$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json) Hash identifier: DCFO4a37S8FJEXC2iHDcGKdct7guYpifcov0LwUSUFg= Subject key identifier: F2:19:03:8B:B2:44:1F:A0:8F:5A:E4:55:85:84:FA:0B:D9:7C:0F:58 Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 5FE383E50E770644036409922AFCF99A93BC17A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft Manifest number: A1 Signing time: Fri 28 Aug 2026 06:48:23 +0000 Manifest this update: Fri 28 Aug 2026 06:43:23 +0000 Manifest next update: Mon 31 Aug 2026 16:50:23 +0000 Files and hashes: 1: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=) 2: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=) 3: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: lu/ZQMGJsh82JJNvaDFIvRZfGSPOWKYtbfeSCZGl6K0=) 4: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e3:83:e5:0e:77:06:44:03:64:09:92:2a:fc:f9:9a:93:bc:17:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: Aug 28 06:43:23 2026 GMT Not After : Aug 31 16:50:23 2026 GMT Subject: CN=F219038BB2441FA08F5AE4558584FA0BD97C0F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:a5:2e:76:ec:24:76:68:53:12:16:75:07: fc:47:50:12:d6:be:84:88:e6:87:b5:8e:9c:de:27: 6e:01:26:42:36:ee:ca:bc:d6:bc:80:2c:38:bd:d0: ac:13:45:e3:26:d1:41:c6:6a:54:df:1e:e2:2e:25: 58:84:7d:d8:ab:d7:17:37:32:24:26:24:ac:87:21: 24:2b:ac:51:6d:76:89:f0:19:cd:db:f7:92:35:4a: a4:2a:6e:af:59:b9:9c:28:38:52:da:a3:35:6f:3d: 3d:cd:10:9e:a6:49:ad:0f:30:dc:af:5d:20:c2:40: 18:73:52:56:bd:ea:be:ff:a9:c0:4b:fb:a1:0b:45: 4c:aa:14:7e:de:8e:69:0e:f9:dd:1f:a0:60:eb:ef: 9a:81:fa:a0:0f:40:1e:e0:e7:de:a5:24:aa:14:60: 8a:dd:59:39:15:ce:7e:f5:92:f8:36:3a:9a:58:32: 70:85:e7:dc:11:f0:a5:f5:97:36:d6:05:31:4f:c3: 25:e1:6e:e9:74:d2:36:9d:9b:e0:38:c4:81:2b:4f: 34:93:bc:f7:97:be:b1:65:55:55:8a:08:fe:47:8b: 2c:23:af:99:b6:ee:75:f3:4a:b9:d5:81:bf:c6:20: e2:c0:a8:f9:31:40:06:ce:4b:36:a7:c8:b4:b8:1b: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:19:03:8B:B2:44:1F:A0:8F:5A:E4:55:85:84:FA:0B:D9:7C:0F:58 X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e7:0c:28:4a:c5:71:0b:c3:d8:18:e6:a9:5a:cc:ec:ce:97: 6f:58:fe:28:84:4b:41:9d:c4:36:77:88:19:bc:e9:bb:be:d0: 9f:09:93:4b:df:3f:9e:df:73:67:12:ad:6f:02:12:21:e6:48: 9b:9b:1e:f4:42:2a:70:89:14:ec:c4:aa:69:f1:6b:3b:bb:d7: f6:f5:f2:d7:7a:c6:44:0e:c5:a4:f1:1a:0e:c3:27:58:d5:fa: 8b:e8:3d:27:e6:c9:ce:fe:81:b3:71:17:ec:75:35:d0:02:76: 95:d8:40:c9:a0:4e:b0:40:d4:43:49:8a:3b:f7:76:b3:3f:ae: 74:ee:9c:43:f8:f6:a9:cb:e6:ef:a3:2c:58:fc:0e:7e:da:18: a8:fd:cd:c3:d3:e9:e8:ef:a7:70:5d:23:94:4a:64:ce:c7:f1: 24:eb:c7:4e:b2:00:56:9f:16:c1:3b:aa:74:29:9e:bb:a5:fc: 0b:26:ce:6d:50:c3:68:6d:a0:4b:5b:dd:93:57:c8:b0:91:d8: 60:bb:9d:c5:5a:08:ad:9d:28:8d:c7:bb:9c:f5:fa:9d:fd:7b: ae:f8:c6:61:21:9e:5b:ef:5f:8f:dd:ee:e2:59:8a:9a:ec:c0: f7:cc:fd:c4:9c:4e:7b:01:6a:70:e7:93:cc:4c:e6:59:23:4a: bd:99:55:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX+OD5Q53BkQDZAmSKvz5mpO8F6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjA4MjgwNjQzMjNaFw0yNjA4MzExNjUwMjNaMDMxMTAvBgNV BAMTKEYyMTkwMzhCQjI0NDFGQTA4RjVBRTQ1NTg1ODRGQTBCRDk3QzBGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8aUuduwkdmhTEhZ1B/xHUBLW voSI5oe1jpzeJ24BJkI27sq81ryALDi90KwTReMm0UHGalTfHuIuJViEfdir1xc3 MiQmJKyHISQrrFFtdonwGc3b95I1SqQqbq9ZuZwoOFLaozVvPT3NEJ6mSa0PMNyv XSDCQBhzUla96r7/qcBL+6ELRUyqFH7ejmkO+d0foGDr75qB+qAPQB7g596lJKoU YIrdWTkVzn71kvg2OppYMnCF59wR8KX1lzbWBTFPwyXhbul00jadm+A4xIErTzST vPeXvrFlVVWKCP5Hiywjr5m27nXzSrnVgb/GIOLAqPkxQAbOSzanyLS4G54NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8hkDi7JEH6CPWuRVhYT6C9l8D1gwHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIxNTc2OTAyNTMwODI2MzEvMC9BNENGN0Y3MDlFMDYy ODQ5RTZCRjg0RTE0NDc0QTAzMjBFQUI3ODBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcecMKErFcQvD 2BjmqVrM7M6Xb1j+KIRLQZ3ENneIGbzpu77QnwmTS98/nt9zZxKtbwISIeZIm5se 9EIqcIkU7MSqafFrO7vX9vXy13rGRA7FpPEaDsMnWNX6i+g9J+bJzv6Bs3EX7HU1 0AJ2ldhAyaBOsEDUQ0mKO/d2sz+udO6cQ/j2qcvm76MsWPwOftoYqP3Nw9Pp6O+n cF0jlEpkzsfxJOvHTrIAVp8WwTuqdCmeu6X8CybObVDDaG2gS1vdk1fIsJHYYLud xVoIrZ0ojce7nPX6nf17rvjGYSGeW+9fj93u4lmKmuzA98z9xJxOewFqcOeTzEzm WSNKvZlViQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:38 2026 by rpki-client