$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json) Hash identifier: +QLTF0a6mcUp9kyYeR4Av9KqYba+Z6GJXrM5lO9yYDA= Subject key identifier: 58:9D:99:C1:8B:DA:44:3F:66:F6:23:FF:BE:37:F1:B2:9A:8F:D3:75 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 124502C78887D750BB4D607B43D89F87C0A68F03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft Manifest number: AC Signing time: Fri 28 Aug 2026 06:47:52 +0000 Manifest this update: Fri 28 Aug 2026 06:42:52 +0000 Manifest next update: Mon 31 Aug 2026 16:43:52 +0000 Files and hashes: 1: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=) 2: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=) 3: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: +d8Hpe1E46YGl6Hf4DFt+FH0hV4UDtZuLBl/zr8ixnE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:45:02:c7:88:87:d7:50:bb:4d:60:7b:43:d8:9f:87:c0:a6:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Aug 28 06:42:52 2026 GMT Not After : Aug 31 16:43:52 2026 GMT Subject: CN=589D99C18BDA443F66F623FFBE37F1B29A8FD375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:05:dd:5c:bd:96:b6:a7:45:e8:17:a4:31: a7:27:e6:13:44:3a:e0:15:38:2e:e9:88:a9:fe:a0: 3e:69:02:46:e0:62:67:31:67:fb:c2:71:b4:fe:fa: f5:2d:64:44:98:09:e3:ee:5f:9a:fa:97:8a:26:ae: 0b:75:2f:48:90:dd:08:19:79:3c:07:9b:08:78:a5: 12:4a:f6:8f:18:56:28:fb:14:d8:87:8d:1b:21:71: bb:16:22:b4:43:ff:c7:85:b6:09:b2:5d:05:93:de: 85:07:d7:87:d0:a4:fe:cc:d2:9a:ce:73:33:56:18: 9d:cc:fb:a6:81:dd:45:b6:46:b7:ca:7f:d9:72:ed: 2c:2a:c0:bd:de:6c:91:f2:1b:2f:eb:c5:03:cf:f9: 32:76:59:fc:3d:f2:fb:aa:4a:36:1a:76:ea:d4:bf: 36:12:62:c0:bf:8d:dc:3a:59:87:f0:b6:d4:64:eb: c8:c3:19:d6:9a:91:ff:54:5e:ff:93:eb:49:91:32: 0e:9b:b9:d6:c1:2d:d3:91:42:4d:68:05:ef:5a:c0: 03:8d:f7:a3:bd:6e:a7:26:d1:83:4c:73:f3:f1:08: 26:a8:9e:7c:e6:26:3c:8b:ca:17:bf:d4:b9:4c:a7: b8:fe:f7:c4:e8:8f:4f:ca:a4:da:b1:39:e0:ba:ba: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:99:C1:8B:DA:44:3F:66:F6:23:FF:BE:37:F1:B2:9A:8F:D3:75 X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:04:e5:35:7c:7b:19:97:3e:35:e0:f7:f9:2c:7b:40:65: 56:8c:06:35:68:ea:50:98:9b:7d:fb:1c:db:49:ca:7e:35:6a: 55:5a:b0:5d:39:13:b4:f3:67:6f:d5:11:26:4c:ef:ed:3d:81: 5b:76:9a:74:9a:e7:d1:5b:3c:43:13:99:7a:e8:d6:9a:64:11: 67:4d:11:6a:91:c0:30:e6:52:66:36:e2:6f:52:b3:84:4f:9f: 7d:9e:1b:4f:c6:2f:18:aa:76:bb:6d:ec:a4:9d:e0:4d:99:38: b8:55:b5:53:58:50:f2:01:d5:6a:88:9c:e0:28:ee:da:30:b8: a7:20:64:25:4a:65:8f:3d:76:3b:e6:12:81:db:6d:08:61:83: 46:02:8b:db:db:dd:f5:e5:a6:42:9d:9d:72:5e:b3:de:ee:49: fb:cb:a6:bb:66:98:27:95:a1:5d:a5:72:8e:a6:0a:17:47:f1: 94:7b:a6:4d:e0:f9:d9:0a:eb:5c:65:d1:d0:0d:ce:16:9c:b3: 69:5d:d7:96:c7:0a:22:aa:e9:5b:59:8c:63:61:13:7c:05:3c: 7e:d9:dd:92:0f:93:7a:73:24:99:7b:15:47:c0:16:87:6b:68: 42:ce:8d:b8:cb:3e:ea:1b:ef:b8:a5:b4:2f:f0:d6:76:08:0f: 36:e5:6e:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEkUCx4iH11C7TWB7Q9ifh8CmjwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA4MjgwNjQyNTJaFw0yNjA4MzExNjQzNTJaMDMxMTAvBgNV BAMTKDU4OUQ5OUMxOEJEQTQ0M0Y2NkY2MjNGRkJFMzdGMUIyOUE4RkQzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxQXdXL2WtqdF6BekMacn5hNE OuAVOC7piKn+oD5pAkbgYmcxZ/vCcbT++vUtZESYCePuX5r6l4omrgt1L0iQ3QgZ eTwHmwh4pRJK9o8YVij7FNiHjRshcbsWIrRD/8eFtgmyXQWT3oUH14fQpP7M0prO czNWGJ3M+6aB3UW2RrfKf9ly7SwqwL3ebJHyGy/rxQPP+TJ2Wfw98vuqSjYadurU vzYSYsC/jdw6WYfwttRk68jDGdaakf9UXv+T60mRMg6budbBLdORQk1oBe9awAON 96O9bqcm0YNMc/PxCCaonnzmJjyLyhe/1LlMp7j+98Toj0/KpNqxOeC6ulr9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWJ2ZwYvaRD9m9iP/vjfxspqP03UwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLME5TV8exmX PjXg9/kse0BlVowGNWjqUJibffsc20nKfjVqVVqwXTkTtPNnb9URJkzv7T2BW3aa dJrn0Vs8QxOZeujWmmQRZ00RapHAMOZSZjbib1KzhE+ffZ4bT8YvGKp2u23spJ3g TZk4uFW1U1hQ8gHVaoic4Cju2jC4pyBkJUpljz12O+YSgdttCGGDRgKL29vd9eWm Qp2dcl6z3u5J+8umu2aYJ5WhXaVyjqYKF0fxlHumTeD52QrrXGXR0A3OFpyzaV3X lscKIqrpW1mMY2ETfAU8ftndkg+TenMkmXsVR8AWh2toQs6NuMs+6hvvuKW0L/DW dggPNuVuew== -----END CERTIFICATE-----Generated at Sat Aug 29 06:20:03 2026 by rpki-client