$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: cI+2TQ7t2kAwet0V5mqap+LRbqJXU48PVHVgWOUVItI= Subject key identifier: CA:EC:E6:6B:E9:D2:B9:72:E4:AC:EB:13:08:5E:08:B6:AD:F3:B8:39 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 428803EA8B243277BD5B6FBD34C75FCD571124C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 012C Signing time: Fri 28 Aug 2026 06:58:28 +0000 Manifest this update: Fri 28 Aug 2026 06:53:28 +0000 Manifest next update: Mon 31 Aug 2026 11:54:28 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: ta0art3Pervw+bZ/NwAAdD7PLl+LQK3i8A2brKbKF9k=) 3: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:88:03:ea:8b:24:32:77:bd:5b:6f:bd:34:c7:5f:cd:57:11:24:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Aug 28 06:53:28 2026 GMT Not After : Aug 31 11:54:28 2026 GMT Subject: CN=CAECE66BE9D2B972E4ACEB13085E08B6ADF3B839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:ef:ab:68:38:f7:93:90:5c:00:cf:50:21: 89:e2:b1:70:b4:32:97:b1:62:ea:b8:ae:a4:10:71: cd:48:01:f4:e5:10:05:58:44:bb:94:f3:41:dd:26: 66:93:f6:b8:f8:1c:fe:11:26:a6:12:57:19:ac:a4: e3:7d:40:bf:72:d7:f0:c6:ca:a9:df:45:e0:bd:e0: a3:00:c9:a6:f0:ef:8b:20:af:d6:c0:0d:20:35:f8: 05:99:12:de:e3:c4:ca:48:ff:9b:8f:5d:6f:ce:f1: f5:17:c6:c3:a8:1c:42:92:82:ed:4f:6f:c3:c5:5c: 7a:4d:cb:fe:6d:25:6f:a1:68:f7:91:9a:e8:f9:47: 3c:2c:5a:2d:38:80:de:89:80:ec:98:29:45:5d:7a: a2:04:dc:7c:60:a9:4c:90:97:97:ed:7e:e3:41:dd: 68:45:2c:d0:67:58:c1:f8:9c:08:63:f9:af:d1:5a: c7:0c:ef:8c:30:db:a9:6f:d2:bf:79:0a:f5:8a:1f: 42:79:b7:86:96:8a:24:c5:d6:e7:04:85:71:4d:43: 83:03:2c:65:78:13:5f:bd:ac:eb:15:af:4f:04:73: 1b:dd:2f:29:e0:b6:06:be:e6:3e:3b:42:63:44:34: 0a:fc:df:a4:e6:07:d2:58:68:1b:88:0d:d6:c7:d6: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:E6:6B:E9:D2:B9:72:E4:AC:EB:13:08:5E:08:B6:AD:F3:B8:39 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a4:66:9b:92:af:ba:0d:9f:cc:0f:88:3b:d3:81:23:84:13: c3:61:9d:6e:44:ad:8b:28:a9:f7:fa:41:b9:bf:78:bd:69:b8: 3d:05:34:93:32:e1:3b:98:67:a9:d8:a4:e9:bc:a5:9b:2c:86: 28:51:e6:f4:04:a2:ca:8a:f6:f4:a7:43:0f:96:7a:f6:fb:7c: 27:93:b7:38:ba:3b:98:d1:60:d6:50:25:32:a3:c9:c7:3d:df: 9c:3c:22:50:e5:0d:2e:e9:83:84:b2:72:45:6b:f2:76:9e:b9: 6d:30:16:73:14:59:1f:ff:50:8b:58:9c:cc:4e:67:0c:04:ee: f8:9f:76:b3:26:0e:56:02:82:39:f7:da:e8:25:3e:e5:95:14: 17:31:e0:42:5f:02:6b:1f:24:68:82:fa:4a:6e:b2:60:4a:fc: 1f:03:42:6f:b2:d8:5f:74:42:9e:b3:89:30:5e:84:6a:6a:e9: e2:4c:f5:8d:52:c0:3b:f0:4e:26:af:bc:a6:b6:8b:f3:e1:0c: a7:a3:7a:0c:be:dc:65:dc:c9:86:61:79:13:18:ec:78:17:1b: 5b:88:75:83:9a:7b:5c:ba:a0:5f:0e:88:96:4f:c7:60:87:2f: 98:8d:8a:8c:ce:45:15:37:7b:fe:99:a8:a2:83:c4:46:bc:83: 9e:c2:90:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQogD6oskMne9W2+9NMdfzVcRJMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA4MjgwNjUzMjhaFw0yNjA4MzExMTU0MjhaMDMxMTAvBgNV BAMTKENBRUNFNjZCRTlEMkI5NzJFNEFDRUIxMzA4NUUwOEI2QURGM0I4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBu+raDj3k5BcAM9QIYnisXC0 MpexYuq4rqQQcc1IAfTlEAVYRLuU80HdJmaT9rj4HP4RJqYSVxmspON9QL9y1/DG yqnfReC94KMAyabw74sgr9bADSA1+AWZEt7jxMpI/5uPXW/O8fUXxsOoHEKSgu1P b8PFXHpNy/5tJW+haPeRmuj5RzwsWi04gN6JgOyYKUVdeqIE3HxgqUyQl5ftfuNB 3WhFLNBnWMH4nAhj+a/RWscM74ww26lv0r95CvWKH0J5t4aWiiTF1ucEhXFNQ4MD LGV4E1+9rOsVr08EcxvdLyngtga+5j47QmNENAr836TmB9JYaBuIDdbH1rX7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyuzma+nSuXLkrOsTCF4Itq3zuDkwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6Rmm5Kvug2f zA+IO9OBI4QTw2GdbkStiyip9/pBub94vWm4PQU0kzLhO5hnqdik6bylmyyGKFHm 9ASiyor29KdDD5Z69vt8J5O3OLo7mNFg1lAlMqPJxz3fnDwiUOUNLumDhLJyRWvy dp65bTAWcxRZH/9Qi1iczE5nDATu+J92syYOVgKCOffa6CU+5ZUUFzHgQl8Cax8k aIL6Sm6yYEr8HwNCb7LYX3RCnrOJMF6Eamrp4kz1jVLAO/BOJq+8praL8+EMp6N6 DL7cZdzJhmF5ExjseBcbW4h1g5p7XLqgXw6Ilk/HYIcvmI2KjM5FFTd7/pmoooPE RryDnsKQ4A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:10:34 2026 by rpki-client