$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json) Hash identifier: yWiK2E2uDmHZX6ngWQ/Ck19bYqsU2FNu7C5ZwDXNtII= Subject key identifier: 5C:A2:AA:4E:B9:70:61:2E:EF:93:C8:A6:29:E4:5F:7F:F2:8D:15:87 Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Certificate serial: 3C8EC1C166629217C525EECDAD287826AA274CA6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft Manifest number: A5 Signing time: Fri 28 Aug 2026 06:48:05 +0000 Manifest this update: Fri 28 Aug 2026 06:43:05 +0000 Manifest next update: Mon 31 Aug 2026 16:08:05 +0000 Files and hashes: 1: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=) 2: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: TJGEhSUxjwkNhb5o0uoA3eC/FmgqeEef7v4uG9cAtoI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8e:c1:c1:66:62:92:17:c5:25:ee:cd:ad:28:78:26:aa:27:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Validity Not Before: Aug 28 06:43:05 2026 GMT Not After : Aug 31 16:08:05 2026 GMT Subject: CN=5CA2AA4EB970612EEF93C8A629E45F7FF28D1587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ae:1d:c1:61:92:ce:bb:7a:86:07:5e:27:80: 47:b0:8f:2d:ff:27:55:ed:62:cf:aa:cb:d9:b1:ad: 70:26:1c:52:c7:27:8f:55:0d:de:f2:9f:0e:fc:e5: c7:1c:ad:89:d0:6e:71:b8:7d:be:b1:f5:78:e1:44: bf:50:96:5a:64:53:20:1b:b4:18:37:40:15:d8:d7: 6c:ec:eb:28:5e:8a:45:4e:d2:b1:9b:a7:06:d4:15: 81:ed:5b:a8:47:17:20:a1:4b:66:d4:20:9c:14:1f: ee:3b:4a:35:cd:c8:1d:8b:10:39:f3:57:ce:08:4b: dc:cf:09:4e:5a:aa:c7:a2:71:d5:43:74:1b:1f:af: 85:ac:4f:1b:ca:64:62:4b:70:9a:50:bb:14:69:17: bf:5f:24:84:b6:37:24:97:32:a0:d2:a7:5e:43:1a: fa:90:e8:47:70:ef:f7:5b:24:b0:62:21:8a:ed:80: b3:fa:a3:e9:8e:69:11:83:90:67:35:b9:5d:1a:42: 53:c1:7c:a0:65:43:b1:ef:76:85:2a:9b:a0:eb:82: 66:17:7f:11:cf:33:b4:9b:7f:b9:31:ed:77:d5:ad: 12:05:bf:bb:5b:cd:e5:39:22:55:c7:6b:78:98:b4: 63:a4:49:c3:d2:3d:fc:e6:1c:cc:22:0b:b1:7a:61: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:AA:4E:B9:70:61:2E:EF:93:C8:A6:29:E4:5F:7F:F2:8D:15:87 X509v3 Authority Key Identifier: keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e0:8b:26:04:b5:5f:dc:a0:a6:97:96:0d:67:9b:c8:09:04: 56:4c:27:48:58:80:39:e4:f9:38:7a:0f:86:b9:f1:d5:56:60: 1b:c7:aa:fb:af:40:96:93:83:5f:94:db:0e:60:f8:f7:d7:49: 27:e8:e3:e7:e9:11:12:39:e5:6d:79:af:f7:f2:f5:b1:ef:34: 0b:9e:64:89:82:c8:ad:93:5f:6b:f3:93:da:43:ec:1e:25:a5: d3:e4:04:e0:d7:df:53:25:b7:87:e4:09:88:ae:37:2f:69:fc: ae:dd:f8:cc:78:e5:c1:f2:2e:ec:e0:a9:65:4f:8b:f1:be:38: 50:32:7f:c6:eb:fc:ec:a3:ba:50:10:66:90:fa:f4:d1:d0:71: 74:d5:cb:0d:69:07:3d:c3:4a:59:f4:81:67:6f:eb:b6:94:bd: 3f:48:3f:09:cf:a3:91:a4:86:12:a2:34:0a:50:b2:67:e2:d3: d5:37:84:00:4c:3b:2e:dd:b7:52:d5:9e:78:2b:88:d6:df:8c: ce:1f:c2:2e:1f:0b:86:35:ac:9d:5f:da:db:63:95:2e:ee:62: ba:99:34:c4:a4:24:08:e3:66:8e:75:8c:d2:e3:85:7f:a7:fa: 72:15:54:ef:55:d5:a8:23:f5:03:41:1d:dd:c9:8a:99:3d:b4: 5f:43:40:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPI7BwWZikhfFJe7NrSh4JqonTKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNF MEQ1MDg4RDAeFw0yNjA4MjgwNjQzMDVaFw0yNjA4MzExNjA4MDVaMDMxMTAvBgNV BAMTKDVDQTJBQTRFQjk3MDYxMkVFRjkzQzhBNjI5RTQ1RjdGRjI4RDE1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrh3BYZLOu3qGB14ngEewjy3/ J1XtYs+qy9mxrXAmHFLHJ49VDd7ynw785cccrYnQbnG4fb6x9XjhRL9QllpkUyAb tBg3QBXY12zs6yheikVO0rGbpwbUFYHtW6hHFyChS2bUIJwUH+47SjXNyB2LEDnz V84IS9zPCU5aqseicdVDdBsfr4WsTxvKZGJLcJpQuxRpF79fJIS2NySXMqDSp15D GvqQ6Edw7/dbJLBiIYrtgLP6o+mOaRGDkGc1uV0aQlPBfKBlQ7HvdoUqm6DrgmYX fxHPM7Sbf7kx7XfVrRIFv7tbzeU5IlXHa3iYtGOkScPSPfzmHMwiC7F6YdiFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXKKqTrlwYS7vk8imKeRff/KNFYcwHwYDVR0j BBgwFoAUlGGS22tjFk1/trV+6cRCnODVCI0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk4MTQ3MzM2MTUyNjc4NS8wLzk0NjE5MkRCNkI2MzE2NEQ3RkI2QjU3RUU5QzQ0 MjlDRTBENTA4OEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5ODE0NzMzNjE1MjY3ODUvMC85NDYxOTJEQjZCNjMx NjREN0ZCNkI1N0VFOUM0NDI5Q0UwRDUwODhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeCLJgS1X9yg ppeWDWebyAkEVkwnSFiAOeT5OHoPhrnx1VZgG8eq+69AlpODX5TbDmD499dJJ+jj 5+kREjnlbXmv9/L1se80C55kiYLIrZNfa/OT2kPsHiWl0+QE4NffUyW3h+QJiK43 L2n8rt34zHjlwfIu7OCpZU+L8b44UDJ/xuv87KO6UBBmkPr00dBxdNXLDWkHPcNK WfSBZ2/rtpS9P0g/Cc+jkaSGEqI0ClCyZ+LT1TeEAEw7Lt23UtWeeCuI1t+Mzh/C Lh8LhjWsnV/a22OVLu5iupk0xKQkCONmjnWM0uOFf6f6chVU71XVqCP1A0Ed3cmK mT20X0NAAw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:49 2026 by rpki-client