$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft File: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft (raw, json) Hash identifier: n7yBkRbjDzIIlzMf8tdj9fYCaEnpo2YyQlTBKGvCryo= Subject key identifier: 71:83:82:82:FE:87:5F:FD:6B:89:4C:99:BE:6C:48:79:2D:C1:C3:10 Authority key identifier: 58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 Certificate issuer: /CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Certificate serial: 797E63BB9C9AF6BCCAB9FB0A4FCC06A116F4A133 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft Manifest number: 0C Signing time: Fri 28 Aug 2026 06:48:26 +0000 Manifest this update: Fri 28 Aug 2026 06:43:26 +0000 Manifest next update: Mon 31 Aug 2026 06:54:26 +0000 Files and hashes: 1: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl (hash: A2z1XCanfKYwIJ+C1YemA5ne+EswuIFW/U/9XXA3pdE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 06:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7e:63:bb:9c:9a:f6:bc:ca:b9:fb:0a:4f:cc:06:a1:16:f4:a1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Validity Not Before: Aug 28 06:43:26 2026 GMT Not After : Aug 31 06:54:26 2026 GMT Subject: CN=71838282FE875FFD6B894C99BE6C48792DC1C310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:80:4d:26:f2:92:fb:9f:79:e4:57:a2:1e: a9:b9:48:9d:00:05:10:4d:25:f9:d1:2f:95:a6:b1: 49:39:dd:46:32:51:f7:9c:cb:05:34:79:c6:a3:43: 07:64:73:87:62:ba:ca:5f:15:8a:6e:39:35:10:46: 0e:ca:47:8f:6b:f8:fd:31:2a:c9:35:d7:49:90:7e: 3e:1a:ac:3c:6a:6a:f9:c2:94:e2:c1:59:d3:50:f5: 3b:af:13:73:7c:4c:57:79:2f:5d:8b:45:12:b0:fd: 63:a0:65:0a:16:e3:ef:9b:5c:7f:e4:94:93:2f:1f: 53:cd:77:e3:38:80:4e:f6:75:c7:cb:d0:22:9f:f9: 10:b2:1e:4d:d2:be:ad:7c:78:6b:df:20:82:1d:f4: 10:5a:64:bf:34:45:63:e9:73:3e:c7:7f:71:56:4f: c2:74:24:9f:85:84:40:10:ff:40:72:70:2d:18:e4: a6:84:83:ac:f4:d0:24:0b:37:c7:77:e9:8c:3b:fc: d3:0d:ad:3e:2c:c4:1c:d7:eb:1a:3a:e8:1f:70:9d: d6:d1:73:95:f1:12:28:9a:ca:a3:b6:04:a5:83:94: ac:b6:b0:4a:f9:7e:ee:ce:dc:91:dd:15:15:90:19: 51:62:f2:f0:90:32:ae:03:8a:91:ca:4a:75:f2:ac: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:83:82:82:FE:87:5F:FD:6B:89:4C:99:BE:6C:48:79:2D:C1:C3:10 X509v3 Authority Key Identifier: keyid:58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c6:9a:17:21:70:38:8f:06:fa:e1:89:f5:1c:b8:25:2c:b1: 44:bb:e8:8a:0f:c6:26:b3:36:ce:7f:bf:8b:67:cb:99:ab:73: a9:8d:52:11:c7:d9:bf:ee:ca:39:4e:df:59:cf:1c:80:f2:8e: 7e:10:93:98:9a:94:93:1e:f4:cc:e4:4e:95:9c:8a:22:59:77: 1f:ea:f0:f6:04:cc:66:1d:85:e1:0e:5d:74:07:5b:25:7d:47: 3b:97:bf:2f:73:b7:f5:04:9c:07:07:bd:e6:e8:9b:50:f1:e2: de:36:33:e8:59:3b:25:2b:49:78:04:ef:c4:0c:45:d4:e9:c5: 2b:c9:75:e4:ce:5c:fa:f3:a9:f7:fc:19:70:59:5d:de:d9:f3: 4b:5b:cf:0b:6d:10:4e:83:ad:9c:53:19:a2:90:13:32:17:42: 92:27:72:c6:9b:89:89:94:66:a8:51:d3:ae:45:7c:c0:c6:96: b1:8b:f3:b0:6b:ce:2e:75:b7:fe:5d:09:34:e8:25:bc:1f:f3: 86:95:db:00:ec:38:ca:84:87:73:5b:ed:b2:2c:18:18:0d:3d: 0f:3b:c3:4a:83:98:3d:12:13:2f:e8:2e:4b:b9:5c:8f:aa:86: 44:c1:d1:42:61:ad:8a:84:f4:9c:95:d8:7f:15:a0:6a:cb:16: ae:9f:8d:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeX5ju5ya9rzKufsKT8wGoRb0oTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThE ODcyQjI3NDAeFw0yNjA4MjgwNjQzMjZaFw0yNjA4MzEwNjU0MjZaMDMxMTAvBgNV BAMTKDcxODM4MjgyRkU4NzVGRkQ2Qjg5NEM5OUJFNkM0ODc5MkRDMUMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoG4BNJvKS+5955FeiHqm5SJ0A BRBNJfnRL5WmsUk53UYyUfecywU0ecajQwdkc4diuspfFYpuOTUQRg7KR49r+P0x Ksk110mQfj4arDxqavnClOLBWdNQ9TuvE3N8TFd5L12LRRKw/WOgZQoW4++bXH/k lJMvH1PNd+M4gE72dcfL0CKf+RCyHk3Svq18eGvfIIId9BBaZL80RWPpcz7Hf3FW T8J0JJ+FhEAQ/0BycC0Y5KaEg6z00CQLN8d36Yw7/NMNrT4sxBzX6xo66B9wndbR c5XxEiiayqO2BKWDlKy2sEr5fu7O3JHdFRWQGVFi8vCQMq4DipHKSnXyrKFFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcYOCgv6HX/1riUyZvmxIeS3BwxAwHwYDVR0j BBgwFoAUWGbpNW4W2i3+K95dAl6S6NhysnQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 MjYzNDQyMzEyMDgyMjMxNS8wLzU4NjZFOTM1NkUxNkRBMkRGRTJCREU1RDAyNUU5 MkU4RDg3MkIyNzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThEODcyQjI3NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDI2MzQ0MjMxMjA4MjIzMTUvMC81ODY2RTkzNTZFMTZE QTJERkUyQkRFNUQwMjVFOTJFOEQ4NzJCMjc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcaaFyFwOI8G +uGJ9Ry4JSyxRLvoig/GJrM2zn+/i2fLmatzqY1SEcfZv+7KOU7fWc8cgPKOfhCT mJqUkx70zOROlZyKIll3H+rw9gTMZh2F4Q5ddAdbJX1HO5e/L3O39QScBwe95uib UPHi3jYz6Fk7JStJeATvxAxF1OnFK8l15M5c+vOp9/wZcFld3tnzS1vPC20QToOt nFMZopATMhdCkidyxpuJiZRmqFHTrkV8wMaWsYvzsGvOLnW3/l0JNOglvB/zhpXb AOw4yoSHc1vtsiwYGA09DzvDSoOYPRITL+guS7lcj6qGRMHRQmGtioT0nJXYfxWg assWrp+N/w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:53 2026 by rpki-client