$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: boQTjjwTJ7w2z6N4tpirnjxj7dJ8gt5Uq6zIndxIBgc= Subject key identifier: F9:61:69:DA:2F:FB:FF:DC:42:E5:E3:70:7A:68:D1:1D:EA:4E:5A:36 Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 41180F337A85F192D692F055220D53FB8FA97E94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:18 +0000 Manifest this update: Fri 28 Aug 2026 06:43:18 +0000 Manifest next update: Mon 31 Aug 2026 10:16:18 +0000 Files and hashes: 1: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=) 2: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=) 3: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=) 4: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: vhniGMGysHOUss4JvK9neIoEbLwqQm4KVtFN2ujEacU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:18:0f:33:7a:85:f1:92:d6:92:f0:55:22:0d:53:fb:8f:a9:7e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Aug 28 06:43:18 2026 GMT Not After : Aug 31 10:16:18 2026 GMT Subject: CN=F96169DA2FFBFFDC42E5E3707A68D11DEA4E5A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:e5:04:ab:f7:11:88:2a:da:44:9c:b1:85: 1d:d2:df:43:2c:52:b4:4d:a7:8a:3e:cc:5a:c9:6e: d6:11:72:29:fc:c6:8e:3b:60:f7:e9:3c:77:cd:ea: 71:65:45:67:a8:84:87:e8:ce:5d:9e:d8:44:38:aa: a0:98:20:ff:72:7a:9d:7d:53:a3:82:b4:3d:b7:6a: 68:99:7a:d9:ef:de:96:b7:17:e6:49:cb:dd:18:53: 6a:59:20:aa:9a:6b:e1:ab:d8:ea:69:25:79:71:98: fd:9e:e0:aa:b2:92:76:9a:b1:c9:35:64:47:53:9c: 0f:0c:26:2f:b0:7d:b3:89:50:04:3b:ca:1a:42:89: 1a:72:17:b3:81:62:38:fa:c8:44:ad:f7:cd:d9:39: ff:f8:01:66:55:e7:f2:6a:7d:ce:62:2c:d6:4f:59: 4a:d6:40:53:10:28:a1:47:32:fa:3a:21:79:8c:d8: 59:9b:27:27:9a:e7:3a:76:29:54:b6:88:c6:f0:b4: f6:25:84:fa:84:1d:f0:24:93:ab:d8:7b:55:ee:40: 5a:32:19:e7:b8:6a:35:fe:28:1c:9f:10:71:f7:5d: c5:31:1d:40:1b:e8:e0:8e:ff:d3:d6:f9:c5:a4:2a: 93:f4:cf:9a:30:88:9c:b9:b0:f5:f3:6b:69:5f:5c: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:61:69:DA:2F:FB:FF:DC:42:E5:E3:70:7A:68:D1:1D:EA:4E:5A:36 X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:df:52:b3:bc:aa:0b:61:8d:d1:d5:a6:7b:3b:76:fa:73:fb: d4:53:2f:3b:75:99:03:f9:0c:2f:1d:6b:92:ec:8f:c0:1f:26: ca:8d:a0:33:f8:a3:fe:cc:3b:9a:f3:2e:ed:24:1a:80:4f:d6: 6f:9a:47:59:32:72:ac:04:f7:9f:54:d3:85:b1:f0:1f:35:e7: dd:20:37:0f:46:6d:1a:cf:cc:1b:d4:74:e3:ab:88:a9:b3:14: be:f2:e7:8f:44:ea:93:a3:ab:87:19:53:2e:06:43:01:b5:d2: 3a:78:83:bb:ab:03:5d:ad:f4:d0:8c:19:68:30:f7:67:00:4b: 04:e2:80:6d:df:85:60:f9:72:0a:45:0c:e1:ff:74:66:d5:6d: 55:1c:1e:f2:d5:f4:10:c5:52:27:65:c4:38:cb:ed:88:60:d7: b7:39:97:b1:34:dd:1a:e6:df:61:42:44:1d:f9:98:a6:0f:a5: 50:82:6f:f1:45:57:45:b3:b8:90:7c:26:ca:ca:65:aa:90:1c: 22:71:ce:1a:7d:84:8d:47:e3:e4:6f:83:bd:cf:44:f8:00:b4: e3:93:d2:ce:9e:5d:a0:92:c9:3b:34:96:ec:71:55:80:43:e6: a7:c6:44:d1:81:9c:7d:86:7d:80:51:29:d8:6f:6c:7e:e5:ff: 9a:bc:0f:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQRgPM3qF8ZLWkvBVIg1T+4+pfpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA4MjgwNjQzMThaFw0yNjA4MzExMDE2MThaMDMxMTAvBgNV BAMTKEY5NjE2OURBMkZGQkZGREM0MkU1RTM3MDdBNjhEMTFERUE0RTVBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpNeUEq/cRiCraRJyxhR3S30Ms UrRNp4o+zFrJbtYRcin8xo47YPfpPHfN6nFlRWeohIfozl2e2EQ4qqCYIP9yep19 U6OCtD23amiZetnv3pa3F+ZJy90YU2pZIKqaa+Gr2OppJXlxmP2e4Kqyknaasck1 ZEdTnA8MJi+wfbOJUAQ7yhpCiRpyF7OBYjj6yESt983ZOf/4AWZV5/Jqfc5iLNZP WUrWQFMQKKFHMvo6IXmM2FmbJyea5zp2KVS2iMbwtPYlhPqEHfAkk6vYe1XuQFoy Gee4ajX+KByfEHH3XcUxHUAb6OCO/9PW+cWkKpP0z5owiJy5sPXza2lfXNT3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+WFp2i/7/9xC5eNwemjRHepOWjYwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF99Ss7yqC2GN 0dWmezt2+nP71FMvO3WZA/kMLx1rkuyPwB8myo2gM/ij/sw7mvMu7SQagE/Wb5pH WTJyrAT3n1TThbHwHzXn3SA3D0ZtGs/MG9R046uIqbMUvvLnj0Tqk6OrhxlTLgZD AbXSOniDu6sDXa300IwZaDD3ZwBLBOKAbd+FYPlyCkUM4f90ZtVtVRwe8tX0EMVS J2XEOMvtiGDXtzmXsTTdGubfYUJEHfmYpg+lUIJv8UVXRbO4kHwmysplqpAcInHO Gn2EjUfj5G+Dvc9E+AC045PSzp5doJLJOzSW7HFVgEPmp8ZE0YGcfYZ9gFEp2G9s fuX/mrwPEw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:28 2026 by rpki-client