$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft File: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json) Hash identifier: PM4g1URE6t/uaCx6kfsT3/OT+qd6kR4wC/ywFJAniA4= Subject key identifier: D2:60:CC:BE:CF:18:A8:DB:A9:1E:46:4A:07:36:40:47:F5:09:D4:62 Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Certificate serial: 2189D30516655373BC8397914D4119A12256253F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft Manifest number: 5B Signing time: Fri 28 Aug 2026 06:47:43 +0000 Manifest this update: Fri 28 Aug 2026 06:42:43 +0000 Manifest next update: Mon 31 Aug 2026 15:56:43 +0000 Files and hashes: 1: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=) 2: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: Xi7UUotlsDY89kH++EYMoaN/fuzzM5vq4ejQVL/bDQo=) 3: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=) 4: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=) 5: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=) 6: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=) 7: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=) 8: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=) 9: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=) 10: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=) 11: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:89:d3:05:16:65:53:73:bc:83:97:91:4d:41:19:a1:22:56:25:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Validity Not Before: Aug 28 06:42:43 2026 GMT Not After : Aug 31 15:56:43 2026 GMT Subject: CN=D260CCBECF18A8DBA91E464A07364047F509D462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:8e:19:df:87:69:41:b7:b7:1c:6a:15:94: 0f:00:29:df:48:1b:80:93:09:f1:19:8d:ec:90:66: cd:e1:d3:23:1c:d2:11:74:63:ca:fc:43:29:be:b4: e8:32:5b:60:48:b0:a1:35:4f:a6:8e:88:3e:c5:0b: 40:24:62:09:83:dd:01:ba:6f:29:b7:e4:09:6f:49: 4f:dc:61:94:48:40:8e:6d:84:09:43:b7:c9:35:3e: 31:bf:2b:8c:9e:77:42:cd:ab:11:a6:1d:ae:9f:34: 13:c1:02:2a:48:c1:46:c4:62:5c:d9:50:52:22:7d: 35:a5:67:9d:57:d1:b2:69:00:34:ff:07:29:42:6a: d0:4a:12:1a:3c:92:3a:94:f5:c2:8e:79:7c:a4:64: a7:77:96:a5:04:2f:5f:76:73:21:d8:45:e1:19:0c: 67:eb:3a:e1:2b:fc:ed:e1:4b:c7:b9:22:dc:d5:64: ee:79:c8:f4:6a:d9:dc:c1:51:f9:72:ee:80:5a:27: be:1d:a3:12:a1:cb:1b:9c:78:5d:15:16:b3:ac:26: 75:dd:89:ab:3d:84:f5:f4:83:7f:1a:ad:7f:c8:47: 4c:42:ef:64:90:8b:d8:7f:1b:e7:72:15:3e:69:f6: d3:da:e6:80:7f:db:5f:9c:c9:3f:7b:7d:e4:0f:61: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:CC:BE:CF:18:A8:DB:A9:1E:46:4A:07:36:40:47:F5:09:D4:62 X509v3 Authority Key Identifier: keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ce:a9:4c:91:b9:c2:b1:8c:88:ff:e1:e2:20:60:ab:58:dd: c9:fa:43:68:55:f6:6d:9b:49:5f:70:44:24:06:c8:87:9d:9c: 49:64:0f:bf:2c:0e:de:60:95:20:54:02:bb:21:0c:b9:63:f2: 8a:d9:09:39:fa:8e:86:c4:f8:65:cc:d5:04:94:f5:35:46:9b: 53:16:56:dd:4e:b9:2a:c8:de:2c:bd:bc:99:25:85:ae:cc:35: 3d:8b:5a:5e:7b:52:f8:04:87:fa:24:5d:08:42:16:78:aa:da: 2a:5a:40:a8:bf:35:a3:e3:d5:58:6a:3c:ae:15:d9:82:8f:61: e7:e0:e2:3f:15:1c:4b:73:03:41:0c:ab:49:a8:ed:89:91:c4: 5d:9a:16:c9:a3:07:a4:af:e7:0c:3b:79:a5:70:e0:17:28:c8: cc:6e:71:5e:61:d0:18:cd:2a:75:1d:c4:08:c9:b6:ff:ff:e9: 44:d0:80:08:d7:c9:9d:c7:21:d4:5e:54:7c:2f:36:25:df:17: 67:3d:03:1c:43:b2:4b:c9:e8:07:cc:fb:e1:0f:d9:c8:bd:e1: d5:a0:36:b4:a3:a4:c5:78:59:62:c4:26:dc:a2:ff:4b:38:5d: 85:12:a3:59:00:12:b0:93:bd:81:ed:37:73:3a:69:48:bf:f4: eb:af:7c:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIYnTBRZlU3O8g5eRTUEZoSJWJT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1 NTJCNkEwNDAeFw0yNjA4MjgwNjQyNDNaFw0yNjA4MzExNTU2NDNaMDMxMTAvBgNV BAMTKEQyNjBDQ0JFQ0YxOEE4REJBOTFFNDY0QTA3MzY0MDQ3RjUwOUQ0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08Y4Z34dpQbe3HGoVlA8AKd9I G4CTCfEZjeyQZs3h0yMc0hF0Y8r8Qym+tOgyW2BIsKE1T6aOiD7FC0AkYgmD3QG6 bym35AlvSU/cYZRIQI5thAlDt8k1PjG/K4yed0LNqxGmHa6fNBPBAipIwUbEYlzZ UFIifTWlZ51X0bJpADT/BylCatBKEho8kjqU9cKOeXykZKd3lqUEL192cyHYReEZ DGfrOuEr/O3hS8e5ItzVZO55yPRq2dzBUfly7oBaJ74doxKhyxuceF0VFrOsJnXd ias9hPX0g38arX/IR0xC72SQi9h/G+dyFT5p9tPa5oB/21+cyT97feQPYRaDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0mDMvs8YqNupHkZKBzZAR/UJ1GIwHwYDVR0j BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTMyNTc2MDkyNDg4MDMvMC9GMzU0RjkxNUZENkEw QzIwQzlFNjI1QzI4RDM2QzRCQzU1MkI2QTA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc6pTJG5wrGM iP/h4iBgq1jdyfpDaFX2bZtJX3BEJAbIh52cSWQPvywO3mCVIFQCuyEMuWPyitkJ OfqOhsT4ZczVBJT1NUabUxZW3U65KsjeLL28mSWFrsw1PYtaXntS+ASH+iRdCEIW eKraKlpAqL81o+PVWGo8rhXZgo9h5+DiPxUcS3MDQQyrSajtiZHEXZoWyaMHpK/n DDt5pXDgFyjIzG5xXmHQGM0qdR3ECMm2///pRNCACNfJncch1F5UfC82Jd8XZz0D HEOyS8noB8z74Q/ZyL3h1aA2tKOkxXhZYsQm3KL/SzhdhRKjWQASsJO9ge03czpp SL/06698Zw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:22 2026 by rpki-client