$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: jASMBfzBrgluMax9xiI45sQWzRzUpkF6uNLLYeGzh3o= Subject key identifier: 30:5E:79:30:5B:06:F2:C2:5F:ED:F1:DA:F1:D5:C0:76:72:8B:99:A3 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 7EB8DD48425AEF7DF62E91D9059C38970B27C258 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:24 +0000 Manifest this update: Fri 28 Aug 2026 06:43:24 +0000 Manifest next update: Mon 31 Aug 2026 10:10:24 +0000 Files and hashes: 1: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=) 2: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=) 3: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=) 4: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=) 5: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=) 6: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=) 7: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=) 8: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=) 9: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=) 10: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=) 11: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=) 12: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=) 13: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=) 14: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: 49wVgQh7grNyTNFiW/2sk4KA+TSajJJ7kGGNxJFHNnw=) 15: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=) 16: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=) 17: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=) 18: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=) 19: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=) 20: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=) 21: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b8:dd:48:42:5a:ef:7d:f6:2e:91:d9:05:9c:38:97:0b:27:c2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Aug 28 06:43:24 2026 GMT Not After : Aug 31 10:10:24 2026 GMT Subject: CN=305E79305B06F2C25FEDF1DAF1D5C076728B99A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:4b:eb:8c:28:16:94:33:14:dd:d5:5e:d5: fb:ee:49:11:68:c3:03:17:63:d9:4e:87:05:e8:dd: 37:91:cb:bf:48:da:9d:4d:2b:d1:a1:ad:3b:c9:f7: 0a:1d:4d:13:ad:38:86:8e:7b:37:33:72:d2:a3:3d: 00:a4:9e:c0:a7:65:e8:87:ab:29:57:43:04:c8:ae: 4e:85:38:8f:47:53:42:6c:19:12:8b:d4:d1:a3:07: 00:9a:4d:11:33:0c:ef:f1:b5:b9:20:47:35:ab:79: f2:7d:60:91:ca:73:16:c5:f9:60:a7:eb:70:1d:e4: cf:5b:01:65:9f:cc:56:e3:36:35:5e:84:68:84:fb: cc:ee:7e:d1:f9:ee:49:da:3a:6b:df:c8:4f:4c:35: 62:ba:42:e3:66:16:66:bf:fe:9d:55:6f:68:7c:58: 18:5b:0e:b6:d1:2b:7e:ba:cb:37:b1:90:70:83:f8: 9b:67:98:b3:20:15:87:6b:05:a9:5a:d6:38:b2:73: ac:0e:01:60:7e:8b:fd:94:4d:0c:99:41:d6:51:e9: f7:49:0d:c0:6f:80:df:cb:42:da:3a:89:b5:6f:86: d9:3f:86:41:a9:0d:8b:4e:03:ba:e7:4e:ff:13:d1: 32:d4:e3:fc:d0:3d:b6:5b:4a:e6:f0:5f:e3:75:6b: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:79:30:5B:06:F2:C2:5F:ED:F1:DA:F1:D5:C0:76:72:8B:99:A3 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:78:73:f0:8b:67:67:33:35:cd:2b:a5:5d:65:f4:3d:be:34: 3d:32:ea:7f:f1:8f:37:9e:79:7a:ec:ad:18:39:d9:de:c3:24: 40:b9:8e:81:49:f0:e3:ad:59:f5:63:9d:29:b1:37:70:1f:12: 3c:f0:98:a0:77:e0:cd:04:e7:3e:a5:95:fa:8b:85:d8:59:2c: 9a:5e:83:93:31:8e:85:7a:43:90:c0:ed:e6:f2:60:08:5d:45: 3f:96:9c:e7:24:f2:d3:0f:ab:26:3d:11:92:34:22:f6:07:f8: 97:87:b8:a0:af:a1:1e:5b:06:2a:7a:ce:a2:50:8c:a4:77:b0: a1:1c:29:da:29:57:31:c3:e8:28:ce:75:db:cb:6a:be:9e:d1: b2:6c:1c:fd:3c:0d:92:b7:ca:19:0f:9e:dd:1a:54:7f:b1:31: b5:94:74:41:d6:ed:83:e2:29:8e:35:ac:a9:07:8d:b3:bf:a0: da:ed:2c:44:27:5a:97:95:99:5a:6d:c4:be:f2:00:ff:8c:ce: de:58:f0:3f:07:37:5b:68:72:45:23:19:d0:ef:93:8e:46:5a: 6a:40:ea:96:ba:1e:72:cd:62:d2:aa:7b:4f:e5:67:40:a0:66: b9:04:79:45:1e:e4:c2:ba:be:68:2a:81:c0:3a:c5:c8:65:e8: a3:8e:93:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfrjdSEJa7332LpHZBZw4lwsnwlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA4MjgwNjQzMjRaFw0yNjA4MzExMDEwMjRaMDMxMTAvBgNV BAMTKDMwNUU3OTMwNUIwNkYyQzI1RkVERjFEQUYxRDVDMDc2NzI4Qjk5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjEvrjCgWlDMU3dVe1fvuSRFo wwMXY9lOhwXo3TeRy79I2p1NK9GhrTvJ9wodTROtOIaOezczctKjPQCknsCnZeiH qylXQwTIrk6FOI9HU0JsGRKL1NGjBwCaTREzDO/xtbkgRzWrefJ9YJHKcxbF+WCn 63Ad5M9bAWWfzFbjNjVehGiE+8zuftH57knaOmvfyE9MNWK6QuNmFma//p1Vb2h8 WBhbDrbRK366yzexkHCD+JtnmLMgFYdrBala1jiyc6wOAWB+i/2UTQyZQdZR6fdJ DcBvgN/LQto6ibVvhtk/hkGpDYtOA7rnTv8T0TLU4/zQPbZbSubwX+N1a1vvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMF55MFsG8sJf7fHa8dXAdnKLmaMwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnhz8ItnZzM1 zSulXWX0Pb40PTLqf/GPN555euytGDnZ3sMkQLmOgUnw461Z9WOdKbE3cB8SPPCY oHfgzQTnPqWV+ouF2Fksml6DkzGOhXpDkMDt5vJgCF1FP5ac5yTy0w+rJj0RkjQi 9gf4l4e4oK+hHlsGKnrOolCMpHewoRwp2ilXMcPoKM5128tqvp7Rsmwc/TwNkrfK GQ+e3RpUf7ExtZR0Qdbtg+IpjjWsqQeNs7+g2u0sRCdal5WZWm3EvvIA/4zO3ljw Pwc3W2hyRSMZ0O+TjkZaakDqlroecs1i0qp7T+VnQKBmuQR5RR7kwrq+aCqBwDrF yGXoo46Tmw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:09:27 2026 by rpki-client