$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: I4pX1qSwSdMz80WyDp3N186923Huf/YyR+RoUgYdzII= Subject key identifier: AD:F9:B1:EE:F5:C0:7D:B0:C2:33:7E:1D:AB:C1:B1:08:7C:F7:7F:BE Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 62B4B21B8B1E8273F53EBAED4A2F232CFB131C76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: BA Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 10:25:00 +0000 Files and hashes: 1: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) 2: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 3: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 4: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 5: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: VTmNYFrhA0SsJSS1uD4Y/K6TS2qm2syejLDffjAZ71o=) 6: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) 7: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 8: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 9: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) 10: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 11: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) 12: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 13: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 14: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 15: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b4:b2:1b:8b:1e:82:73:f5:3e:ba:ed:4a:2f:23:2c:fb:13:1c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 10:25:00 2026 GMT Subject: CN=ADF9B1EEF5C07DB0C2337E1DABC1B1087CF77FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:0d:5b:43:4c:e4:df:45:b6:7c:0b:47:f7: 4d:df:2d:b5:95:8f:f8:45:b2:f8:25:d1:44:aa:60: b1:02:b5:3d:59:e4:a7:2e:6b:f0:da:c2:b8:b4:38: 6b:61:53:37:b7:06:96:8b:d4:d2:97:84:17:a5:8c: fb:3e:2f:1e:00:6e:0b:e5:62:f8:4b:73:15:5c:c9: 11:50:d1:6f:f3:ce:59:b7:f2:29:98:ae:7e:fc:ec: 37:af:fd:4c:17:2a:db:e5:39:95:bb:d2:ea:2b:15: fe:89:c3:e6:61:d8:65:cc:ef:44:4b:aa:05:e9:e2: 6c:f4:46:c1:7b:af:7e:08:86:f0:fe:8a:7b:15:c9: 56:71:bf:0c:ba:e5:49:54:d1:fe:9b:eb:44:79:4d: 1b:fd:f9:33:3b:d7:d1:47:c8:12:c3:95:c2:05:53: 6d:eb:7b:e3:c7:49:86:92:42:0f:b2:d7:fc:7d:cd: 87:25:51:a7:70:f9:1c:ab:96:d8:02:e8:37:23:75: ed:aa:a5:b0:06:70:ac:87:cb:e5:78:3f:9a:6e:cf: c6:24:93:ac:1d:a6:87:9b:48:24:38:eb:30:d4:6e: c5:72:cd:06:63:e3:85:db:d4:64:df:36:5f:83:3d: 29:94:24:c0:84:2c:6f:ba:09:b7:ee:5a:86:86:ef: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:B1:EE:F5:C0:7D:B0:C2:33:7E:1D:AB:C1:B1:08:7C:F7:7F:BE X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:86:c7:bf:37:d8:d7:2f:33:c4:46:72:8e:ce:36:47:08:b3: 6a:e9:e9:32:13:11:17:6e:9d:a2:dc:62:13:cc:f4:35:e3:92: 3a:16:d9:6f:e2:1b:e0:48:6b:62:a8:ad:95:0e:19:97:9d:67: 03:7e:e9:d6:8d:0c:59:5e:b3:93:85:34:61:21:e5:e1:d3:1f: 19:b9:de:38:17:94:c2:81:e1:db:2e:1a:82:fb:16:0c:09:e7: 01:92:cc:7e:61:47:e6:62:eb:4b:55:f6:b8:99:ed:e6:fb:1f: fe:1d:5c:7b:c6:dd:ca:2d:e8:e3:e3:9b:09:b3:ae:69:6d:0f: de:93:76:37:e4:96:ac:e4:96:82:5e:d2:ea:40:1b:b7:bd:d9: fe:17:de:6e:ff:7f:04:3c:f1:99:12:49:60:9b:44:f0:0b:c1: c5:8f:05:bb:24:fd:7b:a6:3b:10:fb:e7:9b:c3:00:88:48:82: 96:e7:0f:2e:88:bb:3a:77:00:a3:bc:30:b7:1f:9d:80:f9:9b: dc:53:92:35:12:a0:28:e2:29:98:50:f7:0d:ab:60:ee:10:7a: 13:82:a1:2a:35:62:7a:d5:ba:32:c4:44:c3:f7:d5:14:a3:d3: b7:9f:ed:0c:67:17:de:d0:15:e9:5d:8b:a9:c2:7b:5a:7c:fd: 8a:4f:bc:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYrSyG4segnP1PrrtSi8jLPsTHHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExMDI1MDBaMDMxMTAvBgNV BAMTKEFERjlCMUVFRjVDMDdEQjBDMjMzN0UxREFCQzFCMTA4N0NGNzdGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDw1bQ0zk30W2fAtH903fLbWV j/hFsvgl0USqYLECtT1Z5Kcua/Dawri0OGthUze3BpaL1NKXhBeljPs+Lx4Abgvl YvhLcxVcyRFQ0W/zzlm38imYrn787Dev/UwXKtvlOZW70uorFf6Jw+Zh2GXM70RL qgXp4mz0RsF7r34IhvD+insVyVZxvwy65UlU0f6b60R5TRv9+TM719FHyBLDlcIF U23re+PHSYaSQg+y1/x9zYclUadw+RyrltgC6Dcjde2qpbAGcKyHy+V4P5puz8Yk k6wdpoebSCQ46zDUbsVyzQZj44Xb1GTfNl+DPSmUJMCELG+6CbfuWoaG77QlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrfmx7vXAfbDCM34dq8GxCHz3f74wHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4bHvzfY1y8z xEZyjs42RwizaunpMhMRF26dotxiE8z0NeOSOhbZb+Ib4EhrYqitlQ4Zl51nA37p 1o0MWV6zk4U0YSHl4dMfGbneOBeUwoHh2y4agvsWDAnnAZLMfmFH5mLrS1X2uJnt 5vsf/h1ce8bdyi3o4+ObCbOuaW0P3pN2N+SWrOSWgl7S6kAbt73Z/hfebv9/BDzx mRJJYJtE8AvBxY8FuyT9e6Y7EPvnm8MAiEiClucPLoi7OncAo7wwtx+dgPmb3FOS NRKgKOIpmFD3Datg7hB6E4KhKjVietW6MsREw/fVFKPTt5/tDGcX3tAV6V2LqcJ7 Wnz9ik+8pg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:32 2026 by rpki-client