$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: 1mymtGg0ki2dszLLMNtcmOH7r1736C0bGq4smp19svU= Subject key identifier: 02:CA:1E:10:26:52:AE:79:C4:99:99:F8:F4:4A:AD:25:D7:43:A7:80 Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 1276CD0A5F6E310EB65A93C0116415287923512E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:47:47 +0000 Manifest this update: Fri 28 Aug 2026 06:42:47 +0000 Manifest next update: Mon 31 Aug 2026 14:31:47 +0000 Files and hashes: 1: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 2: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: MbTOH8rQ5QURMCjB9b6TQMV0MGTuiipSVU4MyMo7sfc=) 3: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) 4: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 5: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 6: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 7: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:76:cd:0a:5f:6e:31:0e:b6:5a:93:c0:11:64:15:28:79:23:51:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Aug 28 06:42:47 2026 GMT Not After : Aug 31 14:31:47 2026 GMT Subject: CN=02CA1E102652AE79C49999F8F44AAD25D743A780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:7f:ca:ae:37:0f:1b:8b:c6:b3:91:d1:59: 9d:b7:2d:48:7f:b8:db:cc:a2:73:32:da:d0:3f:73: d1:93:a3:f2:66:ec:03:0f:7e:29:af:e8:e1:97:10: 23:52:a1:d9:ca:16:98:32:b6:6e:1f:b0:9a:79:4b: 19:1c:b3:ef:3f:29:6c:a3:b8:dd:f5:bf:30:2a:be: 34:f2:9c:11:7f:1a:3c:db:a4:cc:73:1e:7d:e4:32: 72:4d:57:51:cb:6c:9d:84:86:dc:75:a8:1f:4a:e0: e1:4f:05:67:04:f7:d8:c3:6c:cd:db:77:f1:a8:28: bd:7b:3a:fc:8f:9a:96:bd:ef:45:51:bb:50:f9:b1: 81:97:b5:ea:e0:0b:aa:8b:f5:00:e8:11:09:0d:9d: 40:ec:06:62:e6:ea:f1:fe:f9:c4:b7:19:19:66:87: 25:1f:f0:a6:d3:33:c5:d5:df:7b:22:5e:b5:48:fb: eb:b8:4c:3b:17:91:a5:2a:a0:21:08:4a:82:7c:91: d5:4f:4d:5b:33:58:c6:06:18:c8:ad:96:9a:57:7a: 62:ce:99:ce:d7:be:c7:2c:87:18:92:b8:17:98:b8: 6f:c8:6c:bd:fb:b5:9f:4b:36:44:cf:d5:48:92:e0: 06:ff:e2:02:1c:78:1d:a6:0a:0a:76:93:a7:a2:13: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:1E:10:26:52:AE:79:C4:99:99:F8:F4:4A:AD:25:D7:43:A7:80 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:64:e0:29:b3:4f:6d:3d:30:9a:cb:03:07:7d:c0:3d:05:34: c1:a8:f1:ab:45:cc:0b:af:02:dc:4f:17:63:e1:7d:70:14:a6: 0f:76:2a:9a:3b:5d:8b:ac:55:85:82:5d:de:fb:8e:e7:05:5a: 93:45:55:1c:30:b6:29:ab:21:a3:da:84:db:4b:96:24:56:6e: b9:ef:75:22:27:16:e7:56:47:12:d8:76:09:3f:1f:ad:5d:78: b9:06:6c:18:ed:d3:6a:c4:13:93:91:c2:7d:29:2e:6f:3d:42: 95:91:f1:d0:be:de:28:69:55:b8:63:ca:0f:7e:a5:5d:22:28: 99:f8:cf:07:47:2c:86:eb:46:d1:57:6d:93:5d:7c:c1:ba:b2: d7:a6:2e:07:fc:bb:b3:0f:9f:2a:7e:7d:e7:30:10:6b:5c:a6: e1:c7:b4:d8:5b:3e:56:c2:73:22:ae:5f:80:b2:bb:dd:25:99: e9:fc:7f:2c:9d:34:70:73:87:4a:2e:87:67:f4:03:30:89:42: 09:96:b2:95:23:9f:15:59:f9:4a:a5:0d:01:6c:b7:ad:eb:62: 0b:e5:f8:1a:fd:e2:31:96:31:b5:0c:3b:4a:2e:5c:f5:0b:af: 44:2c:50:d4:6e:ce:ee:35:2f:2c:38:7e:52:b8:0e:1a:2f:f2: 61:44:fb:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEnbNCl9uMQ62WpPAEWQVKHkjUS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjA4MjgwNjQyNDdaFw0yNjA4MzExNDMxNDdaMDMxMTAvBgNV BAMTKDAyQ0ExRTEwMjY1MkFFNzlDNDk5OTlGOEY0NEFBRDI1RDc0M0E3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnH/KrjcPG4vGs5HRWZ23LUh/ uNvMonMy2tA/c9GTo/Jm7AMPfimv6OGXECNSodnKFpgytm4fsJp5Sxkcs+8/KWyj uN31vzAqvjTynBF/GjzbpMxzHn3kMnJNV1HLbJ2Ehtx1qB9K4OFPBWcE99jDbM3b d/GoKL17OvyPmpa970VRu1D5sYGXtergC6qL9QDoEQkNnUDsBmLm6vH++cS3GRlm hyUf8KbTM8XV33siXrVI++u4TDsXkaUqoCEISoJ8kdVPTVszWMYGGMitlppXemLO mc7XvscshxiSuBeYuG/IbL37tZ9LNkTP1UiS4Ab/4gIceB2mCgp2k6eiE4uXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAsoeECZSrnnEmZn49EqtJddDp4AwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGTgKbNPbT0w mssDB33APQU0wajxq0XMC68C3E8XY+F9cBSmD3Yqmjtdi6xVhYJd3vuO5wVak0VV HDC2Kasho9qE20uWJFZuue91IicW51ZHEth2CT8frV14uQZsGO3TasQTk5HCfSku bz1ClZHx0L7eKGlVuGPKD36lXSIomfjPB0cshutG0Vdtk118wbqy16YuB/y7sw+f Kn595zAQa1ym4ce02Fs+VsJzIq5fgLK73SWZ6fx/LJ00cHOHSi6HZ/QDMIlCCZay lSOfFVn5SqUNAWy3retiC+X4Gv3iMZYxtQw7Si5c9QuvRCxQ1G7O7jUvLDh+UrgO Gi/yYUT7hQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:15 2026 by rpki-client