$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: /mK6kuEyorNGW4U00ilVKsjOxoHMPk+RsoTsPIt/RIo= Subject key identifier: 53:58:D5:65:07:E7:C7:CA:02:26:DA:0F:AC:99:10:FC:4E:9F:EE:8B Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 69B25876C4576E9EB7B32BF40D81D1ABC5DC4323 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: C3 Signing time: Fri 28 Aug 2026 06:47:41 +0000 Manifest this update: Fri 28 Aug 2026 06:42:41 +0000 Manifest next update: Mon 31 Aug 2026 14:36:41 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 2: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 3: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: vH5LU19ivTw+dLE7FjQw2r5k16+uvTJpYkqU6i9G7N0=) 4: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 5: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 6: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 7: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b2:58:76:c4:57:6e:9e:b7:b3:2b:f4:0d:81:d1:ab:c5:dc:43:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Aug 28 06:42:41 2026 GMT Not After : Aug 31 14:36:41 2026 GMT Subject: CN=5358D56507E7C7CA0226DA0FAC9910FC4E9FEE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:2d:2d:b4:ce:69:61:18:0c:6b:46:0a:50: db:c0:58:d1:d8:02:26:c6:00:a5:3c:c2:f8:1a:b3: 75:ad:06:f3:95:a9:6a:81:70:87:db:9c:6f:dc:63: e0:c1:f2:87:e1:51:19:99:d0:92:83:c4:71:16:3a: 76:d0:eb:cc:eb:d4:cf:15:b7:13:b7:21:31:84:34: 16:02:25:a4:22:b8:63:68:74:0f:7b:15:d2:72:f9: 67:b5:29:e1:01:c2:62:3e:6e:b6:47:e3:fb:3a:26: a4:5b:44:4a:5a:11:d9:46:fd:a2:1b:e3:0f:84:c6: 90:52:bc:fb:b9:24:7e:08:de:53:45:57:91:8a:2f: 6e:b6:c4:3b:1a:6e:31:58:03:63:20:41:ff:b8:7c: d9:64:7e:a0:00:96:77:1e:8c:38:46:7c:4d:fb:12: f5:1a:45:69:24:5b:5e:a4:7c:c7:31:b7:ea:68:1f: af:31:31:ac:7a:d2:f3:da:fd:77:39:f1:54:f1:17: 6d:67:0b:e8:9f:77:3d:7a:da:87:62:29:44:6b:29: 33:60:75:d0:83:f6:15:2a:47:4e:db:c2:92:2c:33: 78:72:58:8a:43:ef:5a:0c:4d:a0:be:d5:7d:14:9e: 73:a2:3d:c2:69:45:fe:ad:77:07:a6:98:d2:10:82: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:58:D5:65:07:E7:C7:CA:02:26:DA:0F:AC:99:10:FC:4E:9F:EE:8B X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:3b:5f:34:92:8c:6f:96:e7:d1:1a:cc:b1:79:aa:a1:09: 86:bf:d7:8c:7c:12:9c:06:a8:05:b3:3d:70:32:5e:14:5a:b6: 4a:0b:05:ea:72:e1:6d:69:50:df:5c:03:7e:36:72:36:c0:81: 6c:5a:97:4b:03:13:f0:e8:40:f0:88:02:a2:7a:16:46:4d:11: 87:e5:59:0a:6f:4a:b5:96:d7:da:96:fd:ed:8f:17:08:83:74: 60:5a:73:5b:2b:2a:91:93:c4:76:f7:26:d4:a4:9c:69:7f:6d: 4d:6d:e0:2a:22:fc:22:b2:7a:07:8c:98:7c:6c:4d:1d:cf:ab: b0:69:f4:e0:01:87:c8:2a:bb:b2:4f:2c:36:e5:05:c4:01:2a: 81:52:cc:3a:df:02:b6:74:7a:ba:26:6c:54:13:ea:b1:71:c9: 2b:3c:1b:5d:10:ea:da:fa:4f:7a:8c:52:98:13:b6:15:90:56: b8:07:4d:27:a7:4d:79:4b:85:23:8f:87:4a:af:3f:da:c9:2b: 71:6b:92:68:c7:05:1a:fa:cd:c8:67:7b:c4:17:3a:45:d9:fb: 96:77:b0:c5:c5:ae:aa:21:d2:ed:df:b6:0b:02:75:d1:49:ca: 68:e0:83:77:be:dc:ba:7c:11:4d:9a:19:3d:ff:10:af:87:5c: 36:1c:c0:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUabJYdsRXbp63syv0DYHRq8XcQyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA4MjgwNjQyNDFaFw0yNjA4MzExNDM2NDFaMDMxMTAvBgNV BAMTKDUzNThENTY1MDdFN0M3Q0EwMjI2REEwRkFDOTkxMEZDNEU5RkVFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zC0ttM5pYRgMa0YKUNvAWNHY AibGAKU8wvgas3WtBvOVqWqBcIfbnG/cY+DB8ofhURmZ0JKDxHEWOnbQ68zr1M8V txO3ITGENBYCJaQiuGNodA97FdJy+We1KeEBwmI+brZH4/s6JqRbREpaEdlG/aIb 4w+ExpBSvPu5JH4I3lNFV5GKL262xDsabjFYA2MgQf+4fNlkfqAAlncejDhGfE37 EvUaRWkkW16kfMcxt+poH68xMax60vPa/Xc58VTxF21nC+ifdz162odiKURrKTNg ddCD9hUqR07bwpIsM3hyWIpD71oMTaC+1X0UnnOiPcJpRf6tdwemmNIQguobAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU1jVZQfnx8oCJtoPrJkQ/E6f7oswHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXE7XzSSjG+W 59EazLF5qqEJhr/XjHwSnAaoBbM9cDJeFFq2SgsF6nLhbWlQ31wDfjZyNsCBbFqX SwMT8OhA8IgConoWRk0Rh+VZCm9KtZbX2pb97Y8XCIN0YFpzWysqkZPEdvcm1KSc aX9tTW3gKiL8IrJ6B4yYfGxNHc+rsGn04AGHyCq7sk8sNuUFxAEqgVLMOt8CtnR6 uiZsVBPqsXHJKzwbXRDq2vpPeoxSmBO2FZBWuAdNJ6dNeUuFI4+HSq8/2skrcWuS aMcFGvrNyGd7xBc6Rdn7lnewxcWuqiHS7d+2CwJ10UnKaOCDd77cunwRTZoZPf8Q r4dcNhzAeg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:55 2026 by rpki-client