$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json) Hash identifier: QL8ptZcB5fRZxxscqf9ps8V7zD50H4TuWul7koSynOA= Subject key identifier: 12:90:95:58:84:D4:95:50:21:0D:18:31:0B:A4:95:71:62:09:FB:17 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 062C6025F19B19F95EE7D1D5538FDA756540CD04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft Manifest number: 016E Signing time: Fri 28 Aug 2026 06:48:08 +0000 Manifest this update: Fri 28 Aug 2026 06:43:08 +0000 Manifest next update: Mon 31 Aug 2026 12:26:08 +0000 Files and hashes: 1: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=) 2: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=) 3: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=) 4: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=) 5: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=) 6: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=) 7: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=) 8: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=) 9: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=) 10: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=) 11: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=) 12: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: bAmoSKFbpx/+VqlZZTbnUsE08OW+e8qAPK05GF9G3rY=) 13: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=) 14: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=) 15: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=) 16: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=) 17: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=) 18: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=) 19: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=) 20: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=) 21: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=) 22: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=) 23: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=) 24: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2c:60:25:f1:9b:19:f9:5e:e7:d1:d5:53:8f:da:75:65:40:cd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Aug 28 06:43:08 2026 GMT Not After : Aug 31 12:26:08 2026 GMT Subject: CN=1290955884D49550210D18310BA495716209FB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:c1:cd:15:c4:66:41:ca:28:ab:b5:b9:f3: d1:35:00:a4:f5:c8:a6:92:9b:5b:5c:e5:c2:1c:92: 1e:f4:1e:83:ba:45:6c:c3:f7:b1:df:4b:8c:66:4a: ac:6d:06:e2:6a:f3:b9:f9:b7:82:61:73:74:b6:b5: ae:ab:32:42:84:a2:85:1b:1d:6a:eb:fe:e4:88:e8: ce:d4:18:d6:b1:16:03:75:8e:cd:15:c6:83:bd:c2: c5:a1:45:a2:6d:09:57:49:87:06:a4:d8:76:71:50: 22:a1:ef:8c:17:0a:cf:fe:55:2a:54:ff:ac:fa:b3: a1:c0:7c:74:23:70:3e:d7:2a:da:2d:88:4f:d9:1d: 12:f0:cf:70:2c:f9:3f:58:8c:2f:a5:b2:71:77:10: 23:53:45:8a:5d:64:ef:43:cf:3e:32:a2:39:6b:5f: 04:a7:ef:43:73:ec:d1:5d:c9:60:fd:13:49:44:1b: 52:73:ce:e6:58:23:32:12:d7:12:87:fc:21:78:da: 84:5b:74:3c:7a:4d:2d:90:1b:fa:6b:d8:f6:c0:42: 53:00:3d:10:c3:7e:06:d6:ac:64:3c:1d:8f:76:bc: 00:7d:ec:da:5c:41:e4:83:17:dd:22:b7:78:7f:c1: de:16:b3:8f:fd:02:e7:0e:3e:4d:11:ee:85:a1:fd: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:90:95:58:84:D4:95:50:21:0D:18:31:0B:A4:95:71:62:09:FB:17 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5d:04:b6:2c:08:f5:c7:6f:06:38:1e:89:bd:c4:f6:81:f3: 51:ee:57:a0:d0:35:54:a6:62:e2:f5:30:b2:4e:fe:c0:4e:91: 19:85:77:24:d8:aa:ce:d3:c9:67:e0:81:5b:fd:d8:b1:7c:1f: bc:9a:6e:18:48:37:0e:cc:85:73:d2:a4:91:31:5d:4c:2e:ec: 05:2e:c8:14:ec:d0:e1:9f:d1:f6:0a:b2:3d:84:df:00:bf:e5: e6:e2:4b:d3:fb:9f:b7:87:5e:9b:77:ad:20:30:1c:36:f3:b9: f9:5b:67:71:5a:12:0f:cd:02:2f:c1:67:53:1c:92:57:3e:3d: fa:80:d0:4b:4e:67:4f:78:3e:65:fa:ab:08:68:7f:87:1e:88: a5:7b:0b:41:a3:d8:ed:20:44:34:f2:f6:17:08:fc:d4:fe:b3: 14:3f:a3:d3:46:7b:e9:a9:a1:e6:ca:c7:3f:24:99:13:94:3f: ea:f2:51:29:a8:da:cb:15:20:e0:1c:4e:98:24:03:1f:81:33: e0:ea:0c:17:ae:7b:aa:67:1b:8d:e7:9b:70:da:d0:16:59:b0: 52:24:92:25:70:0f:db:22:44:c6:7f:6f:40:c5:19:88:2b:c2: 12:ae:bc:f2:10:cc:3d:64:f0:e2:3c:0a:3b:53:32:f7:43:c3: 14:71:c5:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBixgJfGbGfle59HVU4/adWVAzQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA4MjgwNjQzMDhaFw0yNjA4MzExMjI2MDhaMDMxMTAvBgNV BAMTKDEyOTA5NTU4ODRENDk1NTAyMTBEMTgzMTBCQTQ5NTcxNjIwOUZCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfH8HNFcRmQcooq7W589E1AKT1 yKaSm1tc5cIckh70HoO6RWzD97HfS4xmSqxtBuJq87n5t4Jhc3S2ta6rMkKEooUb HWrr/uSI6M7UGNaxFgN1js0VxoO9wsWhRaJtCVdJhwak2HZxUCKh74wXCs/+VSpU /6z6s6HAfHQjcD7XKtotiE/ZHRLwz3As+T9YjC+lsnF3ECNTRYpdZO9Dzz4yojlr XwSn70Nz7NFdyWD9E0lEG1JzzuZYIzIS1xKH/CF42oRbdDx6TS2QG/pr2PbAQlMA PRDDfgbWrGQ8HY92vAB97NpcQeSDF90it3h/wd4Ws4/9AucOPk0R7oWh/T0rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEpCVWITUlVAhDRgxC6SVcWIJ+xcwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL10EtiwI9cdv Bjgeib3E9oHzUe5XoNA1VKZi4vUwsk7+wE6RGYV3JNiqztPJZ+CBW/3YsXwfvJpu GEg3DsyFc9KkkTFdTC7sBS7IFOzQ4Z/R9gqyPYTfAL/l5uJL0/uft4dem3etIDAc NvO5+VtncVoSD80CL8FnUxySVz49+oDQS05nT3g+ZfqrCGh/hx6IpXsLQaPY7SBE NPL2Fwj81P6zFD+j00Z76amh5srHPySZE5Q/6vJRKajayxUg4BxOmCQDH4Ez4OoM F657qmcbjeebcNrQFlmwUiSSJXAP2yJExn9vQMUZiCvCEq688hDMPWTw4jwKO1My 90PDFHHFZA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:55 2026 by rpki-client