$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: lmEZRKTtwZgZji75MPIlgBPhPKVSZ6eg2PQL0j3bV4U= Subject key identifier: 59:2D:FB:D0:10:00:A2:57:D9:92:D7:18:4D:32:17:A7:0E:64:75:9E Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 5D17AA7612159B5C51DC5F1736E48479DF87911C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: D6 Signing time: Thu 24 Sep 2026 12:56:53 +0000 Manifest this update: Thu 24 Sep 2026 12:51:53 +0000 Manifest next update: Mon 28 Sep 2026 00:54:53 +0000 Files and hashes: 1: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 2: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) 3: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: bLEsdqYyeLzO9ygkltZo0A2lAtLewVrKtNNeVx6ilV8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:17:aa:76:12:15:9b:5c:51:dc:5f:17:36:e4:84:79:df:87:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Sep 24 12:51:53 2026 GMT Not After : Sep 28 00:54:53 2026 GMT Subject: CN=592DFBD01000A257D992D7184D3217A70E64759E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:bd:7e:2f:20:34:ef:a7:87:46:3f:5d:f1: ed:cb:1f:2e:28:63:f4:8f:27:0c:a6:10:6f:90:64: 83:4d:2b:2a:1a:ac:46:a6:40:24:53:3c:15:0e:f4: e3:0b:a4:9b:38:0f:40:72:79:a1:4f:e5:76:72:ff: 80:f9:9f:6a:92:31:02:0e:e1:37:47:90:77:cb:a8: 73:6a:32:25:dd:33:77:74:ce:50:63:03:f6:d0:1c: af:79:5d:75:9b:a8:17:40:5c:53:95:ca:a1:56:e8: 99:be:e0:5c:e6:56:8c:d3:d0:ed:bb:7c:8d:da:09: b8:72:af:5d:10:81:c8:e4:e2:20:b0:b7:a7:9b:ef: 5d:8a:eb:5b:cf:f3:6f:e2:93:fb:9b:8d:79:a7:0b: 17:ac:b1:e0:27:2e:a9:a9:31:e7:24:8f:cf:70:e7: 7c:a6:28:a2:6a:ed:06:51:7b:4e:80:69:e3:b9:b7: 95:07:7f:d3:c2:2a:ab:99:63:6c:4b:74:44:05:5b: 62:2c:f6:f2:1b:aa:83:5a:f5:0c:36:ef:c5:88:2a: 0a:08:ce:66:ca:e1:28:15:88:53:f0:cc:07:b4:f9: 8c:7d:35:df:6e:7e:65:40:a5:dd:92:fb:cd:3d:15: f4:31:53:3a:6b:7d:e1:cf:31:63:77:a0:6d:36:db: 0a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:FB:D0:10:00:A2:57:D9:92:D7:18:4D:32:17:A7:0E:64:75:9E X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2a:7e:a3:43:d7:a4:70:1f:18:41:20:ff:b3:13:46:4c:46: 88:6f:60:fa:34:38:00:13:fc:8a:4d:34:db:77:08:4e:5c:f2: dd:41:25:f1:a7:55:ae:3d:11:a0:7d:9c:60:76:84:c1:07:bf: 9d:f6:e6:3f:4b:4a:c3:c4:5d:90:2d:ce:38:85:57:0d:7a:a9: 81:a1:03:56:cc:b5:16:db:66:8e:6c:eb:5f:5a:3a:3a:b1:7f: 60:55:5a:96:e0:61:74:39:65:3f:56:03:83:cf:c7:a1:89:04: 6c:a5:65:07:5b:ec:08:c1:1b:8f:7d:e7:f6:7c:23:73:41:fd: 04:42:f7:76:39:f6:3a:ca:22:d4:46:c2:17:0f:38:54:21:92: 62:b4:a8:b3:e3:91:ba:32:1e:a1:5d:57:9b:9d:e5:79:8b:12: a0:e1:a0:05:c3:be:1c:0e:21:08:b3:b9:09:73:27:65:0c:d7: e1:d7:5d:c7:0e:18:67:e1:fe:aa:1d:e0:3a:a9:56:4c:06:6a: b8:4c:47:58:3a:92:16:4d:40:f0:51:ce:d7:c6:cf:b9:53:bc: 67:d4:20:20:17:3f:83:e1:cf:89:ce:56:4f:75:9f:6a:5c:9c: f7:3a:86:ae:78:14:a7:35:b0:92:63:99:d3:d2:93:07:fe:75: 86:70:1a:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXReqdhIVm1xR3F8XNuSEed+HkRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA5MjQxMjUxNTNaFw0yNjA5MjgwMDU0NTNaMDMxMTAvBgNV BAMTKDU5MkRGQkQwMTAwMEEyNTdEOTkyRDcxODREMzIxN0E3MEU2NDc1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+b1+LyA076eHRj9d8e3LHy4o Y/SPJwymEG+QZINNKyoarEamQCRTPBUO9OMLpJs4D0ByeaFP5XZy/4D5n2qSMQIO 4TdHkHfLqHNqMiXdM3d0zlBjA/bQHK95XXWbqBdAXFOVyqFW6Jm+4FzmVozT0O27 fI3aCbhyr10Qgcjk4iCwt6eb712K61vP82/ik/ubjXmnCxesseAnLqmpMeckj89w 53ymKKJq7QZRe06AaeO5t5UHf9PCKquZY2xLdEQFW2Is9vIbqoNa9Qw278WIKgoI zmbK4SgViFPwzAe0+Yx9Nd9ufmVApd2S+809FfQxUzprfeHPMWN3oG022wpbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWS370BAAolfZktcYTTIXpw5kdZ4wHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyp+o0PXpHAf GEEg/7MTRkxGiG9g+jQ4ABP8ik0023cITlzy3UEl8adVrj0RoH2cYHaEwQe/nfbm P0tKw8RdkC3OOIVXDXqpgaEDVsy1FttmjmzrX1o6OrF/YFValuBhdDllP1YDg8/H oYkEbKVlB1vsCMEbj33n9nwjc0H9BEL3djn2Osoi1EbCFw84VCGSYrSos+ORujIe oV1Xm53leYsSoOGgBcO+HA4hCLO5CXMnZQzX4dddxw4YZ+H+qh3gOqlWTAZquExH WDqSFk1A8FHO18bPuVO8Z9QgIBc/g+HPic5WT3Wfalyc9zqGrngUpzWwkmOZ09KT B/51hnAa4g== -----END CERTIFICATE-----Generated at Sat Sep 26 15:50:52 2026 by rpki-client