$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: Hsd8/dkljrY93hPqxYItynaWoaHREaP79agW8MVHfiA= Subject key identifier: 19:F6:8E:8C:D2:80:64:2C:FA:1D:01:E6:08:77:D2:0A:2B:B9:D8:5E Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 612504D3D4AF3DA674E7C4CB1969626EEDE94CF9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:47:56 +0000 Manifest this update: Fri 28 Aug 2026 06:42:56 +0000 Manifest next update: Mon 31 Aug 2026 09:12:56 +0000 Files and hashes: 1: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 2: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: KtJAbbVJzOLo74fJDX6PcRu0KnbCh8rc0sUXZkAYEXM=) 3: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) 4: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:04:d3:d4:af:3d:a6:74:e7:c4:cb:19:69:62:6e:ed:e9:4c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Aug 28 06:42:56 2026 GMT Not After : Aug 31 09:12:56 2026 GMT Subject: CN=19F68E8CD280642CFA1D01E60877D20A2BB9D85E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:54:f7:61:14:f3:b8:0a:6f:35:19:1d:2a:85: f2:ee:88:a8:a3:37:e4:cd:6a:bb:f1:5f:8c:dc:3d: 37:29:ca:81:e1:03:97:f5:6e:cf:10:17:97:50:fc: 1c:69:49:c1:5a:f2:b9:e8:68:18:fd:85:ba:2b:a9: a0:4f:1a:49:f1:5c:90:1b:5c:34:43:9d:1c:c1:e8: a6:b2:66:1d:b2:60:dc:cc:1e:cb:8f:05:f2:6f:5e: 75:9a:6e:55:0f:4d:74:25:6e:ae:0b:4c:b6:e8:b7: 4e:96:59:53:6c:f1:9e:9b:e0:78:a1:d6:0b:b5:ab: b7:e7:7b:d1:ae:3e:aa:f4:83:f0:7b:51:81:36:ed: 80:e5:31:51:c2:6b:c5:c4:2a:bd:ba:82:fc:de:7b: aa:8e:69:2c:95:9b:cd:fb:af:7d:4f:01:db:1d:65: 1f:d8:c5:cd:1f:d6:76:5e:92:43:48:18:10:94:4a: de:2c:74:21:2f:ff:6e:52:82:a4:73:db:96:f6:2a: f2:11:10:ab:a6:62:91:14:56:65:62:4e:41:90:4d: 4f:9d:2f:9f:ae:e3:cd:75:c4:84:06:c8:89:a8:0f: 83:ac:92:6d:89:7f:23:88:1c:1e:43:2b:82:6d:ac: 52:ff:1a:33:bc:87:b5:3d:a0:c9:1f:65:e7:9d:a6: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F6:8E:8C:D2:80:64:2C:FA:1D:01:E6:08:77:D2:0A:2B:B9:D8:5E X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:29:ee:77:0f:f6:06:45:f1:e3:d7:f4:19:36:9a:83:dd:69: b0:1d:6f:52:34:7d:b7:18:c7:69:5e:ca:e7:06:7a:62:6d:09: 2c:3e:f7:97:f1:70:75:26:f3:64:fb:df:18:e6:93:07:8c:c7: a6:50:8e:51:1c:d2:11:c0:e3:32:44:6d:2b:c1:ee:2e:4d:1f: 22:5f:eb:6a:7c:d5:16:b4:65:ea:6b:6f:2f:49:64:4c:10:12: d3:e8:33:36:9b:cd:9a:66:2a:b6:86:19:91:67:eb:fd:67:69: 01:8a:57:6c:79:92:c2:09:b7:eb:f3:a3:75:ac:3a:ac:e1:d5: ae:1e:93:fd:93:4b:2c:3e:c4:df:2a:2c:ca:e0:20:5d:f5:a4: e0:11:36:65:ac:73:44:45:e6:a4:91:c0:d7:6f:d9:6c:e8:74: 70:f6:51:72:6b:2e:2c:0f:26:11:7c:00:8b:1b:b6:ac:23:c5: 79:04:3a:90:68:cd:de:00:08:c9:27:59:76:1b:41:ea:66:ae: 71:e0:9c:c6:6d:bf:ff:11:d2:46:84:72:86:07:70:b6:20:c5: 2e:64:25:05:c7:15:67:85:60:bb:11:9a:ce:51:cf:5b:d6:4a: 8a:d1:47:83:65:cf:94:8a:9d:fd:84:19:f0:45:72:1a:f1:99: 32:88:12:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYSUE09SvPaZ058TLGWlibu3pTPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjA4MjgwNjQyNTZaFw0yNjA4MzEwOTEyNTZaMDMxMTAvBgNV BAMTKDE5RjY4RThDRDI4MDY0MkNGQTFEMDFFNjA4NzdEMjBBMkJCOUQ4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVPdhFPO4Cm81GR0qhfLuiKij N+TNarvxX4zcPTcpyoHhA5f1bs8QF5dQ/BxpScFa8rnoaBj9hborqaBPGknxXJAb XDRDnRzB6KayZh2yYNzMHsuPBfJvXnWablUPTXQlbq4LTLbot06WWVNs8Z6b4Hih 1gu1q7fne9GuPqr0g/B7UYE27YDlMVHCa8XEKr26gvzee6qOaSyVm837r31PAdsd ZR/Yxc0f1nZekkNIGBCUSt4sdCEv/25SgqRz25b2KvIREKumYpEUVmViTkGQTU+d L5+u4811xIQGyImoD4Oskm2JfyOIHB5DK4JtrFL/GjO8h7U9oMkfZeedpvBNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGfaOjNKAZCz6HQHmCHfSCiu52F4wHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCnudw/2BkXx 49f0GTaag91psB1vUjR9txjHaV7K5wZ6Ym0JLD73l/FwdSbzZPvfGOaTB4zHplCO URzSEcDjMkRtK8HuLk0fIl/ranzVFrRl6mtvL0lkTBAS0+gzNpvNmmYqtoYZkWfr /WdpAYpXbHmSwgm36/Ojdaw6rOHVrh6T/ZNLLD7E3yosyuAgXfWk4BE2ZaxzREXm pJHA12/ZbOh0cPZRcmsuLA8mEXwAixu2rCPFeQQ6kGjN3gAIySdZdhtB6mauceCc xm2//xHSRoRyhgdwtiDFLmQlBccVZ4VguxGazlHPW9ZKitFHg2XPlIqd/YQZ8EVy GvGZMogSMQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:23 2026 by rpki-client