$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: a0jhm7a6eqxoN/EdvHfeUJpmw3qaHIYCbQEn58Q0cqY= Subject key identifier: 88:46:CF:65:0A:1A:D6:AA:B8:CB:5F:DA:F5:4A:93:0A:C5:F3:AC:30 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 167492C2EC1F3F09ED786C454EAC5AD5432C4101 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: 8D Signing time: Fri 21 Aug 2026 14:19:54 +0000 Manifest this update: Fri 21 Aug 2026 14:14:54 +0000 Manifest next update: Sat 22 Aug 2026 15:11:54 +0000 Files and hashes: 1: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: 1MsKdzgk8Vsmmp1UfixQnaL7Rccmtk0mD4cQ+WF5Sug=) 2: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) 3: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:92:c2:ec:1f:3f:09:ed:78:6c:45:4e:ac:5a:d5:43:2c:41:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Aug 21 14:14:54 2026 GMT Not After : Aug 22 15:11:54 2026 GMT Subject: CN=8846CF650A1AD6AAB8CB5FDAF54A930AC5F3AC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:bd:25:b7:51:0c:9a:5d:00:44:05:e5:5a: eb:f3:31:99:d2:4c:d3:31:19:f7:89:2f:7e:ca:88: 06:70:85:01:08:c2:d5:a7:26:ec:df:7f:70:2f:ec: bd:5e:fc:e4:d2:66:ed:84:7d:80:06:53:9e:21:cd: fe:04:93:41:dc:f5:93:06:ed:da:f6:05:6b:b1:34: 2d:43:1d:b4:d7:c5:ab:8d:7b:95:47:d8:d1:7c:0f: 4e:99:b1:6b:06:3d:8b:a9:3e:fe:45:6f:64:bd:5d: f3:e0:6a:0e:0c:d8:c3:3e:62:6b:7a:14:a4:00:32: fd:4b:ab:62:52:47:9a:24:36:a3:73:cd:c7:92:08: 7e:9a:b5:ee:8e:09:5f:0f:39:9f:2b:7f:d8:16:74: 59:9d:99:d1:a5:ba:18:d6:53:11:ff:9b:f3:36:6d: 4e:25:9d:a7:ee:16:16:0b:06:3f:7a:20:89:af:c9: 36:09:45:c1:8b:07:a2:88:b0:9e:f1:a5:66:0a:f5: 13:1a:3b:fc:e1:b4:63:bf:db:27:d9:7e:11:fa:32: e6:7d:63:62:9e:d8:f7:d7:24:cf:b1:48:ac:fe:04: a1:b4:f3:49:30:53:b7:0e:35:81:bd:2c:cd:87:3f: c2:e6:ee:65:a1:21:48:8f:37:a7:eb:33:15:33:f1: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:46:CF:65:0A:1A:D6:AA:B8:CB:5F:DA:F5:4A:93:0A:C5:F3:AC:30 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:98:49:18:9e:20:cf:00:6b:3e:fa:6b:ed:88:d2:41:40:90: 42:3f:48:9f:6c:9f:1f:64:f0:b8:34:4d:43:bd:a0:db:72:67: 92:5b:99:c7:45:47:19:c2:00:bc:35:16:fd:1f:7e:57:a1:fe: 93:c0:6a:c4:58:d4:b8:7f:a7:28:3b:32:9d:7c:3c:57:5d:ef: c7:ab:65:c2:bb:57:ad:26:77:2d:90:1c:7e:c0:73:94:c1:04: 4e:3b:2a:90:f0:4e:a9:6f:0f:a2:d7:43:6f:ab:57:c0:e8:e7: 1d:00:90:7a:c9:b2:3b:80:85:33:28:b8:6d:f4:f4:b3:d9:28: 3a:88:4c:55:cd:04:9f:18:ee:9d:08:b3:2d:d6:3f:ee:c3:bf: 5e:f7:ca:03:a8:86:7f:6b:6b:b3:68:df:21:b9:e7:7a:ea:48: ee:84:4c:6f:ff:ea:c1:c8:61:c4:56:ff:f8:a9:d1:c2:e5:57: 11:22:31:cb:7a:e4:41:f2:91:78:2b:bc:f2:54:85:e1:92:95: e7:fb:1f:15:f1:ee:f1:ca:1a:95:4e:3e:cb:90:af:b6:57:33: eb:66:f0:6f:f7:b0:aa:8b:02:f2:3e:c9:be:61:a4:c7:a3:2e: e1:09:e2:b0:6f:b3:07:95:7e:ac:91:5a:73:27:7b:75:67:d4: 1d:cb:f5:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFnSSwuwfPwnteGxFTqxa1UMsQQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA4MjExNDE0NTRaFw0yNjA4MjIxNTExNTRaMDMxMTAvBgNV BAMTKDg4NDZDRjY1MEExQUQ2QUFCOENCNUZEQUY1NEE5MzBBQzVGM0FDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNL0lt1EMml0ARAXlWuvzMZnS TNMxGfeJL37KiAZwhQEIwtWnJuzff3Av7L1e/OTSZu2EfYAGU54hzf4Ek0Hc9ZMG 7dr2BWuxNC1DHbTXxauNe5VH2NF8D06ZsWsGPYupPv5Fb2S9XfPgag4M2MM+Ymt6 FKQAMv1Lq2JSR5okNqNzzceSCH6ate6OCV8POZ8rf9gWdFmdmdGluhjWUxH/m/M2 bU4lnafuFhYLBj96IImvyTYJRcGLB6KIsJ7xpWYK9RMaO/zhtGO/2yfZfhH6MuZ9 Y2Ke2PfXJM+xSKz+BKG080kwU7cONYG9LM2HP8Lm7mWhIUiPN6frMxUz8d2FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiEbPZQoa1qq4y1/a9UqTCsXzrDAwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAephJGJ4gzwBr Pvpr7YjSQUCQQj9In2yfH2TwuDRNQ72g23JnkluZx0VHGcIAvDUW/R9+V6H+k8Bq xFjUuH+nKDsynXw8V13vx6tlwrtXrSZ3LZAcfsBzlMEETjsqkPBOqW8PotdDb6tX wOjnHQCQesmyO4CFMyi4bfT0s9koOohMVc0EnxjunQizLdY/7sO/XvfKA6iGf2tr s2jfIbnneupI7oRMb//qwchhxFb/+KnRwuVXESIxy3rkQfKReCu88lSF4ZKV5/sf FfHu8coalU4+y5Cvtlcz62bwb/ewqosC8j7JvmGkx6Mu4QnisG+zB5V+rJFacyd7 dWfUHcv1Iw== -----END CERTIFICATE-----Generated at Fri Aug 21 23:09:29 2026 by rpki-client