$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: ckdsEF1rRYlL7H0nGlOY2z0J4AwFh68nl+uJ7uZNlr8= Subject key identifier: 08:C3:D4:00:6C:29:A7:5E:CD:69:97:03:ED:A6:64:88:40:7E:C0:B8 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 567F839E17C7F696792B4C0085FA5C20E617DF35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: B0 Signing time: Tue 25 Aug 2026 13:21:18 +0000 Manifest this update: Tue 25 Aug 2026 13:16:18 +0000 Manifest next update: Wed 26 Aug 2026 17:10:18 +0000 Files and hashes: 1: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 2: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) 3: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: 2TcNkfFHzQJ8S1yIxU+nYKW2Lp6F4xWvsR2LY8Yb69I=) 4: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 5: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 6: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 7: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 17:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7f:83:9e:17:c7:f6:96:79:2b:4c:00:85:fa:5c:20:e6:17:df:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Aug 25 13:16:18 2026 GMT Not After : Aug 26 17:10:18 2026 GMT Subject: CN=08C3D4006C29A75ECD699703EDA66488407EC0B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:27:4a:a3:50:01:7b:80:1a:90:e8:81:a9: 62:d3:9e:03:4b:f0:3c:f9:2d:af:9a:58:b9:27:4a: ee:24:6f:c3:36:ab:b2:a2:c5:11:5b:43:f3:d8:12: 92:dd:a8:da:02:ec:9e:9c:ee:51:7c:5a:54:39:a4: fc:e5:8d:e8:89:bd:6e:d3:2f:ee:b9:af:67:b7:99: 99:01:73:8d:43:c3:ec:54:57:a0:4c:43:67:a9:bc: 0d:8a:c2:8e:58:c9:1f:51:fd:5a:a0:a2:52:4b:68: 4d:73:3a:c1:c3:ce:ba:7c:e2:f9:0f:6e:9b:0c:ed: 73:19:02:e0:78:9c:99:b5:35:03:7c:50:1a:32:c4: 2f:b8:33:cf:6d:eb:39:bf:2d:3f:42:27:db:3a:45: fc:83:80:6a:62:df:7f:15:eb:d1:f2:92:c5:12:30: 88:a7:3b:e2:d4:b1:77:1a:0e:06:70:e5:f7:f7:72: 3f:23:bf:93:d3:16:0b:10:20:1e:4d:3e:2c:f9:88: 57:43:21:46:47:c1:d6:71:52:5c:2a:f1:c4:21:fe: 3b:ac:ab:cd:c6:9e:60:14:76:ae:bc:5a:78:dd:5f: 93:89:56:a7:d9:3f:5a:fd:0e:0c:7c:69:db:b0:3b: a5:6a:24:22:0a:43:2a:28:db:29:e4:5b:e6:dd:98: b3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C3:D4:00:6C:29:A7:5E:CD:69:97:03:ED:A6:64:88:40:7E:C0:B8 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:57:2c:22:f5:33:f0:0e:98:8e:d7:0d:10:ea:bd:2a:c8:32: f9:1e:7e:02:d7:84:65:91:76:59:57:b5:4d:c6:21:d9:0e:e9: fd:35:c9:a7:ce:fc:ca:11:76:93:48:ca:57:f1:dc:4d:ad:84: 8b:d5:a0:52:58:5e:a2:ff:09:f8:44:57:5d:11:a6:7c:be:33: 25:78:21:55:d2:37:fb:23:7e:d7:6c:f1:84:cb:fd:e9:ee:fc: ac:c0:43:ec:30:4a:7c:b1:e9:2d:10:1e:28:b0:70:91:5e:e2: a2:16:8f:19:87:52:8d:7e:be:7a:e9:5e:ff:f9:2e:c4:77:b9: 0b:ad:02:c9:00:95:00:62:b7:ef:9f:e1:4d:0a:e9:54:6b:1b: 22:ff:25:e4:16:d0:9a:4e:56:25:42:0b:3f:18:79:b6:1c:07: 57:1a:75:7e:8e:2a:72:f4:c2:d6:3a:f5:0d:b8:93:1b:c3:f0: ba:9f:88:23:d7:7e:41:74:f2:ab:40:32:9c:c0:1a:7c:c1:d2: 63:45:a0:49:88:69:da:07:23:bd:71:a7:0e:46:bc:e4:cb:ac: 32:a0:72:f8:b6:12:b1:c6:68:1a:47:44:9c:50:ba:b6:ed:f3: 36:dd:07:53:83:77:dc:0f:00:0f:5d:3d:8c:87:0c:a0:3f:56: 8d:73:a4:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVn+DnhfH9pZ5K0wAhfpcIOYX3zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA4MjUxMzE2MThaFw0yNjA4MjYxNzEwMThaMDMxMTAvBgNV BAMTKDA4QzNENDAwNkMyOUE3NUVDRDY5OTcwM0VEQTY2NDg4NDA3RUMwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFSdKo1ABe4AakOiBqWLTngNL 8Dz5La+aWLknSu4kb8M2q7KixRFbQ/PYEpLdqNoC7J6c7lF8WlQ5pPzljeiJvW7T L+65r2e3mZkBc41Dw+xUV6BMQ2epvA2Kwo5YyR9R/VqgolJLaE1zOsHDzrp84vkP bpsM7XMZAuB4nJm1NQN8UBoyxC+4M89t6zm/LT9CJ9s6RfyDgGpi338V69HyksUS MIinO+LUsXcaDgZw5ff3cj8jv5PTFgsQIB5NPiz5iFdDIUZHwdZxUlwq8cQh/jus q83GnmAUdq68WnjdX5OJVqfZP1r9Dgx8aduwO6VqJCIKQyoo2ynkW+bdmLPRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCMPUAGwpp17NaZcD7aZkiEB+wLgwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllcsIvUz8A6Y jtcNEOq9Ksgy+R5+AteEZZF2WVe1TcYh2Q7p/TXJp878yhF2k0jKV/HcTa2Ei9Wg Ulheov8J+ERXXRGmfL4zJXghVdI3+yN+12zxhMv96e78rMBD7DBKfLHpLRAeKLBw kV7iohaPGYdSjX6+eule//kuxHe5C60CyQCVAGK375/hTQrpVGsbIv8l5BbQmk5W JUILPxh5thwHVxp1fo4qcvTC1jr1DbiTG8Pwup+II9d+QXTyq0AynMAafMHSY0Wg SYhp2gcjvXGnDka85MusMqBy+LYSscZoGkdEnFC6tu3zNt0HU4N33A8AD109jIcM oD9WjXOkag== -----END CERTIFICATE-----Generated at Wed Aug 26 10:47:37 2026 by rpki-client