$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: BfUl0BvwyWzh9VMHiEEtZLYGV8p9NSRlMx+1h+ZHjfI= Subject key identifier: 63:A5:07:FC:B1:A4:81:63:0D:60:BF:54:87:E2:D7:F5:B8:FE:8D:C1 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 3A5CE13F62A0C02C3A3A2F5512ED5BB9EB61BA40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: D1 Signing time: Fri 28 Aug 2026 06:47:39 +0000 Manifest this update: Fri 28 Aug 2026 06:42:39 +0000 Manifest next update: Mon 31 Aug 2026 09:57:39 +0000 Files and hashes: 1: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 2: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 3: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: ij9LnHYHNgNa0P6CNeXp9tMAw4lbcmCeWikkmZxgCvY=) 4: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5c:e1:3f:62:a0:c0:2c:3a:3a:2f:55:12:ed:5b:b9:eb:61:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Aug 28 06:42:39 2026 GMT Not After : Aug 31 09:57:39 2026 GMT Subject: CN=63A507FCB1A481630D60BF5487E2D7F5B8FE8DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:51:3d:ba:dc:1c:7a:4e:03:73:05:26:10: 75:56:79:b4:78:7a:0c:a1:46:f9:c1:d0:9e:1a:1f: f4:dc:0e:44:c6:67:84:e3:01:ec:36:4d:5a:d3:62: 15:30:26:74:f1:d2:31:06:f9:64:26:c2:02:ea:7f: e1:81:32:4a:33:87:6a:9b:bc:0c:21:79:8e:3f:35: 30:b2:7e:c5:e0:fe:87:45:ed:09:aa:7a:b1:c0:d2: fa:7a:2d:71:3f:cd:45:da:6f:bb:72:86:6f:bb:20: 80:5a:22:54:3a:a4:6d:f8:ea:bc:95:a5:31:6b:07: 21:c7:a6:01:bb:d4:9c:89:1e:ea:20:5f:b3:5e:eb: e5:ef:fc:b9:67:a9:ca:20:d0:7d:be:fb:a5:c7:70: b1:58:b2:cb:dd:7a:d2:5b:f2:17:33:32:92:d5:ba: fe:d5:8b:a4:c9:d3:cc:e1:68:43:57:15:8e:e4:48: a0:c6:8a:80:bc:d3:36:aa:15:29:2d:6c:0f:2a:a1: 01:3e:9d:8c:6f:7b:ea:1b:1c:00:c3:79:6c:ac:f6: 7b:1f:7d:d5:6a:5f:c8:72:9c:e0:a9:2c:01:28:30: d6:69:89:3f:76:4f:99:68:68:be:93:53:80:02:75: 11:f7:00:7b:ce:9f:29:85:d9:1b:14:df:e3:a1:90: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A5:07:FC:B1:A4:81:63:0D:60:BF:54:87:E2:D7:F5:B8:FE:8D:C1 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:70:6a:49:39:be:59:46:bc:22:5b:ab:ae:56:7f:aa:f9:ad: 62:37:7e:13:29:31:ae:ec:2d:ae:a5:83:67:93:53:61:c5:07: b0:c0:95:84:6b:49:c1:5f:38:c2:06:cc:e3:1c:a4:5f:5b:90: 3c:e7:f2:91:42:39:7a:98:f7:f4:b1:be:c9:87:8c:fb:12:e6: 35:37:32:6b:84:31:b6:fc:0e:d1:82:fb:0c:ba:d9:70:e1:18: 47:78:5d:d3:10:d0:3c:0d:f9:94:51:ef:7c:c9:e6:a0:4f:55: 21:4a:a6:73:08:ee:0d:96:30:0b:13:a3:45:77:17:83:5e:07: 53:e0:14:7c:ad:2c:e6:15:54:9e:40:66:3a:57:a0:e3:0f:2a: 49:64:a6:b8:e9:e6:8b:f7:82:4a:a5:a4:76:89:ad:e0:db:00: d7:25:e5:56:d2:b4:ad:d2:e0:98:59:07:e7:01:8f:2f:9c:43: cf:a4:4f:71:0e:68:63:a3:89:66:cd:c5:44:de:6f:48:d2:6a: 2c:96:2b:8e:fe:13:5f:a4:e3:e8:fa:c6:b7:1b:bc:40:a3:f1: 66:48:12:ab:64:ac:d5:22:e1:62:fd:c4:af:06:08:a4:21:fd: f9:1a:92:f6:0c:a4:9d:24:e0:ba:03:0d:8a:7d:37:09:ab:05: 57:66:ad:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOlzhP2KgwCw6Oi9VEu1buethukAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA4MjgwNjQyMzlaFw0yNjA4MzEwOTU3MzlaMDMxMTAvBgNV BAMTKDYzQTUwN0ZDQjFBNDgxNjMwRDYwQkY1NDg3RTJEN0Y1QjhGRThEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDFE9utwcek4DcwUmEHVWebR4 egyhRvnB0J4aH/TcDkTGZ4TjAew2TVrTYhUwJnTx0jEG+WQmwgLqf+GBMkozh2qb vAwheY4/NTCyfsXg/odF7QmqerHA0vp6LXE/zUXab7tyhm+7IIBaIlQ6pG346ryV pTFrByHHpgG71JyJHuogX7Ne6+Xv/Llnqcog0H2++6XHcLFYssvdetJb8hczMpLV uv7Vi6TJ08zhaENXFY7kSKDGioC80zaqFSktbA8qoQE+nYxve+obHADDeWys9nsf fdVqX8hynOCpLAEoMNZpiT92T5loaL6TU4ACdRH3AHvOnymF2RsU3+OhkHsLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY6UH/LGkgWMNYL9Uh+LX9bj+jcEwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXBqSTm+WUa8 IlurrlZ/qvmtYjd+EykxruwtrqWDZ5NTYcUHsMCVhGtJwV84wgbM4xykX1uQPOfy kUI5epj39LG+yYeM+xLmNTcya4QxtvwO0YL7DLrZcOEYR3hd0xDQPA35lFHvfMnm oE9VIUqmcwjuDZYwCxOjRXcXg14HU+AUfK0s5hVUnkBmOleg4w8qSWSmuOnmi/eC SqWkdomt4NsA1yXlVtK0rdLgmFkH5wGPL5xDz6RPcQ5oY6OJZs3FRN5vSNJqLJYr jv4TX6Tj6PrGtxu8QKPxZkgSq2Ss1SLhYv3ErwYIpCH9+RqS9gyknSTgugMNin03 CasFV2atXw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:54:55 2026 by rpki-client