$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: z0f9/rtGGWC4T536iWSJQckJzWAaXJqN7bsRaldlpwA= Subject key identifier: 3A:B7:17:BB:62:3B:E0:B9:02:C1:BA:62:57:D6:FC:EC:61:08:8B:28 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 574E904828073168930ECF540C3D2A9A0800B681 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:07 +0000 Manifest this update: Fri 28 Aug 2026 06:43:07 +0000 Manifest next update: Mon 31 Aug 2026 09:24:07 +0000 Files and hashes: 1: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: IpmNmhAGUHTZKIgv2SLgch5mVuLajdckMobCLzjRPXI=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4e:90:48:28:07:31:68:93:0e:cf:54:0c:3d:2a:9a:08:00:b6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Aug 28 06:43:07 2026 GMT Not After : Aug 31 09:24:07 2026 GMT Subject: CN=3AB717BB623BE0B902C1BA6257D6FCEC61088B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:29:7d:a4:c4:fb:d0:49:dc:39:db:98:8a: ee:08:4e:fe:6c:cd:a5:17:fe:69:d0:93:41:91:2e: f4:90:37:49:be:04:55:14:54:11:b4:30:7f:c4:92: 4e:12:b7:19:ab:17:d6:15:6e:63:60:7e:4a:a8:a7: 8a:ba:c2:b5:bb:09:f6:56:d1:67:47:58:f3:6b:7c: 92:2f:cc:79:4b:b6:70:e2:72:1b:bf:6b:e2:7f:1a: 74:61:85:dd:5d:4c:ae:79:23:e4:83:0d:43:76:f4: 4b:03:88:d1:36:43:98:0f:10:fc:7f:0c:16:7e:d1: 84:0f:83:46:02:66:57:13:f0:19:38:bc:dd:63:bb: 1c:f1:d9:0d:89:3a:cc:65:83:c7:fc:b7:0e:24:c3: 7b:59:27:ce:27:56:62:96:13:1b:59:d5:d1:9f:c6: ac:5c:1f:6c:35:87:3a:d7:05:90:f4:8b:cf:b1:09: 8a:0b:34:9f:7b:31:c6:d0:c6:9a:46:d5:20:7a:86: 40:cf:42:f5:a3:50:fd:ed:c5:f2:07:82:49:91:6b: 23:a2:79:aa:59:ea:16:9e:1b:55:a6:0b:16:8a:63: ef:58:95:ed:a1:94:4e:80:78:ed:3b:7d:b4:1f:fc: 02:e1:87:3a:63:3c:98:98:2f:9c:36:dd:80:ab:89: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:17:BB:62:3B:E0:B9:02:C1:BA:62:57:D6:FC:EC:61:08:8B:28 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:70:23:d1:43:a9:9b:ba:77:ad:de:14:54:08:5a:3e:64: 73:d5:40:f0:da:c9:60:4c:50:24:4b:e1:c1:c7:52:3d:78:b1: 50:1e:35:56:87:5f:39:c6:07:26:68:5f:d2:7b:e3:8c:5b:c5: 4c:1a:20:99:1f:cd:71:79:76:38:e5:6c:91:5d:25:75:15:2d: ef:5d:f3:7a:28:c8:8f:d2:9e:93:b7:e3:5b:7a:f9:80:39:5b: 4b:c5:17:6f:8d:37:72:76:83:b8:00:4e:6b:0a:d8:94:2d:ad: 71:64:c7:6d:7f:2e:ee:da:91:36:59:4a:48:e7:2b:23:dd:6a: e5:c2:19:07:e9:3f:d4:e2:26:04:c0:e2:50:92:0e:c5:01:6b: 82:b6:9b:e4:d6:1f:59:6a:dc:ef:58:41:4e:41:6e:9c:70:e7: 0e:2f:3c:a9:b6:62:d0:84:3c:ea:37:32:b1:f6:4f:b5:a9:5c: b3:47:1b:9e:ab:bf:eb:bf:54:84:c9:f4:4d:18:b1:fb:94:08: df:cb:e4:d2:fb:ab:db:b7:34:a9:df:bc:b9:87:e9:48:d1:73: 10:8a:a8:cb:d6:56:a1:05:8c:13:9e:23:d9:71:0c:0a:9f:a7: fe:52:ba:bf:aa:ef:17:e2:78:42:03:71:aa:07:ae:93:33:c8: bf:75:46:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV06QSCgHMWiTDs9UDD0qmggAtoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA4MjgwNjQzMDdaFw0yNjA4MzEwOTI0MDdaMDMxMTAvBgNV BAMTKDNBQjcxN0JCNjIzQkUwQjkwMkMxQkE2MjU3RDZGQ0VDNjEwODhCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyyl9pMT70EncOduYiu4ITv5s zaUX/mnQk0GRLvSQN0m+BFUUVBG0MH/Ekk4StxmrF9YVbmNgfkqop4q6wrW7CfZW 0WdHWPNrfJIvzHlLtnDichu/a+J/GnRhhd1dTK55I+SDDUN29EsDiNE2Q5gPEPx/ DBZ+0YQPg0YCZlcT8Bk4vN1juxzx2Q2JOsxlg8f8tw4kw3tZJ84nVmKWExtZ1dGf xqxcH2w1hzrXBZD0i8+xCYoLNJ97McbQxppG1SB6hkDPQvWjUP3txfIHgkmRayOi eapZ6haeG1WmCxaKY+9Yle2hlE6AeO07fbQf/ALhhzpjPJiYL5w23YCriTTBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOrcXu2I74LkCwbpiV9b87GEIiygwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai1wI9FDqZu6 d63eFFQIWj5kc9VA8NrJYExQJEvhwcdSPXixUB41VodfOcYHJmhf0nvjjFvFTBog mR/NcXl2OOVskV0ldRUt713zeijIj9Kek7fjW3r5gDlbS8UXb403cnaDuABOawrY lC2tcWTHbX8u7tqRNllKSOcrI91q5cIZB+k/1OImBMDiUJIOxQFrgrab5NYfWWrc 71hBTkFunHDnDi88qbZi0IQ86jcysfZPtalcs0cbnqu/679UhMn0TRix+5QI38vk 0vur27c0qd+8uYfpSNFzEIqoy9ZWoQWME54j2XEMCp+n/lK6v6rvF+J4QgNxqgeu kzPIv3VGlQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:55:10 2026 by rpki-client