$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft (raw, json) Hash identifier: NpWXKue0RL+oRs3BNIbH2KdmUocxwuzX9ya3cr9Q+6E= Subject key identifier: 2E:D6:99:57:FB:96:C7:0D:72:A0:78:1A:AC:85:07:60:4E:A8:1A:14 Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 5DAD01DC52486A6B0D07692B6DE2914DA87FC909 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft Manifest number: A2 Signing time: Fri 21 Aug 2026 18:55:27 +0000 Manifest this update: Fri 21 Aug 2026 18:50:27 +0000 Manifest next update: Sat 22 Aug 2026 19:12:27 +0000 Files and hashes: 1: 3131392e38302e302e302f32312d3231203d3e2034383038.roa (hash: kz6VvEWmHlmuYkpHk1spnIMXYN9OBLP2wWo126znQG8=) 2: 3131392e38302e3136342e302f32322d3232203d3e2030.roa (hash: xReNAiKc02O6ON9duGFhPCnC21q/s+X/7DTsmPr1mTo=) 3: 3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (hash: qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=) 4: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (hash: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=) 5: 3131392e38302e34382e302f32312d3231203d3e2030.roa (hash: OGiAs6ybQW5wp7sSm+Um1t8e/jZwZaNAF3aCVlrneVo=) 6: 3131392e38302e36342e302f31382d3138203d3e2030.roa (hash: fSBLf7FDlepVCE3k6F2XDY92g0WMbrgw0ZXZlfHqZ5I=) 7: C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl (hash: qJSOjsiVanMjQXFuFWX3A6XneebONtVLmOzFLgUaZ1o=) 8: 3131392e38302e31362e302f32302d3230203d3e2030.roa (hash: wXdUkHyko20WaVlYUiHP8tBEIEQIv2A+egzvJ1QeSK4=) 9: 3131392e38302e3137362e302f32302d3230203d3e2030.roa (hash: WkeMQ5ShuDCNuxaVGUtgg2qrqKsnJFK/iRO/iA40KzY=) 10: 323430303a353538303a3a2f33322d3332203d3e2030.roa (hash: WDe3fPz0Ru7oQ8lptrq7BUV2TKBOPhsKhVJ9oIcxGTU=) 11: 3131392e38302e3234382e302f32312d3231203d3e2034383437.roa (hash: pIPjQtBk7ySpPKDYwLrcO6FivWIQX1TOftKSwNXxiHI=) 12: 3131392e38302e3136322e302f32342d3234203d3e2034383038.roa (hash: YEkfNK8LOZ1JFLzbHDckq08/tISjndMpA7MJC4C3dAk=) 13: 3131392e38302e3232342e302f32302d3230203d3e2030.roa (hash: PV1qgqVhthMEfnfNIpt+/J7bpkFg342ViVnJ9rGKeiA=) 14: 3131392e38302e35362e302f32312d3231203d3e2030.roa (hash: MyiN97QPbms8mDkoWGdQpLxRbrTTHpXtHioUGlVYaBw=) 15: 3131392e38302e31322e302f32322d3232203d3e2030.roa (hash: hX440M+Wr7Ig6ORoOb9B089xro/8qY67jnC7q5UxTpk=) 16: 3131392e38302e3136332e302f32342d3234203d3e2030.roa (hash: 5CdaaTQdvXXChpnSQuj4LrMOT2wdb5Jvb4r+gllu8XE=) 17: 3131392e38302e3230382e302f32302d3230203d3e2030.roa (hash: 9siWurZqFFFUnpiYmaZ3s2REcqpUg0SQ7bo8u2LJyY0=) 18: 3131392e38302e3230342e302f32322d3232203d3e2030.roa (hash: v0iOjcbPBQGFDUB3R+arP845clM+A9rO5+kFa/KpAEk=) 19: 3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (hash: 5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=) 20: 3131392e38302e3234342e302f32322d3232203d3e2030.roa (hash: sFGUE7NTrHONeVZj/rYlxwtvbN7ZJ7FhgLs1FLPx0Vo=) 21: 3131392e38302e382e302f32322d3232203d3e2034383038.roa (hash: uyAV2B0UgAaqhJ8Tx6GUKDrM2HT/GW8HLdhSG7e1nbM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ad:01:dc:52:48:6a:6b:0d:07:69:2b:6d:e2:91:4d:a8:7f:c9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: Aug 21 18:50:27 2026 GMT Not After : Aug 22 19:12:27 2026 GMT Subject: CN=2ED69957FB96C70D72A0781AAC8507604EA81A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:b9:56:7b:a2:e5:57:57:b2:86:17:06:f1: c6:20:e8:b9:c8:b4:8e:bf:30:02:aa:41:9e:25:c6: 7f:28:dc:5b:93:a4:32:79:08:35:4c:78:76:09:1f: 51:0d:5e:31:40:cc:ee:03:0d:39:e4:d1:42:bd:ea: 71:03:ab:70:c7:05:fd:18:da:1f:4c:cb:d6:b1:2f: 2e:5c:8a:87:19:6b:f2:0f:41:39:ae:e3:8e:42:bc: 32:ad:35:aa:25:b2:bc:eb:df:af:9c:b5:fd:c0:9f: bd:03:b8:2e:04:61:e8:a1:f5:65:6b:78:88:3d:db: 36:77:4a:32:c9:74:de:06:56:94:a9:78:55:7a:8a: 45:53:cc:44:33:ef:c3:e5:0f:86:34:8a:52:2b:20: 2e:2c:e3:d0:2f:18:83:f0:79:1d:9b:57:a2:39:fa: ec:ea:25:32:41:1b:37:54:b8:a9:12:87:cb:e4:bf: 85:8e:96:eb:0e:a4:87:a9:a3:50:0c:ba:6e:04:f2: 63:ba:84:41:4f:76:a4:bf:2b:98:2f:4f:40:41:d4: 09:6b:29:be:87:ea:2f:27:fb:46:12:1f:ee:50:b6: ea:92:23:cd:69:a4:19:f9:24:12:7b:2b:4e:e2:1b: 87:a5:82:70:77:51:01:91:bd:59:aa:81:6e:e0:bb: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:99:57:FB:96:C7:0D:72:A0:78:1A:AC:85:07:60:4E:A8:1A:14 X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1c:24:a6:ee:db:c4:e8:9f:93:45:e5:22:ca:68:fb:7d:08: a8:b5:7e:1a:51:5f:66:ee:53:79:1d:1f:f5:f3:99:0d:74:13: ad:60:5f:6b:8a:fc:1d:d8:3d:cd:dd:33:dd:0d:e0:e2:fc:4d: 4d:58:e9:22:79:1e:64:42:8c:1a:f1:c7:67:31:ec:db:05:03: 80:47:09:24:d4:0d:a2:cb:f0:79:6b:0b:55:f0:70:d7:43:10: 81:7a:26:bd:b6:ce:8e:17:b8:09:ac:0f:d3:67:97:a9:56:95: 03:b8:b4:b1:97:4a:e9:bc:01:22:14:43:20:2b:fb:df:66:d6: c1:36:6f:4b:7d:54:f1:2b:ac:b8:fc:d4:23:6f:7b:61:bf:b2: ad:f8:90:9d:2e:fc:02:ae:6e:a8:57:f1:71:19:e6:b7:14:04: 27:92:38:cc:e9:2f:92:ff:ab:08:18:0a:a7:e6:74:33:41:e0: b3:c5:5e:88:86:4a:3c:0d:d3:3d:36:2b:9c:f9:27:65:0e:0e: 76:94:5a:1a:b3:79:46:58:9c:91:a9:b0:1d:6d:1e:77:65:23: 59:24:8b:c5:93:b6:e9:07:d7:ef:5e:1e:49:9d:44:cd:cf:10: 9a:ad:7b:57:81:96:98:15:4a:60:91:52:bf:c8:85:7b:8e:40: 3b:1e:aa:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXa0B3FJIamsNB2krbeKRTah/yQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA4MjExODUwMjdaFw0yNjA4MjIxOTEyMjdaMDMxMTAvBgNV BAMTKDJFRDY5OTU3RkI5NkM3MEQ3MkEwNzgxQUFDODUwNzYwNEVBODFBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNE7lWe6LlV1eyhhcG8cYg6LnI tI6/MAKqQZ4lxn8o3FuTpDJ5CDVMeHYJH1ENXjFAzO4DDTnk0UK96nEDq3DHBf0Y 2h9My9axLy5ciocZa/IPQTmu445CvDKtNaolsrzr36+ctf3An70DuC4EYeih9WVr eIg92zZ3SjLJdN4GVpSpeFV6ikVTzEQz78PlD4Y0ilIrIC4s49AvGIPweR2bV6I5 +uzqJTJBGzdUuKkSh8vkv4WOlusOpIepo1AMum4E8mO6hEFPdqS/K5gvT0BB1Alr Kb6H6i8n+0YSH+5QtuqSI81ppBn5JBJ7K07iG4elgnB3UQGRvVmqgW7gu+/HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULtaZV/uWxw1yoHgarIUHYE6oGhQwHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMTQwNzM5Njg5MDIxNjMvMC9DODk5OTY3Qjk1RTMy RTM3Q0NFQUExMUNGMTQ2RkI1N0I1MUE3QzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhwkpu7bxOif k0XlIspo+30IqLV+GlFfZu5TeR0f9fOZDXQTrWBfa4r8Hdg9zd0z3Q3g4vxNTVjp InkeZEKMGvHHZzHs2wUDgEcJJNQNosvweWsLVfBw10MQgXomvbbOjhe4CawP02eX qVaVA7i0sZdK6bwBIhRDICv732bWwTZvS31U8SusuPzUI297Yb+yrfiQnS78Aq5u qFfxcRnmtxQEJ5I4zOkvkv+rCBgKp+Z0M0Hgs8VeiIZKPA3TPTYrnPknZQ4OdpRa GrN5RlickamwHW0ed2UjWSSLxZO26QfX714eSZ1Ezc8Qmq17V4GWmBVKYJFSv8iF e45AOx6qag== -----END CERTIFICATE-----Generated at Fri Aug 21 22:30:54 2026 by rpki-client