$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json) Hash identifier: ZJ/o8WFA2vxa+JJZHCVC3vpmt2cEPZXGNLYi6zPJ/VA= Subject key identifier: 10:28:46:81:14:4D:05:5E:7C:57:7D:97:AE:4B:02:40:EF:3A:16:AE Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 542137B4C97825B937CD52E404A3C9D4EB4B8F7A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft Manifest number: F2 Signing time: Fri 28 Aug 2026 06:47:44 +0000 Manifest this update: Fri 28 Aug 2026 06:42:44 +0000 Manifest next update: Mon 31 Aug 2026 10:36:44 +0000 Files and hashes: 1: AS4811.roa (hash: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=) 2: AS63619.roa (hash: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os=) 3: AS17621.roa (hash: FgRK6EJ93pTm3fStKaZDsp5WoaDJ+ZV/uwIlWcN1CfE=) 4: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: D61LpedgPI6eAMl3GBgQHlxX3iLuDYer8aPqXZtvsJY=) 5: AS0.roa (hash: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE=) 6: AS4837.roa (hash: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8=) 7: AS146781.roa (hash: CYdQQlwdflyA5j801ct6fQ7pTh27hC+nUnGbzXcwxdY=) 8: AS24547.roa (hash: aThkMpxD23pAJVWAABx08oowIUHQmo7KBJIsg/LhuK4=) 9: AS141771.roa (hash: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:37:b4:c9:78:25:b9:37:cd:52:e4:04:a3:c9:d4:eb:4b:8f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Aug 28 06:42:44 2026 GMT Not After : Aug 31 10:36:44 2026 GMT Subject: CN=10284681144D055E7C577D97AE4B0240EF3A16AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:64:e9:5d:26:ab:ac:38:dc:14:e3:fd:03: 44:8f:eb:2e:a0:59:cd:20:67:a1:f8:b3:33:48:de: 39:7f:86:7a:f5:4a:24:0e:20:b5:44:c4:fa:1e:aa: a8:a7:25:1a:4d:89:25:e3:e9:01:61:d9:45:ca:57: bc:df:e0:38:0d:5d:b5:dd:88:d8:eb:b7:f7:4c:85: 53:f1:c2:0e:a9:d6:ff:4f:34:e2:90:1b:73:9c:3a: 10:2e:42:d8:94:aa:ae:a6:b0:ea:cf:d5:f5:e9:66: a2:67:5a:ed:56:f0:ff:c6:12:e3:a6:df:b3:d2:2b: 53:74:59:cc:8b:79:3e:24:01:06:07:ac:51:2f:48: e5:4c:26:1e:cb:4a:55:d9:55:bf:17:86:01:c0:fa: 71:83:a3:8f:e8:79:63:be:4b:52:74:c2:43:f0:cc: 1b:e8:a2:6a:bd:38:8a:81:bc:fa:30:06:32:b8:fd: 69:62:71:b7:97:7f:4a:65:27:46:33:60:8e:14:20: 62:45:ef:7b:c0:51:79:8d:20:fb:72:a8:c9:70:f9: 86:64:8b:e1:06:e9:8c:8d:59:58:f0:4d:05:fe:aa: 87:c7:b7:59:66:bc:39:2b:3b:98:7a:6e:57:81:9d: d9:1b:09:91:0f:be:78:b0:fc:0d:b9:75:43:87:2b: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:46:81:14:4D:05:5E:7C:57:7D:97:AE:4B:02:40:EF:3A:16:AE X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:30:e1:36:2c:47:21:36:5e:24:ae:58:d4:b7:6f:e1:38:d7: d3:48:3f:3b:d3:1c:38:a8:34:a1:ca:5d:19:2e:4f:48:04:8e: fe:86:04:fe:9f:de:03:46:02:b3:ab:dd:d9:47:ae:b2:fa:63: db:28:25:c3:bc:e4:f4:91:65:4a:9c:59:24:95:63:3b:f7:45: dd:56:65:93:bb:21:63:7b:5e:cf:ac:b0:7f:97:28:d9:2d:18: 38:fa:52:b1:85:2e:d7:b3:43:5f:f7:6f:78:ca:9b:dd:dd:9f: be:48:6b:a9:5a:7a:cd:bd:7f:1f:51:2f:74:44:57:15:de:b8: b4:a3:32:81:0e:7e:31:ae:39:a3:b5:ea:bc:24:b2:38:3a:b5: f3:aa:ee:72:5b:84:5e:a9:65:7a:9a:8f:80:5c:43:fe:f0:bb: 68:1c:15:c2:06:4e:db:97:b3:a1:97:84:5c:f9:bd:2e:31:4f: 3b:11:fe:f3:f1:ad:ac:ab:18:42:d2:c3:49:aa:45:e3:4e:5d: 9e:d2:f6:bc:33:65:6c:96:1e:04:8a:56:c7:74:91:52:d8:06: 64:8c:b8:1d:c5:db:c5:6c:14:bd:b0:c8:f0:7f:b9:d6:47:cb: 40:ef:48:0f:ae:83:8e:14:1c:9b:52:13:c2:16:fd:87:5b:cf: cc:99:fb:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVCE3tMl4Jbk3zVLkBKPJ1OtLj3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA4MjgwNjQyNDRaFw0yNjA4MzExMDM2NDRaMDMxMTAvBgNV BAMTKDEwMjg0NjgxMTQ0RDA1NUU3QzU3N0Q5N0FFNEIwMjQwRUYzQTE2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUWTpXSarrDjcFOP9A0SP6y6g Wc0gZ6H4szNI3jl/hnr1SiQOILVExPoeqqinJRpNiSXj6QFh2UXKV7zf4DgNXbXd iNjrt/dMhVPxwg6p1v9PNOKQG3OcOhAuQtiUqq6msOrP1fXpZqJnWu1W8P/GEuOm 37PSK1N0WcyLeT4kAQYHrFEvSOVMJh7LSlXZVb8XhgHA+nGDo4/oeWO+S1J0wkPw zBvoomq9OIqBvPowBjK4/WlicbeXf0plJ0YzYI4UIGJF73vAUXmNIPtyqMlw+YZk i+EG6YyNWVjwTQX+qofHt1lmvDkrO5h6bleBndkbCZEPvniw/A25dUOHK8sLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEChGgRRNBV58V32XrksCQO86Fq4wHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1 MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTDhNixHITZe JK5Y1Ldv4TjX00g/O9McOKg0ocpdGS5PSASO/oYE/p/eA0YCs6vd2Ueusvpj2ygl w7zk9JFlSpxZJJVjO/dF3VZlk7shY3tez6ywf5co2S0YOPpSsYUu17NDX/dveMqb 3d2fvkhrqVp6zb1/H1EvdERXFd64tKMygQ5+Ma45o7XqvCSyODq186rucluEXqll epqPgFxD/vC7aBwVwgZO25ezoZeEXPm9LjFPOxH+8/GtrKsYQtLDSapF405dntL2 vDNlbJYeBIpWx3SRUtgGZIy4HcXbxWwUvbDI8H+51kfLQO9ID66DjhQcm1ITwhb9 h1vPzJn7cg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:26 2026 by rpki-client