$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json) Hash identifier: qAO/sQNUihMeM1lXOH526ny/ybp2vNGDzAt5uVymSew= Subject key identifier: D8:4B:89:7D:26:DF:B0:17:42:96:98:8D:C0:41:5C:7B:EE:A7:7E:01 Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Certificate serial: 13898E937855623DFEE0C2131D732096C1FDB5CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft Manifest number: 7C Signing time: Fri 28 Aug 2026 06:48:10 +0000 Manifest this update: Fri 28 Aug 2026 06:43:10 +0000 Manifest next update: Mon 31 Aug 2026 13:54:10 +0000 Files and hashes: 1: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: jSEHtqZcV1Dzzu7aWI20EM1tatAs5k4DW5KdX+wgoFM=) 2: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=) 3: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=) 4: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=) 5: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=) 6: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=) 7: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=) 8: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=) 9: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=) 10: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=) 11: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=) 12: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:89:8e:93:78:55:62:3d:fe:e0:c2:13:1d:73:20:96:c1:fd:b5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Validity Not Before: Aug 28 06:43:10 2026 GMT Not After : Aug 31 13:54:10 2026 GMT Subject: CN=D84B897D26DFB0174296988DC0415C7BEEA77E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:3d:e2:6b:aa:7a:97:93:ba:50:5f:34:88: fd:60:32:d3:5e:f9:e2:9c:a8:c1:fc:4b:7c:dc:a0: 43:b1:ce:b6:47:2d:e6:bc:fd:8e:20:78:78:53:30: 6a:57:0c:c7:04:8c:64:e7:f4:53:e2:c6:45:35:1e: a7:77:cb:b4:f3:57:14:07:4a:f4:86:ed:f8:03:96: 49:af:db:b5:98:78:bb:49:ac:16:d5:c3:75:3b:f0: f5:2b:2b:d7:82:33:e8:e4:6e:6f:97:1f:e9:ee:8f: 89:a1:15:aa:69:02:94:1a:c4:41:6a:a1:85:15:37: 37:9c:64:fb:f5:89:1c:b0:ce:0f:a1:68:a0:30:d1: fc:c9:8f:98:93:de:47:01:a6:65:e3:97:b7:5a:bf: 30:e9:c9:a2:b4:aa:2e:0f:b9:8e:3c:9b:b8:7c:13: d8:40:e2:65:86:79:83:0b:f2:b3:e5:d0:13:3e:30: ef:5b:ae:c9:e4:8c:d9:72:7b:db:be:c0:0a:53:d9: f6:8a:c0:54:2c:84:ad:61:4a:8f:15:45:2b:a2:a7: 91:55:6d:10:4f:d3:d4:93:2c:4f:2e:13:8b:6b:36: fe:3c:67:d8:b9:de:4c:ee:a8:35:d2:da:37:52:0e: c7:0b:b9:11:de:55:fe:30:de:4f:b7:ce:98:17:7a: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:89:7D:26:DF:B0:17:42:96:98:8D:C0:41:5C:7B:EE:A7:7E:01 X509v3 Authority Key Identifier: keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:97:1b:ad:28:4a:51:4a:6a:2f:07:a9:0c:23:a8:b4:b6:c5: 7c:14:bb:57:a3:1c:a2:e3:26:1f:77:89:77:85:80:4e:1a:05: d4:0b:30:47:fd:2b:52:87:aa:f5:36:80:d8:9c:10:34:42:21: 53:6a:d2:ac:9b:1f:d9:90:13:be:ed:00:93:4c:d3:56:e2:8b: 15:d2:10:9d:eb:57:45:af:74:c0:be:1b:40:2f:0c:d5:19:7e: 2b:ea:1e:11:55:fe:28:ff:a0:86:9f:04:c8:57:31:d9:72:69: e2:aa:97:aa:c9:31:ed:af:59:b1:2d:24:4f:fb:fd:ae:90:9e: de:39:36:af:8b:ae:30:67:01:5c:05:5d:d9:35:05:2e:b2:6d: 24:da:0e:e4:42:57:cf:be:e1:b9:8e:56:70:04:ab:2d:67:a2: 17:35:cb:fe:db:cd:01:a5:fc:5d:13:8f:90:b6:9b:ad:77:b1: d1:e7:ef:b1:f1:d6:ce:77:fa:dc:72:07:71:54:b1:3c:a8:b8: 5b:39:b8:97:f7:32:89:35:15:ab:df:de:fe:e0:98:30:62:b0: 6a:c1:ef:0a:57:27:3c:a9:43:66:eb:2b:42:77:c2:eb:c1:a2: 72:ff:0d:b2:8b:93:d8:cd:98:7d:a3:f5:a8:e5:9b:ed:ab:b4: 28:2d:21:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE4mOk3hVYj3+4MITHXMglsH9tc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2 NTZCRjVDMDAeFw0yNjA4MjgwNjQzMTBaFw0yNjA4MzExMzU0MTBaMDMxMTAvBgNV BAMTKEQ4NEI4OTdEMjZERkIwMTc0Mjk2OTg4REMwNDE1QzdCRUVBNzdFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLuj3ia6p6l5O6UF80iP1gMtNe +eKcqMH8S3zcoEOxzrZHLea8/Y4geHhTMGpXDMcEjGTn9FPixkU1Hqd3y7TzVxQH SvSG7fgDlkmv27WYeLtJrBbVw3U78PUrK9eCM+jkbm+XH+nuj4mhFappApQaxEFq oYUVNzecZPv1iRywzg+haKAw0fzJj5iT3kcBpmXjl7davzDpyaK0qi4PuY48m7h8 E9hA4mWGeYML8rPl0BM+MO9brsnkjNlye9u+wApT2faKwFQshK1hSo8VRSuip5FV bRBP09STLE8uE4trNv48Z9i53kzuqDXS2jdSDscLuRHeVf4w3k+3zpgXes+vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2EuJfSbfsBdClpiNwEFce+6nfgEwHwYDVR0j BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2ODAwMjM4OTE5MDI0ODEvMC8zMjAxODhCM0ZBMzhE QTBGNDE5MkY3MjAxQUQ3RDM3NzY1NkJGNUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpcbrShKUUpq LwepDCOotLbFfBS7V6McouMmH3eJd4WAThoF1AswR/0rUoeq9TaA2JwQNEIhU2rS rJsf2ZATvu0Ak0zTVuKLFdIQnetXRa90wL4bQC8M1Rl+K+oeEVX+KP+ghp8EyFcx 2XJp4qqXqskx7a9ZsS0kT/v9rpCe3jk2r4uuMGcBXAVd2TUFLrJtJNoO5EJXz77h uY5WcASrLWeiFzXL/tvNAaX8XROPkLabrXex0efvsfHWznf63HIHcVSxPKi4Wzm4 l/cyiTUVq9/e/uCYMGKwasHvClcnPKlDZusrQnfC68Gicv8NsouT2M2YfaP1qOWb 7au0KC0hfA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:38 2026 by rpki-client