$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: Hqv7jd6N8HfWYgAFPEJxGlSfxaTGqAfR4ceGNOREnac= Subject key identifier: 10:A3:52:28:5E:54:FB:F8:08:E6:6B:4B:53:2C:C5:0E:4B:63:07:8D Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 2A37CBCCB156C7EBBCEC34B78ABB22A0A4252F8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:47:56 +0000 Manifest this update: Fri 28 Aug 2026 06:42:56 +0000 Manifest next update: Mon 31 Aug 2026 11:07:56 +0000 Files and hashes: 1: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: IUPrtYvrpQ8m19R82fzE3fY3qySJOEeEBp1Xup0RqHI=) 2: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 3: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 4: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 5: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) 6: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 7: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:37:cb:cc:b1:56:c7:eb:bc:ec:34:b7:8a:bb:22:a0:a4:25:2f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Aug 28 06:42:56 2026 GMT Not After : Aug 31 11:07:56 2026 GMT Subject: CN=10A352285E54FBF808E66B4B532CC50E4B63078D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e4:17:05:23:79:bc:1a:52:18:e5:60:90:3a: aa:6b:61:07:f9:c7:6f:88:47:c1:56:c9:db:a0:bd: c7:a9:30:32:4f:ad:a1:b4:b4:17:66:67:ad:ee:b3: 31:1e:ab:96:47:06:db:b3:96:4c:2c:c8:f3:77:ae: 23:ac:cc:ee:9f:4f:7f:74:f6:9b:a5:9f:2b:e4:92: b5:9e:a3:d1:e4:c3:5d:ba:c2:42:51:28:c0:af:25: d5:70:07:85:ca:2d:f1:64:50:4a:ee:a1:fc:3f:c8: 98:45:0d:fc:73:c3:23:62:93:fb:f5:67:95:cd:20: f5:23:17:c9:2b:ae:a8:04:3c:ba:06:c5:6d:c0:bf: d2:90:9d:74:ca:b1:6b:65:cf:fd:aa:49:a5:92:97: 1b:d6:95:11:72:32:91:22:7c:d1:7d:aa:46:1f:a7: 5f:27:5e:29:d9:a3:99:6a:22:e3:5c:10:4c:98:51: 7c:65:ce:13:ae:1c:ca:ab:19:bb:39:87:fd:21:bd: 40:cd:6a:ba:ce:89:56:6f:1a:a5:fb:de:b1:26:13: 12:de:8d:7a:22:f7:fd:9e:a2:d6:a2:d5:95:fa:59: ee:eb:62:69:57:64:3a:b4:e6:4e:bd:8e:83:50:60: d2:c9:09:9a:ef:1b:17:c4:f3:de:f0:84:69:2d:f8: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:52:28:5E:54:FB:F8:08:E6:6B:4B:53:2C:C5:0E:4B:63:07:8D X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:77:8a:96:0f:77:38:72:05:f9:81:d6:ed:2c:99:42:6c:b3: 62:70:12:e5:3a:ca:cb:5c:e1:0e:30:13:2a:2d:6e:62:28:7b: 1a:09:64:18:a5:a2:82:1a:f6:4c:92:30:8d:0a:6a:13:a1:8c: 5b:ce:4c:f7:8b:4c:03:dc:82:9c:15:f0:6b:35:ab:82:5e:2f: a0:9d:1d:4d:9e:0a:61:0d:21:f3:5a:dd:c6:2c:fc:26:ed:da: 3c:f4:65:51:dd:12:79:56:00:df:50:71:80:4f:73:34:34:db: 72:19:4f:4d:2d:ac:f5:bc:b2:80:fd:41:d0:48:a3:79:0f:4e: 93:df:5a:d8:9b:bb:46:ec:be:cc:7e:bd:71:6e:c4:b1:73:cc: a0:b0:0f:11:e4:57:97:d0:fa:dd:34:c7:c2:40:a6:16:52:fa: cc:dc:b0:8f:e0:b4:01:70:1d:9e:ed:dd:26:00:82:bb:c1:60: d1:b9:01:59:6e:09:23:b3:70:b3:a0:51:ac:af:78:08:84:f3: cd:ee:35:a7:83:15:e5:49:2d:ca:6b:d4:d3:9e:61:47:30:a0: ea:dd:c0:8a:ba:b3:34:8f:e6:23:9d:33:8d:7c:61:9f:da:91: 0c:79:d5:bf:6a:1d:96:76:b8:f8:79:7a:a5:7a:c5:11:f3:1d: 28:09:f8:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKjfLzLFWx+u87DS3irsioKQlL40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjA4MjgwNjQyNTZaFw0yNjA4MzExMTA3NTZaMDMxMTAvBgNV BAMTKDEwQTM1MjI4NUU1NEZCRjgwOEU2NkI0QjUzMkNDNTBFNEI2MzA3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5BcFI3m8GlIY5WCQOqprYQf5 x2+IR8FWydugvcepMDJPraG0tBdmZ63uszEeq5ZHBtuzlkwsyPN3riOszO6fT390 9pulnyvkkrWeo9Hkw126wkJRKMCvJdVwB4XKLfFkUEruofw/yJhFDfxzwyNik/v1 Z5XNIPUjF8krrqgEPLoGxW3Av9KQnXTKsWtlz/2qSaWSlxvWlRFyMpEifNF9qkYf p18nXinZo5lqIuNcEEyYUXxlzhOuHMqrGbs5h/0hvUDNarrOiVZvGqX73rEmExLe jXoi9/2eotai1ZX6We7rYmlXZDq05k69joNQYNLJCZrvGxfE897whGkt+LiJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEKNSKF5U+/gI5mtLUyzFDktjB40wHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEneKlg93OHIF +YHW7SyZQmyzYnAS5TrKy1zhDjATKi1uYih7GglkGKWighr2TJIwjQpqE6GMW85M 94tMA9yCnBXwazWrgl4voJ0dTZ4KYQ0h81rdxiz8Ju3aPPRlUd0SeVYA31BxgE9z NDTbchlPTS2s9byygP1B0EijeQ9Ok99a2Ju7Ruy+zH69cW7EsXPMoLAPEeRXl9D6 3TTHwkCmFlL6zNywj+C0AXAdnu3dJgCCu8Fg0bkBWW4JI7Nws6BRrK94CITzze41 p4MV5UktymvU055hRzCg6t3AirqzNI/mI50zjXxhn9qRDHnVv2odlna4+Hl6pXrF EfMdKAn4JQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:55 2026 by rpki-client