$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: cFw1CoMwrPKacng8PT1lmqenlOpkYslhN/xTXcbpOyA= Subject key identifier: B6:63:0D:F4:77:65:59:AA:C8:C9:D0:4B:19:65:15:D7:DA:60:D3:FD Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 3C4FD465C6C51FB681E199518183A696D4D2EEE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:07 +0000 Manifest this update: Fri 28 Aug 2026 06:43:07 +0000 Manifest next update: Mon 31 Aug 2026 06:53:07 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: OtahLSyFddB05KRz26YMofIOSny4IBBCCJok5iSJXzE=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 3: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 06:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4f:d4:65:c6:c5:1f:b6:81:e1:99:51:81:83:a6:96:d4:d2:ee:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Aug 28 06:43:07 2026 GMT Not After : Aug 31 06:53:07 2026 GMT Subject: CN=B6630DF4776559AAC8C9D04B196515D7DA60D3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:36:98:e1:77:d4:09:4f:cb:6f:be:62:1b: 0e:2d:d6:6d:c8:75:d8:c5:2a:3b:ed:1b:c8:3d:45: 5f:11:c7:c9:90:e3:d3:9a:54:4c:d7:d1:1e:ea:92: 54:69:09:65:86:37:77:d1:36:bc:b4:91:65:8b:ae: ec:2f:d0:9e:d0:2c:ec:f2:5c:3f:e4:1a:56:ed:83: 6f:ed:a5:8b:92:56:a8:ed:8b:a4:1a:aa:88:be:f6: be:6a:83:17:28:b5:e4:f6:54:ec:92:05:26:13:f0: 99:09:8a:ce:4a:61:74:6e:1e:17:1a:86:1a:db:4e: 3f:0d:3b:b5:97:bc:bc:a5:67:70:0d:29:02:63:ed: c9:9e:f1:4c:9c:ce:ab:72:77:c9:d4:8e:f3:b8:85: cc:c3:e0:14:3a:ef:ad:4c:4e:37:44:36:3e:02:23: 07:17:ed:1b:b5:ab:e8:8e:53:0e:9a:37:ad:e2:59: f4:a2:2d:3d:eb:66:4c:34:c5:d8:ad:46:04:5b:cf: 50:2a:c7:fd:0a:8b:03:05:c4:18:6f:df:6f:a3:94: e8:27:64:94:fd:4b:14:77:c6:a5:9b:49:96:52:51: 23:b7:b5:b6:3d:bc:b3:2a:cc:06:57:8a:cf:70:46: 8f:8a:89:ba:8f:40:e5:1e:83:2a:5a:2c:4f:ec:ea: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:63:0D:F4:77:65:59:AA:C8:C9:D0:4B:19:65:15:D7:DA:60:D3:FD X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7f:45:d3:81:01:9d:9e:6a:59:15:55:95:62:c2:27:2b:4e: 62:54:2f:0f:56:46:4d:49:6c:5a:3b:32:25:3d:48:e5:95:8a: 20:da:a7:f7:04:05:5f:64:eb:65:9f:b4:da:d0:3d:52:ad:ad: 92:ec:8a:2a:cc:d2:05:64:77:d3:57:b9:25:3b:33:e7:d8:fb: bf:1b:de:1a:8d:79:70:55:11:eb:a3:6f:c8:c8:51:69:ac:29: f7:95:cd:c5:92:30:fc:5d:c5:d3:da:e4:cb:c1:86:4e:17:8d: d3:48:c6:14:50:8b:e4:d3:20:01:3c:c5:58:00:e7:c8:8b:17: 68:55:00:69:79:e5:70:64:a2:ed:eb:b7:5d:6a:8c:8e:6b:c0: 2e:e0:bb:6a:a6:82:8e:61:29:9a:c6:25:e0:b6:21:e0:4a:99: c4:99:7d:60:ad:47:c8:73:f9:c3:e6:9f:13:bf:aa:52:4d:89: 6b:a7:2b:e0:b3:f6:86:e6:23:06:79:6b:1c:ed:8a:53:43:78: 76:c8:58:06:f5:2b:6e:b1:17:d6:e5:35:30:84:3a:5f:17:4d: 30:6e:36:e3:b7:f4:55:aa:42:a4:4f:e3:58:61:33:5f:a0:75: 5a:8f:46:0b:90:07:d7:5b:db:03:53:5d:0d:dc:d8:31:73:4a: b6:09:e8:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPE/UZcbFH7aB4ZlRgYOmltTS7uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA4MjgwNjQzMDdaFw0yNjA4MzEwNjUzMDdaMDMxMTAvBgNV BAMTKEI2NjMwREY0Nzc2NTU5QUFDOEM5RDA0QjE5NjUxNUQ3REE2MEQzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5zaY4XfUCU/Lb75iGw4t1m3I ddjFKjvtG8g9RV8Rx8mQ49OaVEzX0R7qklRpCWWGN3fRNry0kWWLruwv0J7QLOzy XD/kGlbtg2/tpYuSVqjti6Qaqoi+9r5qgxcoteT2VOySBSYT8JkJis5KYXRuHhca hhrbTj8NO7WXvLylZ3ANKQJj7cme8Uyczqtyd8nUjvO4hczD4BQ6761MTjdENj4C IwcX7Ru1q+iOUw6aN63iWfSiLT3rZkw0xditRgRbz1Aqx/0KiwMFxBhv32+jlOgn ZJT9SxR3xqWbSZZSUSO3tbY9vLMqzAZXis9wRo+KibqPQOUegypaLE/s6jcfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtmMN9HdlWarIydBLGWUV19pg0/0wHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApX9F04EBnZ5q WRVVlWLCJytOYlQvD1ZGTUlsWjsyJT1I5ZWKINqn9wQFX2TrZZ+02tA9Uq2tkuyK KszSBWR301e5JTsz59j7vxveGo15cFUR66NvyMhRaawp95XNxZIw/F3F09rky8GG TheN00jGFFCL5NMgATzFWADnyIsXaFUAaXnlcGSi7eu3XWqMjmvALuC7aqaCjmEp msYl4LYh4EqZxJl9YK1HyHP5w+afE7+qUk2Ja6cr4LP2huYjBnlrHO2KU0N4dshY BvUrbrEX1uU1MIQ6XxdNMG4247f0VapCpE/jWGEzX6B1Wo9GC5AH11vbA1NdDdzY MXNKtgnoHA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:54:53 2026 by rpki-client