$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: 4N37vG+qrVdQbSsEckIiZGm3yRM4XKMimfBFlcJV2gE= Subject key identifier: 83:13:B9:B6:ED:A1:14:93:6C:AB:B7:38:22:18:2F:48:09:17:4D:2A Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 682BF591149F46DA46AAAC7140B3A4F82B7044F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 0146 Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 09:44:54 +0000 Files and hashes: 1: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: /P5QQFmrMVHNuv8/vRN7aEX3sXO7JM1t1AgxDBWsI1o=) 2: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) 3: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2b:f5:91:14:9f:46:da:46:aa:ac:71:40:b3:a4:f8:2b:70:44:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 09:44:54 2026 GMT Subject: CN=8313B9B6EDA114936CABB73822182F4809174D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:76:5b:5a:6a:dd:64:34:49:1a:6e:ae:3f: fe:e4:93:b8:98:22:4b:4c:10:db:ba:46:fc:9c:fe: 02:ab:c5:cc:87:ea:0d:cd:86:11:c0:66:b2:78:49: a1:e2:a4:df:99:f1:bc:aa:18:40:69:e7:e2:8a:fc: 55:7b:54:e7:30:ad:c3:c3:78:60:e0:c9:dd:8f:15: 92:eb:cd:d8:30:19:e0:52:c0:d5:04:0c:90:d8:f6: 8e:20:7a:11:24:0f:7b:db:b1:be:c4:36:2a:da:b3: 27:6c:b3:21:fe:40:bc:3c:b4:0d:11:c9:5c:97:a8: ab:ba:96:b0:4d:51:99:01:43:d9:5b:fc:ca:c9:a6: c0:28:03:db:21:9b:66:48:c0:14:87:a7:e3:42:32: a3:47:94:8c:f5:92:02:8e:c2:8d:b8:a1:61:b2:24: 79:ff:51:20:7b:87:3b:cb:e9:d8:57:5c:41:0d:04: de:7b:64:02:ae:f0:c2:de:dc:3a:1b:43:3c:f0:1b: dc:c5:da:e1:d3:28:07:c3:06:ee:92:fa:80:d4:7b: ae:8e:1f:98:e8:34:08:4c:4a:4f:e8:f9:28:1a:c5: 52:19:21:5d:48:cc:26:e7:57:da:75:a7:9c:3e:f9: 3c:a7:80:87:2d:36:09:f4:4b:e2:77:66:65:5e:17: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:13:B9:B6:ED:A1:14:93:6C:AB:B7:38:22:18:2F:48:09:17:4D:2A X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:df:c7:f9:bf:c0:62:8d:55:e4:10:3e:16:17:2b:99:ee: e0:1f:46:d0:cc:bc:f6:0e:f3:9d:6d:0f:ed:67:c7:84:d7:f0: 0b:23:7b:2c:dc:4d:09:49:2f:4b:d2:96:61:15:3b:bb:c2:01: 6b:5e:58:f0:f7:da:7a:ee:03:be:7f:d8:13:e6:42:c3:e5:39: c1:8f:14:81:02:ef:22:01:4d:f0:4c:bb:cc:16:3c:a8:9e:eb: f1:72:99:08:22:99:09:15:30:b2:b5:53:85:ef:07:ee:2c:ca: 0a:95:e5:22:7e:b4:28:67:20:bb:90:8d:18:14:0c:bf:b9:33: ee:55:59:87:8e:a8:7a:20:cd:b0:a4:ec:16:ab:e5:73:1c:b4: 1a:b8:e4:4d:27:ee:8f:42:1d:30:35:3e:8e:29:ea:8d:19:b8: 62:e7:92:b6:a4:1a:7d:9d:e5:53:6f:37:a2:dd:1e:f9:88:b4: 3f:77:f2:77:75:78:22:19:ad:1b:e6:de:b3:41:61:e6:2e:1b: 22:99:60:2f:ae:46:52:30:6d:45:92:dc:4a:dd:dc:1b:45:ef: 14:6a:15:3d:b0:bf:00:26:dc:03:43:11:20:4f:a0:a5:5d:25: 3d:87:0a:79:32:dc:42:5f:11:ef:ba:e4:9e:2c:e9:a6:0e:59: 8e:c6:94:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaCv1kRSfRtpGqqxxQLOk+CtwRPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA4MjgwNjQyNTRaFw0yNjA4MzEwOTQ0NTRaMDMxMTAvBgNV BAMTKDgzMTNCOUI2RURBMTE0OTM2Q0FCQjczODIyMTgyRjQ4MDkxNzREMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS3ZbWmrdZDRJGm6uP/7kk7iY IktMENu6Rvyc/gKrxcyH6g3NhhHAZrJ4SaHipN+Z8byqGEBp5+KK/FV7VOcwrcPD eGDgyd2PFZLrzdgwGeBSwNUEDJDY9o4gehEkD3vbsb7ENirasydssyH+QLw8tA0R yVyXqKu6lrBNUZkBQ9lb/MrJpsAoA9shm2ZIwBSHp+NCMqNHlIz1kgKOwo24oWGy JHn/USB7hzvL6dhXXEENBN57ZAKu8MLe3DobQzzwG9zF2uHTKAfDBu6S+oDUe66O H5joNAhMSk/o+SgaxVIZIV1IzCbnV9p1p5w++TyngIctNgn0S+J3ZmVeFzOXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgxO5tu2hFJNsq7c4IhgvSAkXTSowHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg7fx/m/wGKN VeQQPhYXK5nu4B9G0My89g7znW0P7WfHhNfwCyN7LNxNCUkvS9KWYRU7u8IBa15Y 8Pfaeu4Dvn/YE+ZCw+U5wY8UgQLvIgFN8Ey7zBY8qJ7r8XKZCCKZCRUwsrVThe8H 7izKCpXlIn60KGcgu5CNGBQMv7kz7lVZh46oeiDNsKTsFqvlcxy0GrjkTSfuj0Id MDU+jinqjRm4YueStqQafZ3lU283ot0e+Yi0P3fyd3V4IhmtG+bes0Fh5i4bIplg L65GUjBtRZLcSt3cG0XvFGoVPbC/ACbcA0MRIE+gpV0lPYcKeTLcQl8R77rknizp pg5ZjsaUwA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:29 2026 by rpki-client