$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: xRgoQgxC5l4Gt3F/Bwd6oGV9a/QEHLu3v/iBMo70lqA= Subject key identifier: 1E:2A:6C:8C:D9:3D:51:C1:75:3D:FE:62:0D:53:F2:C8:44:2B:C3:A2 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 7208BFE5628D910B26A5EA35364C4E3A84823F0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 013A Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 17:52:00 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: 9kQ5ys4yauauM1eOEe5afd1VCAMNubcagMrceU1nxbM=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:08:bf:e5:62:8d:91:0b:26:a5:ea:35:36:4c:4e:3a:84:82:3f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 17:52:00 2026 GMT Subject: CN=1E2A6C8CD93D51C1753DFE620D53F2C8442BC3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:5c:e7:51:ca:fa:78:63:59:84:7f:e9:10: ed:60:69:cd:87:a5:61:9d:b2:42:1c:86:46:e1:03: 28:9c:2b:ea:0e:14:d3:99:18:91:ca:91:9e:1d:92: a8:a0:3e:3d:db:1f:27:0c:9f:be:22:98:7c:e6:41: 57:9f:bd:91:57:4e:c9:40:03:32:b9:83:78:e7:47: 72:fa:99:cc:2d:4e:f2:7e:04:87:b7:ee:f6:19:61: f7:34:c8:7a:22:12:9c:96:c6:0c:0f:ee:74:5e:2a: 98:69:6d:7f:fd:c1:4d:d4:d8:ea:88:9c:de:bc:db: 18:31:23:e1:41:b4:7d:90:ad:3c:07:b7:bd:42:f5: 4c:3a:70:98:6f:08:25:ae:28:cc:e8:ed:a9:45:41: 4e:39:a0:e9:09:cb:c7:fc:3f:89:e0:ba:4c:5a:a1: 70:1a:56:66:74:91:39:b6:eb:a1:62:9b:7a:99:a9: 01:f3:c4:bf:3a:25:27:44:d2:30:a6:55:ce:4e:5d: a0:eb:ad:7f:b7:55:7e:17:c0:86:7d:55:a2:38:98: 40:aa:db:5d:0f:af:e7:93:f2:da:53:ee:ba:9e:27: 3a:c0:d5:7d:05:54:1b:66:41:e8:ec:89:70:ae:1d: 50:5b:8a:9f:d7:7d:e8:77:6b:ca:40:80:84:a6:bc: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:6C:8C:D9:3D:51:C1:75:3D:FE:62:0D:53:F2:C8:44:2B:C3:A2 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:55:67:5a:f3:f9:ee:5f:ed:6d:34:bf:8d:f2:49:6b:aa: 14:1c:e1:1a:96:05:24:d1:fa:e1:ba:56:f7:61:16:e1:ab:ed: 9a:77:9f:61:4f:b4:ad:5c:7f:c9:39:d7:bf:0e:a0:37:4c:8a: 1b:4c:7b:d6:2b:9c:70:54:04:d5:b3:89:5d:26:25:d6:a8:6a: 14:b1:02:78:73:10:48:fd:0d:61:5d:ca:6b:4d:a7:6c:61:5d: 2d:e7:67:a2:c8:1a:24:4e:20:81:20:0f:44:10:50:15:ea:25: a3:6c:31:b9:20:f6:76:29:e2:17:f1:af:60:72:04:46:91:90: ca:64:7f:09:a3:89:a4:64:39:23:24:a3:55:e1:1a:f7:fb:70: e2:a7:b4:46:0a:8e:3e:68:87:46:f5:36:67:d7:9f:08:8a:76: 5e:2c:6d:1c:fd:7f:c2:0b:18:a0:f0:51:1a:43:3f:a5:c5:6c: bd:26:26:0a:1d:1a:26:0e:c2:ab:52:ce:2d:fe:cf:ff:09:be: d8:c8:5c:73:7c:76:dd:88:a9:f6:d1:88:7b:39:b1:70:3b:6b: c1:4a:c6:02:be:a4:b8:2e:3a:54:be:b8:7d:7a:f4:e6:ab:16: 71:89:8d:25:6b:8b:57:0e:de:10:ff:f4:be:d5:07:e4:c2:bf: 0e:ec:af:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcgi/5WKNkQsmpeo1NkxOOoSCPwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExNzUyMDBaMDMxMTAvBgNV BAMTKDFFMkE2QzhDRDkzRDUxQzE3NTNERkU2MjBENTNGMkM4NDQyQkMzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKlznUcr6eGNZhH/pEO1gac2H pWGdskIchkbhAyicK+oOFNOZGJHKkZ4dkqigPj3bHycMn74imHzmQVefvZFXTslA AzK5g3jnR3L6mcwtTvJ+BIe37vYZYfc0yHoiEpyWxgwP7nReKphpbX/9wU3U2OqI nN682xgxI+FBtH2QrTwHt71C9Uw6cJhvCCWuKMzo7alFQU45oOkJy8f8P4ngukxa oXAaVmZ0kTm266Fim3qZqQHzxL86JSdE0jCmVc5OXaDrrX+3VX4XwIZ9VaI4mECq 210Pr+eT8tpT7rqeJzrA1X0FVBtmQejsiXCuHVBbip/Xfeh3a8pAgISmvM73AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHipsjNk9UcF1Pf5iDVPyyEQrw6IwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQFVZ1rz+e5f 7W00v43ySWuqFBzhGpYFJNH64bpW92EW4avtmnefYU+0rVx/yTnXvw6gN0yKG0x7 1iuccFQE1bOJXSYl1qhqFLECeHMQSP0NYV3Ka02nbGFdLednosgaJE4ggSAPRBBQ Feolo2wxuSD2diniF/GvYHIERpGQymR/CaOJpGQ5IySjVeEa9/tw4qe0RgqOPmiH RvU2Z9efCIp2XixtHP1/wgsYoPBRGkM/pcVsvSYmCh0aJg7Cq1LOLf7P/wm+2Mhc c3x23Yip9tGIezmxcDtrwUrGAr6kuC46VL64fXr05qsWcYmNJWuLVw7eEP/0vtUH 5MK/Duyveg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:42 2026 by rpki-client