$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: mMaJEoETwF744VZ6VDc6NNfy6364eHi3CM6OaMiIsLU= Subject key identifier: 49:28:E1:2E:20:30:67:53:7E:87:AF:DD:34:C4:D2:B3:51:00:89:06 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 6D344AA972B216226896739A45F38B130098BDC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 09:33:06 +0000 Files and hashes: 1: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) 2: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 3: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: twhoG8XT1ITqqyJLizKZWu4AUG/+UiccKgV69T8TXUE=) 4: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 5: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 6: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 7: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 8: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:34:4a:a9:72:b2:16:22:68:96:73:9a:45:f3:8b:13:00:98:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 09:33:06 2026 GMT Subject: CN=4928E12E203067537E87AFDD34C4D2B351008906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:8e:74:fd:0f:40:b1:39:a4:f0:3a:03:b3: c2:80:82:40:72:77:fb:51:bf:be:ab:20:bd:6f:cc: d8:7b:ac:0e:61:bb:58:73:10:5e:65:4c:cc:b9:25: 66:39:e3:39:94:60:de:be:e7:bd:f3:da:5e:62:49: 1d:35:3b:b7:5a:63:ec:29:f4:dc:53:82:92:ca:8b: 00:60:fb:1a:d3:02:ec:a4:af:51:32:04:70:c0:d5: 30:84:da:c8:39:f5:4f:22:19:dc:be:b0:20:50:72: 59:06:11:67:d5:da:69:60:2b:8f:9c:ba:9a:17:38: 98:ac:0a:a9:06:c5:59:10:bf:4e:68:0d:30:83:24: a4:82:0d:55:63:8b:f5:73:93:0f:f7:9b:ce:12:54: bf:7d:52:a2:b3:28:4e:12:b5:d8:6b:f5:af:fe:12: d6:45:59:17:ca:d0:d6:79:38:be:13:7d:c4:31:3a: ad:be:d9:35:97:8e:20:5f:94:7a:96:94:58:b3:88: af:2a:5e:a2:28:36:47:c2:21:a0:7a:df:af:27:df: f7:b7:15:95:ab:e0:e1:40:19:18:62:ce:e1:c1:b5: 07:dd:81:30:bf:60:ee:f3:dc:69:a7:9b:a1:2b:86: d3:67:a3:37:d2:38:4a:70:25:80:04:a9:d2:55:e4: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:28:E1:2E:20:30:67:53:7E:87:AF:DD:34:C4:D2:B3:51:00:89:06 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0a:b6:16:64:f7:22:11:ef:44:db:cd:36:62:58:e4:e2:93: c8:4a:2f:c2:79:98:b8:1e:a5:68:a9:e9:40:86:7c:0f:14:7f: db:b2:cd:93:08:86:07:61:e3:34:60:04:e6:d8:d3:23:43:0f: d2:ab:86:79:8a:07:06:dc:ab:47:7a:4a:2e:3a:2b:06:98:a7: 6d:62:de:33:cf:b9:ba:11:aa:8d:f7:ee:e7:a8:8a:9f:36:0d: b6:18:e8:19:0d:52:00:cb:e2:86:57:bd:6c:b5:02:a4:9f:ba: b4:70:99:6e:83:b3:46:5d:a1:b7:08:00:8b:c2:4f:ea:bb:6c: d4:67:7c:05:30:57:78:01:33:e7:42:b3:65:54:84:9a:71:44: db:e2:01:bb:8a:d8:18:d3:b7:c6:47:0a:6e:0f:9b:e5:41:6b: f5:66:70:eb:dc:b9:4f:c9:cc:83:06:72:08:fd:98:5b:19:10: 35:14:fc:a9:e4:16:97:2f:6f:cd:41:93:85:c8:cc:a7:fb:2c: fb:e8:5f:69:76:c2:43:b4:4d:77:68:4d:e2:f7:dd:17:54:ce: a4:51:e5:84:59:18:99:71:8d:7a:4b:42:ee:52:3e:68:34:2b: 5d:2f:82:40:73:bc:dd:72:8d:b2:c0:20:d7:62:23:f9:20:42: 80:30:98:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbTRKqXKyFiJolnOaRfOLEwCYvcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzEwOTMzMDZaMDMxMTAvBgNV BAMTKDQ5MjhFMTJFMjAzMDY3NTM3RTg3QUZERDM0QzREMkIzNTEwMDg5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClY450/Q9AsTmk8DoDs8KAgkBy d/tRv76rIL1vzNh7rA5hu1hzEF5lTMy5JWY54zmUYN6+573z2l5iSR01O7daY+wp 9NxTgpLKiwBg+xrTAuykr1EyBHDA1TCE2sg59U8iGdy+sCBQclkGEWfV2mlgK4+c upoXOJisCqkGxVkQv05oDTCDJKSCDVVji/Vzkw/3m84SVL99UqKzKE4Stdhr9a/+ EtZFWRfK0NZ5OL4TfcQxOq2+2TWXjiBflHqWlFiziK8qXqIoNkfCIaB6368n3/e3 FZWr4OFAGRhizuHBtQfdgTC/YO7z3Gmnm6ErhtNnozfSOEpwJYAEqdJV5Jl/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSSjhLiAwZ1N+h6/dNMTSs1EAiQYwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwq2FmT3IhHv RNvNNmJY5OKTyEovwnmYuB6laKnpQIZ8DxR/27LNkwiGB2HjNGAE5tjTI0MP0quG eYoHBtyrR3pKLjorBpinbWLeM8+5uhGqjffu56iKnzYNthjoGQ1SAMvihle9bLUC pJ+6tHCZboOzRl2htwgAi8JP6rts1Gd8BTBXeAEz50KzZVSEmnFE2+IBu4rYGNO3 xkcKbg+b5UFr9WZw69y5T8nMgwZyCP2YWxkQNRT8qeQWly9vzUGThcjMp/ss++hf aXbCQ7RNd2hN4vfdF1TOpFHlhFkYmXGNektC7lI+aDQrXS+CQHO83XKNssAg12Ij +SBCgDCYmA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:18 2026 by rpki-client