$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: msavSxSlcEj6L7PNo5jdIW1V9uLUfiGEndLNhiresek= Subject key identifier: 14:19:4D:44:FC:58:C4:35:8D:B2:84:FD:34:15:10:65:F4:63:CE:35 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 4C04A1730DC16FDC9A80D461106A8B5322099DD3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:24 +0000 Manifest this update: Fri 28 Aug 2026 06:43:24 +0000 Manifest next update: Mon 31 Aug 2026 12:17:24 +0000 Files and hashes: 1: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 2: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 3: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 4: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: WhlLbDCN2fCxuV/xy5TddA1B3b5ceWKL00jcrodeNcA=) 5: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 6: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:04:a1:73:0d:c1:6f:dc:9a:80:d4:61:10:6a:8b:53:22:09:9d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Aug 28 06:43:24 2026 GMT Not After : Aug 31 12:17:24 2026 GMT Subject: CN=14194D44FC58C4358DB284FD34151065F463CE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:5d:05:41:52:48:46:32:d7:19:c1:23:44: df:3d:0f:6e:6c:bf:75:d1:9d:a8:31:56:1a:d6:d5: c5:4b:2a:9f:4f:56:68:44:01:f4:29:05:53:69:fe: e5:fc:1c:7d:8d:3c:5c:db:e3:34:64:b0:b1:84:15: 85:30:35:1b:8c:a3:a2:93:e1:90:47:e4:50:10:b6: c5:2b:c5:58:c8:5a:52:fc:13:b3:33:a3:b4:25:f9: 22:31:c5:ea:e1:9e:1c:f9:1a:87:1a:84:9a:7b:9e: 14:2a:7b:c3:22:d8:33:b9:4d:c2:16:ce:e7:79:d6: c3:86:1e:04:09:d6:7d:2d:ee:5e:2f:d5:07:48:77: cb:81:07:78:20:6a:e0:9a:7f:29:50:74:08:b8:6e: d2:7b:9f:5c:f8:10:f3:0b:6c:14:2c:2c:7c:26:c0: fc:9c:89:a8:9f:72:ef:d1:65:d0:82:c7:f5:ea:3e: 8a:c9:f6:dc:54:53:e1:2c:4f:92:6b:8b:19:c2:77: d0:45:ae:27:ea:f9:4d:ff:7f:98:61:40:40:9d:0c: 57:5d:3b:99:37:eb:3f:f5:53:b1:56:c4:f1:e2:e1: e0:38:4e:1b:8b:9d:60:d5:05:8b:05:75:f7:bd:a2: f8:8b:38:04:30:5f:19:ba:81:f9:fb:3e:87:fb:85: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:4D:44:FC:58:C4:35:8D:B2:84:FD:34:15:10:65:F4:63:CE:35 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:88:ff:26:d2:f8:f6:b9:96:f6:36:c9:5d:a1:67:b6:f0:27: 74:7e:59:de:8f:51:6d:82:d6:bd:e9:fb:3e:b1:21:d3:32:70: b3:5e:c4:7e:af:d4:88:06:7f:3f:d7:f5:c4:f5:c2:94:5d:10: 7c:54:8b:f6:32:e3:a5:0e:3b:5d:a4:93:21:2f:a6:15:2d:b6: 37:2d:27:2c:6b:7b:47:a6:5f:2c:af:46:62:3e:96:cc:2e:00: 8f:2a:6f:7b:e5:64:9c:4d:cb:e7:a0:16:69:7e:cb:12:ce:eb: 6a:34:67:0c:5f:1d:80:30:e6:b8:01:97:e9:07:cd:05:b8:1b: 44:e7:fe:9c:6c:0f:f1:9e:6f:80:48:94:3f:a5:ea:33:12:d3: 8a:a5:28:cb:4a:a9:25:89:96:38:f1:e0:8d:50:08:2d:16:5b: 65:51:59:69:1f:70:fe:10:ad:8d:47:7e:d5:3c:b2:20:84:f0: b9:34:19:89:43:ce:12:76:01:7c:8b:c9:ff:7e:e3:74:dd:14: e8:a0:bc:0f:3f:29:1f:e1:3e:32:5f:d1:df:57:27:a7:83:ad: d7:50:38:c2:46:16:6b:92:3c:ef:be:32:a2:c5:cd:1e:64:12: b0:77:30:c4:96:7f:be:6e:f6:33:74:21:89:9f:4e:f1:2c:eb: 58:39:f7:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTAShcw3Bb9yagNRhEGqLUyIJndMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA4MjgwNjQzMjRaFw0yNjA4MzExMjE3MjRaMDMxMTAvBgNV BAMTKDE0MTk0RDQ0RkM1OEM0MzU4REIyODRGRDM0MTUxMDY1RjQ2M0NFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRR10FQVJIRjLXGcEjRN89D25s v3XRnagxVhrW1cVLKp9PVmhEAfQpBVNp/uX8HH2NPFzb4zRksLGEFYUwNRuMo6KT 4ZBH5FAQtsUrxVjIWlL8E7Mzo7Ql+SIxxerhnhz5GocahJp7nhQqe8Mi2DO5TcIW zud51sOGHgQJ1n0t7l4v1QdId8uBB3ggauCafylQdAi4btJ7n1z4EPMLbBQsLHwm wPyciaifcu/RZdCCx/XqPorJ9txUU+EsT5JrixnCd9BFrifq+U3/f5hhQECdDFdd O5k36z/1U7FWxPHi4eA4ThuLnWDVBYsFdfe9oviLOAQwXxm6gfn7Pof7hXe9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFBlNRPxYxDWNsoT9NBUQZfRjzjUwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYj/JtL49rmW 9jbJXaFntvAndH5Z3o9RbYLWven7PrEh0zJws17Efq/UiAZ/P9f1xPXClF0QfFSL 9jLjpQ47XaSTIS+mFS22Ny0nLGt7R6ZfLK9GYj6WzC4Ajypve+VknE3L56AWaX7L Es7rajRnDF8dgDDmuAGX6QfNBbgbROf+nGwP8Z5vgEiUP6XqMxLTiqUoy0qpJYmW OPHgjVAILRZbZVFZaR9w/hCtjUd+1TyyIITwuTQZiUPOEnYBfIvJ/37jdN0U6KC8 Dz8pH+E+Ml/R31cnp4Ot11A4wkYWa5I8774yosXNHmQSsHcwxJZ/vm72M3QhiZ9O 8SzrWDn3lQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:38 2026 by rpki-client