$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: LD1lRbYS2GiW71THDkG1Ei+9n5eFf7k7G02xDg8b8zw= Subject key identifier: 3B:00:B0:DF:D5:3C:E4:3F:53:40:DF:35:5B:6D:1E:4F:63:43:90:C4 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 5BE50344329598163AA16266309613ACB4DCE09A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:19 +0000 Manifest this update: Fri 28 Aug 2026 06:43:19 +0000 Manifest next update: Mon 31 Aug 2026 07:41:19 +0000 Files and hashes: 1: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 2: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: 7UyjjRjw18W0QBm5WoR94kfZRklV6VWPXkEgQJciHIQ=) 3: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 4: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e5:03:44:32:95:98:16:3a:a1:62:66:30:96:13:ac:b4:dc:e0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Aug 28 06:43:19 2026 GMT Not After : Aug 31 07:41:19 2026 GMT Subject: CN=3B00B0DFD53CE43F5340DF355B6D1E4F634390C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:a8:9e:d8:27:11:40:3c:74:a7:fe:d4:d4: 46:a6:aa:e1:32:6d:8a:e7:83:d6:b6:26:2d:7e:0b: 4c:fd:7d:27:d6:14:6d:15:b2:f5:14:54:44:be:2b: dc:5b:5c:09:15:7e:44:a6:a6:45:24:a8:a7:4c:95: 74:52:80:ef:69:56:45:c4:cf:78:8d:97:10:f2:79: 9e:71:42:93:08:69:4e:7a:c6:7f:7a:d2:e7:ef:1b: ed:0a:2e:12:0b:6b:41:7b:39:a9:38:f7:b4:62:c1: ad:23:9b:ef:15:35:24:ff:e3:41:25:3a:79:26:68: ae:73:e8:61:94:52:14:ae:44:6d:3e:d2:c5:9f:b2: 7d:c4:14:3d:b2:1d:1e:18:57:4c:0a:13:17:94:1e: 0c:87:fa:85:1a:90:4c:65:e0:60:72:53:54:e7:7e: 30:34:37:f1:34:77:c4:1b:6f:ec:c9:78:5e:bd:e3: 6a:f7:66:9a:30:e3:c5:73:f3:1a:bf:d2:9c:48:1e: 9d:96:05:47:b4:89:2b:e9:01:8e:e9:8e:2c:81:be: 92:4b:16:9a:0d:71:d6:bd:e8:87:64:28:c8:99:be: 1c:66:20:2b:ee:9e:84:6b:b4:f5:0d:37:34:32:83: 85:b4:3d:68:b2:00:f3:38:61:26:a3:ff:e6:b5:c2: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:B0:DF:D5:3C:E4:3F:53:40:DF:35:5B:6D:1E:4F:63:43:90:C4 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:57:f8:00:e5:24:17:d6:e5:c4:56:9c:91:a6:77:c6:bd:0d: 24:5d:1d:ed:e3:41:28:26:4b:96:ef:98:ea:5d:96:32:e9:82: 88:31:c7:f2:a8:db:26:5d:f5:8c:78:df:82:69:57:03:77:b3: 55:11:62:15:92:d7:4e:26:ed:e2:a2:38:e7:2d:b8:fd:1f:4f: 2b:bb:93:6f:39:64:5f:d2:5e:82:cf:04:53:9a:e2:90:3c:94: 10:eb:5d:95:18:ba:81:31:37:5d:78:59:cc:01:08:a4:eb:2f: 12:5f:71:50:7c:2e:42:0f:a4:98:21:2c:f3:37:3e:73:72:5c: 93:a6:97:d1:88:8d:18:d6:7e:e3:a6:7d:f9:df:cc:f9:23:98: e0:d0:7a:b7:b0:9b:20:9e:0f:86:46:86:68:86:66:ea:74:6d: a2:77:3c:68:cd:e9:d6:1c:5b:3d:09:d9:46:3d:a3:e9:20:30: b4:a6:d5:d8:6f:46:8f:5e:e7:92:f6:0e:bc:2f:09:27:39:6e: 28:ea:d9:16:71:4c:29:58:82:ef:1f:56:70:6b:96:6f:dc:b4: 5b:06:7e:eb:ab:62:97:16:17:aa:3f:31:4b:ae:74:1d:da:25: cf:a9:cc:a7:37:26:2d:38:38:a9:be:57:51:3f:f5:73:86:a6: 9e:6a:37:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW+UDRDKVmBY6oWJmMJYTrLTc4JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA4MjgwNjQzMTlaFw0yNjA4MzEwNzQxMTlaMDMxMTAvBgNV BAMTKDNCMDBCMERGRDUzQ0U0M0Y1MzQwREYzNTVCNkQxRTRGNjM0MzkwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHBKie2CcRQDx0p/7U1EamquEy bYrng9a2Ji1+C0z9fSfWFG0VsvUUVES+K9xbXAkVfkSmpkUkqKdMlXRSgO9pVkXE z3iNlxDyeZ5xQpMIaU56xn960ufvG+0KLhILa0F7Oak497Riwa0jm+8VNST/40El OnkmaK5z6GGUUhSuRG0+0sWfsn3EFD2yHR4YV0wKExeUHgyH+oUakExl4GByU1Tn fjA0N/E0d8Qbb+zJeF6942r3Zpow48Vz8xq/0pxIHp2WBUe0iSvpAY7pjiyBvpJL FpoNcda96IdkKMiZvhxmICvunoRrtPUNNzQyg4W0PWiyAPM4YSaj/+a1wm/7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOwCw39U85D9TQN81W20eT2NDkMQwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1f4AOUkF9bl xFackaZ3xr0NJF0d7eNBKCZLlu+Y6l2WMumCiDHH8qjbJl31jHjfgmlXA3ezVRFi FZLXTibt4qI45y24/R9PK7uTbzlkX9Jegs8EU5rikDyUEOtdlRi6gTE3XXhZzAEI pOsvEl9xUHwuQg+kmCEs8zc+c3Jck6aX0YiNGNZ+46Z9+d/M+SOY4NB6t7CbIJ4P hkaGaIZm6nRtonc8aM3p1hxbPQnZRj2j6SAwtKbV2G9Gj17nkvYOvC8JJzluKOrZ FnFMKViC7x9WcGuWb9y0WwZ+66tilxYXqj8xS650Hdolz6nMpzcmLTg4qb5XUT/1 c4amnmo3xA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:11 2026 by rpki-client