$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: 7Xrn0kZcGyCPxhE8lFFkAJHz+XCYOMsxKWnRcFawQ54= Subject key identifier: 9F:AD:EE:A2:96:97:02:99:6C:CE:B5:BB:FF:86:F0:7C:2F:28:8A:3E Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 651B1542AEACFE3A7F854E51490E193BD822A8D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:48:07 +0000 Manifest this update: Fri 28 Aug 2026 06:43:07 +0000 Manifest next update: Mon 31 Aug 2026 11:43:07 +0000 Files and hashes: 1: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 2: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 3: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: mrxiYR74fLzCwdXwCGOplAu7mqjlobrSpx4KW8kQSPE=) 4: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 5: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 6: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:15:42:ae:ac:fe:3a:7f:85:4e:51:49:0e:19:3b:d8:22:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Aug 28 06:43:07 2026 GMT Not After : Aug 31 11:43:07 2026 GMT Subject: CN=9FADEEA2969702996CCEB5BBFF86F07C2F288A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:44:f7:ac:e1:4c:34:30:47:d1:26:73:c3: 50:df:a5:0d:bc:f4:9f:d6:7a:62:0e:15:e6:23:fe: 87:9d:bb:ae:52:43:d8:95:ef:97:4f:57:ae:7b:29: 63:5b:bd:70:57:ab:8f:34:69:96:ad:77:97:23:43: b7:70:1f:ee:23:40:99:b5:ea:6f:ab:c4:b1:10:76: 9a:95:8d:e4:13:c0:de:7f:94:eb:05:ed:6b:7d:ee: 17:f1:56:a1:c9:e2:65:6d:87:ce:51:d5:f7:51:a7: 90:ce:00:6d:aa:55:16:ed:15:07:4f:93:51:db:72: 75:f3:8e:b5:94:ee:7b:0b:33:c0:63:9d:44:35:26: c8:28:c2:c9:fe:4b:48:8f:e4:f5:21:43:99:28:00: 03:67:ad:3c:53:64:df:4c:f3:81:aa:b1:25:a8:ae: 6e:4b:74:dd:db:20:1e:cf:55:8b:70:3b:77:82:85: c0:95:43:3d:13:2b:b6:e3:d5:3f:74:6b:4c:9c:b9: f0:01:4e:16:0d:ee:0c:cf:cf:3d:dd:2e:72:9a:b7: 44:03:2a:c6:9b:7f:82:c8:f1:e5:1a:7d:5f:11:f3: 29:e0:b7:03:0f:f0:33:8e:23:5b:d4:6d:e2:e3:b2: c2:99:31:24:2a:11:5f:ec:bb:ef:fb:b6:d1:06:c0: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AD:EE:A2:96:97:02:99:6C:CE:B5:BB:FF:86:F0:7C:2F:28:8A:3E X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f8:fe:9f:17:ec:87:a2:73:3a:f5:08:10:8d:c1:4f:37:78: c5:06:b1:34:05:a4:02:0b:86:49:7b:1d:84:28:3d:5f:56:06: 6b:59:1d:41:02:3b:33:84:2b:c6:c0:c4:1f:46:6a:4e:61:3a: 0b:96:58:b4:7b:4e:c0:5c:ad:1b:1f:7b:e9:f6:5e:52:dc:0a: 9f:a9:6c:09:2d:d1:d3:3d:05:0b:94:df:71:9a:2d:61:23:a5: 5b:a6:81:9f:b3:e5:14:0f:8f:d4:d1:ad:7a:aa:4b:37:90:60: 0f:85:c3:77:66:1b:1b:d1:76:12:0f:0d:5b:86:c2:cd:fa:37: 8b:36:72:7f:f8:c8:10:e7:74:6c:65:b9:2b:b3:92:c4:70:73: ad:f6:ad:38:31:59:89:23:41:66:be:ee:e2:3a:32:a7:bb:e2: 4b:c5:20:8d:c0:e4:eb:5f:e1:59:bd:11:5a:df:4d:eb:09:f3: 60:08:e9:02:94:40:36:37:d3:4a:ba:8c:9a:47:64:23:90:cf: fc:13:b8:82:e3:48:ce:ab:d2:d6:16:f3:b0:d8:9b:8a:5c:17: 6c:c6:e4:b1:af:a0:7d:4b:73:c8:67:06:7d:80:c2:19:dc:63: bf:0a:96:0c:a0:f6:e1:21:76:83:a7:bf:a7:f4:a4:79:62:16: e9:b3:5c:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZRsVQq6s/jp/hU5RSQ4ZO9giqNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA4MjgwNjQzMDdaFw0yNjA4MzExMTQzMDdaMDMxMTAvBgNV BAMTKDlGQURFRUEyOTY5NzAyOTk2Q0NFQjVCQkZGODZGMDdDMkYyODhBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI10T3rOFMNDBH0SZzw1DfpQ28 9J/WemIOFeYj/oedu65SQ9iV75dPV657KWNbvXBXq480aZatd5cjQ7dwH+4jQJm1 6m+rxLEQdpqVjeQTwN5/lOsF7Wt97hfxVqHJ4mVth85R1fdRp5DOAG2qVRbtFQdP k1HbcnXzjrWU7nsLM8BjnUQ1Jsgowsn+S0iP5PUhQ5koAANnrTxTZN9M84GqsSWo rm5LdN3bIB7PVYtwO3eChcCVQz0TK7bj1T90a0ycufABThYN7gzPzz3dLnKat0QD Ksabf4LI8eUafV8R8yngtwMP8DOOI1vUbeLjssKZMSQqEV/su+/7ttEGwGrrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn63uopaXAplszrW7/4bwfC8oij4wHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPj+nxfsh6Jz OvUIEI3BTzd4xQaxNAWkAguGSXsdhCg9X1YGa1kdQQI7M4QrxsDEH0ZqTmE6C5ZY tHtOwFytGx976fZeUtwKn6lsCS3R0z0FC5TfcZotYSOlW6aBn7PlFA+P1NGteqpL N5BgD4XDd2YbG9F2Eg8NW4bCzfo3izZyf/jIEOd0bGW5K7OSxHBzrfatODFZiSNB Zr7u4joyp7viS8UgjcDk61/hWb0RWt9N6wnzYAjpApRANjfTSrqMmkdkI5DP/BO4 guNIzqvS1hbzsNibilwXbMbksa+gfUtzyGcGfYDCGdxjvwqWDKD24SF2g6e/p/Sk eWIW6bNcmg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:03 2026 by rpki-client