$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: N1JEvvxU3WERFhVMpv1zaq/qqVo/n1PS8dqnSPyd/5U= Subject key identifier: 12:63:24:2F:F2:60:49:CF:41:BE:87:54:11:56:DB:38:74:17:A4:33 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 7212A046AD761517D7446B759A881D9786D5B22A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 012B Signing time: Thu 03 Sep 2026 22:54:16 +0000 Manifest this update: Thu 03 Sep 2026 22:49:16 +0000 Manifest next update: Mon 07 Sep 2026 08:27:16 +0000 Files and hashes: 1: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 2: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 3: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: qrZb4bkQfbkCw3IHaFQ9XPFoX2+lO4vSwL6ICIhneYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:12:a0:46:ad:76:15:17:d7:44:6b:75:9a:88:1d:97:86:d5:b2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Sep 3 22:49:16 2026 GMT Not After : Sep 7 08:27:16 2026 GMT Subject: CN=1263242FF26049CF41BE87541156DB387417A433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:13:48:32:62:53:79:ae:f8:da:d3:be:7b: 30:59:1c:f6:f0:8a:b5:1e:8d:35:e7:b1:f9:28:d7: 60:4f:20:c0:b1:51:82:28:a9:84:76:ab:99:b9:d4: 47:bd:fc:9d:b4:82:19:57:3a:cd:79:86:80:26:27: 6a:e2:41:a5:75:bb:36:05:93:07:0a:c1:b6:e6:7c: e6:1e:17:6a:18:0f:88:b7:f5:2f:f4:df:5c:a4:7f: 08:ba:b8:e6:21:83:62:2c:44:3e:ff:43:31:a4:1c: ce:4a:0e:fb:c5:38:09:24:ca:d7:50:9d:2b:bd:ee: 78:e0:df:91:09:0c:47:0d:2f:7c:30:a9:d9:56:c0: 10:df:b7:63:a4:bb:1b:1a:99:eb:21:f1:b2:47:0c: a3:1a:38:07:59:d7:bf:11:e4:0b:f8:04:ea:dd:78: d5:f8:2e:05:82:cf:f2:d4:9b:be:5d:3c:70:37:a9: cc:79:a6:d4:20:7f:f5:ee:24:32:f0:5d:0b:3c:87: 20:68:22:a3:c3:e6:6f:7e:f3:9d:4d:3f:b6:9c:02: 9b:90:98:7e:22:4a:41:39:ba:49:0e:93:1c:0f:68: 47:16:39:55:5a:af:47:44:bc:3b:db:c0:a3:77:21: 4c:e1:ae:72:c8:ea:58:09:5d:4a:49:02:e6:b1:c1: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:63:24:2F:F2:60:49:CF:41:BE:87:54:11:56:DB:38:74:17:A4:33 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:38:be:52:8a:76:81:ba:b2:ef:7c:c6:55:e6:e5:fd:66:77: d4:01:94:4b:07:5c:48:5c:03:f2:3f:22:d6:3b:9f:a8:6e:17: cb:71:0a:1e:93:b0:6b:99:38:6d:0b:68:b3:cf:e5:fa:45:9b: ae:e1:88:5d:4f:c1:ad:7f:1a:6c:5a:4b:be:19:47:28:ea:3f: 51:cf:05:d1:97:6a:fa:07:f0:31:1c:f6:29:1a:fd:e8:bd:26: 4a:20:fd:47:0e:2a:bf:9e:66:67:8f:9a:c2:18:17:ae:45:9f: f5:40:d6:43:22:cc:bb:df:69:85:37:44:82:f9:c3:a1:40:c2: a7:57:ab:3a:e6:fd:93:fa:93:fa:59:45:3b:89:ed:98:c9:b1: 55:26:69:ef:47:46:0a:5d:1e:db:84:54:a7:45:5f:bf:17:a3: 30:a8:32:78:83:0b:a6:95:a9:5a:25:cb:e2:59:5e:0d:2a:fb: 77:74:b9:10:23:0e:8b:de:18:9e:af:b3:7e:1b:0d:35:53:b0: 5b:77:83:b2:26:31:56:d2:6b:78:7a:61:d0:25:66:f7:be:0b: d7:be:10:a0:15:22:25:bf:05:2e:d7:a4:df:65:b6:2d:c3:57: b5:1c:63:91:9a:39:00:57:29:b9:03:4b:36:1f:8a:75:fa:c6: 7e:e4:be:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUchKgRq12FRfXRGt1mogdl4bVsiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA5MDMyMjQ5MTZaFw0yNjA5MDcwODI3MTZaMDMxMTAvBgNV BAMTKDEyNjMyNDJGRjI2MDQ5Q0Y0MUJFODc1NDExNTZEQjM4NzQxN0E0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgBNIMmJTea742tO+ezBZHPbw irUejTXnsfko12BPIMCxUYIoqYR2q5m51Ee9/J20ghlXOs15hoAmJ2riQaV1uzYF kwcKwbbmfOYeF2oYD4i39S/031ykfwi6uOYhg2IsRD7/QzGkHM5KDvvFOAkkytdQ nSu97njg35EJDEcNL3wwqdlWwBDft2Okuxsamesh8bJHDKMaOAdZ178R5Av4BOrd eNX4LgWCz/LUm75dPHA3qcx5ptQgf/XuJDLwXQs8hyBoIqPD5m9+851NP7acApuQ mH4iSkE5ukkOkxwPaEcWOVVar0dEvDvbwKN3IUzhrnLI6lgJXUpJAuaxwc47AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEmMkL/JgSc9BvodUEVbbOHQXpDMwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDi+Uop2gbqy 73zGVebl/WZ31AGUSwdcSFwD8j8i1jufqG4Xy3EKHpOwa5k4bQtos8/l+kWbruGI XU/BrX8abFpLvhlHKOo/Uc8F0Zdq+gfwMRz2KRr96L0mSiD9Rw4qv55mZ4+awhgX rkWf9UDWQyLMu99phTdEgvnDoUDCp1erOub9k/qT+llFO4ntmMmxVSZp70dGCl0e 24RUp0VfvxejMKgyeIMLppWpWiXL4lleDSr7d3S5ECMOi94Ynq+zfhsNNVOwW3eD siYxVtJreHph0CVm974L174QoBUiJb8FLtek32W2LcNXtRxjkZo5AFcpuQNLNh+K dfrGfuS+sg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:58:35 2026 by rpki-client