$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: 03Gcc6bot7MD1gR82/MNqTzbhbE1C1v8wiOd8JQCwpc= Subject key identifier: 30:01:52:EF:74:77:4A:8C:1F:B8:EB:21:39:00:02:2E:07:75:68:43 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 29CCD49641F779E270ACFFD807EB7943AAD55FD6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: BE Signing time: Fri 28 Aug 2026 06:47:42 +0000 Manifest this update: Fri 28 Aug 2026 06:42:42 +0000 Manifest next update: Mon 31 Aug 2026 12:24:42 +0000 Files and hashes: 1: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 2: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: 16qwf7JVe1PlM8bHWl6y4PTy7BU3wEkUH9tAdXFWwEI=) 3: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 4: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cc:d4:96:41:f7:79:e2:70:ac:ff:d8:07:eb:79:43:aa:d5:5f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Aug 28 06:42:42 2026 GMT Not After : Aug 31 12:24:42 2026 GMT Subject: CN=300152EF74774A8C1FB8EB213900022E07756843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:58:a3:35:a9:76:b3:9e:ec:e0:07:89:e8: 79:1e:d0:cb:80:ba:e1:d6:00:5e:6a:d4:bc:bb:b6: c7:16:e9:46:c5:7e:01:87:a1:36:f4:31:f0:4d:75: f5:8c:65:70:e2:6c:f7:13:23:fa:08:e0:bb:51:c0: 66:0e:c2:e3:49:12:3f:34:a0:99:a8:06:41:eb:26: 67:d5:d9:0f:3f:08:09:de:a8:48:53:c3:d8:cd:1c: 04:5d:2e:04:a4:e9:26:80:a6:70:60:3d:0e:88:60: 2c:5a:c7:cd:e0:ef:39:94:2a:61:42:af:bf:2f:38: b1:1b:2c:d0:12:7f:87:d5:2e:1d:64:30:e2:6a:74: 63:c6:74:ab:e6:2d:58:eb:6b:7a:11:cc:08:d3:75: 03:e4:1b:86:fd:01:15:3b:f2:16:77:68:45:6d:03: ef:d5:63:a1:db:ca:f8:bb:cb:c6:cf:c9:41:04:05: 8f:9b:7e:bb:95:0e:45:0d:3b:de:23:76:0b:ae:2a: da:45:18:be:d1:a2:30:5b:3c:aa:76:ad:eb:81:da: 81:98:0e:30:7f:14:72:28:63:81:45:5a:47:ef:29: 68:c4:41:37:94:99:8a:2a:3d:9a:0f:55:cf:30:ac: 5a:dd:9a:c0:88:d9:7d:d9:0c:5a:d8:7c:65:ac:91: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:52:EF:74:77:4A:8C:1F:B8:EB:21:39:00:02:2E:07:75:68:43 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c8:3a:85:48:c5:ae:fa:ef:c3:04:35:45:5c:41:58:98:3d: 01:73:3e:1f:ea:19:9c:74:8c:5c:26:1e:6f:fb:50:80:27:02: d3:ff:de:bb:2e:2d:e1:2f:23:9a:74:bc:4a:e5:02:c2:8d:21: b2:81:06:89:5b:ce:91:c9:33:b2:6a:5a:a2:0e:06:53:92:5e: 03:86:33:19:29:89:bd:ec:0d:51:cc:7e:78:2a:e0:62:5c:17: 9a:41:78:f5:6d:f4:99:57:eb:e7:eb:ed:e5:99:43:2f:8e:33: 3b:a3:35:d2:61:7e:07:8c:e9:7a:f1:c3:d7:72:2c:39:e5:b4: 54:ee:69:2c:a7:de:b2:2a:62:ae:fa:3e:ff:fd:ed:2c:70:11: cf:c1:9a:57:94:ba:14:93:f6:e6:2e:9f:36:f0:64:9e:1a:ee: 12:4c:15:7f:87:ca:6c:42:64:79:2f:6d:89:f6:42:42:2b:d9: 86:00:4f:d8:a7:bc:34:4f:8d:4b:8b:4c:c8:49:d3:6d:c2:2c: 8d:40:1f:b3:49:3e:d2:8a:e4:4e:74:06:0f:67:2e:70:1b:a5: 41:48:17:4b:ec:56:47:33:dc:c1:b0:d7:1a:c8:84:7b:44:8b: c3:0e:c2:14:de:9b:57:32:8d:69:fd:4c:e5:66:41:b4:81:fb: c6:60:2f:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKczUlkH3eeJwrP/YB+t5Q6rVX9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA4MjgwNjQyNDJaFw0yNjA4MzExMjI0NDJaMDMxMTAvBgNV BAMTKDMwMDE1MkVGNzQ3NzRBOEMxRkI4RUIyMTM5MDAwMjJFMDc3NTY4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdM1ijNal2s57s4AeJ6Hke0MuA uuHWAF5q1Ly7tscW6UbFfgGHoTb0MfBNdfWMZXDibPcTI/oI4LtRwGYOwuNJEj80 oJmoBkHrJmfV2Q8/CAneqEhTw9jNHARdLgSk6SaApnBgPQ6IYCxax83g7zmUKmFC r78vOLEbLNASf4fVLh1kMOJqdGPGdKvmLVjra3oRzAjTdQPkG4b9ARU78hZ3aEVt A+/VY6Hbyvi7y8bPyUEEBY+bfruVDkUNO94jdguuKtpFGL7RojBbPKp2reuB2oGY DjB/FHIoY4FFWkfvKWjEQTeUmYoqPZoPVc8wrFrdmsCI2X3ZDFrYfGWskfY9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMAFS73R3SowfuOshOQACLgd1aEMwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsg6hUjFrvrv wwQ1RVxBWJg9AXM+H+oZnHSMXCYeb/tQgCcC0//euy4t4S8jmnS8SuUCwo0hsoEG iVvOkckzsmpaog4GU5JeA4YzGSmJvewNUcx+eCrgYlwXmkF49W30mVfr5+vt5ZlD L44zO6M10mF+B4zpevHD13IsOeW0VO5pLKfesipirvo+//3tLHARz8GaV5S6FJP2 5i6fNvBknhruEkwVf4fKbEJkeS9tifZCQivZhgBP2Ke8NE+NS4tMyEnTbcIsjUAf s0k+0orkTnQGD2cucBulQUgXS+xWRzPcwbDXGsiEe0SLww7CFN6bVzKNaf1M5WZB tIH7xmAvLw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:17 2026 by rpki-client