$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: +f+UW/DscZksciiQBjpS5dqsFdsNqrr9j12s/s4nsno= Subject key identifier: 1B:90:13:47:20:B9:25:B8:6B:73:D2:7B:68:4A:74:94:2F:83:E4:30 Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 2D486AE13A751C9314C9D1F8E5CFDE87D838DA9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: BE Signing time: Fri 28 Aug 2026 09:23:39 +0000 Manifest this update: Fri 28 Aug 2026 09:18:39 +0000 Manifest next update: Mon 31 Aug 2026 13:22:39 +0000 Files and hashes: 1: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 2: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) 3: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: QluRpEhCKriawFNMuHINzer9XS0Ncb3D3Ob9JKKlO3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:6a:e1:3a:75:1c:93:14:c9:d1:f8:e5:cf:de:87:d8:38:da:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Aug 28 09:18:39 2026 GMT Not After : Aug 31 13:22:39 2026 GMT Subject: CN=1B90134720B925B86B73D27B684A74942F83E430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:e9:52:c6:9f:8a:3d:1f:a6:d1:57:3b:0d: 93:2b:27:41:63:00:c4:87:7e:20:50:f0:aa:06:11: 09:18:dc:3f:e5:bf:c1:cc:24:8e:c2:79:e8:10:3e: 87:2e:40:7a:70:f7:ba:9b:8d:a5:2c:3c:74:5d:e8: 63:15:ce:18:43:cd:fe:d6:04:f9:1d:58:d2:95:44: 54:c9:a6:29:59:5d:23:2c:e8:8e:c4:aa:39:9f:8a: 81:10:52:4d:21:80:56:54:0f:22:55:ac:29:77:60: 08:b5:7a:df:3c:90:13:ca:c9:40:56:fe:9a:58:20: d5:ca:52:33:60:15:6d:80:46:3a:d9:f7:8a:71:f5: 3c:c0:ec:3e:c8:06:94:55:95:a7:5e:66:34:31:be: 3a:34:ce:50:22:c2:9d:67:2e:b0:ab:66:09:bb:44: cb:d9:44:7e:8b:04:1c:3a:2d:5f:e1:1a:36:3f:05: 97:36:45:b5:55:86:d3:32:c6:5d:e5:80:24:55:61: 05:16:8d:71:d2:ba:ef:1b:fb:34:66:02:8d:cc:f4: f0:73:b3:05:e0:14:cc:ec:9f:1d:d6:05:a6:3f:e6: 5f:9d:31:39:2d:5a:a3:25:d4:36:ff:e9:a3:7d:5b: 0a:cc:5f:9a:4f:d8:b7:69:ad:db:1c:db:3f:2f:11: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:90:13:47:20:B9:25:B8:6B:73:D2:7B:68:4A:74:94:2F:83:E4:30 X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:45:b8:d6:5c:14:a7:24:1b:6c:24:6c:56:7c:f6:e6:8a:83: ed:cc:4c:08:d0:62:12:64:db:c5:09:cf:a9:a9:f9:26:10:99: 09:c8:e6:f8:61:26:af:73:f0:ae:3f:d8:77:8d:b1:10:83:b7: a0:f6:f3:1e:55:3d:e1:a9:0f:0c:3f:52:56:3a:b3:be:84:71: 44:ae:37:f4:bc:c3:ad:1d:ac:35:59:83:79:95:07:4a:3c:87: 9c:ec:75:e5:41:81:3a:d2:34:8b:cf:22:45:47:fa:ba:98:92: 06:5a:94:f2:8c:6b:e4:f4:e4:22:4b:d7:e4:18:34:7c:02:9f: e8:86:fc:f3:47:81:6b:59:35:81:08:a2:87:df:9b:c0:fe:78: 2e:ee:22:a5:8c:66:2b:44:b0:c6:dd:53:31:c2:45:f6:ab:4d: 47:43:98:bf:0a:ca:db:75:a7:e9:15:fc:b4:23:3a:48:38:e0: 84:95:b9:72:1a:5b:7c:be:b4:3c:3b:84:3d:7b:00:f9:8b:4d: 91:89:c6:bc:e5:8a:70:c8:71:49:28:a6:7e:b8:9e:25:de:75: 4f:69:df:09:57:b5:73:c3:e5:92:07:fe:8a:c9:bc:1f:b8:9e: c3:3a:ba:9e:a0:0f:ab:8b:c1:ce:83:35:e4:e4:ee:36:34:11: 33:55:7b:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULUhq4Tp1HJMUydH45c/eh9g42p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjA4MjgwOTE4MzlaFw0yNjA4MzExMzIyMzlaMDMxMTAvBgNV BAMTKDFCOTAxMzQ3MjBCOTI1Qjg2QjczRDI3QjY4NEE3NDk0MkY4M0U0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/+lSxp+KPR+m0Vc7DZMrJ0Fj AMSHfiBQ8KoGEQkY3D/lv8HMJI7CeegQPocuQHpw97qbjaUsPHRd6GMVzhhDzf7W BPkdWNKVRFTJpilZXSMs6I7EqjmfioEQUk0hgFZUDyJVrCl3YAi1et88kBPKyUBW /ppYINXKUjNgFW2ARjrZ94px9TzA7D7IBpRVladeZjQxvjo0zlAiwp1nLrCrZgm7 RMvZRH6LBBw6LV/hGjY/BZc2RbVVhtMyxl3lgCRVYQUWjXHSuu8b+zRmAo3M9PBz swXgFMzsnx3WBaY/5l+dMTktWqMl1Db/6aN9WwrMX5pP2Ldprdsc2z8vER2pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG5ATRyC5Jbhrc9J7aEp0lC+D5DAwHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0W41lwUpyQb bCRsVnz25oqD7cxMCNBiEmTbxQnPqan5JhCZCcjm+GEmr3Pwrj/Yd42xEIO3oPbz HlU94akPDD9SVjqzvoRxRK439LzDrR2sNVmDeZUHSjyHnOx15UGBOtI0i88iRUf6 upiSBlqU8oxr5PTkIkvX5Bg0fAKf6Ib880eBa1k1gQiih9+bwP54Lu4ipYxmK0Sw xt1TMcJF9qtNR0OYvwrK23Wn6RX8tCM6SDjghJW5chpbfL60PDuEPXsA+YtNkYnG vOWKcMhxSSimfrieJd51T2nfCVe1c8Plkgf+ism8H7iewzq6nqAPq4vBzoM15OTu NjQRM1V7LA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:00 2026 by rpki-client