$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: SOYyxOTUKl8/vHdaW+rBVPV2dNcrPdCA2S0+Q+GqSIc= Subject key identifier: 49:F4:57:B4:B3:25:8B:8C:15:E0:69:C3:F6:25:7D:6C:A6:88:1B:FF Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 0E17398FCE89CEF4099CDFC745837162237B6F53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:18 +0000 Manifest this update: Fri 28 Aug 2026 06:43:18 +0000 Manifest next update: Mon 31 Aug 2026 08:18:18 +0000 Files and hashes: 1: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=) 2: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=) 3: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: Fek4WCGpBMrzQaZ5Pl1p49gFTqGl93fKECdJnI2VDPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:17:39:8f:ce:89:ce:f4:09:9c:df:c7:45:83:71:62:23:7b:6f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Aug 28 06:43:18 2026 GMT Not After : Aug 31 08:18:18 2026 GMT Subject: CN=49F457B4B3258B8C15E069C3F6257D6CA6881BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:4c:c4:6f:e0:9c:42:e9:69:7b:ac:88:e5: 25:57:a7:dd:e9:19:4a:48:85:03:54:e6:f1:3d:70: f2:5c:ee:02:90:0c:bb:a8:44:c8:dd:a2:d6:09:e2: 4a:18:8b:74:2d:61:e8:ae:91:30:68:ad:90:89:b7: 93:6e:7c:38:91:93:32:98:82:ac:7f:13:ad:a2:e2: 93:89:20:b0:70:17:18:3e:12:4d:b0:06:50:77:e7: 02:f9:3a:fc:62:2e:76:8f:ef:05:0a:24:37:e0:e3: 2a:6f:46:00:fa:e2:45:19:3a:e5:d8:71:0d:dd:22: 72:59:20:03:50:e9:5c:4c:c8:56:fe:1d:e3:c3:0a: a0:f9:82:79:f9:09:f2:da:34:12:1c:5d:03:56:69: df:86:87:f1:9d:a6:90:3f:07:d4:92:7e:1b:3d:6a: 18:58:f4:81:97:33:c6:53:ce:00:d3:f5:db:dc:5c: 7f:06:4d:2f:5b:0a:a9:54:69:27:64:05:29:bf:7d: f1:68:7d:ff:f8:be:7e:dd:0c:e8:c6:03:7b:8e:13: c6:76:9c:59:c0:4d:fd:23:1f:22:37:60:e8:e0:e5: 78:da:30:8f:d4:ba:5f:6d:a9:7f:06:75:99:2a:c0: 46:e9:47:71:34:a1:e4:ce:b1:dd:f1:16:25:c0:48: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:57:B4:B3:25:8B:8C:15:E0:69:C3:F6:25:7D:6C:A6:88:1B:FF X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:97:a4:35:d5:c6:4b:f0:db:16:b6:ac:9f:a8:37:74:35:87: 7d:5f:90:d3:b7:b8:7b:be:24:f5:84:9c:db:7d:c0:02:19:6d: c5:35:bb:89:0a:69:9c:63:d4:72:34:42:e6:ed:a8:fe:9f:5f: d2:32:45:5e:a7:33:a4:54:d0:6a:3f:d9:62:75:7b:3f:01:60: 0a:63:ac:1b:55:20:93:2e:8b:10:e1:78:38:12:36:4c:3f:f5: 9a:98:9a:04:d2:fd:39:9e:34:2b:fd:07:d3:cb:a6:b4:79:04: 7e:5f:75:8b:ef:59:7a:d1:33:d4:22:f3:64:c1:11:9f:77:c6: 2a:0a:1a:3f:c4:aa:5b:72:d1:d0:28:fe:af:17:da:28:82:42: ad:ef:a6:46:0f:bd:27:b3:1d:8c:bd:71:d3:49:6a:ed:cc:d5: 54:ca:2b:13:b2:c1:99:57:2b:a7:af:92:4e:18:1c:f0:e7:16: cd:56:56:d2:59:5d:be:d8:d8:80:f1:b4:19:b3:99:fa:46:63: 4a:27:ff:9d:85:c0:27:c8:49:ed:da:f3:5c:66:74:e2:d2:07: c9:a3:1e:be:e0:83:6c:94:1a:82:b2:75:ab:ec:a7:b5:60:d6: ad:eb:3c:1a:57:97:98:b6:6c:89:3b:05:e3:f3:a0:09:a3:17: 9f:f2:fa:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDhc5j86JzvQJnN/HRYNxYiN7b1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjA4MjgwNjQzMThaFw0yNjA4MzEwODE4MThaMDMxMTAvBgNV BAMTKDQ5RjQ1N0I0QjMyNThCOEMxNUUwNjlDM0Y2MjU3RDZDQTY4ODFCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSUzEb+CcQulpe6yI5SVXp93p GUpIhQNU5vE9cPJc7gKQDLuoRMjdotYJ4koYi3QtYeiukTBorZCJt5NufDiRkzKY gqx/E62i4pOJILBwFxg+Ek2wBlB35wL5OvxiLnaP7wUKJDfg4ypvRgD64kUZOuXY cQ3dInJZIANQ6VxMyFb+HePDCqD5gnn5CfLaNBIcXQNWad+Gh/GdppA/B9SSfhs9 ahhY9IGXM8ZTzgDT9dvcXH8GTS9bCqlUaSdkBSm/ffFoff/4vn7dDOjGA3uOE8Z2 nFnATf0jHyI3YOjg5XjaMI/Uul9tqX8GdZkqwEbpR3E0oeTOsd3xFiXASN/VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSfRXtLMli4wV4GnD9iV9bKaIG/8wHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5ekNdXGS/Db Frasn6g3dDWHfV+Q07e4e74k9YSc233AAhltxTW7iQppnGPUcjRC5u2o/p9f0jJF XqczpFTQaj/ZYnV7PwFgCmOsG1Ugky6LEOF4OBI2TD/1mpiaBNL9OZ40K/0H08um tHkEfl91i+9ZetEz1CLzZMERn3fGKgoaP8SqW3LR0Cj+rxfaKIJCre+mRg+9J7Md jL1x00lq7czVVMorE7LBmVcrp6+SThgc8OcWzVZW0lldvtjYgPG0GbOZ+kZjSif/ nYXAJ8hJ7drzXGZ04tIHyaMevuCDbJQagrJ1q+yntWDWres8GleXmLZsiTsF4/Og CaMXn/L6Kg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:57:38 2026 by rpki-client