$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: vLN7sJZ60dAWYXXKOBGdEwgBZsCZr/c+MHdz9c957h8= Subject key identifier: A2:4A:5A:67:F7:B8:2C:4B:D3:10:DF:73:A2:F5:3F:17:C2:80:53:33 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 29E969CCE419F01249D04F2FBAFEEF3C458EF67C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:47:49 +0000 Manifest this update: Fri 28 Aug 2026 06:42:49 +0000 Manifest next update: Mon 31 Aug 2026 08:36:49 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: v+5ZMIciq7irJ2mv2oP2MvCdhw2vl7IYdTPRIACZTuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e9:69:cc:e4:19:f0:12:49:d0:4f:2f:ba:fe:ef:3c:45:8e:f6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Aug 28 06:42:49 2026 GMT Not After : Aug 31 08:36:49 2026 GMT Subject: CN=A24A5A67F7B82C4BD310DF73A2F53F17C2805333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:ce:18:9c:db:59:66:64:a7:9a:c0:7c:7d: e8:0b:58:8c:18:39:e3:39:a9:45:14:01:9c:c2:06: d1:39:19:b0:85:47:fa:0b:4b:41:f2:d9:be:fe:de: e6:99:6b:5e:45:52:ba:96:29:d8:cb:ee:32:bc:5c: 33:b6:0a:64:02:9b:1e:4a:26:d5:7b:75:8f:a8:20: be:c8:d6:42:03:54:f5:6c:42:af:c8:ae:c5:30:6e: c0:5b:eb:e6:d6:69:26:92:e4:c9:6c:1c:e0:4a:2e: 55:0d:d1:6e:86:c4:b9:c4:ef:d4:d5:e4:48:c3:83: de:7e:ba:8f:05:f9:3d:4e:05:bc:03:9f:87:e1:1c: 94:d2:e1:ee:29:77:37:ce:49:89:a4:4f:46:2b:2c: 8d:a8:9d:09:46:0c:71:1b:70:8d:1c:f9:e1:d2:a2: d8:f3:8f:b4:48:9d:2c:09:66:2e:7c:d1:d2:ce:86: 68:69:ec:37:bb:69:9d:96:8f:63:e9:df:c5:d1:cb: f4:57:c7:46:64:2e:3b:a6:a1:a1:dd:89:d1:04:1d: c9:64:30:83:bd:5b:e8:15:ed:db:00:81:63:0f:05: ed:dd:62:b3:5b:c0:57:99:27:36:be:30:c1:0c:bc: f1:cc:55:b0:86:29:5b:95:09:82:10:76:8a:9b:07: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:5A:67:F7:B8:2C:4B:D3:10:DF:73:A2:F5:3F:17:C2:80:53:33 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6e:9c:52:bc:3b:87:8a:bc:7f:24:0d:08:a0:ad:76:55:eb: b4:86:77:02:a1:dd:5b:23:b2:78:ac:ca:66:26:1b:09:28:0d: 9d:39:13:db:6e:5e:d8:45:93:38:ab:16:45:6e:45:a3:fe:36: 43:32:fb:38:2b:3b:48:3b:6b:50:43:cc:c4:0b:6d:0c:51:fa: 61:45:09:b6:da:70:31:1b:b8:e7:2d:e6:3b:0e:4a:bb:ca:6f: c1:a3:51:c4:a7:f7:fa:45:31:c7:90:03:7c:b8:ed:4a:f5:d7: 31:f9:89:c1:d7:b8:8e:b5:20:56:85:b5:e5:57:bf:07:57:6c: c2:b5:49:75:9f:04:ce:c0:96:31:b8:bc:53:ad:ec:85:db:ab: fe:9a:8d:d3:d9:f7:ea:92:2a:38:31:e8:4a:07:79:72:88:64: 7b:61:9d:66:98:da:2d:b8:d5:4e:95:65:d7:cc:53:95:3a:bb: 3e:87:49:2c:7e:da:e5:31:27:fa:38:40:ef:8b:3d:ea:fc:ee: 95:45:10:b6:dc:70:0f:b5:36:ec:03:20:6d:0c:eb:20:ce:d5: 67:bd:49:14:91:3e:6e:32:3d:db:51:05:60:e1:ab:95:0b:4f: cf:93:cb:30:9c:98:33:e5:41:3a:46:55:e9:95:89:c5:97:a0: 31:43:65:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKelpzOQZ8BJJ0E8vuv7vPEWO9nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA4MjgwNjQyNDlaFw0yNjA4MzEwODM2NDlaMDMxMTAvBgNV BAMTKEEyNEE1QTY3RjdCODJDNEJEMzEwREY3M0EyRjUzRjE3QzI4MDUzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd684YnNtZZmSnmsB8fegLWIwY OeM5qUUUAZzCBtE5GbCFR/oLS0Hy2b7+3uaZa15FUrqWKdjL7jK8XDO2CmQCmx5K JtV7dY+oIL7I1kIDVPVsQq/IrsUwbsBb6+bWaSaS5MlsHOBKLlUN0W6GxLnE79TV 5EjDg95+uo8F+T1OBbwDn4fhHJTS4e4pdzfOSYmkT0YrLI2onQlGDHEbcI0c+eHS otjzj7RInSwJZi580dLOhmhp7De7aZ2Wj2Pp38XRy/RXx0ZkLjumoaHdidEEHclk MIO9W+gV7dsAgWMPBe3dYrNbwFeZJza+MMEMvPHMVbCGKVuVCYIQdoqbB00jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUokpaZ/e4LEvTEN9zovU/F8KAUzMwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD26cUrw7h4q8 fyQNCKCtdlXrtIZ3AqHdWyOyeKzKZiYbCSgNnTkT225e2EWTOKsWRW5Fo/42QzL7 OCs7SDtrUEPMxAttDFH6YUUJttpwMRu45y3mOw5Ku8pvwaNRxKf3+kUxx5ADfLjt SvXXMfmJwde4jrUgVoW15Ve/B1dswrVJdZ8EzsCWMbi8U63shdur/pqN09n36pIq ODHoSgd5cohke2GdZpjaLbjVTpVl18xTlTq7PodJLH7a5TEn+jhA74s96vzulUUQ ttxwD7U27AMgbQzrIM7VZ71JFJE+bjI921EFYOGrlQtPz5PLMJyYM+VBOkZV6ZWJ xZegMUNlmA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:56 2026 by rpki-client