$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft File: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft (raw, json) Hash identifier: wDgjeUCsGkefrdY5qmzKl0QxoCdB+OxkQCBI+awRj2U= Subject key identifier: 72:18:38:BB:BF:4E:DB:AA:05:0F:5A:80:EC:CB:E8:CC:A7:A9:C0:23 Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 Certificate issuer: /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Certificate serial: 043CCF3B20625F26696E87E23FA75ED8FB20E773 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft Manifest number: 57 Signing time: Fri 28 Aug 2026 06:48:12 +0000 Manifest this update: Fri 28 Aug 2026 06:43:12 +0000 Manifest next update: Mon 31 Aug 2026 13:43:12 +0000 Files and hashes: 1: 3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (hash: QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=) 2: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl (hash: NqePgJuID6g69D91hlbv6t94kFcDW1TPfSiS/8yG7CU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3c:cf:3b:20:62:5f:26:69:6e:87:e2:3f:a7:5e:d8:fb:20:e7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Validity Not Before: Aug 28 06:43:12 2026 GMT Not After : Aug 31 13:43:12 2026 GMT Subject: CN=721838BBBF4EDBAA050F5A80ECCBE8CCA7A9C023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:bb:89:76:74:65:d8:a9:c7:fb:9d:27:88: 00:8b:25:8e:0d:a6:be:80:80:ae:b0:93:a5:c8:63: 06:f3:01:4a:80:68:7b:44:70:8e:d5:20:57:b7:b2: 18:a8:50:85:e8:72:c2:76:49:fb:41:94:be:fd:6b: e4:d9:23:5c:50:ac:2e:85:fc:16:8b:2a:e4:60:34: 13:c8:90:35:fd:3d:35:9d:e9:19:39:67:8e:bd:a9: cc:77:bc:09:3d:8b:e5:0a:c1:23:91:81:09:5b:de: b9:fd:cf:2b:52:56:32:84:3f:60:2a:d9:f7:6a:14: 3e:58:c8:f3:40:0b:16:9d:fd:0c:7d:b5:97:f3:14: 9e:b8:3e:63:b2:d6:e2:c4:48:83:65:aa:93:f0:c9: c1:03:8a:6f:d9:af:55:77:00:3a:eb:a2:1c:ef:04: ef:cd:c1:b3:69:dc:72:60:52:a0:4d:f1:31:1b:29: f9:54:0c:af:97:3a:c6:c4:20:7d:36:d3:b3:5d:46: 06:e8:be:2f:3f:6f:ae:40:d3:e6:44:63:af:54:9c: ec:21:5d:5c:33:d4:da:da:02:73:1f:09:c1:5b:b1: 26:2e:46:6a:32:10:03:60:31:8b:5e:18:8b:fc:da: a9:f6:85:ca:18:e3:d3:ca:db:2a:17:d1:b4:6b:e3: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:18:38:BB:BF:4E:DB:AA:05:0F:5A:80:EC:CB:E8:CC:A7:A9:C0:23 X509v3 Authority Key Identifier: keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:b0:cb:45:9d:e9:cd:50:af:f5:b1:ab:44:67:02:64:f1: 85:8b:af:e7:94:11:2a:45:7b:7e:f8:33:a0:91:97:93:00:f0: 2c:80:4b:fa:5a:e8:8a:f6:e6:ca:46:22:d8:d1:38:02:6a:20: a8:9a:88:1e:90:22:aa:e5:86:0c:f6:ca:9e:8a:65:b3:0b:b0: fa:46:ae:72:80:70:d6:13:f1:5b:ab:6d:f0:03:c5:c5:2f:8a: 97:de:9c:68:19:5d:41:4a:61:9e:d8:ba:b0:ea:08:52:80:64: d8:2c:44:ab:5b:a0:20:e7:c7:b8:a8:03:b4:99:62:d7:fd:53: b7:d5:c2:fc:f4:58:95:6b:d9:d1:05:4c:35:e7:f1:8a:04:bf: 14:02:cd:7c:19:48:8a:2e:06:ca:0d:cd:0c:dd:33:90:d0:1e: b2:05:64:c1:f3:8b:19:f0:97:67:9d:9c:ca:be:c2:fc:33:07: 89:4b:01:99:79:cc:64:36:33:09:84:8e:58:1a:23:4b:5b:49: 22:29:74:40:d6:43:2e:12:7b:98:11:92:6e:00:d5:6b:f3:19: 6a:ac:91:6b:96:bd:71:6c:8e:38:e2:0b:64:51:88:03:48:4d: 96:97:22:77:9e:aa:bd:30:fc:84:cd:1c:20:59:b9:c4:3b:66: 1e:0a:e7:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBDzPOyBiXyZpbofiP6de2Psg53MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0 RTNDQUJDNjAeFw0yNjA4MjgwNjQzMTJaFw0yNjA4MzExMzQzMTJaMDMxMTAvBgNV BAMTKDcyMTgzOEJCQkY0RURCQUEwNTBGNUE4MEVDQ0JFOENDQTdBOUMwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81LuJdnRl2KnH+50niACLJY4N pr6AgK6wk6XIYwbzAUqAaHtEcI7VIFe3shioUIXocsJ2SftBlL79a+TZI1xQrC6F /BaLKuRgNBPIkDX9PTWd6Rk5Z469qcx3vAk9i+UKwSORgQlb3rn9zytSVjKEP2Aq 2fdqFD5YyPNACxad/Qx9tZfzFJ64PmOy1uLESINlqpPwycEDim/Zr1V3ADrrohzv BO/NwbNp3HJgUqBN8TEbKflUDK+XOsbEIH0207NdRgbovi8/b65A0+ZEY69UnOwh XVwz1NraAnMfCcFbsSYuRmoyEANgMYteGIv82qn2hcoY49PK2yoX0bRr42ZJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUchg4u79O26oFD1qA7MvozKepwCMwHwYDVR0j BBgwFoAU1HL6zheNjV6xzZ7JaxY1SU48q8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjUwMjMwOTAyMDk1ODc1Ny8wL0Q0NzJGQUNFMTc4RDhENUVCMUNEOUVDOTZCMTYz NTQ5NEUzQ0FCQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0RTNDQUJDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI1MDIzMDkwMjA5NTg3NTcvMC9ENDcyRkFDRTE3OEQ4 RDVFQjFDRDlFQzk2QjE2MzU0OTRFM0NBQkM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGewy0Wd6c1Q r/Wxq0RnAmTxhYuv55QRKkV7fvgzoJGXkwDwLIBL+lroivbmykYi2NE4AmogqJqI HpAiquWGDPbKnoplswuw+kaucoBw1hPxW6tt8APFxS+Kl96caBldQUphnti6sOoI UoBk2CxEq1ugIOfHuKgDtJli1/1Tt9XC/PRYlWvZ0QVMNefxigS/FALNfBlIii4G yg3NDN0zkNAesgVkwfOLGfCXZ52cyr7C/DMHiUsBmXnMZDYzCYSOWBojS1tJIil0 QNZDLhJ7mBGSbgDVa/MZaqyRa5a9cWyOOOILZFGIA0hNlpcid56qvTD8hM0cIFm5 xDtmHgrn4Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:04 2026 by rpki-client