$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json) Hash identifier: /9wNrRn65JgZLgldmGNE0xti+gMnBZM4AuaTsRUwl58= Subject key identifier: A1:25:25:AC:D3:E1:C6:DD:85:BC:5B:64:19:F7:1D:BA:CA:71:EA:25 Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Certificate serial: 4DFA378DEAC92C7EC16D8A2F6D0BFB8B5366D88E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft Manifest number: 7D Signing time: Fri 28 Aug 2026 06:47:37 +0000 Manifest this update: Fri 28 Aug 2026 06:42:37 +0000 Manifest next update: Mon 31 Aug 2026 15:46:37 +0000 Files and hashes: 1: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: 3C8tL5REaWrR8u5QNRcDrr6QDrO8WJEPhMENSndJnLo=) 2: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fa:37:8d:ea:c9:2c:7e:c1:6d:8a:2f:6d:0b:fb:8b:53:66:d8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Validity Not Before: Aug 28 06:42:37 2026 GMT Not After : Aug 31 15:46:37 2026 GMT Subject: CN=A12525ACD3E1C6DD85BC5B6419F71DBACA71EA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:f0:35:10:82:45:4e:ba:98:98:a3:9c:21: ad:1b:a6:e6:9d:2c:ea:a5:1e:3e:4b:6e:12:69:2c: bd:7c:b6:0b:bb:58:5c:64:95:ed:6a:40:e5:55:47: d6:cf:d0:50:3e:f2:ce:c0:5e:e8:75:6f:fc:1b:ea: fa:38:22:fd:75:00:03:c5:a7:70:70:06:5c:da:94: 8d:27:89:33:e8:8f:ad:43:50:9f:e7:c3:cc:fe:4b: a0:b8:61:98:36:67:8f:ff:df:6d:e9:44:1e:3f:5b: d2:07:b1:f0:05:2c:03:2f:14:4b:10:7e:72:1f:38: c0:de:3f:38:99:86:02:88:77:02:d4:95:6e:9b:83: 57:18:38:45:33:7c:59:9e:5f:45:ba:2d:89:69:22: 5d:5a:ee:71:26:11:c4:0b:08:dc:9e:53:60:9a:b0: c4:65:4e:ae:f7:cf:28:29:5c:64:d5:2b:4e:94:e5: c3:be:05:1a:a1:e4:ae:2d:f0:1b:61:bb:0a:15:70: fb:a1:45:4f:cd:c6:d3:0c:51:b0:91:f0:78:90:69: 93:4f:86:18:77:02:df:6e:64:e0:c1:f8:2b:00:10: f1:5f:31:70:b5:5b:22:e5:b8:8d:6d:ed:9c:99:ac: 08:a1:9f:b0:91:aa:e4:bb:47:8b:05:2e:0b:ea:11: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:25:AC:D3:E1:C6:DD:85:BC:5B:64:19:F7:1D:BA:CA:71:EA:25 X509v3 Authority Key Identifier: keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6e:45:74:11:1b:ed:80:c1:9e:58:4c:6d:dd:1e:4f:8a:c3: 66:92:66:b3:ae:c7:e5:80:de:ed:7d:6b:f7:52:13:f7:38:6d: 5d:ca:6a:15:2d:2c:89:b5:e9:66:ef:32:55:aa:33:56:f1:cc: 4d:05:b3:a4:4b:58:94:dc:ea:8e:31:c8:75:16:4f:37:f6:fc: 94:4c:a8:29:a5:36:66:d8:5c:3b:bb:5a:6c:b0:d8:c2:32:22: 11:32:c7:39:07:20:88:01:5f:b0:94:de:f1:b5:cd:35:85:7b: 8d:fa:05:71:5f:36:85:ea:44:58:05:c4:05:96:74:08:30:d3: 52:e5:ed:9c:da:be:4d:64:92:d2:a7:cd:f6:8d:76:1e:da:6f: 7a:cd:22:25:77:75:92:51:69:ce:2c:39:12:40:01:86:be:2b: be:ed:f4:50:fd:21:1d:37:a8:b3:a7:f2:9b:0d:4e:f2:cb:d4: 6a:e0:fb:53:23:e4:80:45:f2:bb:d0:05:f1:ea:ab:36:56:d2: 72:0f:3f:7f:b1:53:66:df:e0:fb:ce:6b:30:f9:00:f6:63:27: e7:d5:6d:89:5f:01:52:02:76:1e:f5:26:18:02:82:b2:dc:ea: c5:b2:22:18:f1:33:0a:1c:28:f6:12:09:15:b3:f4:d8:b3:a3: 64:56:e2:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTfo3jerJLH7BbYovbQv7i1Nm2I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3 RDU2QjM4ODAeFw0yNjA4MjgwNjQyMzdaFw0yNjA4MzExNTQ2MzdaMDMxMTAvBgNV BAMTKEExMjUyNUFDRDNFMUM2REQ4NUJDNUI2NDE5RjcxREJBQ0E3MUVBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRPA1EIJFTrqYmKOcIa0bpuad LOqlHj5LbhJpLL18tgu7WFxkle1qQOVVR9bP0FA+8s7AXuh1b/wb6vo4Iv11AAPF p3BwBlzalI0niTPoj61DUJ/nw8z+S6C4YZg2Z4//323pRB4/W9IHsfAFLAMvFEsQ fnIfOMDePziZhgKIdwLUlW6bg1cYOEUzfFmeX0W6LYlpIl1a7nEmEcQLCNyeU2Ca sMRlTq73zygpXGTVK06U5cO+BRqh5K4t8BthuwoVcPuhRU/NxtMMUbCR8HiQaZNP hhh3At9uZODB+CsAEPFfMXC1WyLluI1t7ZyZrAihn7CRquS7R4sFLgvqERU5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoSUlrNPhxt2FvFtkGfcduspx6iUwHwYDVR0j BBgwFoAU5dV+SiR2Q5SYoC7BGEjI4X1Ws4gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI5MTUyMzM4ODU3MTY2OS8wL0U1RDU3RTRBMjQ3NjQzOTQ5OEEwMkVDMTE4NDhD OEUxN0Q1NkIzODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3RDU2QjM4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyOTE1MjMzODg1NzE2NjkvMC9FNUQ1N0U0QTI0NzY0 Mzk0OThBMDJFQzExODQ4QzhFMTdENTZCMzg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALG5FdBEb7YDB nlhMbd0eT4rDZpJms67H5YDe7X1r91IT9zhtXcpqFS0sibXpZu8yVaozVvHMTQWz pEtYlNzqjjHIdRZPN/b8lEyoKaU2ZthcO7tabLDYwjIiETLHOQcgiAFfsJTe8bXN NYV7jfoFcV82hepEWAXEBZZ0CDDTUuXtnNq+TWSS0qfN9o12Htpves0iJXd1klFp ziw5EkABhr4rvu30UP0hHTeos6fymw1O8svUauD7UyPkgEXyu9AF8eqrNlbScg8/ f7FTZt/g+85rMPkA9mMn59VtiV8BUgJ2HvUmGAKCstzqxbIiGPEzChwo9hIJFbP0 2LOjZFbiKg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:20:00 2026 by rpki-client