$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: HKnV0Oky/Esf9C/76e2fdhjROQWbWyiPWXtrFBnxh6I= Subject key identifier: F4:A0:1A:D9:58:13:DC:60:51:37:5D:4A:60:C4:D4:74:18:61:08:4F Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 08AC7B4336DDB5D76AABA02704848C989C0E8E00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 69 Signing time: Fri 21 Aug 2026 19:35:35 +0000 Manifest this update: Fri 21 Aug 2026 19:30:35 +0000 Manifest next update: Sat 22 Aug 2026 21:13:35 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: YIm4bwCIcGdrm6GLbV1lrUyBqvZlRNuv+ss3sQW3V5k=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ac:7b:43:36:dd:b5:d7:6a:ab:a0:27:04:84:8c:98:9c:0e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Aug 21 19:30:35 2026 GMT Not After : Aug 22 21:13:35 2026 GMT Subject: CN=F4A01AD95813DC6051375D4A60C4D4741861084F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:bd:e4:33:50:ac:6f:5e:6b:81:3d:37:8e: e0:d1:aa:08:1c:b2:be:f1:2e:92:ee:e4:f9:4c:c2: 8f:49:8f:ae:3c:82:ec:9c:ad:b0:08:6a:60:00:99: 9c:2f:e3:71:36:4e:91:e8:2e:0c:88:cb:04:c7:12: a3:c6:f3:7e:91:d0:db:cc:2a:36:08:df:86:13:27: d6:c7:12:72:18:35:a4:88:60:09:99:06:e3:5b:1e: 9e:a8:cf:1e:dd:19:f8:c0:57:6a:01:0d:7a:36:4d: 53:f6:64:97:57:e6:58:67:5e:67:e8:28:82:12:52: 9f:e1:d2:ef:05:ea:c0:0b:cf:43:08:00:1d:ba:d3: 37:45:6a:ab:e4:9e:50:c1:12:11:e0:f8:e2:81:05: ed:ad:22:48:3b:9e:d6:8c:5d:e1:e9:ee:87:9a:77: cc:3d:38:dc:7e:c1:31:94:87:a8:42:ad:66:75:89: 5c:a2:b3:f7:67:f9:5e:f0:92:19:33:76:7d:d7:cb: 6d:e7:ff:6c:12:68:95:e4:01:1e:99:36:93:16:7d: a7:36:6f:fa:50:62:31:a0:c5:1e:3e:e1:2a:97:b5: ca:b3:36:08:07:6a:3e:93:25:83:17:cd:b9:2f:41: 40:d7:2f:8a:af:74:3d:b2:af:54:4e:51:0e:a2:8a: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:1A:D9:58:13:DC:60:51:37:5D:4A:60:C4:D4:74:18:61:08:4F X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:99:8b:26:0c:8b:2e:a1:90:7d:cd:72:26:b1:8c:1e:38:87: c3:ba:76:b1:be:58:2d:9a:7c:21:4d:8c:03:41:5a:54:12:c6: d6:8b:21:ed:f8:55:3e:d2:18:12:b7:1e:df:03:79:eb:ce:9f: 1d:6a:0f:bf:e5:bd:4e:4c:dd:43:8b:55:9e:8b:5f:fc:3b:0c: 68:4d:51:20:32:ae:28:86:bf:ce:b5:3b:35:d6:0c:0f:a7:02: 0e:40:1e:6e:73:f2:89:42:29:57:78:db:c5:64:13:af:0a:e7: 6b:24:e8:53:a1:86:cc:d8:28:3f:50:53:7c:ef:ba:82:56:2f: a0:27:50:1e:cb:96:4a:39:97:68:5c:6e:ba:d5:fb:7c:2e:ef: b6:11:5b:c5:9e:a6:58:09:14:64:87:fa:cc:9f:6a:e5:cd:dd: d9:89:e7:54:18:fd:60:48:bc:ab:6f:b1:d4:9f:6a:4d:3a:fe: ee:cb:3f:39:a8:bd:1d:b7:a4:6a:ac:26:8f:76:36:e8:01:7d: 89:73:99:d2:b2:b1:f6:35:36:35:07:70:3f:43:a7:74:71:e2: e2:5d:ea:8d:1a:ed:f4:3a:d2:7e:03:cd:63:50:d7:85:13:bd: 5f:e3:55:34:5b:f6:9f:4d:84:1c:64:df:43:d6:13:b3:eb:a9: 58:4d:4a:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCKx7Qzbdtddqq6AnBISMmJwOjgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjA4MjExOTMwMzVaFw0yNjA4MjIyMTEzMzVaMDMxMTAvBgNV BAMTKEY0QTAxQUQ5NTgxM0RDNjA1MTM3NUQ0QTYwQzRENDc0MTg2MTA4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Hb3kM1Csb15rgT03juDRqggc sr7xLpLu5PlMwo9Jj648guycrbAIamAAmZwv43E2TpHoLgyIywTHEqPG836R0NvM KjYI34YTJ9bHEnIYNaSIYAmZBuNbHp6ozx7dGfjAV2oBDXo2TVP2ZJdX5lhnXmfo KIISUp/h0u8F6sALz0MIAB260zdFaqvknlDBEhHg+OKBBe2tIkg7ntaMXeHp7oea d8w9ONx+wTGUh6hCrWZ1iVyis/dn+V7wkhkzdn3Xy23n/2wSaJXkAR6ZNpMWfac2 b/pQYjGgxR4+4SqXtcqzNggHaj6TJYMXzbkvQUDXL4qvdD2yr1ROUQ6iim7NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9KAa2VgT3GBRN11KYMTUdBhhCE8wHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJmLJgyLLqGQ fc1yJrGMHjiHw7p2sb5YLZp8IU2MA0FaVBLG1osh7fhVPtIYErce3wN5686fHWoP v+W9TkzdQ4tVnotf/DsMaE1RIDKuKIa/zrU7NdYMD6cCDkAebnPyiUIpV3jbxWQT rwrnayToU6GGzNgoP1BTfO+6glYvoCdQHsuWSjmXaFxuutX7fC7vthFbxZ6mWAkU ZIf6zJ9q5c3d2YnnVBj9YEi8q2+x1J9qTTr+7ss/Oai9Hbekaqwmj3Y26AF9iXOZ 0rKx9jU2NQdwP0OndHHi4l3qjRrt9DrSfgPNY1DXhRO9X+NVNFv2n02EHGTfQ9YT s+upWE1K1Q== -----END CERTIFICATE-----Generated at Sat Aug 22 01:45:27 2026 by rpki-client