$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: HS8jPJpS8p39Oz5U1kEBkS3EKJaL9OxJ6O54mfMZGRI= Subject key identifier: E0:31:D0:15:8B:11:F9:16:9E:9F:5F:4C:A6:52:66:34:65:BD:45:5D Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 1685E6A1C88DC16D652077220ECC3B36ABC6133F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:01 +0000 Manifest this update: Fri 28 Aug 2026 06:43:01 +0000 Manifest next update: Mon 31 Aug 2026 12:01:01 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: zbtZLDFIlCVGZYW6b7L2W9DAA7CMjcOt8r4RO5qDvcU=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:85:e6:a1:c8:8d:c1:6d:65:20:77:22:0e:cc:3b:36:ab:c6:13:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Aug 28 06:43:01 2026 GMT Not After : Aug 31 12:01:01 2026 GMT Subject: CN=E031D0158B11F9169E9F5F4CA652663465BD455D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:a3:d7:1d:22:1a:b1:7f:dd:67:33:35:84: 71:7a:bc:b4:e9:66:25:de:63:9c:c7:c8:73:c4:e2: 8a:15:55:25:77:00:e3:5e:6f:54:af:d8:4f:dc:a8: 7c:5f:21:cd:05:55:29:37:f7:22:3b:d8:a2:6f:34: 8b:06:6e:55:d0:15:e2:42:ee:8b:fb:45:82:3c:e2: fe:32:ae:13:64:60:d8:45:5e:a4:ff:9e:8a:0e:82: 1e:2f:11:c8:f3:1c:40:87:e9:ea:13:d6:d5:10:7e: ee:10:40:e7:8c:2f:18:7f:35:0e:44:e6:d9:4c:bb: df:77:34:d2:e3:e9:6f:28:ac:c6:01:6f:79:87:4e: a0:5b:a7:04:de:78:db:c5:16:55:a2:9e:8c:3a:fd: 70:84:aa:30:89:74:6a:9e:c7:4b:92:33:73:29:db: 42:19:1e:5d:5e:a3:99:02:bc:26:95:a7:76:8c:aa: 44:9f:ac:91:e0:60:a9:d5:a4:ad:d8:67:57:a4:09: 85:87:fe:cb:f9:40:be:57:f0:28:9e:1f:33:52:62: 00:91:07:59:e9:c4:b3:5c:3a:66:3e:1a:45:43:a2: 01:2d:ef:99:ac:3e:c6:d5:a1:d8:dc:8b:17:ab:7b: 42:ed:ff:82:1d:50:17:6e:a1:b7:88:72:15:63:fe: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:31:D0:15:8B:11:F9:16:9E:9F:5F:4C:A6:52:66:34:65:BD:45:5D X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:38:dc:5b:ba:ac:6c:77:16:be:68:f0:2a:6c:9e:eb:78:b1: ac:24:de:02:77:d6:a8:06:ba:77:ea:90:9a:35:64:f1:70:93: e3:29:ee:1e:00:a2:b6:29:dc:ec:3c:87:94:ab:a0:78:7e:53: f2:54:df:cb:9a:ec:8f:e1:bc:31:b7:6e:ed:bd:fd:c0:cb:26: 6e:af:da:a3:f1:bd:c8:a6:4b:46:fb:75:2a:64:65:96:15:a5: 82:59:b9:9a:a3:95:8a:c7:1a:1f:2d:4e:a1:22:06:c9:25:8b: 9c:dc:cf:b9:96:da:e6:2b:f3:a3:e0:3e:c3:e6:29:2b:6f:ab: 42:51:93:b5:e2:ff:fc:d9:ab:af:60:86:87:93:99:e5:89:35: 3e:3c:72:20:79:b5:12:49:ed:45:16:1a:b3:c4:6a:9c:1f:10: f3:6a:27:6a:c8:3c:a9:c9:74:cb:43:b7:13:99:96:bd:07:dd: 98:44:c3:e6:c1:42:0b:2c:96:54:a0:0e:1f:d2:b9:45:db:07: 9c:34:3a:37:0e:f4:4d:7e:d5:04:c0:47:a8:bc:df:8e:ac:f5: ac:7b:f1:cc:df:da:f7:7c:23:f7:5f:66:7a:39:29:37:b2:f4: c6:2f:ef:12:d4:f3:7c:f3:6c:4b:1e:cd:b0:9b:1b:6d:93:c6: 20:e0:27:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFoXmociNwW1lIHciDsw7NqvGEz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA4MjgwNjQzMDFaFw0yNjA4MzExMjAxMDFaMDMxMTAvBgNV BAMTKEUwMzFEMDE1OEIxMUY5MTY5RTlGNUY0Q0E2NTI2NjM0NjVCRDQ1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHaPXHSIasX/dZzM1hHF6vLTp ZiXeY5zHyHPE4ooVVSV3AONeb1Sv2E/cqHxfIc0FVSk39yI72KJvNIsGblXQFeJC 7ov7RYI84v4yrhNkYNhFXqT/nooOgh4vEcjzHECH6eoT1tUQfu4QQOeMLxh/NQ5E 5tlMu993NNLj6W8orMYBb3mHTqBbpwTeeNvFFlWinow6/XCEqjCJdGqex0uSM3Mp 20IZHl1eo5kCvCaVp3aMqkSfrJHgYKnVpK3YZ1ekCYWH/sv5QL5X8CieHzNSYgCR B1npxLNcOmY+GkVDogEt75msPsbVodjcixere0Lt/4IdUBduobeIchVj/kuzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4DHQFYsR+Raen19MplJmNGW9RV0wHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzTjcW7qsbHcW vmjwKmye63ixrCTeAnfWqAa6d+qQmjVk8XCT4ynuHgCitinc7DyHlKugeH5T8lTf y5rsj+G8Mbdu7b39wMsmbq/ao/G9yKZLRvt1KmRllhWlglm5mqOViscaHy1OoSIG ySWLnNzPuZba5ivzo+A+w+YpK2+rQlGTteL//Nmrr2CGh5OZ5Yk1PjxyIHm1Eknt RRYas8RqnB8Q82onasg8qcl0y0O3E5mWvQfdmETD5sFCCyyWVKAOH9K5RdsHnDQ6 Nw70TX7VBMBHqLzfjqz1rHvxzN/a93wj919mejkpN7L0xi/vEtTzfPNsSx7NsJsb bZPGIOAn1w== -----END CERTIFICATE-----Generated at Sat Aug 29 07:50:30 2026 by rpki-client