$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: 2E9wivAYKFGbc9bcZ+Zmh1E3KSywC1f8lEPfv3Zfirg= Subject key identifier: B2:EC:1F:17:1B:BB:D2:9F:CF:68:B5:36:12:33:32:05:3E:18:8A:02 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 4AFDAF403A1CFB6476B04C8BE6A1FDAECDF8B3B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:11 +0000 Manifest this update: Fri 28 Aug 2026 06:43:11 +0000 Manifest next update: Mon 31 Aug 2026 08:05:11 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: WcsIum9XdCa1OOwurLpcxjVbzpcuTyni/1vPYffQ7kQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fd:af:40:3a:1c:fb:64:76:b0:4c:8b:e6:a1:fd:ae:cd:f8:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Aug 28 06:43:11 2026 GMT Not After : Aug 31 08:05:11 2026 GMT Subject: CN=B2EC1F171BBBD29FCF68B536123332053E188A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:b6:dc:74:c7:95:75:da:16:39:6b:ab:ac: f2:74:44:a8:42:82:1c:19:f2:a2:03:da:df:ed:cb: 2f:85:5a:84:0b:d8:4f:42:fc:00:5c:a9:58:69:64: 92:d2:5e:1b:74:56:e1:f8:3a:5c:2b:b2:09:58:8f: 40:35:4c:80:ad:6d:07:4f:14:dd:78:01:14:d5:fe: f7:9d:0d:8d:85:41:c9:5b:ab:5c:7f:1e:b6:87:87: 5a:a8:91:14:e2:3e:a9:67:2d:27:bc:cc:0b:10:62: 01:2a:53:fa:ac:25:ed:50:bd:37:07:75:16:16:21: 0b:e8:58:6f:54:9f:e2:51:db:07:da:29:1b:7c:f3: c5:7c:ac:49:39:1a:4c:30:b4:93:6d:ef:17:28:cf: fb:22:e3:7f:99:2f:1b:de:73:a4:77:3a:23:f9:2d: 09:04:23:7b:28:ca:2e:bb:b3:c2:51:58:22:1e:d0: 35:1d:fa:45:72:1d:b1:70:15:3a:b7:38:12:72:db: 14:4f:3d:3a:23:3f:9e:ac:33:5c:2e:cb:c5:74:cb: 26:4c:e6:7a:dc:0e:e9:13:7e:98:c0:7d:46:b5:84: 2c:cf:d5:93:b6:57:c3:a2:fa:00:b0:86:69:48:9b: 75:3a:2f:83:38:fe:20:47:02:be:b2:6a:7e:3c:78: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EC:1F:17:1B:BB:D2:9F:CF:68:B5:36:12:33:32:05:3E:18:8A:02 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3d:2f:59:70:23:b0:0b:99:c3:3e:dc:b9:bf:5e:44:6b:31: 55:2d:03:f2:0c:93:98:73:53:35:d0:ec:ce:2b:38:9d:28:fa: 2f:4e:75:da:51:87:6b:b8:c5:a5:ae:bf:c3:54:e6:55:54:d2: 9f:84:41:e9:80:62:4c:5e:be:54:f3:d2:6b:5d:ef:5f:01:d8: 5e:1c:ea:99:90:84:89:83:51:c1:d1:42:c3:be:e2:8e:ae:3b: 9c:54:6a:29:5a:5f:86:22:dd:c7:5f:41:66:0e:9c:9a:1d:9f: a3:cc:b8:f3:8e:c8:b1:3d:4b:7b:3c:82:a7:fa:d0:7d:88:e5: 4c:eb:be:4c:a6:c4:68:81:bf:0d:06:5c:68:6e:c9:b2:28:59: 33:4e:cc:08:93:4c:69:8e:a9:b5:2d:e1:79:1f:1b:a8:ae:36: ac:bb:b2:8a:96:bf:47:5d:69:55:f7:07:87:16:c3:ff:60:61: 15:8e:23:42:52:c0:b0:20:55:3e:da:5c:80:3c:58:bc:e8:14: d3:24:d0:c3:54:8b:c7:6b:8c:3b:57:b8:b7:cd:e0:bd:94:35: af:13:a4:72:c9:20:a1:27:4a:13:b1:c0:f6:ca:fa:2f:23:52: ca:c2:31:dc:55:55:c2:75:28:4a:9e:cd:68:0f:ba:f1:ae:c7: df:53:79:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSv2vQDoc+2R2sEyL5qH9rs34s7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA4MjgwNjQzMTFaFw0yNjA4MzEwODA1MTFaMDMxMTAvBgNV BAMTKEIyRUMxRjE3MUJCQkQyOUZDRjY4QjUzNjEyMzMzMjA1M0UxODhBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9LbcdMeVddoWOWurrPJ0RKhC ghwZ8qID2t/tyy+FWoQL2E9C/ABcqVhpZJLSXht0VuH4OlwrsglYj0A1TICtbQdP FN14ARTV/vedDY2FQclbq1x/HraHh1qokRTiPqlnLSe8zAsQYgEqU/qsJe1QvTcH dRYWIQvoWG9Un+JR2wfaKRt888V8rEk5GkwwtJNt7xcoz/si43+ZLxvec6R3OiP5 LQkEI3soyi67s8JRWCIe0DUd+kVyHbFwFTq3OBJy2xRPPTojP56sM1wuy8V0yyZM 5nrcDukTfpjAfUa1hCzP1ZO2V8Oi+gCwhmlIm3U6L4M4/iBHAr6yan48eAnRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsuwfFxu70p/PaLU2EjMyBT4YigIwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkj0vWXAjsAuZ wz7cub9eRGsxVS0D8gyTmHNTNdDszis4nSj6L0512lGHa7jFpa6/w1TmVVTSn4RB 6YBiTF6+VPPSa13vXwHYXhzqmZCEiYNRwdFCw77ijq47nFRqKVpfhiLdx19BZg6c mh2fo8y4847IsT1LezyCp/rQfYjlTOu+TKbEaIG/DQZcaG7JsihZM07MCJNMaY6p tS3heR8bqK42rLuyipa/R11pVfcHhxbD/2BhFY4jQlLAsCBVPtpcgDxYvOgU0yTQ w1SLx2uMO1e4t83gvZQ1rxOkcskgoSdKE7HA9sr6LyNSysIx3FVVwnUoSp7NaA+6 8a7H31N52w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:54:58 2026 by rpki-client