$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: ohnmgFj9LZhBOQIXzM9XTzZIIl5IziYwJwFnsAk+IBA= Subject key identifier: 6F:9D:3C:9A:77:14:FA:10:5A:27:65:F8:26:DD:5A:AB:8C:3C:8C:97 Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 39EA9DA3D7998F3A85E73239F8EC6B7636DEC9AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: B0 Signing time: Fri 28 Aug 2026 06:48:03 +0000 Manifest this update: Fri 28 Aug 2026 06:43:03 +0000 Manifest next update: Mon 31 Aug 2026 13:31:03 +0000 Files and hashes: 1: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) 2: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 3: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (hash: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk=) 4: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) 5: 3130332e38312e342e302f32322d3232203d3e203633373034.roa (hash: xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=) 6: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (hash: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=) 7: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: +C7T7Uud2EB2eS6oDn8nLs5BTA3a3i7VidoMYkdsmuw=) 8: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:9d:a3:d7:99:8f:3a:85:e7:32:39:f8:ec:6b:76:36:de:c9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Aug 28 06:43:03 2026 GMT Not After : Aug 31 13:31:03 2026 GMT Subject: CN=6F9D3C9A7714FA105A2765F826DD5AAB8C3C8C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:66:6f:e2:89:c2:fd:9f:cd:7d:c5:d2:2c: c7:10:c2:6d:e1:7b:ae:e6:6e:1b:7a:0b:96:5b:90: 13:8f:98:f1:ad:4c:40:93:bd:d1:47:a8:2a:21:0b: ba:75:f0:f1:37:be:95:79:1a:a5:dd:7e:9d:69:e5: 6e:44:0f:71:59:10:2c:0b:ee:ac:88:5f:34:d3:b2: 2a:e3:c4:37:4c:80:08:89:16:0d:39:da:72:f0:c5: 1a:ae:bf:3b:b1:e5:18:b7:f6:8b:4a:7b:9d:e5:e4: f7:3c:25:c4:6f:4c:5a:37:1a:8e:99:2a:3c:0b:96: 74:95:07:46:5f:08:c3:11:55:29:c4:ab:22:57:65: 6b:9a:9d:47:d6:cb:77:36:c6:e8:f6:eb:64:af:50: 1a:69:f2:fd:3c:ae:c8:94:ba:b9:d7:85:aa:2e:64: da:64:1b:10:45:fc:b9:d3:5d:9d:d5:e3:f7:c4:67: d4:60:43:25:71:9a:1d:e1:a1:cd:6b:72:4d:c4:03: 5b:3d:fb:01:a2:e0:2d:d8:ad:11:d6:0d:3f:66:36: e0:8d:0a:c0:45:6f:c6:13:7f:a2:65:69:f5:41:b4: 5a:57:aa:92:7a:dd:f9:c6:16:b3:7d:84:a2:41:96: 2f:d6:e1:e9:01:53:03:96:26:16:cb:0a:7d:ed:4b: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9D:3C:9A:77:14:FA:10:5A:27:65:F8:26:DD:5A:AB:8C:3C:8C:97 X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:54:6b:ba:c7:30:63:9b:0e:bf:20:0d:cd:5c:f8:48:ec:b1: 69:24:48:bd:64:4c:e3:9c:ef:0a:22:6b:22:33:01:54:9d:51: fe:01:58:e3:5f:b0:97:36:8c:ed:1f:65:44:79:f0:5c:d3:36: 3d:9e:92:34:7f:4d:60:de:58:45:06:8e:a1:af:a0:bd:62:21: ad:30:66:27:4f:b9:29:8e:f5:df:e4:75:47:01:1b:92:91:b5: f4:3c:ef:bc:c9:0b:d8:fa:b2:e1:c9:3c:85:be:ba:81:92:30: f6:b2:25:40:38:31:7b:51:bf:31:6a:91:31:12:7a:d8:e9:d0: f1:7a:5f:b2:7a:a8:8b:76:80:57:f8:35:bd:e4:7d:ed:66:4c: fd:d3:02:a0:c3:8b:c6:27:05:0b:92:96:01:13:a5:b4:76:3e: 07:f2:57:e6:a5:52:d1:b3:3a:12:d8:a0:14:8d:68:09:0f:f1: 11:66:7c:f9:0d:27:fc:47:4f:24:7b:c7:48:b3:78:8b:84:17: 48:c6:86:eb:ab:10:60:a6:81:5d:d1:00:8a:af:f3:8c:ca:ba: e5:c9:55:b1:e9:80:43:c7:42:fc:15:24:7b:02:48:79:f7:64: 5b:f8:a3:a3:42:01:fb:2f:6f:70:de:8e:f8:c3:5d:91:d3:4e: 08:1f:f7:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOeqdo9eZjzqF5zI5+Oxrdjbeya8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA4MjgwNjQzMDNaFw0yNjA4MzExMzMxMDNaMDMxMTAvBgNV BAMTKDZGOUQzQzlBNzcxNEZBMTA1QTI3NjVGODI2REQ1QUFCOEMzQzhDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+mZv4onC/Z/NfcXSLMcQwm3h e67mbht6C5ZbkBOPmPGtTECTvdFHqCohC7p18PE3vpV5GqXdfp1p5W5ED3FZECwL 7qyIXzTTsirjxDdMgAiJFg052nLwxRquvzux5Ri39otKe53l5Pc8JcRvTFo3Go6Z KjwLlnSVB0ZfCMMRVSnEqyJXZWuanUfWy3c2xuj262SvUBpp8v08rsiUurnXhaou ZNpkGxBF/LnTXZ3V4/fEZ9RgQyVxmh3hoc1rck3EA1s9+wGi4C3YrRHWDT9mNuCN CsBFb8YTf6JlafVBtFpXqpJ63fnGFrN9hKJBli/W4ekBUwOWJhbLCn3tS1IPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb508mncU+hBaJ2X4Jt1aq4w8jJcwHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVRruscwY5sO vyANzVz4SOyxaSRIvWRM45zvCiJrIjMBVJ1R/gFY41+wlzaM7R9lRHnwXNM2PZ6S NH9NYN5YRQaOoa+gvWIhrTBmJ0+5KY713+R1RwEbkpG19DzvvMkL2Pqy4ck8hb66 gZIw9rIlQDgxe1G/MWqRMRJ62OnQ8Xpfsnqoi3aAV/g1veR97WZM/dMCoMOLxicF C5KWAROltHY+B/JX5qVS0bM6EtigFI1oCQ/xEWZ8+Q0n/EdPJHvHSLN4i4QXSMaG 66sQYKaBXdEAiq/zjMq65clVsemAQ8dC/BUkewJIefdkW/ijo0IB+y9vcN6O+MNd kdNOCB/3Pg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:57 2026 by rpki-client