$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: fDYyyryiX5j4ZNhNR52dxrMT5K6ykTwOiXa0N+RdQ+k= Subject key identifier: 32:A0:06:E2:4D:3E:43:EA:FF:61:36:E1:90:8D:C8:86:65:C6:78:4E Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 03A2DC19E1B8154FE3EEFD36CF3665E48A639990 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: B4 Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 09:59:16 +0000 Files and hashes: 1: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 2: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: 4owKfHsObwizj5DvtIGETqB8YZyz2sHKoq71ormXpB8=) 3: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a2:dc:19:e1:b8:15:4f:e3:ee:fd:36:cf:36:65:e4:8a:63:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 09:59:16 2026 GMT Subject: CN=32A006E24D3E43EAFF6136E1908DC88665C6784E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:6a:a1:54:e4:b2:26:2e:3f:0c:67:e5:96: 57:ac:05:7e:26:74:c2:19:c9:b8:6c:79:97:3a:a1: 09:f3:8c:57:91:49:a5:e2:a0:03:ab:44:61:df:12: c3:fc:b2:ac:62:dd:33:af:a8:ec:3f:e3:6f:37:80: e8:6f:fd:02:6c:5b:1e:50:f6:cc:5c:3e:ad:10:55: ae:51:29:f4:cb:e4:1b:12:7a:a2:c3:95:85:1b:f6: df:4c:a3:f3:82:f8:0e:92:3f:8a:c6:d5:45:d5:02: aa:47:8c:9e:a9:54:29:63:f9:aa:27:aa:72:a8:11: 34:84:55:ab:24:1a:09:7e:90:62:2b:f0:3a:a1:98: ff:96:98:fe:84:fd:a4:f4:f2:fc:3d:51:60:cd:2a: 9f:fc:7c:27:e8:83:d4:98:27:05:72:bf:4c:42:96: 63:1a:ae:f6:6f:c7:b8:66:a3:1b:3b:c9:7c:a7:ff: 8a:fd:c6:b6:f5:c5:7c:75:77:0c:2a:33:68:04:a0: e6:e9:78:57:12:92:03:75:ad:0d:f3:eb:26:b8:a9: f3:aa:0f:dc:45:58:0a:dd:9f:55:f0:c4:39:45:01: 42:c4:da:9a:2f:c5:fa:97:6f:ce:0e:8a:70:12:7f: 0e:b9:56:55:6d:c2:fb:ff:eb:21:fe:c0:7b:c2:80: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A0:06:E2:4D:3E:43:EA:FF:61:36:E1:90:8D:C8:86:65:C6:78:4E X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:60:b9:2e:75:8a:df:95:0d:5c:50:b5:dc:dd:e6:24:8a:d0: 1d:ca:06:c1:3c:59:e2:61:2e:94:11:66:7b:d3:5c:a2:f6:34: 51:57:0b:af:a2:af:02:b5:ae:fe:db:e5:91:2b:4f:39:2e:e9: 50:71:66:6e:a2:37:94:ce:e7:c2:eb:58:e0:8c:a2:1d:85:15: 42:7e:b2:2e:91:67:2f:0e:bc:de:c5:00:38:0e:69:7d:96:ea: e1:ec:1d:4d:d6:cc:60:16:0d:99:a8:7f:eb:ec:1a:50:b6:65: a8:c6:c4:29:c2:cd:23:e0:1a:23:6d:36:da:12:e1:de:52:6c: ba:d8:1f:6b:16:90:b0:79:9a:e5:65:43:fb:12:b2:0c:b4:87: ed:8e:77:56:b7:89:86:59:5c:6b:86:a3:92:58:b1:bd:66:58: 8d:6b:b0:a5:05:39:b2:63:3d:49:70:b5:40:0b:3c:ec:c6:6a: 0e:6c:fd:fe:f3:74:08:47:67:a3:11:50:9d:ad:d0:a5:05:22: 52:ee:c2:77:78:9b:e7:b6:81:9a:c6:8f:2d:63:3a:9d:39:ef: cb:26:f6:1a:4f:2d:83:7c:b4:e0:62:61:b8:31:97:d5:68:80: 34:fc:64:14:74:f6:f6:69:92:57:4c:e9:54:7f:bb:43:ba:21: 8d:e4:bf:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA6LcGeG4FU/j7v02zzZl5IpjmZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzEwOTU5MTZaMDMxMTAvBgNV BAMTKDMyQTAwNkUyNEQzRTQzRUFGRjYxMzZFMTkwOERDODg2NjVDNjc4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uWqhVOSyJi4/DGflllesBX4m dMIZybhseZc6oQnzjFeRSaXioAOrRGHfEsP8sqxi3TOvqOw/4283gOhv/QJsWx5Q 9sxcPq0QVa5RKfTL5BsSeqLDlYUb9t9Mo/OC+A6SP4rG1UXVAqpHjJ6pVClj+aon qnKoETSEVaskGgl+kGIr8DqhmP+WmP6E/aT08vw9UWDNKp/8fCfog9SYJwVyv0xC lmMarvZvx7hmoxs7yXyn/4r9xrb1xXx1dwwqM2gEoObpeFcSkgN1rQ3z6ya4qfOq D9xFWArdn1XwxDlFAULE2povxfqXb84OinASfw65VlVtwvv/6yH+wHvCgCdRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMqAG4k0+Q+r/YTbhkI3IhmXGeE4wHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2C5LnWK35UN XFC13N3mJIrQHcoGwTxZ4mEulBFme9NcovY0UVcLr6KvArWu/tvlkStPOS7pUHFm bqI3lM7nwutY4IyiHYUVQn6yLpFnLw683sUAOA5pfZbq4ewdTdbMYBYNmah/6+wa ULZlqMbEKcLNI+AaI2022hLh3lJsutgfaxaQsHma5WVD+xKyDLSH7Y53VreJhllc a4ajklixvWZYjWuwpQU5smM9SXC1QAs87MZqDmz9/vN0CEdnoxFQna3QpQUiUu7C d3ib57aBmsaPLWM6nTnvyyb2Gk8tg3y04GJhuDGX1WiANPxkFHT29mmSV0zpVH+7 Q7ohjeS//g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:01 2026 by rpki-client