$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: OXEcurdxwjmLEB3slUB7CbbxbiV/gYsYi9ELJSFMivE= Subject key identifier: A0:BE:F9:7E:9A:F0:8D:AF:59:ED:9B:ED:21:05:8C:7B:A4:B8:6F:03 Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 3E251F3374341806C3BF4408C820F9EC70D6ED53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: BC Signing time: Fri 28 Aug 2026 06:47:51 +0000 Manifest this update: Fri 28 Aug 2026 06:42:51 +0000 Manifest next update: Mon 31 Aug 2026 09:38:51 +0000 Files and hashes: 1: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) 2: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) 3: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 4: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: d5CFUirjWKDxH/Sp1toaBa/L48VziKW0XV6f8p51q6U=) 5: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:1f:33:74:34:18:06:c3:bf:44:08:c8:20:f9:ec:70:d6:ed:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: Aug 28 06:42:51 2026 GMT Not After : Aug 31 09:38:51 2026 GMT Subject: CN=A0BEF97E9AF08DAF59ED9BED21058C7BA4B86F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:49:67:87:14:29:69:a2:e5:a5:5e:f8:2a: e5:4e:1a:2d:10:76:6e:21:e3:55:cf:47:61:26:7d: c5:b3:62:f7:a1:86:9d:ee:8f:67:33:99:25:34:f8: 50:1e:3f:54:4a:30:80:01:69:d1:d9:80:37:4b:ae: 0e:c6:81:69:f4:b5:01:51:e2:e4:aa:9f:01:6b:4d: 67:5d:f3:12:9d:d2:ea:aa:ee:bc:40:c1:8d:39:6e: 08:2b:dd:6b:79:ce:d0:86:b5:2b:0a:30:61:13:5c: 77:4a:cd:ad:b3:53:1e:32:78:90:ab:e7:1e:54:4d: e6:4f:a6:a0:57:a1:cd:a6:a7:04:10:c5:93:8b:d5: b7:e9:e3:e7:2d:3e:3a:d9:92:59:1e:73:4b:08:f9: 50:ad:38:b3:86:03:d8:a7:55:e0:6c:93:8a:2c:1b: cc:fc:66:59:96:48:b3:08:f9:5f:3d:80:21:07:3e: ca:32:00:e9:9a:f6:21:e1:ef:ff:35:5e:63:a8:38: e9:84:e3:7a:69:14:f7:50:6d:dd:f1:8c:8a:7c:49: a9:00:f6:c1:1c:6d:f3:4c:fc:0a:77:db:4f:9c:e5: 41:dd:aa:a4:fa:28:dd:9d:1d:ae:59:6b:7e:7a:d2: dd:96:32:e6:b2:ea:c5:d5:2e:a2:31:64:0e:dd:ae: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:F9:7E:9A:F0:8D:AF:59:ED:9B:ED:21:05:8C:7B:A4:B8:6F:03 X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:67:b4:6d:8e:ff:b0:f4:24:6a:60:33:aa:18:91:32:08:b0: 0e:c5:55:db:4e:69:83:6f:eb:e5:f1:d3:e2:6c:c5:d3:ed:4b: c0:91:17:c5:05:72:eb:63:10:96:02:35:48:29:5c:1c:18:66: 7b:5e:5b:a5:80:7d:9c:ca:84:8e:10:f5:68:d7:33:84:4e:cb: 9d:db:26:75:39:6c:7f:1c:af:5a:c9:44:7f:2e:c8:e0:31:c1: 1c:bf:aa:f6:8c:97:04:0e:af:4d:cf:cc:e5:87:cd:8a:b4:00: 04:6a:38:c2:79:9c:dc:f2:3c:69:f8:2f:b4:36:69:b0:4c:00: d3:18:db:66:63:2c:ac:af:8a:cf:68:02:57:19:02:d1:59:61: d3:a7:db:99:06:65:1e:91:b2:7a:5f:18:52:53:51:30:2a:40: fa:27:0b:d4:58:64:b5:69:9a:61:f4:58:42:16:e8:83:e0:88: ce:aa:ab:f1:c8:dc:0f:5a:e7:7f:71:b3:03:de:ff:2b:ec:75: d6:62:c1:24:97:56:8f:40:99:81:35:8c:55:61:cd:ad:db:1d: 44:24:3e:72:5c:12:5c:9e:ec:3a:6f:3d:c4:f9:fa:96:52:69: 43:0e:ee:5f:db:4b:14:a2:1d:97:3a:ea:82:56:2e:26:02:77: 26:72:68:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPiUfM3Q0GAbDv0QIyCD57HDW7VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjA4MjgwNjQyNTFaFw0yNjA4MzEwOTM4NTFaMDMxMTAvBgNV BAMTKEEwQkVGOTdFOUFGMDhEQUY1OUVEOUJFRDIxMDU4QzdCQTRCODZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGr0lnhxQpaaLlpV74KuVOGi0Q dm4h41XPR2EmfcWzYvehhp3uj2czmSU0+FAeP1RKMIABadHZgDdLrg7GgWn0tQFR 4uSqnwFrTWdd8xKd0uqq7rxAwY05bggr3Wt5ztCGtSsKMGETXHdKza2zUx4yeJCr 5x5UTeZPpqBXoc2mpwQQxZOL1bfp4+ctPjrZklkec0sI+VCtOLOGA9inVeBsk4os G8z8ZlmWSLMI+V89gCEHPsoyAOma9iHh7/81XmOoOOmE43ppFPdQbd3xjIp8SakA 9sEcbfNM/Ap320+c5UHdqqT6KN2dHa5Za3560t2WMuay6sXVLqIxZA7drnzNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoL75fprwja9Z7ZvtIQWMe6S4bwMwHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANme0bY7/sPQk amAzqhiRMgiwDsVV205pg2/r5fHT4mzF0+1LwJEXxQVy62MQlgI1SClcHBhme15b pYB9nMqEjhD1aNczhE7LndsmdTlsfxyvWslEfy7I4DHBHL+q9oyXBA6vTc/M5YfN irQABGo4wnmc3PI8afgvtDZpsEwA0xjbZmMsrK+Kz2gCVxkC0Vlh06fbmQZlHpGy el8YUlNRMCpA+icL1FhktWmaYfRYQhbog+CIzqqr8cjcD1rnf3GzA97/K+x11mLB JJdWj0CZgTWMVWHNrdsdRCQ+clwSXJ7sOm89xPn6llJpQw7uX9tLFKIdlzrqglYu JgJ3JnJoGg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:09:56 2026 by rpki-client