$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: iVpLhrTn1H+FTXRfnUD/7/qHEawnhRw0h5GWJ5j0x38= Subject key identifier: 0F:73:FE:CC:FA:2D:C6:E0:03:FA:77:97:70:36:FB:C0:EB:96:F2:A6 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 2F236ABEAF831B9331A7FAF7DCF6E16234D5CCC4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:11 +0000 Manifest this update: Fri 28 Aug 2026 06:43:11 +0000 Manifest next update: Mon 31 Aug 2026 12:06:11 +0000 Files and hashes: 1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) 3: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 4: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: rWQD7BugsFpXQ5WeO/HyaM17tgZWvsMKTwIggJO+uRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:23:6a:be:af:83:1b:93:31:a7:fa:f7:dc:f6:e1:62:34:d5:cc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Aug 28 06:43:11 2026 GMT Not After : Aug 31 12:06:11 2026 GMT Subject: CN=0F73FECCFA2DC6E003FA77977036FBC0EB96F2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:9e:9c:dd:26:b8:fa:25:5d:d7:e3:0c:e6: 51:d2:53:8f:cf:46:02:cd:ad:a3:c3:da:fd:5c:c2: 39:91:50:59:35:61:79:67:de:dd:9f:f1:40:9c:bc: 46:39:c6:90:b2:7e:2a:be:a6:fb:37:18:d7:44:61: 60:3e:6d:d2:54:ad:f6:bb:31:b2:98:a3:d8:57:87: a8:ac:ff:fd:f6:20:02:ff:f2:a7:e5:35:37:48:58: 57:bb:fa:8f:8e:f6:ef:31:b0:e8:f5:8e:5f:be:b3: 6a:4d:32:7d:8a:4b:94:47:80:24:eb:c5:c6:9b:7b: 90:5e:a7:6e:00:d6:1e:52:e2:ed:21:12:13:47:c2: 61:28:2e:45:2c:dd:40:ff:56:80:35:d6:94:66:e9: 70:fc:dd:44:32:1b:47:11:6a:e6:22:8b:66:5e:ef: 05:8b:fa:b2:c6:a4:df:d3:fc:20:87:7d:14:8c:87: c3:31:35:10:74:20:ee:c3:17:5f:44:82:a3:b8:eb: 6e:b1:45:00:87:6b:32:98:17:63:42:33:dc:27:18: 5d:cf:c5:ac:ea:76:6b:7a:76:21:ae:06:c8:bd:5f: 22:91:ae:81:95:01:52:da:33:fc:ee:bc:8a:86:58: 65:ad:52:63:5f:91:fc:e7:e4:3b:95:83:f1:60:3a: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:73:FE:CC:FA:2D:C6:E0:03:FA:77:97:70:36:FB:C0:EB:96:F2:A6 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:38:a0:db:6d:39:05:ac:a6:b3:bd:f8:1e:3b:e5:9a:b2:e3: 2c:eb:a9:e7:36:0e:67:37:af:a7:d8:5a:bb:27:61:ee:74:3b: a1:d1:fc:fd:3a:c7:c9:71:0d:55:42:3d:b7:3d:54:19:8f:fb: 2c:69:56:9d:58:84:8a:c2:5b:54:fa:d7:15:f3:71:ca:44:d9: 93:8e:d5:30:7d:49:dd:27:bb:78:37:18:8d:f6:b0:9e:7a:38: 61:a8:58:41:f8:80:76:16:c7:a0:e3:9a:26:25:85:61:d2:cd: e9:14:78:47:0e:29:41:4e:c4:cf:6a:c4:f8:7c:66:c7:5f:42: 03:d7:93:6c:b9:ef:f4:f3:7c:a7:5f:1d:3b:49:1b:1c:c7:f7: 0e:37:65:e5:02:1f:88:b7:cb:50:e5:2c:53:65:9f:f7:72:6b: 0c:15:8b:bd:4b:83:d9:5e:db:77:d5:c2:b3:e6:62:c7:b9:05: d1:e2:b7:6e:33:83:9d:f6:28:cc:1e:f9:5f:a8:dc:99:24:0a: 37:b5:7b:18:55:0a:da:cd:cf:86:e6:2b:82:95:08:b3:a8:cf: a6:43:6c:68:1a:44:5d:fa:78:20:a0:f6:6b:46:8c:b6:e9:f3: 72:8d:b0:5a:0f:a8:3c:de:8a:3d:3c:38:77:05:86:d3:68:77: 89:8d:ae:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULyNqvq+DG5Mxp/r33PbhYjTVzMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA4MjgwNjQzMTFaFw0yNjA4MzExMjA2MTFaMDMxMTAvBgNV BAMTKDBGNzNGRUNDRkEyREM2RTAwM0ZBNzc5NzcwMzZGQkMwRUI5NkYyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKp6c3Sa4+iVd1+MM5lHSU4/P RgLNraPD2v1cwjmRUFk1YXln3t2f8UCcvEY5xpCyfiq+pvs3GNdEYWA+bdJUrfa7 MbKYo9hXh6is//32IAL/8qflNTdIWFe7+o+O9u8xsOj1jl++s2pNMn2KS5RHgCTr xcabe5Bep24A1h5S4u0hEhNHwmEoLkUs3UD/VoA11pRm6XD83UQyG0cRauYii2Ze 7wWL+rLGpN/T/CCHfRSMh8MxNRB0IO7DF19EgqO4626xRQCHazKYF2NCM9wnGF3P xazqdmt6diGuBsi9XyKRroGVAVLaM/zuvIqGWGWtUmNfkfzn5DuVg/FgOoLNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD3P+zPotxuAD+neXcDb7wOuW8qYwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjig2205Baym s734HjvlmrLjLOup5zYOZzevp9hauydh7nQ7odH8/TrHyXENVUI9tz1UGY/7LGlW nViEisJbVPrXFfNxykTZk47VMH1J3Se7eDcYjfawnno4YahYQfiAdhbHoOOaJiWF YdLN6RR4Rw4pQU7Ez2rE+Hxmx19CA9eTbLnv9PN8p18dO0kbHMf3Djdl5QIfiLfL UOUsU2Wf93JrDBWLvUuD2V7bd9XCs+Zix7kF0eK3bjODnfYozB75X6jcmSQKN7V7 GFUK2s3PhuYrgpUIs6jPpkNsaBpEXfp4IKD2a0aMtunzco2wWg+oPN6KPTw4dwWG 02h3iY2u3A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:54 2026 by rpki-client