$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: WLctrxTDQLfu+9kBd3DIRR9yhkgKFe2UtKxkROJZKfc= Subject key identifier: FD:AA:41:8B:9D:2E:33:A5:F2:A6:E6:1E:E5:94:2C:22:8A:7D:4E:B9 Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 14C539170643C8D5117B76497A9ABB341574324A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: C2 Signing time: Fri 28 Aug 2026 06:47:40 +0000 Manifest this update: Fri 28 Aug 2026 06:42:39 +0000 Manifest next update: Mon 31 Aug 2026 13:00:39 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 2: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) 3: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: iAgQ3yizHv0rITySDpIiUhz5e+EknB40s/YantUKXyc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:39:17:06:43:c8:d5:11:7b:76:49:7a:9a:bb:34:15:74:32:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Aug 28 06:42:39 2026 GMT Not After : Aug 31 13:00:39 2026 GMT Subject: CN=FDAA418B9D2E33A5F2A6E61EE5942C228A7D4EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:3b:7a:18:96:9a:16:0f:b2:5a:cf:60:5a: 69:98:e9:cf:aa:aa:87:02:48:8c:35:4f:ef:ba:ca: 97:04:1d:e2:64:67:92:8f:0c:0a:47:5a:2c:85:23: 92:ee:f0:6f:dd:d8:90:5c:eb:c9:4c:63:74:d4:3e: 64:09:d3:a2:ba:d3:48:90:93:48:f1:99:db:67:88: 50:e6:c0:3f:db:d0:e6:4d:51:d7:e6:e7:45:9f:77: 86:47:b5:d9:01:c8:69:be:b0:0a:aa:0c:a7:78:9b: 86:e5:32:2d:59:4e:c6:24:b3:3e:ca:e2:c6:53:42: 9a:38:57:24:1e:97:c6:c8:82:20:cb:8d:5f:d8:ba: 0a:7b:78:b5:d7:31:37:76:5e:20:17:0b:73:79:0c: 7c:63:28:4c:1e:fc:ad:49:c8:e4:56:20:62:de:2c: 16:cd:8d:26:de:6b:14:ac:bf:d0:48:b1:8b:94:a4: 92:47:61:8d:bf:79:0d:e0:40:38:01:1e:69:f9:ad: 01:bb:4b:d7:2a:14:6f:ae:d9:ce:6e:9a:74:39:8b: bb:b9:f1:a6:0b:f9:41:41:46:39:c0:57:8b:cd:53: 76:0a:df:07:7b:a1:8a:d7:45:dd:45:64:4e:e7:85: af:bc:b4:36:0c:ab:15:84:f8:3a:b4:39:cf:72:82: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:41:8B:9D:2E:33:A5:F2:A6:E6:1E:E5:94:2C:22:8A:7D:4E:B9 X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2f:75:74:e2:c9:47:6c:ee:12:7d:9b:a7:5a:22:30:34:66: 14:e6:28:8e:0a:c0:ba:44:45:43:5d:b2:17:68:04:a9:ef:e5: de:9a:cd:a0:d2:19:c8:89:6b:43:c0:ae:de:9f:f5:02:6e:25: 38:b8:31:3d:6e:ad:e9:b3:cf:b5:74:23:65:f5:b4:77:f2:73: b7:d3:11:41:28:6b:60:06:27:a8:f4:ec:a7:91:9d:9a:78:0c: ed:15:58:dc:08:a0:f3:0a:3c:e2:b4:2b:ea:89:c8:f6:97:ad: e5:e4:24:4e:ed:71:79:95:22:62:8d:1e:78:5b:62:a8:b0:bf: f3:ff:66:81:71:9c:a5:da:02:8e:b0:d5:de:d6:ad:cd:55:e5: 7e:d5:f1:c8:06:7d:43:86:fa:41:7d:f6:33:af:42:17:c8:d8: 41:cc:83:2a:9e:e2:da:3a:ae:61:02:ca:4f:21:d4:8c:54:bd: aa:62:5c:e4:cf:06:1f:28:3e:f2:2e:cf:52:7d:1c:84:02:b6: c5:5b:20:c9:c8:8b:af:cd:37:f7:48:0e:31:96:97:f4:a6:c4: 99:30:1a:1c:9c:72:5d:39:68:ba:e9:01:d8:8b:4d:ed:dc:fc: 7d:5f:aa:b7:58:01:16:2b:e2:bd:7e:5e:39:ca:0c:a9:af:a1: 6f:63:83:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFMU5FwZDyNURe3ZJepq7NBV0MkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA4MjgwNjQyMzlaFw0yNjA4MzExMzAwMzlaMDMxMTAvBgNV BAMTKEZEQUE0MThCOUQyRTMzQTVGMkE2RTYxRUU1OTQyQzIyOEE3RDRFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hzt6GJaaFg+yWs9gWmmY6c+q qocCSIw1T++6ypcEHeJkZ5KPDApHWiyFI5Lu8G/d2JBc68lMY3TUPmQJ06K600iQ k0jxmdtniFDmwD/b0OZNUdfm50Wfd4ZHtdkByGm+sAqqDKd4m4blMi1ZTsYksz7K 4sZTQpo4VyQel8bIgiDLjV/Yugp7eLXXMTd2XiAXC3N5DHxjKEwe/K1JyORWIGLe LBbNjSbeaxSsv9BIsYuUpJJHYY2/eQ3gQDgBHmn5rQG7S9cqFG+u2c5umnQ5i7u5 8aYL+UFBRjnAV4vNU3YK3wd7oYrXRd1FZE7nha+8tDYMqxWE+Dq0Oc9yghObAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/apBi50uM6XypuYe5ZQsIop9TrkwHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii91dOLJR2zu En2bp1oiMDRmFOYojgrAukRFQ12yF2gEqe/l3prNoNIZyIlrQ8Cu3p/1Am4lOLgx PW6t6bPPtXQjZfW0d/Jzt9MRQShrYAYnqPTsp5GdmngM7RVY3Aig8wo84rQr6onI 9pet5eQkTu1xeZUiYo0eeFtiqLC/8/9mgXGcpdoCjrDV3tatzVXlftXxyAZ9Q4b6 QX32M69CF8jYQcyDKp7i2jquYQLKTyHUjFS9qmJc5M8GHyg+8i7PUn0chAK2xVsg yciLr80390gOMZaX9KbEmTAaHJxyXTlouukB2ItN7dz8fV+qt1gBFivivX5eOcoM qa+hb2ODTg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:17 2026 by rpki-client