$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: ueNxMDdKBBCDkY+Vf8Kggrs3Lh10N8OK0opdnZNTKwQ= Subject key identifier: 5A:13:CE:31:78:80:EE:CB:94:0B:AB:11:4A:3F:1E:05:9F:0E:D0:43 Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 290B053EDCDDD27328D4B53482267C74FE87F9EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: 011E Signing time: Fri 21 Aug 2026 07:34:04 +0000 Manifest this update: Fri 21 Aug 2026 07:29:04 +0000 Manifest next update: Sat 22 Aug 2026 09:02:04 +0000 Files and hashes: 1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) 2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: VKj3/vt1OOtyc/bPutei8dh0a3WF/AqZ5cqJnUk7jSI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 09:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0b:05:3e:dc:dd:d2:73:28:d4:b5:34:82:26:7c:74:fe:87:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Aug 21 07:29:04 2026 GMT Not After : Aug 22 09:02:04 2026 GMT Subject: CN=5A13CE317880EECB940BAB114A3F1E059F0ED043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:c6:d1:f5:d5:b5:76:b0:25:32:76:db:f3: 92:e9:d2:f8:67:57:19:78:65:bf:93:28:d7:ba:6a: 0f:79:78:bc:d4:e1:3c:d4:21:54:55:63:56:57:bc: 65:23:46:de:b7:16:d0:f7:60:f0:04:33:b3:e6:b4: 50:a1:3d:f3:ab:2d:8b:2d:a7:ea:ed:7a:3f:08:84: 14:7f:7f:d0:52:03:2c:b6:7f:db:da:14:81:49:1b: 36:0c:62:06:b3:b8:69:8f:59:72:d5:a5:6c:4b:44: 69:7e:c1:a2:af:e1:af:4d:eb:11:79:73:d8:00:18: 74:14:52:c7:1a:8d:df:be:28:6c:0f:17:42:e5:68: e4:e3:5a:8f:fa:15:db:85:f8:17:30:5a:e1:58:62: 78:45:6d:3f:f3:98:e0:60:6e:86:ef:f5:66:ff:0c: 82:65:35:68:47:a1:cc:40:1e:58:f6:30:59:1a:c6: 40:cb:b2:10:b0:51:57:61:7e:9c:91:be:9c:6c:88: 6a:17:77:93:fa:e1:d6:86:7d:79:45:99:a5:b4:ec: 97:f1:fe:04:7f:c8:4f:fa:f9:24:d7:59:19:4d:d6: a6:71:e2:ee:78:93:a1:af:bc:be:34:af:fb:6d:49: 5e:32:3c:01:6c:c4:bc:d1:09:b5:47:e3:4e:55:4b: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:13:CE:31:78:80:EE:CB:94:0B:AB:11:4A:3F:1E:05:9F:0E:D0:43 X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:75:17:48:6d:ea:da:0c:8c:b6:ef:87:2e:47:3a:f8:c0:ce: 0e:98:43:7c:b0:51:30:aa:20:31:aa:e8:80:06:9f:58:1a:ec: 4c:9d:4c:cd:01:87:41:0a:dd:be:2b:a3:8c:d6:85:8c:12:55: bd:6a:1c:36:1a:c5:84:a9:b6:44:00:34:75:68:64:84:f7:44: 31:17:1a:b8:dc:52:85:0c:d9:5d:bd:35:df:4e:e9:9d:e4:a0: 7a:b9:c7:46:65:68:27:3b:a5:e9:87:46:d6:ac:81:1a:55:24: e5:e0:31:6f:c9:53:62:55:b5:4a:1c:2a:a0:34:69:ab:31:ed: 89:db:77:94:27:79:de:19:ad:45:04:04:2f:a7:8a:c5:65:42: 93:52:89:93:7d:b3:bc:31:80:82:8f:41:d4:69:94:bc:d8:b6: f5:1e:a7:ba:a3:e2:b3:f7:c9:28:58:8e:cb:65:3c:24:40:71: 71:c4:c7:5d:42:7a:c6:14:53:5f:16:72:9e:ee:b1:ec:09:11: 16:c4:b9:c4:f1:01:9f:fc:96:75:20:65:69:c8:32:9d:d3:54: ef:1b:4d:51:8f:db:7a:f8:4c:74:cc:b6:18:b1:5e:05:60:1a: 4f:f1:33:e6:f1:62:94:e2:bc:e2:c8:98:e5:18:81:89:ed:50: ee:fa:15:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKQsFPtzd0nMo1LU0giZ8dP6H+eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjA4MjEwNzI5MDRaFw0yNjA4MjIwOTAyMDRaMDMxMTAvBgNV BAMTKDVBMTNDRTMxNzg4MEVFQ0I5NDBCQUIxMTRBM0YxRTA1OUYwRUQwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqMbR9dW1drAlMnbb85Lp0vhn Vxl4Zb+TKNe6ag95eLzU4TzUIVRVY1ZXvGUjRt63FtD3YPAEM7PmtFChPfOrLYst p+rtej8IhBR/f9BSAyy2f9vaFIFJGzYMYgazuGmPWXLVpWxLRGl+waKv4a9N6xF5 c9gAGHQUUscajd++KGwPF0LlaOTjWo/6FduF+BcwWuFYYnhFbT/zmOBgbobv9Wb/ DIJlNWhHocxAHlj2MFkaxkDLshCwUVdhfpyRvpxsiGoXd5P64daGfXlFmaW07Jfx /gR/yE/6+STXWRlN1qZx4u54k6GvvL40r/ttSV4yPAFsxLzRCbVH405VS7hVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWhPOMXiA7suUC6sRSj8eBZ8O0EMwHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHUXSG3q2gyM tu+HLkc6+MDODphDfLBRMKogMarogAafWBrsTJ1MzQGHQQrdviujjNaFjBJVvWoc NhrFhKm2RAA0dWhkhPdEMRcauNxShQzZXb01307pneSgernHRmVoJzul6YdG1qyB GlUk5eAxb8lTYlW1ShwqoDRpqzHtidt3lCd53hmtRQQEL6eKxWVCk1KJk32zvDGA go9B1GmUvNi29R6nuqPis/fJKFiOy2U8JEBxccTHXUJ6xhRTXxZynu6x7AkRFsS5 xPEBn/yWdSBlacgyndNU7xtNUY/bevhMdMy2GLFeBWAaT/Ez5vFilOK84siY5RiB ie1Q7voVrA== -----END CERTIFICATE-----Generated at Sat Aug 22 00:04:28 2026 by rpki-client