$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: DLLyMRAiX5w3gfYAeif06VM2e8EgLwrNp//8+QI4lSo= Subject key identifier: 72:CA:53:0C:DD:63:7B:63:2E:07:D9:63:E5:76:9F:FA:72:8F:A4:18 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 14AB0AECEA7059253C9BACD4A804C36ED87D169F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:47:36 +0000 Manifest this update: Fri 28 Aug 2026 06:42:36 +0000 Manifest next update: Mon 31 Aug 2026 16:19:36 +0000 Files and hashes: 1: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: aVflIEjwQtm1VVVvCkHiAHImXCProgXvjqcyVhyyTUs=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ab:0a:ec:ea:70:59:25:3c:9b:ac:d4:a8:04:c3:6e:d8:7d:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Aug 28 06:42:36 2026 GMT Not After : Aug 31 16:19:36 2026 GMT Subject: CN=72CA530CDD637B632E07D963E5769FFA728FA418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:d9:bd:e3:3f:6e:09:eb:5c:d0:1b:55:9d: 4d:44:7c:31:25:6e:a9:03:04:00:8f:6e:c4:71:2a: 15:a5:dd:7b:5e:c5:88:aa:13:b0:9f:8a:31:da:08: c8:70:b3:14:e5:bb:3b:5e:25:67:dc:db:52:4d:8d: 0e:65:4f:fd:0d:21:83:8b:f1:d8:40:3d:dd:50:35: 04:4f:eb:5a:9a:bb:34:d4:d3:8a:f0:c2:b3:39:a3: 02:4d:2b:30:67:a3:2e:dd:12:e5:e0:16:bd:c6:b8: fe:47:ab:de:44:ea:0e:0d:9e:7c:38:0c:18:11:c6: e0:0b:9c:6f:9e:2e:79:30:95:dc:51:22:d9:76:3a: 32:c1:12:84:8b:3b:02:f4:48:0f:73:8d:90:ec:c9: 2e:ee:61:0a:30:cd:69:36:66:79:fd:17:28:6e:fb: 68:05:56:6a:7f:00:4b:5b:ff:c5:e8:46:0a:00:35: 42:12:db:6a:4e:55:bd:17:23:dd:8d:3b:7b:c8:8d: 2f:c2:aa:5b:b3:b7:d4:b8:42:c7:48:36:fe:3e:4f: c9:56:b9:41:16:c8:30:5b:05:f9:70:43:65:36:bf: e2:6e:18:e6:86:d8:4d:69:73:35:60:e3:31:c2:24: df:a5:3b:3e:10:f3:f3:ea:59:33:93:e3:fe:e8:25: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CA:53:0C:DD:63:7B:63:2E:07:D9:63:E5:76:9F:FA:72:8F:A4:18 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f7:7c:35:7c:32:4e:ed:d1:9a:74:34:df:a9:95:7c:09:5f: bb:83:6a:a1:9a:cd:8f:8d:94:1d:9e:d9:e7:d4:fb:71:45:dc: d3:b8:14:5b:1c:f3:6a:40:31:18:86:d5:90:7f:dd:64:0e:7c: 2e:7d:34:80:3b:0a:78:9e:4f:00:8d:40:3e:57:db:c1:4e:8a: 1d:65:98:c7:7b:f9:9f:6b:fd:49:27:49:9d:7d:14:db:44:87: 94:fe:6d:c0:4a:39:41:fa:44:32:a0:7e:c4:ab:a8:36:b8:b9: 02:00:93:d6:fc:66:72:96:dc:d9:e6:f6:67:2c:2b:ed:98:40: e3:dd:2c:71:8e:07:9c:e6:39:83:93:73:00:05:cd:b1:9e:8e: b4:f5:72:eb:aa:6b:bb:69:8c:ef:15:a5:cb:4a:70:0e:e1:77: 02:78:59:02:37:2e:5c:1d:01:94:06:ab:09:38:28:8e:66:e2: 55:61:a1:87:87:33:0d:d3:f2:1e:27:94:dd:be:b5:c7:ca:81: 5a:89:fb:f9:d9:cc:f7:f8:65:dd:aa:4d:0f:6f:03:9e:df:79: f4:32:9f:a4:06:32:fe:8b:1a:c7:96:13:65:9d:10:4d:28:2c: 8e:b7:8c:96:8e:a8:d0:51:10:9a:58:32:f3:1d:09:9d:d9:32: d8:5d:56:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFKsK7OpwWSU8m6zUqATDbth9Fp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA4MjgwNjQyMzZaFw0yNjA4MzExNjE5MzZaMDMxMTAvBgNV BAMTKDcyQ0E1MzBDREQ2MzdCNjMyRTA3RDk2M0U1NzY5RkZBNzI4RkE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6tm94z9uCetc0BtVnU1EfDEl bqkDBACPbsRxKhWl3XtexYiqE7CfijHaCMhwsxTluzteJWfc21JNjQ5lT/0NIYOL 8dhAPd1QNQRP61qauzTU04rwwrM5owJNKzBnoy7dEuXgFr3GuP5Hq95E6g4Nnnw4 DBgRxuALnG+eLnkwldxRItl2OjLBEoSLOwL0SA9zjZDsyS7uYQowzWk2Znn9Fyhu +2gFVmp/AEtb/8XoRgoANUIS22pOVb0XI92NO3vIjS/Cqluzt9S4QsdINv4+T8lW uUEWyDBbBflwQ2U2v+JuGOaG2E1pczVg4zHCJN+lOz4Q8/PqWTOT4/7oJeVXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcspTDN1je2MuB9lj5Xaf+nKPpBgwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPd8NXwyTu3R mnQ036mVfAlfu4NqoZrNj42UHZ7Z59T7cUXc07gUWxzzakAxGIbVkH/dZA58Ln00 gDsKeJ5PAI1APlfbwU6KHWWYx3v5n2v9SSdJnX0U20SHlP5twEo5QfpEMqB+xKuo Nri5AgCT1vxmcpbc2eb2Zywr7ZhA490scY4HnOY5g5NzAAXNsZ6OtPVy66pru2mM 7xWly0pwDuF3AnhZAjcuXB0BlAarCTgojmbiVWGhh4czDdPyHieU3b61x8qBWon7 +dnM9/hl3apND28Dnt959DKfpAYy/osax5YTZZ0QTSgsjreMlo6o0FEQmlgy8x0J ndky2F1WeQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:27 2026 by rpki-client