$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: q+cR6QUt+iawIXmv34UOxXzWEySpbG1NSUnnYSLIk+A= Subject key identifier: B3:68:92:21:F9:BA:CB:F5:72:91:FA:D4:DE:6F:D1:3E:42:17:C1:37 Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 0745155747639CC4C5A824DC56E833699361405E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:10 +0000 Manifest this update: Fri 28 Aug 2026 06:43:10 +0000 Manifest next update: Mon 31 Aug 2026 16:51:10 +0000 Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: uS8Yhzb0WY9YsUPsuHwdDvkO6FdjJiOtXqClzcMFkVs=) 2: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) 3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 4: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:45:15:57:47:63:9c:c4:c5:a8:24:dc:56:e8:33:69:93:61:40:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: Aug 28 06:43:10 2026 GMT Not After : Aug 31 16:51:10 2026 GMT Subject: CN=B3689221F9BACBF57291FAD4DE6FD13E4217C137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:30:91:f3:62:0f:d8:f5:96:29:ce:45:8a: ec:e4:10:c5:ce:c6:c4:7b:0b:f8:83:2a:11:41:16: 99:a6:63:06:f1:f6:df:34:5b:32:79:25:42:76:58: 9a:0d:d9:5e:d8:35:33:e9:f0:f0:ab:03:db:b9:b5: af:96:0b:91:7c:e9:f1:a9:34:63:92:73:1e:6b:1a: 65:79:ac:de:d9:ab:60:f8:71:1b:6f:ca:4d:9c:ec: 56:08:2d:cd:9e:38:f2:b2:7b:e0:1a:3a:86:c7:89: 2f:1f:1b:6e:ae:11:46:87:b8:e7:97:d3:08:73:cb: fa:37:3f:85:61:03:66:21:10:da:8e:8e:3d:91:a6: 54:a2:57:3f:98:52:59:74:c1:be:4e:30:14:1a:e8: d3:f5:52:ab:8c:9f:76:29:ec:b6:f5:42:e6:73:6a: 80:b3:44:8f:0c:0a:aa:6c:57:e7:af:cb:4a:9e:25: 3f:f0:db:13:04:55:61:7d:6a:80:41:2b:eb:bc:27: af:f7:b3:35:43:39:b3:35:1b:a3:50:b2:1c:8b:18: b4:bf:6c:aa:4f:4a:a0:55:3d:a1:46:1a:77:00:fe: f6:57:57:05:f6:fb:a1:ba:2b:c3:58:19:a9:25:51: 18:0d:3d:05:83:8b:b2:58:16:ad:a2:fa:e4:43:bb: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:68:92:21:F9:BA:CB:F5:72:91:FA:D4:DE:6F:D1:3E:42:17:C1:37 X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ea:01:32:ff:d5:26:83:b4:bf:f4:70:fd:08:10:ed:e8:bc: d4:f0:d0:3e:fa:25:00:c3:a9:da:32:55:0e:bf:ee:a2:ca:83: 1a:d0:0c:27:73:d9:6c:ef:d4:f3:f9:98:f1:e1:97:68:f2:0f: 62:97:94:29:d6:39:2b:aa:f7:65:fd:2a:e1:4c:70:02:f8:61: b9:0d:86:54:af:ea:7c:23:c6:1b:22:89:b7:df:f6:38:6c:f1: 66:49:4e:a1:8f:72:86:4d:71:6f:92:7f:c6:7b:6e:86:9e:7f: 88:36:79:27:fb:d5:b4:e5:e6:04:9a:cb:dd:0d:87:d7:e6:8b: 56:74:e2:fc:90:66:40:2b:bb:1a:99:17:36:7e:0c:3e:35:3e: 7b:98:7a:f6:e0:12:da:5d:f2:82:35:53:57:47:e7:b5:04:c2: 45:50:b2:96:54:b6:2f:6e:b3:bc:ea:ee:b2:00:dc:b3:d8:36: ba:c2:41:6d:2e:04:de:98:a0:a8:8b:13:b1:41:45:37:bf:f2: 11:e8:a1:b9:b7:c4:ff:81:f8:2a:04:39:44:78:66:ba:58:eb: 5f:1d:73:6d:16:73:13:29:7e:df:e3:d6:60:9e:60:9a:ca:90: dd:ec:ae:46:b1:2c:e5:db:0a:e8:aa:59:c3:02:ae:b8:41:40: 4d:dd:33:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB0UVV0djnMTFqCTcVugzaZNhQF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjA4MjgwNjQzMTBaFw0yNjA4MzExNjUxMTBaMDMxMTAvBgNV BAMTKEIzNjg5MjIxRjlCQUNCRjU3MjkxRkFENERFNkZEMTNFNDIxN0MxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQzCR82IP2PWWKc5FiuzkEMXO xsR7C/iDKhFBFpmmYwbx9t80WzJ5JUJ2WJoN2V7YNTPp8PCrA9u5ta+WC5F86fGp NGOScx5rGmV5rN7Zq2D4cRtvyk2c7FYILc2eOPKye+AaOobHiS8fG26uEUaHuOeX 0whzy/o3P4VhA2YhENqOjj2RplSiVz+YUll0wb5OMBQa6NP1UquMn3Yp7Lb1QuZz aoCzRI8MCqpsV+evy0qeJT/w2xMEVWF9aoBBK+u8J6/3szVDObM1G6NQshyLGLS/ bKpPSqBVPaFGGncA/vZXVwX2+6G6K8NYGaklURgNPQWDi7JYFq2i+uRDu4r/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs2iSIfm6y/VykfrU3m/RPkIXwTcwHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+oBMv/VJoO0 v/Rw/QgQ7ei81PDQPvolAMOp2jJVDr/uosqDGtAMJ3PZbO/U8/mY8eGXaPIPYpeU KdY5K6r3Zf0q4UxwAvhhuQ2GVK/qfCPGGyKJt9/2OGzxZklOoY9yhk1xb5J/xntu hp5/iDZ5J/vVtOXmBJrL3Q2H1+aLVnTi/JBmQCu7GpkXNn4MPjU+e5h69uAS2l3y gjVTV0fntQTCRVCyllS2L26zvOrusgDcs9g2usJBbS4E3pigqIsTsUFFN7/yEeih ubfE/4H4KgQ5RHhmuljrXx1zbRZzEyl+3+PWYJ5gmsqQ3eyuRrEs5dsK6KpZwwKu uEFATd0zaQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:30 2026 by rpki-client