354500E5.crl (hash: rNpOyxDqsZzghWh2ovEDzZkQoRl4ezdNd2odX9+eKas=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c1:52:93:ad:a9:03:3c:21:33:28:2f:b0:bd:57:99:22:5e:50:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50296D63899E692A0BA1D29C54A95275354500E5 Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 10:33:06 2026 GMT Subject: CN=12BD20DC414030818CD2B5F063BC558DD3C014C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:fc:bb:ef:2c:93:64:b0:5a:08:f2:93:d6: d2:8e:85:44:ed:5f:37:41:60:ac:64:e8:3c:68:45: e9:c2:5a:d1:54:b3:51:0a:58:4b:44:6b:27:62:13: a7:a2:c5:de:2c:de:ff:87:c6:68:5a:07:a3:d7:a3: d8:9d:a6:52:61:86:0a:f7:90:ba:e0:b2:80:6b:50: f3:cd:6a:3b:43:23:96:b0:13:14:3c:4d:5b:46:3c: 0d:69:0c:ed:80:a9:96:9d:de:12:d0:fc:84:89:54: 7e:1a:3b:d1:a6:3f:bd:b8:0e:f2:d8:4a:22:32:80: 99:1a:06:71:14:3e:2f:28:3f:0b:01:cf:55:fe:70: 37:25:42:02:d8:ec:43:3e:45:25:b6:0d:14:9b:5f: b2:64:0b:12:fa:bd:ea:03:47:a6:fc:60:5a:6c:80: 08:01:f6:c0:13:68:f5:6a:25:0d:01:5b:15:b4:ea: 9b:95:70:bc:61:fd:de:db:64:6f:64:71:12:5e:1b: ce:1c:6d:d2:e5:85:5a:70:2a:07:63:0f:16:c7:74: a9:12:97:a9:5d:37:dc:c9:57:94:4b:d1:ea:11:7b: 9f:f2:1f:3d:28:3c:7e:c6:da:fb:2a:98:ed:cc:a1: e3:07:b1:be:3a:8b:94:b4:97:40:7e:f5:36:43:ee: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:20:DC:41:40:30:81:8C:D2:B5:F0:63:BC:55:8D:D3:C0:14:C0 X509v3 Authority Key Identifier: keyid:50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:c8:c1:59:9a:ec:a3:90:70:92:5b:51:84:0f:86:98:a2: d5:3e:19:4a:fe:a7:b2:38:ea:4d:02:53:16:3d:c8:db:08:61: e0:a9:de:aa:b4:00:cf:16:1e:30:08:9f:e9:6f:b7:f6:72:58: 0a:b4:9a:32:fd:d8:c4:3a:53:bc:e3:bf:33:64:2e:85:c9:04: 07:21:a4:46:9a:6a:6e:81:92:b4:ac:1f:bf:10:2d:58:b8:5d: 18:1f:36:12:a3:72:66:20:f7:e2:23:30:f9:2e:25:bd:f8:7c: bb:81:b4:b8:e9:45:91:1f:64:78:10:47:8c:f2:8e:b9:f2:50: cc:6e:b0:7b:10:24:3f:c9:e1:cf:b0:ef:a0:8e:7c:e3:4b:10: 40:52:a3:83:4b:83:46:22:43:4b:20:08:0d:11:2d:1b:db:05: 4f:4d:e2:ac:4c:4e:ab:8d:5d:bb:fb:c6:a2:c5:e2:b0:b8:d9: 91:09:17:ac:96:cd:6b:50:25:7b:02:ab:1c:29:d3:8e:fd:33: 54:f6:31:15:fc:4d:4f:0d:31:65:a4:a4:36:47:bf:10:30:15: b8:9b:36:4b:6d:7f:06:8e:cb:fc:a8:22:f3:8d:8f:9d:be:eb: 1e:3f:dc:b1:74:75:27:78:7b:bd:6c:d5:b8:45:c1:ce:ca:be: 41:cb:f5:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULMFSk62pAzwhMygvsL1XmSJeUB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAyOTZENjM4OTlFNjkyQTBCQTFEMjlDNTRBOTUyNzUz NTQ1MDBFNTAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzExMDMzMDZaMDMxMTAvBgNV BAMTKDEyQkQyMERDNDE0MDMwODE4Q0QyQjVGMDYzQkM1NThERDNDMDE0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUvy77yyTZLBaCPKT1tKOhUTt XzdBYKxk6DxoRenCWtFUs1EKWEtEaydiE6eixd4s3v+HxmhaB6PXo9idplJhhgr3 kLrgsoBrUPPNajtDI5awExQ8TVtGPA1pDO2AqZad3hLQ/ISJVH4aO9GmP724DvLY SiIygJkaBnEUPi8oPwsBz1X+cDclQgLY7EM+RSW2DRSbX7JkCxL6veoDR6b8YFps gAgB9sATaPVqJQ0BWxW06puVcLxh/d7bZG9kcRJeG84cbdLlhVpwKgdjDxbHdKkS l6ldN9zJV5RL0eoRe5/yHz0oPH7G2vsqmO3MoeMHsb46i5S0l0B+9TZD7it5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEr0g3EFAMIGM0rXwY7xVjdPAFMAwHwYDVR0j BBgwFoAUUCltY4meaSoLodKcVKlSdTVFAOUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 MjYzMDM0Nzk5Nzk3MDQ3NS8wLzUwMjk2RDYzODk5RTY5MkEwQkExRDI5QzU0QTk1 Mjc1MzU0NTAwRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTAyOTZENjM4OTlFNjkyQTBCQTFEMjlDNTRBOTUyNzUzNTQ1MDBFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDI2MzAzNDc5OTc5NzA0NzUvMC81MDI5NkQ2Mzg5OUU2 OTJBMEJBMUQyOUM1NEE5NTI3NTM1NDUwMEU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgczIwVma7KOQ cJJbUYQPhpii1T4ZSv6nsjjqTQJTFj3I2whh4KneqrQAzxYeMAif6W+39nJYCrSa Mv3YxDpTvOO/M2QuhckEByGkRppqboGStKwfvxAtWLhdGB82EqNyZiD34iMw+S4l vfh8u4G0uOlFkR9keBBHjPKOufJQzG6wexAkP8nhz7DvoI5840sQQFKjg0uDRiJD SyAIDREtG9sFT03irExOq41du/vGosXisLjZkQkXrJbNa1AlewKrHCnTjv0zVPYx FfxNTw0xZaSkNke/EDAVuJs2S21/Bo7L/Kgi842Pnb7rHj/csXR1J3h7vWzVuEXB zsq+Qcv18Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:53 2026 by rpki-client