$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json) Hash identifier: X79y1EjpIe1Tw/4xMsE3E/1TPy1509q6KCvKsCB1aSc= Subject key identifier: C6:90:1A:F4:E6:67:93:DC:E4:AE:23:C5:93:F4:8B:9F:BF:E6:FA:BA Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 1277AEDA73F3BCBFAA26EC0721CA06B76BB61774 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft Manifest number: 94 Signing time: Mon 28 Sep 2026 18:26:16 +0000 Manifest this update: Mon 28 Sep 2026 18:21:16 +0000 Manifest next update: Fri 02 Oct 2026 00:16:16 +0000 Files and hashes: 1: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=) 2: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=) 3: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: UAHiZcvFJ+tf8OHDoAktkSSx3TCA5qns29YrDaoi8Is=) 4: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:77:ae:da:73:f3:bc:bf:aa:26:ec:07:21:ca:06:b7:6b:b6:17:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: Sep 28 18:21:16 2026 GMT Not After : Oct 2 00:16:16 2026 GMT Subject: CN=C6901AF4E66793DCE4AE23C593F48B9FBFE6FABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:ce:d7:30:91:3f:82:28:19:ae:30:c1:32: b1:16:79:c0:82:27:12:06:d9:4e:1e:a3:84:1c:8f: 22:5c:c7:78:f5:c5:de:b2:27:dd:5f:98:57:e1:ba: 43:ab:e1:b3:59:cb:84:da:cc:6f:95:de:b4:4a:1c: 96:a8:ab:c4:ae:1f:e6:d4:25:30:08:53:2e:b7:8a: 1c:5e:78:16:a7:f0:c9:21:35:17:c4:41:a2:50:4b: e3:58:3f:1c:07:1b:c2:6a:c1:df:ce:16:c0:44:87: 33:40:bd:0b:98:dd:f6:2e:4a:22:83:b5:d0:3b:c8: 71:28:da:8f:68:d3:4e:37:5c:ee:76:6b:cf:23:92: 62:e7:df:88:76:2e:b0:54:c6:90:9c:c5:0e:d2:f5: 2d:36:37:1e:80:8f:03:e5:00:fc:41:29:a5:68:88: 79:df:57:de:3e:95:0d:82:b8:3a:7b:78:bb:48:dc: e2:ef:eb:7a:cf:8e:8c:0e:64:b1:19:b0:65:77:fe: 11:c3:51:91:f2:f9:99:b4:dc:30:23:86:f1:2f:7d: d5:7f:93:35:89:83:d8:4f:35:4d:e7:98:25:31:0d: 87:41:bb:d5:7f:ae:b6:84:4f:54:ed:9f:c9:d6:03: 35:5c:7a:b6:01:2b:88:a0:a7:d2:cf:d4:d4:99:af: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:90:1A:F4:E6:67:93:DC:E4:AE:23:C5:93:F4:8B:9F:BF:E6:FA:BA X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cc:bf:1e:04:a0:00:b2:76:d8:41:48:ae:05:25:01:09:3b: 1e:84:03:e6:3d:22:f9:8d:ac:22:ed:3c:5b:94:31:d4:00:26: 0d:d0:fe:4b:1c:1a:f3:54:87:4d:99:73:30:13:ec:e7:3e:f3: c7:a6:88:57:a6:02:c3:49:f6:fb:05:55:5a:a0:12:bd:18:0d: 5b:ca:9a:80:2c:d2:55:78:5e:45:68:4b:c4:8d:71:0b:9a:08: c9:25:3f:2d:90:66:0e:5a:8f:ae:c2:56:f6:c6:d9:34:1b:c3: 41:65:04:dd:d3:e7:3a:66:cb:7e:2f:0d:bb:64:ef:ef:86:b9: 5c:a2:da:01:df:d6:ee:69:a2:23:01:c1:7e:d7:45:c9:af:ec: ad:92:8b:01:90:e0:09:13:6d:33:6f:29:04:71:a2:43:82:b6: 60:41:6b:f8:c5:92:ce:6d:a5:ef:51:e6:cc:73:3d:85:80:6a: e4:ca:c2:f3:53:5e:07:95:dd:55:0e:78:65:bd:e4:11:07:9f: f7:1e:58:dd:c8:b4:71:6f:2e:c7:93:a3:1c:38:53:46:82:23: a5:b6:28:c6:5e:d0:f2:3c:8f:d3:e8:b5:7d:0e:96:5b:11:5a: cb:fb:86:15:ac:b9:c1:c3:ad:c8:1a:c4:8d:b7:05:e3:c7:90: 15:e4:f9:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEneu2nPzvL+qJuwHIcoGt2u2F3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA5MjgxODIxMTZaFw0yNjEwMDIwMDE2MTZaMDMxMTAvBgNV BAMTKEM2OTAxQUY0RTY2NzkzRENFNEFFMjNDNTkzRjQ4QjlGQkZFNkZBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4c7XMJE/gigZrjDBMrEWecCC JxIG2U4eo4QcjyJcx3j1xd6yJ91fmFfhukOr4bNZy4TazG+V3rRKHJaoq8SuH+bU JTAIUy63ihxeeBan8MkhNRfEQaJQS+NYPxwHG8Jqwd/OFsBEhzNAvQuY3fYuSiKD tdA7yHEo2o9o0043XO52a88jkmLn34h2LrBUxpCcxQ7S9S02Nx6AjwPlAPxBKaVo iHnfV94+lQ2CuDp7eLtI3OLv63rPjowOZLEZsGV3/hHDUZHy+Zm03DAjhvEvfdV/ kzWJg9hPNU3nmCUxDYdBu9V/rraET1Ttn8nWAzVcerYBK4igp9LP1NSZrzJhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxpAa9OZnk9zkriPFk/SLn7/m+rowHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwMTc2NDE4NjAzMDA4MjEvMC8wOEM3REU4OTRBNEE4 ODYyMkJBNzhCQzlFNDFERkE1Q0M2RTMwMzRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMy/HgSgALJ2 2EFIrgUlAQk7HoQD5j0i+Y2sIu08W5Qx1AAmDdD+Sxwa81SHTZlzMBPs5z7zx6aI V6YCw0n2+wVVWqASvRgNW8qagCzSVXheRWhLxI1xC5oIySU/LZBmDlqPrsJW9sbZ NBvDQWUE3dPnOmbLfi8Nu2Tv74a5XKLaAd/W7mmiIwHBftdFya/srZKLAZDgCRNt M28pBHGiQ4K2YEFr+MWSzm2l71HmzHM9hYBq5MrC81NeB5XdVQ54Zb3kEQef9x5Y 3ci0cW8ux5OjHDhTRoIjpbYoxl7Q8jyP0+i1fQ6WWxFay/uGFay5wcOtyBrEjbcF 48eQFeT5lA== -----END CERTIFICATE-----Generated at Tue Sep 29 04:56:23 2026 by rpki-client