$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: GUVk9yzATwNi7CpWbP+PL8Ma3PYdkXk6Gt1/FadKIdg= Subject key identifier: C7:42:7B:A8:A2:E0:10:47:DA:67:82:0C:8C:DC:94:AE:56:AA:74:50 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 61B1535C5524C38325501DA88E3F51BB3BC416C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: BA Signing time: Fri 28 Aug 2026 06:48:26 +0000 Manifest this update: Fri 28 Aug 2026 06:43:26 +0000 Manifest next update: Mon 31 Aug 2026 11:09:26 +0000 Files and hashes: 1: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) 2: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: ZWOoBZ0+ExmvfpolZBqwF1o8IECvtyxx1k8n1x0AEbk=) 3: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b1:53:5c:55:24:c3:83:25:50:1d:a8:8e:3f:51:bb:3b:c4:16:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Aug 28 06:43:26 2026 GMT Not After : Aug 31 11:09:26 2026 GMT Subject: CN=C7427BA8A2E01047DA67820C8CDC94AE56AA7450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:01:37:90:a5:96:fd:8e:be:dc:b6:75:68: 9a:82:d5:9c:87:e4:b6:94:d0:d0:3a:2f:49:26:5e: a9:0f:c3:23:df:a5:77:92:6a:2d:d5:64:4c:5e:82: af:0d:d1:6d:b1:67:7d:40:ad:23:ea:e7:51:0e:f5: 8e:43:40:d6:76:8a:c0:a2:52:78:ee:45:8a:79:44: 86:b1:9f:f3:dd:00:9a:65:de:d3:5b:6f:a8:a3:28: 8b:bf:91:72:d2:ad:8a:5d:aa:42:fa:d7:96:f2:52: ce:5e:4d:ec:c7:fc:f7:c1:e4:b2:8b:c6:14:f1:ca: d2:cf:1f:f2:4d:94:57:46:0f:98:00:cb:b2:b5:9c: 90:ad:cc:69:4a:83:22:bd:d8:18:57:80:e8:2e:89: 37:b6:22:a7:65:00:12:eb:b6:df:e1:2d:9f:43:fd: e7:df:b4:ac:57:ae:75:c9:ae:51:0d:35:1b:cc:50: ee:8d:9a:d4:88:ea:3d:00:21:58:62:ff:98:c3:e2: 85:90:f5:f6:84:97:aa:ba:ff:56:d9:4e:60:e6:32: 87:c8:51:47:a2:c7:84:4c:e8:60:84:86:ba:2f:33: cf:f8:e1:ca:e3:03:02:03:df:67:f4:19:1b:4e:9b: 88:55:8f:63:3c:12:0f:4b:3d:2a:28:85:cb:3a:3e: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:7B:A8:A2:E0:10:47:DA:67:82:0C:8C:DC:94:AE:56:AA:74:50 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5f:eb:13:9d:54:03:60:93:c2:10:2c:d3:32:18:72:c1:d3: 08:02:10:b1:e8:cf:9d:9f:eb:36:f9:8c:07:a9:08:ea:99:d2: be:89:a3:1e:fc:4a:17:b2:8c:9b:92:08:11:63:1b:42:2d:64: 24:06:af:dd:bd:09:9e:7f:a5:7d:1b:e7:6f:e6:30:83:3c:b9: e6:ae:01:e3:65:88:a2:da:a7:2d:e6:62:2b:2f:83:4d:90:e2: a6:5e:94:06:6b:30:4e:7a:f0:25:a4:ca:45:bd:47:e1:4c:b3: b1:12:d7:00:8f:14:69:61:8e:9c:39:c7:b8:1f:54:88:22:06: 42:42:61:5f:03:5d:24:c2:10:5b:78:3d:b2:a2:cf:15:7d:d8: aa:64:e7:76:c5:74:27:29:73:25:b6:eb:bd:24:02:82:d1:35: 07:51:43:e6:13:4b:41:7b:cd:91:ab:62:5f:51:67:3e:10:de: 76:d6:a3:ea:bf:a3:d1:cb:bf:2c:2f:dc:de:3d:33:ff:8b:b8: 4a:7c:98:fa:fe:a7:41:72:14:0a:cc:73:67:48:04:1e:19:7c: 48:74:b4:07:7b:79:36:99:62:e1:36:d2:8c:19:9c:31:d9:92: 70:ce:18:9d:9c:e0:f6:82:24:08:e4:53:86:6f:50:57:cc:2f: fe:fe:7f:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYbFTXFUkw4MlUB2ojj9RuzvEFsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA4MjgwNjQzMjZaFw0yNjA4MzExMTA5MjZaMDMxMTAvBgNV BAMTKEM3NDI3QkE4QTJFMDEwNDdEQTY3ODIwQzhDREM5NEFFNTZBQTc0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxwE3kKWW/Y6+3LZ1aJqC1ZyH 5LaU0NA6L0kmXqkPwyPfpXeSai3VZExegq8N0W2xZ31ArSPq51EO9Y5DQNZ2isCi UnjuRYp5RIaxn/PdAJpl3tNbb6ijKIu/kXLSrYpdqkL615byUs5eTezH/PfB5LKL xhTxytLPH/JNlFdGD5gAy7K1nJCtzGlKgyK92BhXgOguiTe2IqdlABLrtt/hLZ9D /efftKxXrnXJrlENNRvMUO6NmtSI6j0AIVhi/5jD4oWQ9faEl6q6/1bZTmDmMofI UUeix4RM6GCEhrovM8/44crjAwID32f0GRtOm4hVj2M8Eg9LPSoohcs6Pk3HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx0J7qKLgEEfaZ4IMjNyUrlaqdFAwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF/rE51UA2CT whAs0zIYcsHTCAIQsejPnZ/rNvmMB6kI6pnSvomjHvxKF7KMm5IIEWMbQi1kJAav 3b0Jnn+lfRvnb+Ywgzy55q4B42WIotqnLeZiKy+DTZDipl6UBmswTnrwJaTKRb1H 4UyzsRLXAI8UaWGOnDnHuB9UiCIGQkJhXwNdJMIQW3g9sqLPFX3YqmTndsV0Jylz JbbrvSQCgtE1B1FD5hNLQXvNkatiX1FnPhDedtaj6r+j0cu/LC/c3j0z/4u4SnyY +v6nQXIUCsxzZ0gEHhl8SHS0B3t5Npli4TbSjBmcMdmScM4YnZzg9oIkCORThm9Q V8wv/v5/zg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:49 2026 by rpki-client