$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: HfYNG5MQApJWO30u60TkQ5Ca54njq1GON4h4hu3f83o= Subject key identifier: 14:5D:67:64:C1:BD:25:0A:70:31:78:AC:DB:79:78:FB:75:A4:65:90 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 2FA5B4CE3ECA337AD7538F34F98FBF6EBC9DD79F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: 8F Signing time: Fri 28 Aug 2026 06:48:23 +0000 Manifest this update: Fri 28 Aug 2026 06:43:23 +0000 Manifest next update: Mon 31 Aug 2026 06:56:23 +0000 Files and hashes: 1: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 2: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) 3: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: 3w7WRm4D0HX1xNfnYJQAt0Uve9vmysNa9btqj3H+UXc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 06:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a5:b4:ce:3e:ca:33:7a:d7:53:8f:34:f9:8f:bf:6e:bc:9d:d7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Aug 28 06:43:23 2026 GMT Not After : Aug 31 06:56:23 2026 GMT Subject: CN=145D6764C1BD250A703178ACDB7978FB75A46590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:ff:79:2c:65:d9:dd:f0:fe:69:ef:d7:6a: 07:84:63:f6:6c:87:63:f2:4b:f5:64:f3:bf:d0:41: 52:0f:98:9e:54:d4:a4:70:65:26:33:6c:73:cc:c3: ba:0e:92:ba:d1:71:28:eb:a4:80:1d:94:c3:6e:1c: 78:41:02:a4:77:02:84:e5:3a:e3:15:ff:61:44:82: 62:ec:e2:64:78:2d:c0:b7:eb:14:3a:34:cc:ca:cd: bd:87:f8:11:17:c6:cc:2a:25:32:af:2f:9e:7d:b3: 63:65:6b:92:d9:0d:35:5c:b5:11:ad:5f:45:b4:c1: 35:d2:43:1b:3a:5f:8e:58:3e:46:61:d3:de:99:29: d2:5d:76:52:64:5a:81:ac:da:10:1d:15:a1:5d:7b: 12:05:ba:87:42:f3:94:7d:05:d4:d9:a7:0f:0d:40: ae:5e:bf:3e:70:a8:55:9b:0b:cd:2b:6d:34:f2:0a: 1e:54:28:d3:5e:53:cf:87:42:12:90:6f:3c:e9:86: 8c:cb:23:ab:a2:0f:11:3a:7d:a8:ac:59:31:1e:2b: c0:0d:0b:82:23:5c:91:39:31:3d:9f:97:be:85:46: 1c:85:4c:af:3c:79:e5:79:7a:c0:6b:99:22:0e:03: 40:be:9c:1a:cc:b5:bb:5e:d8:b5:ec:b6:9d:dc:8c: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5D:67:64:C1:BD:25:0A:70:31:78:AC:DB:79:78:FB:75:A4:65:90 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:60:f1:13:76:20:1c:5e:01:ce:54:e3:6f:af:68:eb:5c: 0a:00:8e:b3:72:91:44:d7:76:d1:33:48:d7:dc:da:cc:a0:7c: de:3d:ea:e5:0c:e1:6e:fa:66:0c:73:02:7e:e6:88:6d:48:df: 25:f1:dc:d4:41:a6:28:87:67:3f:41:2c:f3:60:24:68:59:aa: fe:8c:be:10:ca:93:c8:4b:3c:db:57:70:7a:29:41:b3:ca:3e: 7c:a6:87:b0:c5:7c:b6:3b:2f:0e:f7:5c:38:43:ee:48:d1:f7: 64:a1:57:84:fe:84:ce:6f:38:18:91:db:cf:cd:d7:aa:38:31: 47:b0:c7:bf:0a:d5:61:3f:16:26:0e:dd:c1:ad:3c:6b:11:35: e1:fd:7f:8f:7f:70:4e:34:52:4d:1e:69:72:f4:5d:10:85:9e: b4:67:e7:27:32:12:e2:fa:2a:bc:bf:52:29:4c:9a:42:55:e2: 68:91:5b:1c:0d:c2:c0:a1:86:ff:e2:19:72:b2:c5:4d:ad:85: 0b:51:bc:32:a1:8d:c4:ec:28:3e:66:b7:48:af:e4:91:62:33: 1a:94:61:2a:bb:22:eb:9e:5a:31:cd:c9:4d:f2:b4:ea:7e:4f: 87:3d:4a:16:8f:09:09:92:bd:31:cc:a7:ae:a0:2f:ca:68:17: 4f:3d:fc:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL6W0zj7KM3rXU480+Y+/bryd158wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjA4MjgwNjQzMjNaFw0yNjA4MzEwNjU2MjNaMDMxMTAvBgNV BAMTKDE0NUQ2NzY0QzFCRDI1MEE3MDMxNzhBQ0RCNzk3OEZCNzVBNDY1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMv95LGXZ3fD+ae/XageEY/Zs h2PyS/Vk87/QQVIPmJ5U1KRwZSYzbHPMw7oOkrrRcSjrpIAdlMNuHHhBAqR3AoTl OuMV/2FEgmLs4mR4LcC36xQ6NMzKzb2H+BEXxswqJTKvL559s2Nla5LZDTVctRGt X0W0wTXSQxs6X45YPkZh096ZKdJddlJkWoGs2hAdFaFdexIFuodC85R9BdTZpw8N QK5evz5wqFWbC80rbTTyCh5UKNNeU8+HQhKQbzzphozLI6uiDxE6faisWTEeK8AN C4IjXJE5MT2fl76FRhyFTK88eeV5esBrmSIOA0C+nBrMtbte2LXstp3cjDQHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFF1nZMG9JQpwMXis23l4+3WkZZAwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXxg8RN2IBxe Ac5U42+vaOtcCgCOs3KRRNd20TNI19zazKB83j3q5QzhbvpmDHMCfuaIbUjfJfHc 1EGmKIdnP0Es82AkaFmq/oy+EMqTyEs821dweilBs8o+fKaHsMV8tjsvDvdcOEPu SNH3ZKFXhP6Ezm84GJHbz83XqjgxR7DHvwrVYT8WJg7dwa08axE14f1/j39wTjRS TR5pcvRdEIWetGfnJzIS4voqvL9SKUyaQlXiaJFbHA3CwKGG/+IZcrLFTa2FC1G8 MqGNxOwoPma3SK/kkWIzGpRhKrsi655aMc3JTfK06n5Phz1KFo8JCZK9McynrqAv ymgXTz38+A== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:00 2026 by rpki-client