$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: rod40kVM/aMdfQOHbZ30jq3qgkcjoXto0yWeuq9/IaQ= Subject key identifier: 72:3C:73:DF:F7:47:3C:D1:96:B2:D3:BD:C2:CC:AE:09:AB:96:BB:8A Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 32B696D08188DE39D82DF11B36C285219E0F13FC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 07:18:31 +0000 Manifest this update: Fri 28 Aug 2026 07:13:31 +0000 Manifest next update: Mon 31 Aug 2026 07:18:31 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 3: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: TFksy9dGrxywcpIuuFornxjopKmuLmOXnhQg9yd+uQ0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b6:96:d0:81:88:de:39:d8:2d:f1:1b:36:c2:85:21:9e:0f:13:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Aug 28 07:13:31 2026 GMT Not After : Aug 31 07:18:31 2026 GMT Subject: CN=723C73DFF7473CD196B2D3BDC2CCAE09AB96BB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:33:60:21:fe:e8:5a:d5:c6:76:88:10:c6: 87:a6:56:4e:71:69:81:f1:13:7c:98:ff:c3:67:1a: 0b:6e:5e:08:2f:ce:05:d3:0c:76:5b:b8:fd:3d:b4: 73:73:70:53:af:64:46:ba:4a:d2:ad:d3:df:5b:1d: 44:fc:54:65:51:37:ea:0b:f1:e3:83:0f:1c:05:1e: d7:fd:c7:75:1d:23:3e:0b:c4:d6:a4:4d:87:80:ea: 26:6e:8b:6c:2c:fe:7e:2d:9a:a6:43:20:95:3a:ed: 16:c1:3a:0b:7d:09:f8:e7:57:11:06:44:d0:30:fc: 66:5f:4b:38:6c:8a:55:ea:a3:39:cb:cb:8e:01:de: 7a:82:bd:5a:38:a9:47:88:00:6e:ad:99:9d:ba:e0: 97:d8:85:7d:38:a9:1b:66:9d:e6:3b:ee:60:5b:e4: bd:85:52:c6:b1:4a:f8:db:0e:3b:14:55:9d:7d:63: 41:79:b8:f7:d4:97:07:c4:84:ce:62:ce:1d:30:bf: a6:42:78:66:a9:e7:20:52:b9:ed:6d:61:d1:d3:89: cf:31:bd:9d:b3:4c:1e:4b:50:e6:af:ae:4e:14:72: 03:2c:69:cc:f2:3b:8c:1a:fb:e8:6b:6a:10:0c:df: 46:0b:09:4b:a3:63:eb:06:9f:06:ae:0d:07:85:1e: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3C:73:DF:F7:47:3C:D1:96:B2:D3:BD:C2:CC:AE:09:AB:96:BB:8A X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:72:25:ab:2a:30:d8:3a:cb:00:d9:1c:48:6c:29:7e:64:46: db:ea:86:75:ca:16:e8:68:e1:61:73:e3:ab:9d:23:d4:5e:44: 8c:ed:6d:87:eb:e4:53:6a:01:b1:50:c3:8a:88:16:1f:ef:f7: 01:e4:a0:a9:3b:65:d6:aa:7d:5f:88:be:46:1d:90:3a:56:a4: 71:1a:c1:6c:fd:0a:50:c9:50:e5:93:76:9f:1a:b0:a4:ab:99: 9d:28:ea:61:af:29:7d:d7:80:a6:68:09:e8:02:7a:5d:d6:75: 96:d0:c4:9a:99:97:7a:b8:13:2e:5c:0d:64:21:4d:1f:f4:ba: ec:19:45:9c:62:e9:1f:22:74:f2:4d:c9:cf:1d:54:ff:e2:cb: 1f:ef:da:62:c5:e9:c1:4a:43:fc:70:74:ed:f6:8b:fb:a2:2f: b2:a7:d8:c9:78:2f:55:e5:f9:fb:ac:46:ec:10:fb:de:b2:fc: d4:e5:2e:39:64:b5:50:c0:ba:aa:41:5b:01:e6:1f:dd:b9:3b: d4:a7:c0:e9:de:49:f5:4f:b1:1f:9c:3e:68:e4:99:13:fb:12: 21:c8:16:99:2c:93:d5:66:29:d6:c4:33:07:3a:ce:8d:ef:f7: a3:4f:7c:57:e2:4e:0b:f4:7f:b1:be:1e:c3:c4:79:a6:ad:c9: 35:f4:ce:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMraW0IGI3jnYLfEbNsKFIZ4PE/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA4MjgwNzEzMzFaFw0yNjA4MzEwNzE4MzFaMDMxMTAvBgNV BAMTKDcyM0M3M0RGRjc0NzNDRDE5NkIyRDNCREMyQ0NBRTA5QUI5NkJCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGHDNgIf7oWtXGdogQxoemVk5x aYHxE3yY/8NnGgtuXggvzgXTDHZbuP09tHNzcFOvZEa6StKt099bHUT8VGVRN+oL 8eODDxwFHtf9x3UdIz4LxNakTYeA6iZui2ws/n4tmqZDIJU67RbBOgt9CfjnVxEG RNAw/GZfSzhsilXqoznLy44B3nqCvVo4qUeIAG6tmZ264JfYhX04qRtmneY77mBb 5L2FUsaxSvjbDjsUVZ19Y0F5uPfUlwfEhM5izh0wv6ZCeGap5yBSue1tYdHTic8x vZ2zTB5LUOavrk4UcgMsaczyO4wa++hrahAM30YLCUujY+sGnwauDQeFHojTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcjxz3/dHPNGWstO9wsyuCauWu4owHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnIlqyow2DrL ANkcSGwpfmRG2+qGdcoW6GjhYXPjq50j1F5EjO1th+vkU2oBsVDDiogWH+/3AeSg qTtl1qp9X4i+Rh2QOlakcRrBbP0KUMlQ5ZN2nxqwpKuZnSjqYa8pfdeApmgJ6AJ6 XdZ1ltDEmpmXergTLlwNZCFNH/S67BlFnGLpHyJ08k3Jzx1U/+LLH+/aYsXpwUpD /HB07faL+6IvsqfYyXgvVeX5+6xG7BD73rL81OUuOWS1UMC6qkFbAeYf3bk71KfA 6d5J9U+xH5w+aOSZE/sSIcgWmSyT1WYp1sQzBzrOje/3o098V+JOC/R/sb4ew8R5 pq3JNfTOhQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:24 2026 by rpki-client