$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: FMLBCehOybqKcNJFwq0tz01MCvdUoEvSAcRiRfUperA= Subject key identifier: 79:F0:82:14:B4:84:F1:E7:8B:1B:40:12:5C:B1:F0:80:95:25:6F:AF Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 063E290C6DC5B47D856660BF290ADE758D65EBEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: BF Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 07:17:00 +0000 Files and hashes: 1: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 2: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: XtK8CcVEayP67TKu9MWsVRx8ancGL3Z5jILQr0gwodU=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3e:29:0c:6d:c5:b4:7d:85:66:60:bf:29:0a:de:75:8d:65:eb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 07:17:00 2026 GMT Subject: CN=79F08214B484F1E78B1B40125CB1F08095256FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:9e:25:11:97:62:02:bd:79:af:ca:7c:16: a4:40:2d:f9:78:c8:b7:c6:bf:be:23:e2:60:b4:6e: 34:27:55:57:0a:aa:96:db:a0:54:88:ef:61:a6:9c: f1:f2:b5:1c:e8:e6:0d:d6:57:fb:65:bc:0d:7a:4a: d0:2f:0a:0d:21:d4:ca:5c:1c:40:19:61:4f:13:d4: 5a:1f:22:3d:6b:1c:5a:92:94:26:69:55:94:d9:f3: f6:cf:ee:ee:62:b5:59:fa:80:39:72:c5:5f:64:4b: ba:ea:a3:69:66:f1:68:a6:e1:2c:e5:7c:08:5f:83: ad:94:a7:3b:20:a5:c2:63:fb:57:f8:a8:f7:f1:14: af:26:28:e2:ab:78:ba:42:a7:32:fd:55:f3:97:06: 5a:04:5e:62:db:22:ab:c9:fb:6f:03:bb:a7:ed:38: 37:eb:14:5a:c6:da:1a:1f:9d:35:da:63:26:eb:7d: 40:53:be:e1:26:0e:70:80:06:ad:ea:9e:46:7d:28: 25:e6:25:02:b6:e5:98:d5:bd:e5:42:bc:68:c6:5f: d1:03:aa:56:92:57:ec:c5:30:c0:aa:ff:e0:82:ba: 68:c1:88:b3:51:f9:d3:96:e6:10:89:01:02:a4:a2: ac:96:3a:14:f4:ef:81:d3:b6:df:dc:9e:d9:88:00: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F0:82:14:B4:84:F1:E7:8B:1B:40:12:5C:B1:F0:80:95:25:6F:AF X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1a:6a:03:4b:2f:97:2b:cf:38:66:f3:72:17:a3:4f:00:be: d3:13:9c:ce:43:27:3b:d6:64:52:16:fb:48:4e:0d:0c:9b:55: c2:68:cd:81:d7:49:29:2a:4e:19:22:6f:de:2f:99:96:4c:a5: 4f:bc:da:e8:94:6c:80:c3:fd:73:08:9d:12:c0:a7:4d:79:d3: 1f:55:c9:1b:e4:98:cd:fb:f9:f3:28:c7:95:8b:c3:be:e7:e6: f2:cd:83:09:a7:1d:f9:54:4c:34:a4:35:b0:d7:55:0a:7c:be: 27:ce:02:98:93:5c:34:74:b0:54:19:70:dd:65:53:f2:87:a9: 8a:f8:f3:cf:a5:9d:22:17:07:a6:d9:db:98:9c:2c:8e:5c:df: e7:49:8b:4f:46:a8:4b:4e:e5:ba:7c:7a:b6:79:13:5b:3f:81: fe:0c:b1:3d:59:44:a0:5c:97:02:7f:6f:68:85:18:46:29:72: c4:4f:df:59:3e:cc:b4:08:38:2b:a1:0e:9a:2c:23:4d:8e:9e: dc:b9:25:57:fd:87:f7:b8:f7:24:46:68:c7:cc:93:59:2e:5a: d4:74:ef:f5:ab:e1:af:b8:ab:66:6e:54:01:ef:8a:89:0f:17: 35:6a:70:a6:e2:ec:fb:d8:df:30:b9:49:ed:a1:51:4a:63:bb: af:1e:b5:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBj4pDG3FtH2FZmC/KQredY1l6+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzEwNzE3MDBaMDMxMTAvBgNV BAMTKDc5RjA4MjE0QjQ4NEYxRTc4QjFCNDAxMjVDQjFGMDgwOTUyNTZGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpJ4lEZdiAr15r8p8FqRALfl4 yLfGv74j4mC0bjQnVVcKqpbboFSI72GmnPHytRzo5g3WV/tlvA16StAvCg0h1Mpc HEAZYU8T1FofIj1rHFqSlCZpVZTZ8/bP7u5itVn6gDlyxV9kS7rqo2lm8Wim4Szl fAhfg62UpzsgpcJj+1f4qPfxFK8mKOKreLpCpzL9VfOXBloEXmLbIqvJ+28Du6ft ODfrFFrG2hofnTXaYybrfUBTvuEmDnCABq3qnkZ9KCXmJQK25ZjVveVCvGjGX9ED qlaSV+zFMMCq/+CCumjBiLNR+dOW5hCJAQKkoqyWOhT074HTtt/cntmIAI2HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUefCCFLSE8eeLG0ASXLHwgJUlb68wHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBpqA0svlyvP OGbzchejTwC+0xOczkMnO9ZkUhb7SE4NDJtVwmjNgddJKSpOGSJv3i+ZlkylT7za 6JRsgMP9cwidEsCnTXnTH1XJG+SYzfv58yjHlYvDvufm8s2DCacd+VRMNKQ1sNdV Cny+J84CmJNcNHSwVBlw3WVT8oepivjzz6WdIhcHptnbmJwsjlzf50mLT0aoS07l unx6tnkTWz+B/gyxPVlEoFyXAn9vaIUYRilyxE/fWT7MtAg4K6EOmiwjTY6e3Lkl V/2H97j3JEZox8yTWS5a1HTv9avhr7irZm5UAe+KiQ8XNWpwpuLs+9jfMLlJ7aFR SmO7rx61bQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:23 2026 by rpki-client