$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: P3s82hQgj9hWCEOAOQlzLWdHGcKJhqgHoHrBzzQXVSE= Subject key identifier: 8E:46:0B:12:5A:DB:CC:81:54:25:CC:89:44:97:40:20:86:EF:C4:00 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 772337A6251B07F053ABAFBF51BB78B576657F65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 16:06:16 +0000 Files and hashes: 1: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 2: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: jG3pFXGlTaSDDbiXRn/54EiHV8XH707wigshj+h7PXo=) 3: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:23:37:a6:25:1b:07:f0:53:ab:af:bf:51:bb:78:b5:76:65:7f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 16:06:16 2026 GMT Subject: CN=8E460B125ADBCC815425CC894497402086EFC400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:e1:46:f7:2b:26:b5:6f:06:2f:ec:df:09: d3:e7:b9:3a:5c:09:dd:7d:0e:c5:46:cb:2d:f7:b8: 6f:b9:a7:fa:32:f4:d9:84:2c:e9:09:e1:b7:e6:1e: 34:8e:f0:38:c8:fb:a3:1d:b6:07:de:78:10:9e:40: a9:ff:e3:06:37:1b:5a:96:33:71:a9:7b:7f:56:e4: 68:45:65:d7:b1:cf:a9:d9:99:19:5a:7d:e9:62:1b: b0:65:57:ca:aa:d5:d8:70:18:ba:58:a1:79:20:36: c2:f3:ad:d9:3e:d8:19:5f:53:ef:d8:a1:0f:33:a2: 73:c1:43:ee:8a:12:0d:f0:3e:36:43:cd:9a:9e:a5: 1d:e6:f4:08:81:24:2a:0d:a8:0c:cf:ab:2e:f7:78: e5:7d:eb:df:0c:9f:cf:86:27:72:c7:93:08:2d:85: d3:6e:38:f2:72:62:3f:44:e8:b2:1e:04:60:83:0c: 4f:99:17:28:80:f0:11:4f:e7:73:07:d9:c0:ef:25: 5c:f3:51:99:ef:f4:70:a9:d5:df:34:ee:fd:9d:98: cb:bd:06:4c:0f:32:88:bf:2e:18:8f:ff:b7:25:de: 4a:77:21:bc:46:16:3b:8d:e9:c1:e9:e1:63:72:12: db:13:2b:e8:77:06:88:29:09:ec:e1:e9:8b:68:40: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:0B:12:5A:DB:CC:81:54:25:CC:89:44:97:40:20:86:EF:C4:00 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:33:49:64:72:64:98:fa:91:f0:0c:a9:a0:d9:ec:9c:60:bb: 23:80:58:c8:b6:56:15:68:6b:8c:5b:f4:55:7d:89:53:49:dc: 6e:de:3e:8a:98:bb:9f:9d:32:67:a9:f5:ff:4b:98:62:e2:37: 8e:d2:28:08:da:2c:76:ac:05:3b:d8:d4:f4:ba:90:d0:09:fd: 45:07:65:26:10:51:f6:33:a3:ba:07:37:2b:fe:a6:ad:78:0c: 17:73:ae:e9:bc:e2:06:be:d7:06:9f:e5:34:2f:3d:4e:91:c5: 13:ef:a6:72:f3:9a:b0:65:d3:75:ad:d9:d7:31:e7:33:33:ae: 15:92:bc:dc:b7:1d:a0:c8:20:16:6f:22:4a:ed:bc:d1:f3:eb: 47:47:f0:32:f0:6e:fb:ba:a5:60:ee:96:f0:49:15:94:36:52: 30:7e:28:b1:1a:fa:c2:8d:2a:72:92:b1:16:6f:3c:0c:5a:16: 15:e0:f0:11:8b:e6:ac:22:1a:53:2c:ef:8f:52:31:63:f1:52: 7f:cb:b5:ed:fa:f3:00:b0:6b:c9:70:55:30:c1:15:b5:95:0a: 3b:83:c9:31:45:72:ee:f8:c0:c5:a7:03:2d:df:8f:2c:58:d8: 3e:d4:56:68:dd:df:55:f3:85:ad:4b:cd:17:5c:02:b9:34:d2: 97:e0:b6:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdyM3piUbB/BTq6+/Ubt4tXZlf2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzExNjA2MTZaMDMxMTAvBgNV BAMTKDhFNDYwQjEyNUFEQkNDODE1NDI1Q0M4OTQ0OTc0MDIwODZFRkM0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePOFG9ysmtW8GL+zfCdPnuTpc Cd19DsVGyy33uG+5p/oy9NmELOkJ4bfmHjSO8DjI+6MdtgfeeBCeQKn/4wY3G1qW M3Gpe39W5GhFZdexz6nZmRlafeliG7BlV8qq1dhwGLpYoXkgNsLzrdk+2BlfU+/Y oQ8zonPBQ+6KEg3wPjZDzZqepR3m9AiBJCoNqAzPqy73eOV9698Mn8+GJ3LHkwgt hdNuOPJyYj9E6LIeBGCDDE+ZFyiA8BFP53MH2cDvJVzzUZnv9HCp1d807v2dmMu9 BkwPMoi/LhiP/7cl3kp3IbxGFjuN6cHp4WNyEtsTK+h3BogpCezh6YtoQIYHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjkYLElrbzIFUJcyJRJdAIIbvxAAwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzNJZHJkmPqR 8AypoNnsnGC7I4BYyLZWFWhrjFv0VX2JU0ncbt4+ipi7n50yZ6n1/0uYYuI3jtIo CNosdqwFO9jU9LqQ0An9RQdlJhBR9jOjugc3K/6mrXgMF3Ou6bziBr7XBp/lNC89 TpHFE++mcvOasGXTda3Z1zHnMzOuFZK83LcdoMggFm8iSu280fPrR0fwMvBu+7ql YO6W8EkVlDZSMH4osRr6wo0qcpKxFm88DFoWFeDwEYvmrCIaUyzvj1IxY/FSf8u1 7frzALBryXBVMMEVtZUKO4PJMUVy7vjAxacDLd+PLFjYPtRWaN3fVfOFrUvNF1wC uTTSl+C2Mw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:58 2026 by rpki-client