$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json) Hash identifier: KXKK3YiX0M7iCcXGxRPR5tXnEraqLGFOJ5e8n6iTrQk= Subject key identifier: 93:CD:66:E9:70:76:00:99:55:7B:1B:C8:D0:EE:7F:A5:D2:09:A1:2A Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C Certificate serial: 4F95213E5332029135B0D825E673D5981FC3700D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:22 +0000 Manifest this update: Fri 28 Aug 2026 06:43:22 +0000 Manifest next update: Mon 31 Aug 2026 10:39:22 +0000 Files and hashes: 1: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: b1Jy9ZYURpimnaKXSDcuNayW7tlPdQNEcEWUUChb1JQ=) 2: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=) 3: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=) 4: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=) 5: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=) 6: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=) 7: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:21:3e:53:32:02:91:35:b0:d8:25:e6:73:d5:98:1f:c3:70:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Validity Not Before: Aug 28 06:43:22 2026 GMT Not After : Aug 31 10:39:22 2026 GMT Subject: CN=93CD66E970760099557B1BC8D0EE7FA5D209A12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:af:1a:01:81:0b:56:9c:0a:0e:3d:54:55: a6:c9:22:ca:a2:90:9e:91:10:21:d7:7a:e9:9b:1f: 45:22:f5:72:9e:8d:e4:ca:2c:ba:e4:0c:38:0a:89: 38:5d:9b:57:04:0c:9e:0a:b4:94:07:70:a8:f2:19: 8b:44:9c:16:4b:18:c2:59:aa:4f:3b:bf:10:53:a5: 8d:77:1b:d2:67:a6:65:43:f4:df:89:a5:10:e4:6d: b1:08:81:7a:08:ed:6f:53:c7:63:5e:b6:fc:b2:c5: c8:92:0e:03:02:0c:5f:4b:70:42:9f:b3:30:d5:08: ef:ea:3c:1e:b6:44:6c:dc:b9:11:5a:50:8d:a8:c1: bf:b2:05:86:73:c9:b8:f9:1e:8a:fb:95:1c:11:57: fc:17:0c:b7:59:27:c6:9b:4c:65:bc:81:1b:95:4b: 3d:3b:d9:cf:39:c6:d5:87:48:29:d4:55:02:8b:03: 0f:c2:0b:b0:04:9d:5e:3d:36:c1:a9:56:a5:91:03: 15:3f:53:83:11:3f:d9:cb:b0:e5:d4:92:8d:45:77: 99:4c:18:f5:83:36:87:b7:dd:bc:24:b4:6c:83:77: a1:46:54:b9:6f:b0:59:30:97:b1:34:46:77:71:f2: 66:8f:b8:ca:65:7d:63:e9:67:0c:4d:79:19:dd:ae: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CD:66:E9:70:76:00:99:55:7B:1B:C8:D0:EE:7F:A5:D2:09:A1:2A X509v3 Authority Key Identifier: keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e5:cf:5a:b7:21:db:9c:60:db:26:56:3c:18:37:e5:b6:d6: a6:bb:5a:e8:c2:fd:d0:9c:10:f8:d7:a7:16:34:23:e9:c4:8f: b4:79:a0:e9:72:b2:11:1b:5f:ee:18:da:b9:5a:4a:2b:05:21: 89:d5:28:f8:68:43:37:17:2b:f0:46:77:1f:4f:34:59:dd:d0: 61:37:3c:86:e8:fc:38:76:7d:29:16:df:16:80:b8:15:6f:d6: 95:6b:0e:76:c0:8e:48:0f:f5:58:b5:16:35:85:ec:6c:7d:c3: 5b:e4:38:2b:fd:ad:78:48:0a:ab:42:4d:1b:7f:36:d9:9b:b6: c8:da:40:91:9e:20:bc:8a:47:ee:d7:60:dc:4a:4e:70:5a:72: bd:3a:4d:60:d4:62:30:d5:f0:d3:53:07:20:40:81:ff:1a:3b: 1e:14:40:00:d8:f3:8c:bd:bb:c7:ef:cd:58:59:ae:d4:db:44: 15:25:f2:ba:2a:11:3e:21:43:aa:c1:8b:92:5d:9c:9e:81:37: 51:49:b3:55:4b:e2:29:40:ff:96:0c:53:91:2c:20:0a:9a:cf: 20:e7:7a:60:e3:b3:98:64:3e:aa:20:89:bf:d7:d1:d0:a8:bd: 69:18:ca:0c:cf:90:79:59:69:b3:5c:a5:d8:14:72:2b:29:e7: 91:a2:1d:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT5UhPlMyApE1sNgl5nPVmB/DcA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JD MjUxRTYyQzAeFw0yNjA4MjgwNjQzMjJaFw0yNjA4MzExMDM5MjJaMDMxMTAvBgNV BAMTKDkzQ0Q2NkU5NzA3NjAwOTk1NTdCMUJDOEQwRUU3RkE1RDIwOUExMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fa8aAYELVpwKDj1UVabJIsqi kJ6RECHXeumbH0Ui9XKejeTKLLrkDDgKiThdm1cEDJ4KtJQHcKjyGYtEnBZLGMJZ qk87vxBTpY13G9JnpmVD9N+JpRDkbbEIgXoI7W9Tx2NetvyyxciSDgMCDF9LcEKf szDVCO/qPB62RGzcuRFaUI2owb+yBYZzybj5Hor7lRwRV/wXDLdZJ8abTGW8gRuV Sz072c85xtWHSCnUVQKLAw/CC7AEnV49NsGpVqWRAxU/U4MRP9nLsOXUko1Fd5lM GPWDNoe33bwktGyDd6FGVLlvsFkwl7E0Rndx8maPuMplfWPpZwxNeRndrq+rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk81m6XB2AJlVexvI0O5/pdIJoSowHwYDVR0j BBgwFoAUdF7FlFjfmNw2dCGXUKt+e8JR5iwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTg1MTc3OC8wLzc0NUVDNTk0NThERjk4REMzNjc0MjE5NzUwQUI3 RTdCQzI1MUU2MkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE4NTE3NzgvMC83NDVFQzU5NDU4REY5 OERDMzY3NDIxOTc1MEFCN0U3QkMyNTFFNjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeXPWrch25xg 2yZWPBg35bbWprta6ML90JwQ+NenFjQj6cSPtHmg6XKyERtf7hjauVpKKwUhidUo +GhDNxcr8EZ3H080Wd3QYTc8huj8OHZ9KRbfFoC4FW/WlWsOdsCOSA/1WLUWNYXs bH3DW+Q4K/2teEgKq0JNG3822Zu2yNpAkZ4gvIpH7tdg3EpOcFpyvTpNYNRiMNXw 01MHIECB/xo7HhRAANjzjL27x+/NWFmu1NtEFSXyuioRPiFDqsGLkl2cnoE3UUmz VUviKUD/lgxTkSwgCprPIOd6YOOzmGQ+qiCJv9fR0Ki9aRjKDM+QeVlps1yl2BRy KynnkaId4Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:21 2026 by rpki-client