$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: x8lYNet99Dd1Ob5X3M0/lSrzs4v6FAwYiFuVIAzltyY= Subject key identifier: 5E:DF:A0:C3:30:78:ED:BE:86:F5:CC:41:E1:53:AB:07:E3:B1:D0:66 Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: 1DD5F4C74F40E1156F031AFFA17C51908821589C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: 0125 Signing time: Wed 26 Aug 2026 23:39:58 +0000 Manifest this update: Wed 26 Aug 2026 23:34:58 +0000 Manifest next update: Fri 28 Aug 2026 00:37:58 +0000 Files and hashes: 1: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 2: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) 3: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: AXgmA6747SaSJXEzDiMX5Yu9qZbCRLtSBLGkzLdMKiQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 00:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d5:f4:c7:4f:40:e1:15:6f:03:1a:ff:a1:7c:51:90:88:21:58:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Aug 26 23:34:58 2026 GMT Not After : Aug 28 00:37:58 2026 GMT Subject: CN=5EDFA0C33078EDBE86F5CC41E153AB07E3B1D066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:c9:83:b3:d9:43:fd:5c:51:36:24:db:b8: d1:fb:61:49:4e:54:6f:bc:ed:9e:f7:8a:fb:3e:79: b0:df:e7:e8:42:b1:fc:a9:6b:75:11:67:75:10:e5: e6:99:22:ee:c4:c8:91:7e:3f:85:45:b7:a2:94:5e: 3a:87:94:66:2d:8e:35:3d:86:ff:3c:c9:c0:df:ac: f8:00:42:81:f2:b0:9a:e1:bc:2b:82:86:49:b6:e7: 60:1e:71:46:b2:cc:83:be:3d:ba:8e:d0:28:75:a7: a6:a5:5c:2b:2e:65:d2:e9:04:7d:0f:c1:f8:66:b8: f4:a6:99:e5:ba:57:1a:27:f7:19:03:4f:45:1e:19: 68:d4:0a:e5:b6:73:cf:1f:3a:7b:3b:90:bd:11:22: 00:b7:f5:97:0d:fd:0e:f0:b9:86:fa:f3:19:81:39: 1e:bb:83:73:98:80:1c:c4:10:35:05:1e:20:51:c9: fc:6c:93:a5:ff:55:bd:af:12:8b:04:e1:8b:83:6b: 6b:61:67:f3:bf:20:f9:a7:35:9f:34:59:6f:fc:78: 40:d2:80:06:47:cc:bd:c9:1c:32:5d:af:08:a4:8c: 53:1f:59:50:23:a2:a8:47:38:67:6a:7d:f1:37:bf: 06:ff:49:d0:ae:5e:e1:0b:61:45:16:66:4a:53:60: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DF:A0:C3:30:78:ED:BE:86:F5:CC:41:E1:53:AB:07:E3:B1:D0:66 X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:cb:24:f8:c1:4d:7d:0a:9d:e5:a1:7a:e3:16:b2:fb:e8:2c: 81:2e:5f:cb:c0:a8:3d:f5:73:44:be:32:7c:a3:df:f2:0c:e9: ae:7b:18:6f:24:54:eb:99:26:95:13:f5:c1:e9:dd:b9:29:9a: 3c:fa:76:5d:1c:e6:48:00:62:7d:20:a0:df:66:5d:85:bd:84: 52:bd:02:b2:2c:2d:5a:ca:c8:0b:7e:e9:d0:d0:5f:e7:e1:ce: 91:b1:e5:53:70:2b:c2:be:0e:30:74:54:ff:38:60:f8:94:18: 0d:a4:c7:af:00:3c:d2:19:11:bc:e0:75:39:e9:7f:bf:29:08: 18:90:3d:2e:57:4f:c9:36:b6:13:8d:69:f3:49:bf:09:2a:ad: 65:04:77:b8:2d:cd:b9:68:cc:32:87:cf:17:73:a1:5e:e4:f4: 87:f0:ce:8c:67:46:e4:6f:9d:19:84:12:b5:15:a7:53:6f:14: 09:b5:31:b3:9b:3f:05:26:dd:94:fd:06:b0:6b:37:be:3c:de: 9b:bb:96:22:32:af:1b:e1:d7:a8:38:24:3c:54:d2:08:6c:61: 9c:ee:e8:9f:57:52:71:f1:77:94:49:54:36:74:fa:56:25:42: 23:e3:49:08:02:8a:58:7e:14:bf:ee:0e:b5:da:fb:78:5b:3b: ad:77:0d:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHdX0x09A4RVvAxr/oXxRkIghWJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjA4MjYyMzM0NThaFw0yNjA4MjgwMDM3NThaMDMxMTAvBgNV BAMTKDVFREZBMEMzMzA3OEVEQkU4NkY1Q0M0MUUxNTNBQjA3RTNCMUQwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDcmDs9lD/VxRNiTbuNH7YUlO VG+87Z73ivs+ebDf5+hCsfypa3URZ3UQ5eaZIu7EyJF+P4VFt6KUXjqHlGYtjjU9 hv88ycDfrPgAQoHysJrhvCuChkm252AecUayzIO+PbqO0Ch1p6alXCsuZdLpBH0P wfhmuPSmmeW6Vxon9xkDT0UeGWjUCuW2c88fOns7kL0RIgC39ZcN/Q7wuYb68xmB OR67g3OYgBzEEDUFHiBRyfxsk6X/Vb2vEosE4YuDa2thZ/O/IPmnNZ80WW/8eEDS gAZHzL3JHDJdrwikjFMfWVAjoqhHOGdqffE3vwb/SdCuXuELYUUWZkpTYErtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXt+gwzB47b6G9cxB4VOrB+Ox0GYwHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMsk+MFNfQqd 5aF64xay++gsgS5fy8CoPfVzRL4yfKPf8gzprnsYbyRU65kmlRP1wenduSmaPPp2 XRzmSABifSCg32Zdhb2EUr0CsiwtWsrIC37p0NBf5+HOkbHlU3Arwr4OMHRU/zhg +JQYDaTHrwA80hkRvOB1Oel/vykIGJA9LldPyTa2E41p80m/CSqtZQR3uC3NuWjM MofPF3OhXuT0h/DOjGdG5G+dGYQStRWnU28UCbUxs5s/BSbdlP0GsGs3vjzem7uW IjKvG+HXqDgkPFTSCGxhnO7on1dScfF3lElUNnT6ViVCI+NJCAKKWH4Uv+4Otdr7 eFs7rXcNWA== -----END CERTIFICATE-----Generated at Thu Aug 27 17:16:23 2026 by rpki-client