$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: TkNUl4zJQBou+ORcW8hZ/XUvGHHxzttG1Q/Xxuw4duA= Subject key identifier: 85:FD:46:3A:54:3C:53:80:18:63:72:69:CA:71:B3:62:37:8C:E9:9B Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 61E8179BFAB30937CEE93769490A03AB45998506 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:48:05 +0000 Manifest this update: Fri 28 Aug 2026 06:43:05 +0000 Manifest next update: Mon 31 Aug 2026 13:52:05 +0000 Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: U4cm22TWlRbIyWn6Xffelda5q4EgQab9uNbUpLs6usQ=) 2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e8:17:9b:fa:b3:09:37:ce:e9:37:69:49:0a:03:ab:45:99:85:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Aug 28 06:43:05 2026 GMT Not After : Aug 31 13:52:05 2026 GMT Subject: CN=85FD463A543C538018637269CA71B362378CE99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:e1:be:27:9c:0c:05:7a:2c:09:60:a0:f5: 6b:2c:c4:14:a9:92:d5:f9:29:28:5e:ee:c1:ad:c7: 17:56:fa:03:ed:0a:c4:d1:1e:a9:2e:de:72:ea:92: e6:e5:82:51:33:7c:28:48:29:2b:5a:b9:15:b7:25: 88:9d:99:53:28:04:4a:40:b4:ce:59:3c:6b:66:ab: f0:07:60:10:58:62:86:93:2e:3a:82:8b:11:82:80: d3:76:d5:ad:2e:ee:d3:29:65:e8:3a:12:f2:6e:bc: b7:d5:5b:cc:6d:c8:19:a0:f2:ee:e2:de:09:c6:57: 4f:49:7b:6b:de:d1:98:16:bc:86:cc:49:3f:3c:1c: 1a:5a:27:25:82:8a:40:37:3f:b0:1c:ab:88:b2:0c: da:7c:f2:24:1d:e5:26:3e:22:ea:dc:63:52:79:0f: 92:ea:ac:95:9f:e6:04:4d:bc:56:46:03:16:d2:c2: ca:12:2a:8a:77:70:4b:f4:5f:ea:29:a5:04:6a:f5: fe:81:4f:5a:b5:a3:1e:10:63:ee:4c:df:c3:ef:45: ce:3a:64:92:9b:f2:ce:37:f4:0c:75:96:ce:14:4b: 36:7e:32:54:97:56:cb:10:5b:df:4a:50:b8:6d:fd: 57:ac:3f:cb:50:4c:c1:a0:7d:02:b7:9f:7f:a3:23: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FD:46:3A:54:3C:53:80:18:63:72:69:CA:71:B3:62:37:8C:E9:9B X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:26:e3:f8:28:2b:da:46:48:eb:5f:20:e5:5f:4a:1f:dd:18: 9a:ab:11:00:68:77:51:fa:b9:11:7f:28:92:b8:e5:b3:ad:3b: 5c:e3:0d:3e:fa:82:34:ef:3e:15:b3:34:6f:08:04:94:70:2c: e8:91:b1:08:8a:13:68:26:27:80:de:96:44:f5:3f:38:5d:50: f1:bc:69:f7:86:1c:2c:aa:8a:34:10:cb:ca:7d:4a:d9:7f:53: b2:2f:b7:b8:ea:26:18:01:71:c0:70:5c:fd:0d:5e:51:ec:2f: 5c:da:6e:aa:1b:38:5b:bb:3e:13:39:71:af:50:5b:c8:e2:fe: 5f:07:c9:84:89:55:1a:f5:03:3b:fe:e7:97:33:ad:26:55:b8: e1:5f:46:53:eb:3c:e3:2f:06:d0:ad:85:f9:e5:5e:bc:95:d3: cb:f7:5c:c6:7b:89:e1:6b:42:41:31:4e:64:04:11:6f:13:f0: 23:4b:3a:9c:3c:f0:c4:cb:4f:8d:2d:cd:1a:44:4e:05:20:e5: d1:36:c3:b5:89:27:e6:fc:11:8b:f4:68:c8:85:27:9f:d7:5e: 2a:c2:c9:41:35:81:56:91:2d:f0:50:e8:b7:95:88:da:56:8d: 14:d6:0e:e9:d5:8d:aa:02:bf:30:ea:9c:3d:95:16:0a:bd:86: 89:31:b2:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYegXm/qzCTfO6TdpSQoDq0WZhQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA4MjgwNjQzMDVaFw0yNjA4MzExMzUyMDVaMDMxMTAvBgNV BAMTKDg1RkQ0NjNBNTQzQzUzODAxODYzNzI2OUNBNzFCMzYyMzc4Q0U5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFuG+J5wMBXosCWCg9WssxBSp ktX5KShe7sGtxxdW+gPtCsTRHqku3nLqkublglEzfChIKStauRW3JYidmVMoBEpA tM5ZPGtmq/AHYBBYYoaTLjqCixGCgNN21a0u7tMpZeg6EvJuvLfVW8xtyBmg8u7i 3gnGV09Je2ve0ZgWvIbMST88HBpaJyWCikA3P7Acq4iyDNp88iQd5SY+IurcY1J5 D5LqrJWf5gRNvFZGAxbSwsoSKop3cEv0X+oppQRq9f6BT1q1ox4QY+5M38PvRc46 ZJKb8s439Ax1ls4USzZ+MlSXVssQW99KULht/VesP8tQTMGgfQK3n3+jI3OfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhf1GOlQ8U4AYY3JpynGzYjeM6ZswHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbibj+Cgr2kZI 618g5V9KH90YmqsRAGh3Ufq5EX8okrjls607XOMNPvqCNO8+FbM0bwgElHAs6JGx CIoTaCYngN6WRPU/OF1Q8bxp94YcLKqKNBDLyn1K2X9Tsi+3uOomGAFxwHBc/Q1e UewvXNpuqhs4W7s+Ezlxr1BbyOL+XwfJhIlVGvUDO/7nlzOtJlW44V9GU+s84y8G 0K2F+eVevJXTy/dcxnuJ4WtCQTFOZAQRbxPwI0s6nDzwxMtPjS3NGkROBSDl0TbD tYkn5vwRi/RoyIUnn9deKsLJQTWBVpEt8FDot5WI2laNFNYO6dWNqgK/MOqcPZUW Cr2GiTGyWg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:52 2026 by rpki-client