$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: En0BUpGIHUEbNCp+Ob1jwytkm4CECuRVg+uFpvSsDak= Subject key identifier: 1F:88:DE:1F:63:9B:78:94:17:CF:B1:3E:3F:5B:81:F3:36:21:0B:6C Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 5CDAEC6A8D6EC6D15A5C0B69731960F920B05042 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: BF Signing time: Fri 28 Aug 2026 08:43:39 +0000 Manifest this update: Fri 28 Aug 2026 08:38:39 +0000 Manifest next update: Mon 31 Aug 2026 13:08:39 +0000 Files and hashes: 1: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 2: 3130312e3132352e3235332e302f32342d3234203d3e20313337373032.roa (hash: opKyhsmS++FYHtfTnj/kaqOGfgLAE1EmtkYwGMmQCYc=) 3: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 4: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: Xd63ctJi/w8KVePguAjSPLiyvM62e3Bd0q06TpsUWQw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:da:ec:6a:8d:6e:c6:d1:5a:5c:0b:69:73:19:60:f9:20:b0:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Aug 28 08:38:39 2026 GMT Not After : Aug 31 13:08:39 2026 GMT Subject: CN=1F88DE1F639B789417CFB13E3F5B81F336210B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:21:40:c0:ae:c9:46:11:ba:50:cb:d1:e2: 93:e6:c9:e9:32:7c:cc:ea:aa:18:4b:c0:ae:11:7f: 90:4f:4e:05:5d:fa:5e:ed:79:ce:0b:e6:df:83:e2: 61:55:0f:14:14:a5:35:00:c7:ea:fa:7a:2a:10:aa: a6:de:de:6d:dd:0e:75:be:9f:d1:00:83:95:9b:ad: 03:22:42:ee:fe:1b:5c:a3:b1:97:38:2e:19:6d:77: b6:0f:99:f0:4c:45:dc:19:92:d6:ac:d6:32:e6:79: 21:45:77:e3:ea:62:7a:ca:59:7b:01:dd:ee:b2:fc: 34:28:e9:88:9b:fb:0f:0f:36:08:2d:33:db:43:15: e8:14:92:1d:8c:81:75:53:ab:0e:5b:54:75:cc:01: e7:13:83:0b:27:32:18:ae:60:bb:49:c2:03:e5:2c: 49:47:a8:a0:c0:ef:8d:4a:5a:71:8d:d3:15:75:25: a0:4e:4e:23:df:a8:ef:3b:94:98:d7:bc:98:8d:c8: 51:0a:1a:12:c9:cd:c6:c1:c2:43:cf:34:42:73:81: dc:eb:6a:6c:f0:a5:ec:25:48:8c:c2:b3:a5:b8:90: e1:fb:82:95:6e:06:1e:19:ef:ea:5b:e8:75:dc:33: b1:45:ae:6a:c6:31:e2:de:4a:70:6e:98:7b:91:6b: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:88:DE:1F:63:9B:78:94:17:CF:B1:3E:3F:5B:81:F3:36:21:0B:6C X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c9:74:ae:31:54:ef:06:36:6a:7f:c3:3e:04:6b:20:d1:25: 66:4a:cc:da:3d:84:93:25:0b:76:d5:00:f6:b5:91:c3:fd:51: 37:94:62:db:50:5c:23:32:d8:cc:5b:93:6d:50:54:5b:92:49: ea:4f:a5:cf:f7:ef:81:a2:ed:40:ad:d5:aa:f9:64:9e:c7:2b: 2a:79:ab:56:a5:9a:36:dd:5a:db:80:73:ca:c2:c0:6e:98:d3: 83:48:d9:ea:19:56:76:ae:09:02:4d:6a:c4:50:d1:8b:b6:57: af:ad:c6:ae:7c:92:b6:74:15:16:7d:09:5a:40:d3:4a:30:fe: c9:dd:cb:8e:09:d2:27:c2:b6:d5:5b:49:17:4b:64:63:33:77: ad:57:3a:90:b5:60:70:7e:7f:47:bc:ed:69:22:4c:7a:3d:3c: c6:37:df:0f:54:f3:e6:9f:4d:c7:8e:3f:b0:e4:ef:b7:b8:50: 0a:56:21:a5:06:59:89:87:ef:ff:af:63:d2:bb:6d:ff:af:bd: 10:93:5e:46:48:d1:6d:77:11:f4:fd:2e:41:ef:e3:39:f0:08: fd:c5:b3:a1:57:0b:82:aa:1d:f0:72:59:ff:54:92:f6:01:b9: 65:ad:7e:9a:28:ec:d6:6c:0b:ef:0b:30:be:2d:b1:ab:00:c8: 70:cb:09:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXNrsao1uxtFaXAtpcxlg+SCwUEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA4MjgwODM4MzlaFw0yNjA4MzExMzA4MzlaMDMxMTAvBgNV BAMTKDFGODhERTFGNjM5Qjc4OTQxN0NGQjEzRTNGNUI4MUYzMzYyMTBCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWiFAwK7JRhG6UMvR4pPmyeky fMzqqhhLwK4Rf5BPTgVd+l7tec4L5t+D4mFVDxQUpTUAx+r6eioQqqbe3m3dDnW+ n9EAg5WbrQMiQu7+G1yjsZc4Lhltd7YPmfBMRdwZktas1jLmeSFFd+PqYnrKWXsB 3e6y/DQo6Yib+w8PNggtM9tDFegUkh2MgXVTqw5bVHXMAecTgwsnMhiuYLtJwgPl LElHqKDA741KWnGN0xV1JaBOTiPfqO87lJjXvJiNyFEKGhLJzcbBwkPPNEJzgdzr amzwpewlSIzCs6W4kOH7gpVuBh4Z7+pb6HXcM7FFrmrGMeLeSnBumHuRa809AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH4jeH2ObeJQXz7E+P1uB8zYhC2wwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcl0rjFU7wY2 an/DPgRrINElZkrM2j2EkyULdtUA9rWRw/1RN5Ri21BcIzLYzFuTbVBUW5JJ6k+l z/fvgaLtQK3VqvlknscrKnmrVqWaNt1a24BzysLAbpjTg0jZ6hlWdq4JAk1qxFDR i7ZXr63GrnyStnQVFn0JWkDTSjD+yd3LjgnSJ8K21VtJF0tkYzN3rVc6kLVgcH5/ R7ztaSJMej08xjffD1Tz5p9Nx44/sOTvt7hQClYhpQZZiYfv/69j0rtt/6+9EJNe RkjRbXcR9P0uQe/jOfAI/cWzoVcLgqod8HJZ/1SS9gG5Za1+mijs1mwL7wswvi2x qwDIcMsJaA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:18:56 2026 by rpki-client