$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: WTNm2lWEVmzzaqO1AQ7j7Iy+wSbg77m3RZQnE+fKYVE= Subject key identifier: FA:87:D5:3C:73:A1:17:8E:58:C4:81:64:08:36:51:B1:96:A7:30:37 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 7DB70D09E96D7A31D527E182C8B795B0E9C23880 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 012A Signing time: Fri 04 Sep 2026 02:59:44 +0000 Manifest this update: Fri 04 Sep 2026 02:54:44 +0000 Manifest next update: Mon 07 Sep 2026 11:54:44 +0000 Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 2: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: mJXnObAevwKGPyQdhulQFp5y+IGI8CDmZrWI3shtYQM=) 3: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b7:0d:09:e9:6d:7a:31:d5:27:e1:82:c8:b7:95:b0:e9:c2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Sep 4 02:54:44 2026 GMT Not After : Sep 7 11:54:44 2026 GMT Subject: CN=FA87D53C73A1178E58C48164083651B196A73037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:a6:2b:a4:6c:da:3c:f6:11:94:24:92:e9: 90:b1:36:71:ec:08:39:ec:bd:72:75:c3:97:49:a9: 5c:58:10:0d:49:e9:43:49:ba:9a:5b:42:94:17:de: 7a:f3:4e:7c:32:60:fa:a9:d5:56:12:63:e2:cc:9e: 27:93:ea:5f:c9:5b:41:4e:21:46:44:d6:d8:4a:2e: 36:18:fb:76:dc:be:2c:cc:fb:72:e5:72:f5:49:6f: f8:99:21:76:14:0b:c7:20:97:b8:b8:e6:f2:18:c2: 75:c0:10:23:fe:8e:13:9e:bf:4c:ff:2a:5d:ee:72: c5:b4:4e:60:fa:42:58:ae:b8:a9:86:12:c3:08:d0: 83:1b:e5:3f:47:2e:bf:c4:0a:ad:5f:9b:df:35:f2: 1b:3d:6c:39:55:3c:21:f1:ce:de:b8:9a:5f:d5:8f: e0:c4:87:1a:89:9d:01:b5:18:f0:26:01:6e:85:f8: 27:fb:60:55:32:d5:80:94:e5:f7:8b:a1:1f:d1:a5: 2d:55:14:9a:37:f6:8c:a1:a4:51:6c:c6:8c:a8:2d: bf:3b:bb:39:23:db:fb:50:25:00:ae:78:08:76:98: 85:38:7e:8c:d2:dc:5a:53:70:bb:a7:8a:68:9d:62: 90:f7:db:97:ac:cf:ef:26:60:a1:94:06:e3:0d:ab: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:D5:3C:73:A1:17:8E:58:C4:81:64:08:36:51:B1:96:A7:30:37 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:82:26:b6:09:11:65:3d:f9:2d:07:8d:86:78:01:df:6c:06: fe:f5:ed:53:1b:f7:97:3d:a6:69:88:90:f5:25:4b:db:7a:95: 6f:b4:ce:54:f7:bf:9c:d4:6a:ab:05:8b:58:e3:2a:49:ea:b9: 1f:11:14:98:f5:a3:6a:33:2c:fd:b8:bf:77:06:cc:b3:e5:df: aa:ce:28:cb:67:1e:b9:52:cf:a0:6a:3f:da:16:48:b0:31:4d: b7:e1:9f:80:14:a8:3c:87:06:8e:2b:20:f1:3c:bb:68:50:1b: 4d:c0:65:9c:0d:17:86:7f:d7:82:28:5d:1a:cd:56:aa:91:0a: 66:ba:1d:a3:3f:2e:dd:45:e0:8b:69:09:f8:2b:65:d1:d5:8b: b6:9a:40:5d:af:64:8b:9f:b3:e5:93:f2:24:2f:0a:d0:f1:b8: 0b:a1:60:c2:02:85:15:67:ae:4a:0c:e6:83:ff:8e:b2:f2:42: 24:a4:14:85:30:cb:06:d3:00:8f:11:00:c0:4f:28:ed:ac:4c: b2:69:a4:0d:32:3a:f9:3d:57:e6:e3:8b:41:a7:72:1d:b9:7e: 3e:50:75:be:8a:bf:91:90:06:48:cc:e8:76:31:9c:f8:d3:51: d7:63:c3:30:1e:92:c7:bc:51:4a:28:07:9e:e0:e0:51:87:bc: 2d:08:01:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfbcNCeltejHVJ+GCyLeVsOnCOIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA5MDQwMjU0NDRaFw0yNjA5MDcxMTU0NDRaMDMxMTAvBgNV BAMTKEZBODdENTNDNzNBMTE3OEU1OEM0ODE2NDA4MzY1MUIxOTZBNzMwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfaYrpGzaPPYRlCSS6ZCxNnHs CDnsvXJ1w5dJqVxYEA1J6UNJuppbQpQX3nrzTnwyYPqp1VYSY+LMnieT6l/JW0FO IUZE1thKLjYY+3bcvizM+3LlcvVJb/iZIXYUC8cgl7i45vIYwnXAECP+jhOev0z/ Kl3ucsW0TmD6QliuuKmGEsMI0IMb5T9HLr/ECq1fm9818hs9bDlVPCHxzt64ml/V j+DEhxqJnQG1GPAmAW6F+Cf7YFUy1YCU5feLoR/RpS1VFJo39oyhpFFsxoyoLb87 uzkj2/tQJQCueAh2mIU4fozS3FpTcLunimidYpD325esz+8mYKGUBuMNq6QlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+ofVPHOhF45YxIFkCDZRsZanMDcwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYImtgkRZT35 LQeNhngB32wG/vXtUxv3lz2maYiQ9SVL23qVb7TOVPe/nNRqqwWLWOMqSeq5HxEU mPWjajMs/bi/dwbMs+Xfqs4oy2ceuVLPoGo/2hZIsDFNt+GfgBSoPIcGjisg8Ty7 aFAbTcBlnA0Xhn/XgihdGs1WqpEKZrodoz8u3UXgi2kJ+Ctl0dWLtppAXa9ki5+z 5ZPyJC8K0PG4C6FgwgKFFWeuSgzmg/+OsvJCJKQUhTDLBtMAjxEAwE8o7axMsmmk DTI6+T1X5uOLQadyHbl+PlB1voq/kZAGSMzodjGc+NNR12PDMB6Sx7xRSigHnuDg UYe8LQgBSw== -----END CERTIFICATE-----Generated at Sat Sep 5 07:17:22 2026 by rpki-client