$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: ZhLDd9LtWfJ18MSFiUiJxkl0n6nXmnuzpOGeYbmHXxw= Subject key identifier: C7:69:79:F6:B7:30:2C:A0:46:96:42:17:FE:67:A7:66:87:9C:78:BE Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 62D445361EC58103FA20BA059AA84303813F1494 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: C8 Signing time: Sat 26 Sep 2026 05:13:11 +0000 Manifest this update: Sat 26 Sep 2026 05:08:11 +0000 Manifest next update: Tue 29 Sep 2026 10:26:11 +0000 Files and hashes: 1: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) 2: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) 3: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: 2q6Kb5/wuRsZ0YA0sGX+nuVO+kw8RfBd8i4ZtT1+t+Y=) 4: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 5: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 10:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d4:45:36:1e:c5:81:03:fa:20:ba:05:9a:a8:43:03:81:3f:14:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Sep 26 05:08:11 2026 GMT Not After : Sep 29 10:26:11 2026 GMT Subject: CN=C76979F6B7302CA046964217FE67A766879C78BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:87:92:0c:44:83:0a:eb:01:27:17:7c:23: c2:96:21:b9:c0:eb:62:df:4a:60:7b:18:0d:4c:59: c6:bc:23:01:ac:1f:8f:e8:be:b5:67:db:f1:8a:af: b4:a9:fa:fb:a0:b9:d3:57:11:e9:24:4d:88:cf:e6: 2e:7d:cf:40:ed:69:9d:1b:4e:63:89:f8:f5:d5:16: 55:83:3b:f1:f0:46:cf:27:3b:9c:84:b3:00:db:b5: 1d:48:4d:2d:a9:44:0a:04:16:8b:6f:35:81:00:79: e8:e5:d3:b7:9d:fd:1b:67:ea:fa:46:4d:f2:66:3a: 67:62:77:59:94:c0:81:60:ff:51:e3:49:d4:54:36: 36:bf:b1:f8:fd:52:7d:c5:8e:97:8d:8d:ba:e8:6c: 50:47:f3:0f:3e:7c:7f:1b:84:c4:08:c9:9e:9b:75: 1c:98:e4:59:24:b0:81:f3:7b:19:80:97:bd:9c:6d: 00:96:3c:34:72:5c:bd:1a:ee:b3:2e:f1:d7:45:7a: 00:a1:fd:ee:7f:80:80:25:af:69:64:2c:9e:af:6d: 2e:fd:b1:b5:bf:fc:c9:07:54:b1:92:e8:5a:9a:34: 04:ae:b1:61:44:90:b9:b1:07:62:84:b5:d0:77:7f: 46:b4:bf:a1:69:9c:6d:5b:f4:3c:56:f4:4c:c7:c2: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:69:79:F6:B7:30:2C:A0:46:96:42:17:FE:67:A7:66:87:9C:78:BE X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:71:56:86:16:0c:fb:bc:35:4c:bc:53:9d:81:50:af:41: 47:d1:b1:ac:1a:f5:bb:72:44:f0:ba:7c:64:e5:33:79:07:2b: da:d0:6f:d5:6f:fb:21:1a:dd:33:41:c2:3b:43:74:43:bf:d4: 19:2f:35:bc:32:2b:94:a2:a5:e1:c1:7a:09:70:56:ed:56:eb: e3:3e:1c:ee:76:57:f4:8f:b0:ad:18:ab:90:ee:33:91:f1:7d: 89:df:7b:95:cb:24:a7:c3:37:f9:20:8e:ac:8b:b2:1e:f9:e6: 04:d5:54:e1:81:02:d2:e2:47:df:b0:0f:2e:0f:41:83:9c:9a: 3c:92:4e:c7:a1:a3:89:a1:ed:31:51:13:3e:9d:54:46:47:ab: d5:f4:41:61:e4:f0:b9:38:6f:a1:cc:b8:49:82:c3:73:eb:9b: 8c:55:c8:bf:18:3a:28:d4:2d:cf:db:c8:82:50:93:01:7c:c0: c0:d1:7a:fd:32:46:5b:dc:a8:95:51:c2:19:6a:13:97:9f:a0: e4:ff:9d:ab:79:18:6c:21:ce:eb:1a:3e:95:3e:9d:7b:14:80: d5:42:a5:12:d9:2f:2a:4c:f4:3b:8b:9d:4a:df:1c:8a:35:a6: ef:ef:27:ff:9f:e9:a8:60:bc:96:a8:fd:af:98:5b:af:a3:43: 43:04:aa:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYtRFNh7FgQP6ILoFmqhDA4E/FJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjA5MjYwNTA4MTFaFw0yNjA5MjkxMDI2MTFaMDMxMTAvBgNV BAMTKEM3Njk3OUY2QjczMDJDQTA0Njk2NDIxN0ZFNjdBNzY2ODc5Qzc4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+o4eSDESDCusBJxd8I8KWIbnA 62LfSmB7GA1MWca8IwGsH4/ovrVn2/GKr7Sp+vugudNXEekkTYjP5i59z0DtaZ0b TmOJ+PXVFlWDO/HwRs8nO5yEswDbtR1ITS2pRAoEFotvNYEAeejl07ed/Rtn6vpG TfJmOmdid1mUwIFg/1HjSdRUNja/sfj9Un3FjpeNjbrobFBH8w8+fH8bhMQIyZ6b dRyY5FkksIHzexmAl72cbQCWPDRyXL0a7rMu8ddFegCh/e5/gIAlr2lkLJ6vbS79 sbW//MkHVLGS6FqaNASusWFEkLmxB2KEtdB3f0a0v6FpnG1b9DxW9EzHwiRbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx2l59rcwLKBGlkIX/menZoeceL4wHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPZxVoYWDPu8 NUy8U52BUK9BR9GxrBr1u3JE8Lp8ZOUzeQcr2tBv1W/7IRrdM0HCO0N0Q7/UGS81 vDIrlKKl4cF6CXBW7Vbr4z4c7nZX9I+wrRirkO4zkfF9id97lcskp8M3+SCOrIuy HvnmBNVU4YEC0uJH37APLg9Bg5yaPJJOx6GjiaHtMVETPp1URker1fRBYeTwuThv ocy4SYLDc+ubjFXIvxg6KNQtz9vIglCTAXzAwNF6/TJGW9yolVHCGWoTl5+g5P+d q3kYbCHO6xo+lT6dexSA1UKlEtkvKkz0O4udSt8cijWm7+8n/5/pqGC8lqj9r5hb r6NDQwSqRg== -----END CERTIFICATE-----Generated at Sun Sep 27 01:02:12 2026 by rpki-client