$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: 260KZrCtXjmiooATmyq9hEY3N8dh3/LdpxyqDsygpJI= Subject key identifier: 5D:76:58:DD:66:68:FB:F5:7A:50:FD:AB:9C:20:C6:94:AB:B9:31:BE Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 06E87CA6FF9E402C3F871E6E2EB8F4B5561B9F2F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0134 Signing time: Tue 08 Sep 2026 16:39:30 +0000 Manifest this update: Tue 08 Sep 2026 16:34:30 +0000 Manifest next update: Fri 11 Sep 2026 22:09:30 +0000 Files and hashes: 1: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 2: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 3: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 4: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 5: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) 6: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: dzsRZOM/hnuBmazgVAP9qW1sLYZJzzaKQBz8pNEcX0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e8:7c:a6:ff:9e:40:2c:3f:87:1e:6e:2e:b8:f4:b5:56:1b:9f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Sep 8 16:34:30 2026 GMT Not After : Sep 11 22:09:30 2026 GMT Subject: CN=5D7658DD6668FBF57A50FDAB9C20C694ABB931BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:55:68:83:86:54:64:c5:1f:7f:0f:6a:09: 8e:04:d3:cd:58:67:44:97:e3:70:a4:ec:e2:97:fe: 8d:b9:41:80:0d:9f:8f:11:ec:62:91:be:99:44:d4: 65:b5:fb:12:6c:26:ac:38:3a:3e:a1:ff:54:9d:d2: 6b:21:21:5c:36:f1:97:11:15:39:61:71:49:5b:00: 2a:04:2a:9d:f2:ac:08:96:f9:a5:8a:df:e8:8a:a7: 88:36:3b:c8:d9:cd:6c:f2:25:20:28:59:c9:f0:59: a6:20:0c:8f:de:b1:ba:2e:d9:e5:3e:0f:ff:81:f9: 42:51:7b:a1:16:43:46:5c:d4:be:97:7d:3b:62:19: f3:14:f6:5e:32:a2:8c:c7:da:55:62:c9:4b:6b:f5: be:f6:9f:04:5d:56:da:22:69:eb:02:ec:5d:fb:d2: 64:da:d9:c9:ec:83:ec:67:17:75:11:e5:f5:8f:ec: 11:cf:bb:b7:78:23:0c:55:b3:98:35:bb:54:9f:ee: f5:98:45:9a:3c:0e:11:b2:d9:cf:fd:ff:db:75:f0: 37:8f:de:47:61:1a:4e:10:1b:49:72:df:8f:87:81: 90:bd:84:31:9a:4e:62:00:bd:64:e9:d8:56:cd:4a: 78:d5:3a:4c:cc:a9:cd:8f:57:e6:a4:9d:d8:c3:c5: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:58:DD:66:68:FB:F5:7A:50:FD:AB:9C:20:C6:94:AB:B9:31:BE X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:23:77:f2:bc:23:6d:39:f5:33:93:d4:4d:bf:44:aa:bf: 0f:90:1e:03:6b:cc:00:3f:d8:b7:0d:a7:18:4f:11:51:7b:85: d2:4f:e3:3c:bb:b2:d3:56:1a:15:67:a8:08:13:a7:1b:4e:e9: 81:1d:fd:ba:f4:b2:41:79:fb:8a:e3:07:2b:73:ed:3e:d6:da: c3:3e:f9:82:d6:84:83:bd:a5:7c:34:93:68:db:18:52:64:91: ff:81:89:ca:75:0a:5f:05:49:29:37:09:b7:be:a9:51:41:a9: 0a:eb:d4:d0:35:ba:2c:3b:11:12:f2:4d:e5:fd:13:a0:70:f3: 02:12:7e:95:08:c5:73:73:9b:98:24:fc:3c:89:3b:b5:c8:c0: 93:e3:01:5f:7f:38:da:97:b0:c5:72:8d:09:18:45:42:e6:e2: 3b:8b:18:26:3c:82:2c:c3:2c:32:b1:e2:ab:ee:a2:3a:51:a1: 80:d2:b6:fa:2d:db:41:58:2e:64:5b:df:ba:2e:8e:09:aa:74: 7b:ad:22:68:4b:bc:3e:0d:fe:ee:e6:ac:50:c3:d9:09:b5:2f: 5c:72:bb:dc:f6:14:7c:b8:cb:df:2f:4e:a5:4f:d3:65:ca:60: b4:e4:69:8a:53:63:9c:c9:4c:2f:8f:b1:d2:44:26:1f:61:94: 82:a6:46:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBuh8pv+eQCw/hx5uLrj0tVYbny8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA5MDgxNjM0MzBaFw0yNjA5MTEyMjA5MzBaMDMxMTAvBgNV BAMTKDVENzY1OERENjY2OEZCRjU3QTUwRkRBQjlDMjBDNjk0QUJCOTMxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYVVog4ZUZMUffw9qCY4E081Y Z0SX43Ck7OKX/o25QYANn48R7GKRvplE1GW1+xJsJqw4Oj6h/1Sd0mshIVw28ZcR FTlhcUlbACoEKp3yrAiW+aWK3+iKp4g2O8jZzWzyJSAoWcnwWaYgDI/esbou2eU+ D/+B+UJRe6EWQ0Zc1L6XfTtiGfMU9l4yoozH2lViyUtr9b72nwRdVtoiaesC7F37 0mTa2cnsg+xnF3UR5fWP7BHPu7d4IwxVs5g1u1Sf7vWYRZo8DhGy2c/9/9t18DeP 3kdhGk4QG0ly34+HgZC9hDGaTmIAvWTp2FbNSnjVOkzMqc2PV+akndjDxeI1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXXZY3WZo+/V6UP2rnCDGlKu5Mb4wHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfEjd/K8I205 9TOT1E2/RKq/D5AeA2vMAD/Ytw2nGE8RUXuF0k/jPLuy01YaFWeoCBOnG07pgR39 uvSyQXn7iuMHK3PtPtbawz75gtaEg72lfDSTaNsYUmSR/4GJynUKXwVJKTcJt76p UUGpCuvU0DW6LDsREvJN5f0ToHDzAhJ+lQjFc3ObmCT8PIk7tcjAk+MBX3842pew xXKNCRhFQubiO4sYJjyCLMMsMrHiq+6iOlGhgNK2+i3bQVguZFvfui6OCap0e60i aEu8Pg3+7uasUMPZCbUvXHK73PYUfLjL3y9OpU/TZcpgtORpilNjnMlML4+x0kQm H2GUgqZGlQ== -----END CERTIFICATE-----Generated at Thu Sep 10 20:41:17 2026 by rpki-client