$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: ktqsbPa9pkoGMzbRQ+lAnX6rv41+4pyqF4d7KS1rZKg= Subject key identifier: 96:EA:25:9C:DC:7E:6E:92:0E:AB:97:20:86:05:C7:48:C4:30:E7:B2 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 402E4BD5A0689D9FBB4836FBC4EDC961C7A60338 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: A6 Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 09:13:16 +0000 Files and hashes: 1: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: fQwNoVyUmSu+bOtSFThsU5zKny4gVop35y8sNVeU1EA=) 2: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 3: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2e:4b:d5:a0:68:9d:9f:bb:48:36:fb:c4:ed:c9:61:c7:a6:03:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 09:13:16 2026 GMT Subject: CN=96EA259CDC7E6E920EAB97208605C748C430E7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:0b:68:8c:cf:7a:3a:31:f8:4f:61:37:6c: 70:68:d2:76:3c:ef:69:fc:d4:24:38:90:58:33:4f: 36:3a:c8:37:cc:d2:03:dc:fd:97:3e:21:a0:90:c8: 32:f9:65:c3:e7:99:78:35:34:d0:0f:cc:ba:8f:13: a7:68:7a:e0:b7:23:81:3a:db:ad:a0:c5:35:69:00: e9:d6:96:41:ae:d8:bb:5e:17:a6:37:26:58:53:48: 1c:00:2d:af:95:1d:72:99:2e:3b:c7:84:9b:b8:fe: 02:8d:f5:48:c4:06:ff:57:62:ac:e3:e1:46:6d:2b: bb:53:57:10:c9:0e:ab:b1:55:94:e4:91:41:65:7b: 17:9c:86:49:ec:76:75:55:98:c8:e5:c5:f5:15:6c: 7c:f6:ee:55:03:ef:df:af:da:f7:78:4f:66:2b:1f: 44:0b:29:9f:11:96:02:27:e3:fd:a4:c9:7e:a8:9e: 5f:d4:33:b5:8d:ff:19:a5:06:f8:0d:56:87:54:48: 46:14:21:e9:45:ab:09:25:de:30:19:c0:c9:7d:72: a6:40:a9:6a:94:aa:18:52:8a:10:17:44:44:80:2f: 47:d6:d1:58:e3:d4:38:88:ee:95:3e:56:55:e1:0e: c5:d5:70:23:b0:17:0f:65:7d:20:65:5f:b0:c8:5d: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:25:9C:DC:7E:6E:92:0E:AB:97:20:86:05:C7:48:C4:30:E7:B2 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1c:c1:22:95:70:31:48:9c:9a:74:36:e4:32:3e:eb:5c:5f: 85:a1:cb:f6:ac:1d:1b:a0:60:3d:24:ef:bd:74:2a:e0:a2:71: 43:e9:30:2c:d0:dd:f2:7a:41:c8:b6:d4:4f:16:26:d3:98:0d: ec:c3:74:6a:9f:62:10:1a:f1:19:ff:e3:ce:1b:ec:4f:e7:8e: bf:50:16:a0:97:6d:19:e9:28:b6:6b:1f:8e:cd:9a:a5:59:20: a0:07:b9:1f:1f:23:8e:6e:c3:2d:e4:9c:03:5b:d2:f2:ee:c1: 3d:fa:d2:eb:f3:65:ea:f9:ba:1f:94:54:ef:d6:dd:bd:84:02: 08:df:ba:14:0c:e8:ef:e8:42:bd:ab:0b:3b:59:5a:01:53:40: 03:72:84:54:e0:f3:4f:d4:fd:12:bf:2a:22:e8:70:85:41:43: 17:a5:eb:43:db:27:07:36:96:4c:81:7b:ff:ff:b4:df:69:aa: ff:ef:18:7f:52:0d:70:28:23:53:7e:ef:0c:fc:fa:7a:11:d2: 1d:4b:3f:45:61:b6:b2:af:ff:d4:4b:2e:3e:7d:ff:a2:38:ed: 96:9f:b7:01:a6:54:b6:5e:38:3f:4c:89:cc:07:81:e8:09:2d: 0f:58:68:e0:0a:cd:6a:52:1f:20:65:ad:cb:1b:28:e9:61:f6: d2:95:be:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQC5L1aBonZ+7SDb7xO3JYcemAzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzEwOTEzMTZaMDMxMTAvBgNV BAMTKDk2RUEyNTlDREM3RTZFOTIwRUFCOTcyMDg2MDVDNzQ4QzQzMEU3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijwtojM96OjH4T2E3bHBo0nY8 72n81CQ4kFgzTzY6yDfM0gPc/Zc+IaCQyDL5ZcPnmXg1NNAPzLqPE6doeuC3I4E6 262gxTVpAOnWlkGu2LteF6Y3JlhTSBwALa+VHXKZLjvHhJu4/gKN9UjEBv9XYqzj 4UZtK7tTVxDJDquxVZTkkUFlexechknsdnVVmMjlxfUVbHz27lUD79+v2vd4T2Yr H0QLKZ8RlgIn4/2kyX6onl/UM7WN/xmlBvgNVodUSEYUIelFqwkl3jAZwMl9cqZA qWqUqhhSihAXRESAL0fW0Vjj1DiI7pU+VlXhDsXVcCOwFw9lfSBlX7DIXfTFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUluolnNx+bpIOq5cghgXHSMQw57IwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxzBIpVwMUic mnQ25DI+61xfhaHL9qwdG6BgPSTvvXQq4KJxQ+kwLNDd8npByLbUTxYm05gN7MN0 ap9iEBrxGf/jzhvsT+eOv1AWoJdtGekotmsfjs2apVkgoAe5Hx8jjm7DLeScA1vS 8u7BPfrS6/Nl6vm6H5RU79bdvYQCCN+6FAzo7+hCvasLO1laAVNAA3KEVODzT9T9 Er8qIuhwhUFDF6XrQ9snBzaWTIF7//+032mq/+8Yf1INcCgjU37vDPz6ehHSHUs/ RWG2sq//1EsuPn3/ojjtlp+3AaZUtl44P0yJzAeB6AktD1ho4ArNalIfIGWtyxso 6WH20pW+ZQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:38 2026 by rpki-client