$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: U/twzt8Zr5Uh+UDDbQjTCNSy8GO7Vj3nFK0TUwL3Tco= Subject key identifier: 97:A7:FD:C1:2F:3C:33:31:B6:A1:FC:94:9A:C6:A3:7F:89:87:26:EC Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 5FC4A69A2FE0E9B6116993E586CB966F30DBB23C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 6C Signing time: Fri 21 Aug 2026 08:49:15 +0000 Manifest this update: Fri 21 Aug 2026 08:44:15 +0000 Manifest next update: Sat 22 Aug 2026 12:29:15 +0000 Files and hashes: 1: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 2: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 3: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 4: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 5: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: VpCVf5cNrlHzCR4gwjzP+gy78mZPfxzSZIB4o6MYNd4=) 6: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 7: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 8: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 9: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 10: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 11: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 12: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 13: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) 14: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 15: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 16: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 17: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 18: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 19: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 20: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 21: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 22: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 23: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 12:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c4:a6:9a:2f:e0:e9:b6:11:69:93:e5:86:cb:96:6f:30:db:b2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Aug 21 08:44:15 2026 GMT Not After : Aug 22 12:29:15 2026 GMT Subject: CN=97A7FDC12F3C3331B6A1FC949AC6A37F898726EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:23:69:81:4b:3c:21:22:d4:3b:06:9c:73: 9b:3b:34:3c:82:51:00:ba:42:c8:dd:dc:98:3a:6e: fd:e9:a5:0c:f8:15:75:f6:66:55:b6:a9:72:d8:b1: 29:03:9e:cc:5d:cd:89:d3:6a:ee:20:06:d3:e9:92: be:03:e3:f4:8b:0d:35:f3:8a:5f:02:98:31:6c:48: 93:78:9c:ed:a1:41:ca:72:ea:04:5a:ec:11:c6:d5: ca:04:d9:21:29:9b:df:0e:c8:97:81:63:69:73:e8: 31:61:0e:95:7d:f6:d5:24:de:47:ae:75:e9:dd:31: e2:d3:2c:ae:dd:29:7d:fb:9d:41:6b:7e:d9:e4:f5: 49:c9:71:09:c5:d0:11:c0:73:9e:a9:62:01:44:f2: 1c:67:40:15:d4:40:ad:be:fd:6c:28:e7:a5:f2:dd: 8d:fd:1f:39:e5:45:ec:9e:78:75:1c:f4:3d:2b:ab: 3f:4c:40:a2:57:bb:55:35:13:b3:22:6f:2b:15:f6: cd:45:cc:e5:df:b5:42:6e:0d:98:b9:2e:a3:dd:8a: 88:d7:2f:64:bd:ce:3e:d7:82:45:e5:bc:cf:05:be: 55:54:b0:52:19:54:fe:9b:b1:c4:0e:ca:7b:7c:30: 17:3b:ee:3e:df:c9:6a:d7:76:90:a3:cf:f1:cd:62: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A7:FD:C1:2F:3C:33:31:B6:A1:FC:94:9A:C6:A3:7F:89:87:26:EC X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7e:4f:51:6f:f8:76:f3:66:d7:ad:96:3f:ab:47:57:77:bc: d7:b1:67:26:4a:85:2f:97:69:28:42:4b:a7:3d:da:a5:44:e6: ea:fd:a5:59:d9:f6:c2:19:60:48:65:af:9f:66:7f:cf:39:ee: f6:32:5c:f3:64:f5:c0:2f:d6:ca:3c:1f:75:a5:f4:2c:f4:52: 66:06:e1:14:ea:63:7a:b3:e4:5c:d0:26:8e:7a:d1:c6:4a:14: 95:88:af:9a:c1:a3:8f:62:8c:8d:68:3d:59:bd:66:83:1f:bd: 06:0c:21:fe:65:8a:97:70:26:2c:af:d5:62:27:19:61:5f:ab: 36:2d:d4:c8:41:e4:d5:11:45:f2:4f:8b:f2:47:0c:94:56:bd: 05:32:18:fa:82:20:e9:5a:45:a2:94:fc:14:fa:4f:f2:06:26: 9a:1e:79:96:5b:dd:4a:31:75:3b:8f:e9:6d:2c:be:26:bc:f6: 0b:bf:2f:29:1e:7a:19:b1:ae:7f:63:f9:56:20:e5:f2:ed:d0: 26:53:96:bd:39:fa:f1:6b:b0:4a:74:1b:b6:99:b6:d2:e0:db: b2:87:09:4b:0c:aa:e0:b1:c9:fa:58:fe:ed:af:46:1b:b0:27: ae:e1:3f:95:31:1a:e0:63:26:fb:8a:84:9d:9a:7b:ba:3b:09: bd:0c:58:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX8Smmi/g6bYRaZPlhsuWbzDbsjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA4MjEwODQ0MTVaFw0yNjA4MjIxMjI5MTVaMDMxMTAvBgNV BAMTKDk3QTdGREMxMkYzQzMzMzFCNkExRkM5NDlBQzZBMzdGODk4NzI2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqyNpgUs8ISLUOwacc5s7NDyC UQC6Qsjd3Jg6bv3ppQz4FXX2ZlW2qXLYsSkDnsxdzYnTau4gBtPpkr4D4/SLDTXz il8CmDFsSJN4nO2hQcpy6gRa7BHG1coE2SEpm98OyJeBY2lz6DFhDpV99tUk3keu dendMeLTLK7dKX37nUFrftnk9UnJcQnF0BHAc56pYgFE8hxnQBXUQK2+/Wwo56Xy 3Y39HznlReyeeHUc9D0rqz9MQKJXu1U1E7MibysV9s1FzOXftUJuDZi5LqPdiojX L2S9zj7XgkXlvM8FvlVUsFIZVP6bscQOynt8MBc77j7fyWrXdpCjz/HNYg7PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl6f9wS88MzG2ofyUmsajf4mHJuwwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon5PUW/4dvNm 162WP6tHV3e817FnJkqFL5dpKEJLpz3apUTm6v2lWdn2whlgSGWvn2Z/zznu9jJc 82T1wC/WyjwfdaX0LPRSZgbhFOpjerPkXNAmjnrRxkoUlYivmsGjj2KMjWg9Wb1m gx+9Bgwh/mWKl3AmLK/VYicZYV+rNi3UyEHk1RFF8k+L8kcMlFa9BTIY+oIg6VpF opT8FPpP8gYmmh55llvdSjF1O4/pbSy+Jrz2C78vKR56GbGuf2P5ViDl8u3QJlOW vTn68WuwSnQbtpm20uDbsocJSwyq4LHJ+lj+7a9GG7AnruE/lTEa4GMm+4qEnZp7 ujsJvQxY3w== -----END CERTIFICATE-----Generated at Sat Aug 22 04:34:17 2026 by rpki-client