$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft File: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft (raw, json) Hash identifier: DOItQS5P9P4k/BteLDmYZ25yLbwmBUK6Y73lOpCBnnA= Subject key identifier: 44:48:B1:67:36:3D:6B:4D:FE:91:89:07:F0:0C:7A:DD:D5:5C:B4:F6 Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 258F081CFA6A69F2C07F3BBFAA6375F6123D0586 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 09:55:53 +0000 Files and hashes: 1: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl (hash: IZVtWQuxe77lwH5Z+dAeABrqXAf2spZrCjC9rBDU1W8=) 2: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (hash: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8f:08:1c:fa:6a:69:f2:c0:7f:3b:bf:aa:63:75:f6:12:3d:05:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 09:55:53 2026 GMT Subject: CN=4448B167363D6B4DFE918907F00C7ADDD55CB4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:5f:30:c8:8f:46:4a:82:81:35:e9:3c:cd: 11:4a:14:07:1f:0a:ef:74:19:d2:25:8b:02:bd:80: c8:7f:64:ae:d7:8b:b9:b6:58:c2:b6:d3:23:88:da: 6e:3b:d1:10:cd:4a:20:5f:e5:d1:c0:fc:62:32:a9: 04:63:e0:db:22:1f:3d:91:3f:72:e1:fd:2a:9d:49: e0:7d:4c:86:3d:f4:9f:52:38:74:68:04:f9:fb:44: b2:81:f9:4b:1b:43:41:f9:d2:0e:a9:95:b6:39:29: 47:dd:80:8c:3a:9a:6b:50:46:2a:a0:54:d3:fe:40: 01:75:4a:0e:dd:5b:2f:d0:8c:08:6c:03:cc:9e:6c: fd:7a:b6:ca:a1:7f:3f:53:7c:59:fa:02:e6:e3:4b: 47:68:b2:c6:3c:b8:2e:2f:59:21:c7:1b:de:67:4e: 74:b2:61:36:0c:1a:1e:b8:13:d5:33:93:6a:82:b5: e3:35:95:7a:9e:38:7d:df:f4:fa:9f:d5:c3:16:79: 07:f7:62:82:9a:bc:3e:4d:77:e7:53:8a:32:37:a8: 8d:8d:3c:89:55:f3:3d:bf:d6:74:ae:ef:99:b1:b2: 87:ef:9a:9e:a1:d1:bc:81:ab:ec:3a:b0:4a:cb:67: 22:f5:aa:c6:af:d1:c4:47:35:25:a4:06:14:43:59: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:B1:67:36:3D:6B:4D:FE:91:89:07:F0:0C:7A:DD:D5:5C:B4:F6 X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fc:5b:94:97:27:2d:9f:ba:45:23:a4:98:08:23:b4:8b:bd: a0:82:8b:69:96:a8:e6:2e:e1:fd:3a:4f:bc:5e:1b:16:38:99: ed:5b:6b:bd:77:45:08:cd:d4:bc:1d:77:db:14:3f:16:cc:70: eb:00:c0:9c:1c:3c:73:b8:d4:5d:d5:86:1c:9e:55:0f:d3:d9: b5:96:1f:71:05:46:fc:d3:9e:ef:79:42:b2:29:e3:b3:e1:ef: d0:65:7a:f5:32:54:00:a7:39:a8:73:1b:f0:c0:0b:2e:43:8d: ad:cd:89:e3:e7:26:b0:db:f8:1e:e5:2d:82:94:1d:4e:42:e3: 52:22:64:b3:37:dd:d0:58:79:02:e5:a1:9f:ed:bd:ba:f7:c6: 56:6e:1d:7f:44:cf:75:f7:35:f9:0b:40:77:f1:ad:92:54:27: 2a:69:9b:a3:2e:96:fd:64:2b:5e:9c:4c:e8:f8:ee:8c:ac:42: 6b:c1:37:e4:66:89:60:71:85:5f:b1:e4:f6:a5:11:63:6a:a4: 9f:4d:e5:6a:85:1a:10:aa:b3:56:a5:e0:44:fb:d8:cf:66:04: ef:ba:67:a8:f5:50:90:b7:b0:7f:5c:4d:bd:55:aa:8e:d8:d7: 1d:05:37:ae:06:6b:e1:1f:41:f7:5c:7f:24:46:70:ad:54:ed: f3:3a:c0:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJY8IHPpqafLAfzu/qmN19hI9BYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzEwOTU1NTNaMDMxMTAvBgNV BAMTKDQ0NDhCMTY3MzYzRDZCNERGRTkxODkwN0YwMEM3QURERDU1Q0I0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43l8wyI9GSoKBNek8zRFKFAcf Cu90GdIliwK9gMh/ZK7Xi7m2WMK20yOI2m470RDNSiBf5dHA/GIyqQRj4NsiHz2R P3Lh/SqdSeB9TIY99J9SOHRoBPn7RLKB+UsbQ0H50g6plbY5KUfdgIw6mmtQRiqg VNP+QAF1Sg7dWy/QjAhsA8yebP16tsqhfz9TfFn6AubjS0dossY8uC4vWSHHG95n TnSyYTYMGh64E9Uzk2qCteM1lXqeOH3f9Pqf1cMWeQf3YoKavD5Nd+dTijI3qI2N PIlV8z2/1nSu75mxsofvmp6h0byBq+w6sErLZyL1qsav0cRHNSWkBhRDWY+/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUREixZzY9a03+kYkH8Ax63dVctPYwHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU1NTEzNjEvMC9EMkZGMUQ3QzZERjFE RDc3NUE2MTA2OTcwRDA1RkY0NEJDQUQxOTQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvxblJcnLZ+6 RSOkmAgjtIu9oIKLaZao5i7h/TpPvF4bFjiZ7VtrvXdFCM3UvB132xQ/Fsxw6wDA nBw8c7jUXdWGHJ5VD9PZtZYfcQVG/NOe73lCsinjs+Hv0GV69TJUAKc5qHMb8MAL LkONrc2J4+cmsNv4HuUtgpQdTkLjUiJkszfd0Fh5AuWhn+29uvfGVm4df0TPdfc1 +QtAd/GtklQnKmmboy6W/WQrXpxM6PjujKxCa8E35GaJYHGFX7Hk9qURY2qkn03l aoUaEKqzVqXgRPvYz2YE77pnqPVQkLewf1xNvVWqjtjXHQU3rgZr4R9B91x/JEZw rVTt8zrAjA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:55:01 2026 by rpki-client