$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: psG47OmnyEg1+ggDT3Bsefnc52Ewh4rZU3NC9SLF7YQ= Subject key identifier: 85:A1:2D:1E:9E:41:A0:98:41:15:02:52:4C:1C:46:A4:D8:29:3B:C8 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 5A5883FFCC07DBE0D8BCE0222A0222067DF502F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: A3 Signing time: Fri 21 Aug 2026 19:30:34 +0000 Manifest this update: Fri 21 Aug 2026 19:25:34 +0000 Manifest next update: Sat 22 Aug 2026 23:22:34 +0000 Files and hashes: 1: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: tdKpJhGBrV8pEneaNLCd+OVKHPjs8i8BijRCEDz/0oo=) 2: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 3: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 4: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 5: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) 6: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 7: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 8: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 9: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:58:83:ff:cc:07:db:e0:d8:bc:e0:22:2a:02:22:06:7d:f5:02:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Aug 21 19:25:34 2026 GMT Not After : Aug 22 23:22:34 2026 GMT Subject: CN=85A12D1E9E41A098411502524C1C46A4D8293BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:76:a0:3d:aa:bb:87:25:b2:d2:23:e1:0a: 38:53:9d:40:70:50:26:e4:ec:19:c9:d8:45:a1:d2: 61:a7:a5:96:25:04:df:45:bd:6f:0d:56:12:ff:29: 85:92:89:e3:e1:cf:ba:af:7f:da:fc:03:63:b3:d3: 3c:9a:a6:ca:86:10:16:13:5a:65:c3:02:20:c4:20: dc:63:05:36:2f:7e:35:29:71:27:b6:b8:59:21:c7: f0:52:b4:de:8c:e7:a2:7c:af:26:36:96:f5:96:96: 6f:73:a7:12:96:05:d4:34:44:32:3f:d5:db:77:ac: c2:ae:48:67:4e:d1:fd:e7:61:b3:0c:09:7e:ed:d9: ce:9f:99:29:05:15:74:08:01:f1:07:33:98:d5:2e: a4:63:ae:bf:0f:8a:5d:5f:80:57:27:d5:e1:90:13: 59:44:07:06:4b:dc:92:c4:9e:9b:b5:14:a5:44:5b: 5f:72:94:2e:61:9f:7e:53:e0:89:93:a0:c1:4a:e4: 49:ca:a2:c2:3d:c3:cd:1e:0e:e3:13:10:46:ad:6f: 75:b6:67:68:04:d4:39:43:bb:ef:39:61:5d:cf:b0: b4:1b:5d:8a:bb:43:e6:19:69:03:bf:b4:1f:7a:46: 76:54:0e:7c:6f:4d:67:1d:5b:b7:22:0e:5b:e4:15: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:2D:1E:9E:41:A0:98:41:15:02:52:4C:1C:46:A4:D8:29:3B:C8 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:45:55:39:08:d0:7b:b2:97:c2:ec:be:75:0b:6e:cb:82:31: cb:13:fa:4a:df:fd:35:de:d6:d0:84:1a:ca:fc:1f:e7:f5:16: 2c:2b:88:cc:79:7c:ce:68:8b:5b:a8:ac:62:e9:e7:70:53:8f: ba:80:1a:64:ee:3e:eb:0f:17:7d:67:43:65:4c:3e:d3:f4:c5: bf:53:eb:66:77:5a:ab:c2:04:b5:a3:48:4a:e4:ea:b4:de:c4: da:e4:21:6c:c9:3a:be:29:8e:9f:80:21:af:3f:24:4c:2c:2d: 01:f0:77:dc:a2:d1:4d:4f:47:c4:89:4c:39:b4:ea:0c:0f:41: 4b:56:71:45:26:d3:0e:85:94:8e:62:f9:f9:45:c1:36:a4:8a: 7d:8e:ea:33:90:ea:63:24:7d:4f:78:34:31:44:ae:a4:76:92: 6a:00:1a:83:b8:ec:c0:c9:95:cb:39:84:85:f0:89:5c:79:b1: 27:7d:44:27:7c:99:17:9d:62:0c:8f:ff:c3:50:f7:c8:ce:f6: c8:ed:13:5c:b0:b9:6e:bb:6f:ce:e8:35:e2:3c:eb:df:f5:e6: 1a:4c:27:24:cb:3a:16:69:ea:23:73:20:48:90:19:21:81:62: 97:ef:d5:4b:3e:a5:11:9e:ae:c9:7d:90:e2:71:59:4b:c9:af: 52:0f:e0:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWliD/8wH2+DYvOAiKgIiBn31AvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA4MjExOTI1MzRaFw0yNjA4MjIyMzIyMzRaMDMxMTAvBgNV BAMTKDg1QTEyRDFFOUU0MUEwOTg0MTE1MDI1MjRDMUM0NkE0RDgyOTNCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/XagPaq7hyWy0iPhCjhTnUBw UCbk7BnJ2EWh0mGnpZYlBN9FvW8NVhL/KYWSiePhz7qvf9r8A2Oz0zyapsqGEBYT WmXDAiDEINxjBTYvfjUpcSe2uFkhx/BStN6M56J8ryY2lvWWlm9zpxKWBdQ0RDI/ 1dt3rMKuSGdO0f3nYbMMCX7t2c6fmSkFFXQIAfEHM5jVLqRjrr8Pil1fgFcn1eGQ E1lEBwZL3JLEnpu1FKVEW19ylC5hn35T4ImToMFK5EnKosI9w80eDuMTEEatb3W2 Z2gE1DlDu+85YV3PsLQbXYq7Q+YZaQO/tB96RnZUDnxvTWcdW7ciDlvkFd5pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhaEtHp5BoJhBFQJSTBxGpNgpO8gwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUVVOQjQe7KX wuy+dQtuy4IxyxP6St/9Nd7W0IQayvwf5/UWLCuIzHl8zmiLW6isYunncFOPuoAa ZO4+6w8XfWdDZUw+0/TFv1PrZndaq8IEtaNISuTqtN7E2uQhbMk6vimOn4Ahrz8k TCwtAfB33KLRTU9HxIlMObTqDA9BS1ZxRSbTDoWUjmL5+UXBNqSKfY7qM5DqYyR9 T3g0MUSupHaSagAag7jswMmVyzmEhfCJXHmxJ31EJ3yZF51iDI//w1D3yM72yO0T XLC5brtvzug14jzr3/XmGkwnJMs6FmnqI3MgSJAZIYFil+/VSz6lEZ6uyX2Q4nFZ S8mvUg/geg== -----END CERTIFICATE-----Generated at Sat Aug 22 06:51:48 2026 by rpki-client