$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json) Hash identifier: DuXZHikWytUkNrRhZ4z+QbnKaTDsDhgcVlAd/h/RSlw= Subject key identifier: 4F:43:62:BD:CB:BD:9D:2B:62:AB:0E:D8:C8:C3:C4:E4:89:67:FD:A8 Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Certificate serial: 0FE21B5174041050B7783D1E75686ACB837781D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft Manifest number: 0115 Signing time: Sat 22 Aug 2026 03:41:23 +0000 Manifest this update: Sat 22 Aug 2026 03:36:23 +0000 Manifest next update: Sun 23 Aug 2026 05:04:23 +0000 Files and hashes: 1: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=) 2: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=) 3: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=) 4: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=) 5: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=) 6: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=) 7: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=) 8: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: wua4pF0u5qmFKwqRYkS+shKUzY7OXGA5hSPg8GrJIcg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e2:1b:51:74:04:10:50:b7:78:3d:1e:75:68:6a:cb:83:77:81:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Validity Not Before: Aug 22 03:36:23 2026 GMT Not After : Aug 23 05:04:23 2026 GMT Subject: CN=4F4362BDCBBD9D2B62AB0ED8C8C3C4E48967FDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:0d:c0:60:36:00:77:b4:e6:1e:b7:3e:74: df:d8:f0:c1:df:3d:94:dc:7c:d1:2e:52:c8:51:b1: 75:34:3b:11:d2:74:4e:3f:b2:c0:6f:fa:39:18:6e: 26:6a:3c:e6:e6:67:3f:af:b5:c3:c0:23:4a:ee:94: 31:65:40:9d:f6:29:53:28:1f:f4:32:b8:36:4f:cb: 54:b3:8d:75:a6:cf:33:ed:14:d6:86:2c:f0:0f:6a: 06:3e:21:9b:c1:d8:26:b1:0f:cb:75:33:13:3b:f1: 16:8e:e5:c9:aa:01:c5:51:56:6d:f5:b3:2c:a2:93: 3f:9a:73:84:b0:80:7b:71:59:5d:5f:b0:8f:34:b4: 2a:0a:32:40:50:5a:3b:8d:5f:d1:b2:86:cb:b5:f6: 06:90:d5:b6:de:79:f4:b3:98:75:33:b2:ff:8e:f9: a2:53:78:fa:0c:b9:10:18:c3:ec:1e:70:95:ce:f5: c5:a2:7b:0a:8b:2d:8b:6b:3a:32:05:f2:95:3b:b3: a0:c5:06:e7:68:49:66:e1:ce:3e:f4:a5:d4:a6:97: c0:5c:0f:6b:61:54:2a:1e:ad:4c:ab:89:05:76:ac: 58:fe:bd:2f:01:a2:a6:31:4a:91:ea:a1:4e:68:05: 97:82:94:ac:5e:28:8e:17:32:27:7f:a1:e6:90:86: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:62:BD:CB:BD:9D:2B:62:AB:0E:D8:C8:C3:C4:E4:89:67:FD:A8 X509v3 Authority Key Identifier: keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:4a:d5:3e:e5:65:74:34:44:74:e7:1a:76:61:02:44:cb: f4:d3:98:94:99:94:63:ef:cf:13:7d:4d:6a:1a:6e:85:b0:e9: d7:1a:f1:7b:03:41:1e:6c:8b:d6:2c:15:c1:86:c5:18:1a:57: c6:ae:b1:f7:82:0f:a0:b9:2b:13:9a:13:82:b2:14:6a:37:3c: d3:78:26:12:9e:ec:c1:8b:11:b1:28:4f:eb:40:e3:c0:1b:4d: d4:bd:8c:28:98:96:9a:5c:8f:ce:c6:7d:de:1b:47:ed:87:2d: b7:9e:ed:c1:50:46:4b:9b:70:22:85:5d:d4:e2:aa:07:f0:2c: a4:3d:ad:41:10:a3:cc:1d:9b:9c:78:e8:4c:f0:58:8e:5c:3b: 0d:3e:09:83:ed:26:71:21:8f:2b:62:a1:62:ea:ea:2b:d0:07: 16:5f:c8:02:9b:fb:fc:47:bf:35:14:5d:0c:b1:9c:6a:e4:45: ba:7e:b4:e9:ec:8c:fc:51:b5:a5:c3:2d:06:d6:3b:86:f4:75: 8f:28:54:2b:23:88:7a:e2:98:e8:3e:68:3b:8e:52:dd:02:e5: 0a:a1:bc:39:b8:7f:40:e7:d2:ce:ce:02:82:f7:75:06:4a:55: ba:40:89:01:1f:a9:6d:ca:48:c5:2c:e8:11:59:a8:91:cf:1c: ae:d2:1f:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD+IbUXQEEFC3eD0edWhqy4N3gdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx Q0U0RTk1RDAeFw0yNjA4MjIwMzM2MjNaFw0yNjA4MjMwNTA0MjNaMDMxMTAvBgNV BAMTKDRGNDM2MkJEQ0JCRDlEMkI2MkFCMEVEOEM4QzNDNEU0ODk2N0ZEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuQ3AYDYAd7TmHrc+dN/Y8MHf PZTcfNEuUshRsXU0OxHSdE4/ssBv+jkYbiZqPObmZz+vtcPAI0rulDFlQJ32KVMo H/QyuDZPy1SzjXWmzzPtFNaGLPAPagY+IZvB2CaxD8t1MxM78RaO5cmqAcVRVm31 syyikz+ac4SwgHtxWV1fsI80tCoKMkBQWjuNX9Gyhsu19gaQ1bbeefSzmHUzsv+O +aJTePoMuRAYw+wecJXO9cWiewqLLYtrOjIF8pU7s6DFBudoSWbhzj70pdSml8Bc D2thVCoerUyriQV2rFj+vS8BoqYxSpHqoU5oBZeClKxeKI4XMid/oeaQhqb5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT0Nivcu9nStiqw7YyMPE5Iln/agwHwYDVR0j BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC83RjMzNUVFNEEzM0Qw N0M0MkMzOEM0NUVDNjQ4QTZGOTFDRTRFOTVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHlK1T7lZXQ0 RHTnGnZhAkTL9NOYlJmUY+/PE31NahpuhbDp1xrxewNBHmyL1iwVwYbFGBpXxq6x 94IPoLkrE5oTgrIUajc803gmEp7swYsRsShP60DjwBtN1L2MKJiWmlyPzsZ93htH 7Yctt57twVBGS5twIoVd1OKqB/AspD2tQRCjzB2bnHjoTPBYjlw7DT4Jg+0mcSGP K2KhYurqK9AHFl/IApv7/Ee/NRRdDLGcauRFun606eyM/FG1pcMtBtY7hvR1jyhU KyOIeuKY6D5oO45S3QLlCqG8Obh/QOfSzs4Cgvd1BkpVukCJAR+pbcpIxSzoEVmo kc8crtIfUA== -----END CERTIFICATE-----Generated at Sat Aug 22 06:16:29 2026 by rpki-client