$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: QySreTHQRZ6dfIri769uF7ZWGzjDD3hDf7WjrDU0+0k= Subject key identifier: E7:42:D7:55:26:D4:BC:D5:F9:BC:35:34:4C:F1:D9:CC:A0:2B:99:D4 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 0792AAEC4529EDE5E2B4F661E77DEF6733987C6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 88 Signing time: Fri 28 Aug 2026 06:48:05 +0000 Manifest this update: Fri 28 Aug 2026 06:43:05 +0000 Manifest next update: Mon 31 Aug 2026 07:04:05 +0000 Files and hashes: 1: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) 2: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: 9TqPnZmI2b22BzagzY9Kj5/c32Slj8bFoPkeBNSu14Y=) 3: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:92:aa:ec:45:29:ed:e5:e2:b4:f6:61:e7:7d:ef:67:33:98:7c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Aug 28 06:43:05 2026 GMT Not After : Aug 31 07:04:05 2026 GMT Subject: CN=E742D75526D4BCD5F9BC35344CF1D9CCA02B99D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:1b:ff:08:ab:ee:4c:76:19:4f:7b:5e:15: 4e:de:e1:d3:86:ae:a5:9e:e9:71:34:a4:fc:18:ea: 82:f1:96:f9:da:d8:c6:4c:99:3e:f2:6a:84:de:6f: b0:da:2c:ce:4c:fa:2c:e8:49:bd:d5:e9:af:36:35: 41:d1:96:53:f7:0f:3f:ff:c3:d1:39:db:90:72:56: 62:28:e7:2a:43:ef:6f:1b:59:0f:fc:11:21:86:43: 62:68:4e:d4:82:03:8f:01:90:d3:80:25:93:2b:4b: a5:f9:72:c9:85:ed:b6:5e:79:bf:07:34:be:6c:81: 0c:a9:8b:2e:4a:9b:22:51:d8:8a:a3:44:51:d2:8d: 13:1b:33:61:61:73:66:7e:59:9f:67:e1:f5:6c:fb: c9:87:62:00:a0:ad:ed:50:9c:7d:56:f9:8d:f0:c6: 8a:87:cc:4a:d3:28:4f:92:f5:09:e6:cd:10:67:e7: 5e:fc:ff:1d:a1:73:73:2d:4d:70:af:ab:5b:cb:ec: cc:08:1c:d2:b4:f0:54:a4:39:40:b4:16:d6:58:a2: 70:cf:5f:00:c3:2c:cc:93:c8:72:46:ce:01:92:cc: cb:06:a7:4a:35:09:61:07:67:5c:0f:1d:6b:d9:33: c6:72:97:11:56:10:2b:76:da:11:1f:d5:72:9c:25: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:D7:55:26:D4:BC:D5:F9:BC:35:34:4C:F1:D9:CC:A0:2B:99:D4 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7b:9d:70:3a:8b:70:94:e1:8a:f2:61:ed:f0:4a:e1:79:8f: b5:fd:5d:75:3a:d3:ae:8f:43:c1:8b:5d:cc:91:f6:82:68:a4: be:7a:2d:99:ef:19:87:c0:a2:54:aa:90:0f:0a:3e:9e:21:6f: d7:2b:4f:c6:c7:51:5e:bf:ea:3d:4c:13:17:bb:22:c1:c4:f6: 92:a6:ec:2c:73:0e:05:a4:9f:11:f7:18:dc:96:4c:27:5a:86: a6:e0:25:22:3f:c2:cf:04:e1:f4:0b:f2:ad:9d:a4:af:9e:bb: 15:69:5a:7c:2f:86:30:d2:fa:64:30:bc:f8:45:a0:42:52:38: c0:12:c2:2a:4f:81:9a:15:5b:6c:2b:a5:b8:d9:7d:69:6d:48: 29:49:9c:c1:9d:0e:df:a3:e1:a6:13:f2:60:58:89:31:d3:e6: bb:89:1b:89:3c:ee:c3:09:d0:59:bf:88:f6:71:78:dd:55:28: f5:23:7a:06:20:cf:62:4d:c9:d5:cd:4c:04:f3:d9:ec:0a:90: 65:39:32:58:f1:00:20:5f:29:c5:18:cc:6a:43:e8:bf:2b:e3: a2:2d:25:fa:6d:76:2d:71:86:92:f3:78:bc:ad:2c:4f:62:92: 99:3d:dd:2d:a8:79:a9:b8:43:0d:8f:ae:c9:5f:68:5e:2d:e9: 98:35:bd:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB5Kq7EUp7eXitPZh533vZzOYfGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjA4MjgwNjQzMDVaFw0yNjA4MzEwNzA0MDVaMDMxMTAvBgNV BAMTKEU3NDJENzU1MjZENEJDRDVGOUJDMzUzNDRDRjFEOUNDQTAyQjk5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHhv/CKvuTHYZT3teFU7e4dOG rqWe6XE0pPwY6oLxlvna2MZMmT7yaoTeb7DaLM5M+izoSb3V6a82NUHRllP3Dz// w9E525ByVmIo5ypD728bWQ/8ESGGQ2JoTtSCA48BkNOAJZMrS6X5csmF7bZeeb8H NL5sgQypiy5KmyJR2IqjRFHSjRMbM2Fhc2Z+WZ9n4fVs+8mHYgCgre1QnH1W+Y3w xoqHzErTKE+S9QnmzRBn5178/x2hc3MtTXCvq1vL7MwIHNK08FSkOUC0FtZYonDP XwDDLMyTyHJGzgGSzMsGp0o1CWEHZ1wPHWvZM8ZylxFWECt22hEf1XKcJaW/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU50LXVSbUvNX5vDU0TPHZzKArmdQwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnudcDqLcJTh ivJh7fBK4XmPtf1ddTrTro9DwYtdzJH2gmikvnotme8Zh8CiVKqQDwo+niFv1ytP xsdRXr/qPUwTF7siwcT2kqbsLHMOBaSfEfcY3JZMJ1qGpuAlIj/CzwTh9AvyrZ2k r567FWlafC+GMNL6ZDC8+EWgQlI4wBLCKk+BmhVbbCuluNl9aW1IKUmcwZ0O36Ph phPyYFiJMdPmu4kbiTzuwwnQWb+I9nF43VUo9SN6BiDPYk3J1c1MBPPZ7AqQZTky WPEAIF8pxRjMakPovyvjoi0l+m12LXGGkvN4vK0sT2KSmT3dLah5qbhDDY+uyV9o Xi3pmDW9dA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:20 2026 by rpki-client