$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: AsN1WhPzxXukCdZLBQOm4w3zErF3FhtGauv6hFbT1Sg= Subject key identifier: 50:87:BB:A4:9F:34:E4:20:DC:88:2F:14:2F:9D:EA:E9:0B:C0:99:9B Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 442E8349E98C3295A9F7C0154F2F951CCBD587D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 0169 Signing time: Thu 03 Sep 2026 22:44:16 +0000 Manifest this update: Thu 03 Sep 2026 22:39:16 +0000 Manifest next update: Sun 06 Sep 2026 23:36:16 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 2: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: IV7a0XssuQyo8td5vmyoNu0rZil5RPgtMesX0SLUSTs=) 3: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 4: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 5: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 6: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2e:83:49:e9:8c:32:95:a9:f7:c0:15:4f:2f:95:1c:cb:d5:87:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Sep 3 22:39:16 2026 GMT Not After : Sep 6 23:36:16 2026 GMT Subject: CN=5087BBA49F34E420DC882F142F9DEAE90BC0999B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:b6:68:e2:f1:67:55:8d:08:a0:42:87:b2: 7b:21:99:51:c4:d0:3b:2a:90:6c:47:8b:07:01:f3: 93:4b:f0:97:55:78:b9:06:70:cc:0f:e5:f6:b2:9d: 79:3a:00:15:55:aa:f9:ed:a1:17:27:ad:af:c6:94: ef:f8:1f:e4:a0:6f:cf:ac:92:63:e4:62:0e:e4:a8: 42:78:7b:10:2a:97:61:2d:ae:ae:b8:42:51:9a:f8: ca:f3:35:8c:b8:8b:34:cb:ab:16:52:e4:c4:e6:50: ac:3e:9d:33:ab:7d:00:69:ca:c5:e8:2c:30:0b:7c: b8:36:f9:8e:52:ed:e7:cb:38:45:95:24:05:c0:38: d2:37:03:b4:a5:07:83:82:89:b7:54:7d:dd:75:f3: 4f:20:98:67:40:d1:f1:de:79:81:c6:24:ab:25:7d: 53:87:e5:ae:c7:88:32:c6:9a:5e:a1:4d:02:b1:e0: 50:f3:3f:be:d6:4e:25:0b:a1:9e:92:84:7d:a3:76: d4:ce:b0:80:9e:50:7b:d7:26:02:d8:10:54:03:e5: 3d:eb:e0:03:f8:50:e5:e1:cc:81:dd:46:af:69:a6: bd:3b:55:60:27:4d:7d:49:81:ec:4c:25:3c:07:e0: 57:0f:bf:bf:e2:10:2f:31:4e:6d:f1:61:fa:da:d3: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:87:BB:A4:9F:34:E4:20:DC:88:2F:14:2F:9D:EA:E9:0B:C0:99:9B X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cf:77:a2:91:11:92:2d:70:4f:79:92:54:e3:73:43:32:01: 36:37:57:d8:b2:a8:48:f4:9e:16:a8:68:01:16:26:62:96:06: 92:da:26:67:ab:6e:1c:99:a4:47:b4:a1:19:47:21:6c:c1:d9: 27:33:64:82:b9:74:95:c4:4d:11:71:27:1d:1b:7f:12:3f:0d: 2e:64:2c:ff:98:11:f5:20:c3:22:18:77:d9:da:1c:7f:a5:2a: 82:97:ad:36:3a:09:b7:10:76:b7:b3:a7:77:de:dd:1e:81:87: 76:b3:6e:24:00:d1:6d:17:e7:f0:0b:77:85:46:97:b9:29:b6: ba:97:aa:e6:cf:81:ef:b2:36:8c:22:33:d4:80:cf:f0:f4:cb: 4d:c1:79:53:14:70:31:e1:ff:ed:1d:b0:b6:db:17:07:1f:05: e2:72:56:d0:29:88:5c:08:0e:81:89:0b:60:10:2e:e4:a0:ed: 15:6d:27:54:01:b1:76:b0:8d:4d:67:29:49:95:aa:99:34:b4: 3f:76:bb:17:a4:99:02:53:56:8f:95:ee:a1:03:ce:fa:a4:85: 6f:d9:f0:5c:b4:01:5d:33:f3:0b:35:6f:bd:aa:09:89:a6:34: 21:db:01:af:70:da:a2:c0:f0:e3:14:23:18:f3:70:7a:87:de: e0:d7:17:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURC6DSemMMpWp98AVTy+VHMvVh9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA5MDMyMjM5MTZaFw0yNjA5MDYyMzM2MTZaMDMxMTAvBgNV BAMTKDUwODdCQkE0OUYzNEU0MjBEQzg4MkYxNDJGOURFQUU5MEJDMDk5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUbZo4vFnVY0IoEKHsnshmVHE 0DsqkGxHiwcB85NL8JdVeLkGcMwP5faynXk6ABVVqvntoRcnra/GlO/4H+Sgb8+s kmPkYg7kqEJ4exAql2Etrq64QlGa+MrzNYy4izTLqxZS5MTmUKw+nTOrfQBpysXo LDALfLg2+Y5S7efLOEWVJAXAONI3A7SlB4OCibdUfd11808gmGdA0fHeeYHGJKsl fVOH5a7HiDLGml6hTQKx4FDzP77WTiULoZ6ShH2jdtTOsICeUHvXJgLYEFQD5T3r 4AP4UOXhzIHdRq9ppr07VWAnTX1JgexMJTwH4FcPv7/iEC8xTm3xYfra09kvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUIe7pJ805CDciC8UL53q6QvAmZswHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW893opERki1w T3mSVONzQzIBNjdX2LKoSPSeFqhoARYmYpYGktomZ6tuHJmkR7ShGUchbMHZJzNk grl0lcRNEXEnHRt/Ej8NLmQs/5gR9SDDIhh32docf6UqgpetNjoJtxB2t7Ond97d HoGHdrNuJADRbRfn8At3hUaXuSm2upeq5s+B77I2jCIz1IDP8PTLTcF5UxRwMeH/ 7R2wttsXBx8F4nJW0CmIXAgOgYkLYBAu5KDtFW0nVAGxdrCNTWcpSZWqmTS0P3a7 F6SZAlNWj5XuoQPO+qSFb9nwXLQBXTPzCzVvvaoJiaY0IdsBr3DaosDw4xQjGPNw eofe4NcXlQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:12:50 2026 by rpki-client