$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft File: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft (raw, json) Hash identifier: tvhSYt/odBfg8qyG2gzmPfTMlPgsOaD6VhUVPc32pOA= Subject key identifier: 18:D7:50:3C:57:29:22:21:9F:CF:55:1C:A7:C7:F0:76:DB:77:50:2B Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F Certificate issuer: /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Certificate serial: 5E6A2CDD45477E5EBBB11760D74D637079887099 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft Manifest number: 54 Signing time: Fri 28 Aug 2026 06:47:58 +0000 Manifest this update: Fri 28 Aug 2026 06:42:58 +0000 Manifest next update: Mon 31 Aug 2026 16:25:58 +0000 Files and hashes: 1: 3131312e3230382e3235342e302f32342d3332203d3e203435313036.roa (hash: /9/wcHPixQ3zSf0oWBQhT74E0lowSuv9Eu8B3+gZotQ=) 2: 3131312e3231302e31362e302f32342d3332203d3e203435313036.roa (hash: y6rLG5MGWhuQpG3jyn5ZyzIM4qeNCE/D+iaUlbOa8X8=) 3: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl (hash: DWxzIPBILIwZA1Mf66WoK/EmBXc0Vd5h0x7yDBB1oK0=) 4: 3131312e3230382e3132312e302f32342d3332203d3e2034383337.roa (hash: 1dEopTFRZW8mtpna1k4UYOCNYv3DaJ2ov+N+MWZqkTk=) 5: 3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (hash: 8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=) 6: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (hash: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:2c:dd:45:47:7e:5e:bb:b1:17:60:d7:4d:63:70:79:88:70:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Validity Not Before: Aug 28 06:42:58 2026 GMT Not After : Aug 31 16:25:58 2026 GMT Subject: CN=18D7503C572922219FCF551CA7C7F076DB77502B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:4f:d3:fc:10:cf:62:fa:61:dd:aa:f4:3f: d5:ef:24:58:9b:3b:fe:43:58:42:e0:84:4b:fe:3e: 40:4d:c6:29:72:43:ae:a5:07:b1:23:6d:18:6a:b3: 54:26:0d:4f:50:ff:7a:6d:38:07:c3:c2:78:91:d9: 92:88:5e:14:0c:0d:6d:eb:04:2a:2c:5e:db:f9:7f: 46:d7:37:14:9c:19:97:e7:3c:4d:d4:80:24:b4:a9: 5f:9a:7a:55:a2:aa:71:a2:93:e5:6d:43:13:28:a8: bc:29:33:5f:15:87:3a:fd:71:72:db:38:9a:72:97: e2:65:3b:06:11:70:49:77:f2:32:01:4a:a0:ba:0f: 9c:5f:3f:88:ec:2a:8d:13:1f:fb:2e:3d:0a:8e:8a: 6d:da:2e:53:b3:f4:4e:89:6e:cb:47:13:95:e2:f1: 96:77:bd:8e:87:9e:55:77:b1:6a:f8:08:6b:e0:f6: 8f:2e:f7:5b:27:cf:60:7d:6c:f1:73:57:1e:3e:8b: d4:82:27:f7:b0:7b:c7:9e:42:6c:aa:1f:78:19:2f: a2:44:dc:20:9a:5e:bd:15:c3:d4:d8:94:83:07:bd: d5:2a:2e:b3:42:2e:cf:16:d5:ec:12:22:a5:50:39: 1a:27:e9:66:36:e9:d9:2f:f6:43:e8:10:1c:bc:4e: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D7:50:3C:57:29:22:21:9F:CF:55:1C:A7:C7:F0:76:DB:77:50:2B X509v3 Authority Key Identifier: keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8c:d8:66:5a:b5:54:cc:d3:b5:86:ba:35:5e:e7:ad:c2:a4: b2:6c:54:c4:68:b5:70:fe:64:26:b0:ea:63:b6:08:ea:63:c6: 50:a4:21:ee:90:bd:f0:cd:1e:48:f1:2f:9e:4f:81:fa:32:97: ac:f1:f1:0c:e7:a5:81:3d:35:3a:5b:50:b9:45:c0:5d:08:35: 12:fc:db:d4:8a:e8:a6:70:1e:06:42:11:0b:7e:32:cd:6c:f7: 16:d6:2e:0a:e9:01:d6:ac:3b:84:e2:0d:4f:1c:71:08:c5:bc: 66:b7:59:20:e1:8c:3e:a9:6f:06:67:d8:ea:3c:5e:c6:36:dd: 84:d4:79:76:a2:08:63:97:ea:e3:42:94:7e:bd:7a:b2:00:99: 1f:b8:35:e3:14:c7:3b:a2:77:99:d2:24:16:71:ef:98:7e:f6: 82:6f:03:74:e0:fb:54:dc:4c:af:63:7c:55:5b:d2:89:58:b0: d7:69:46:ea:44:1d:4f:76:4f:5d:4d:87:6a:0a:46:c8:01:b4: 8f:c2:3a:76:a5:d5:68:c6:f9:c1:89:80:cd:f7:ff:2c:77:92: 54:ca:26:49:60:60:5e:10:6f:b1:47:4d:b3:b1:99:c3:c7:9e: ec:3e:f9:e4:e0:f4:dc:ff:3d:00:32:30:5b:1a:c7:5c:79:f5: 5b:f8:85:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXmos3UVHfl67sRdg101jcHmIcJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdB RjM1RkE4RjAeFw0yNjA4MjgwNjQyNThaFw0yNjA4MzExNjI1NThaMDMxMTAvBgNV BAMTKDE4RDc1MDNDNTcyOTIyMjE5RkNGNTUxQ0E3QzdGMDc2REI3NzUwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVj0/T/BDPYvph3ar0P9XvJFib O/5DWELghEv+PkBNxilyQ66lB7EjbRhqs1QmDU9Q/3ptOAfDwniR2ZKIXhQMDW3r BCosXtv5f0bXNxScGZfnPE3UgCS0qV+aelWiqnGik+VtQxMoqLwpM18Vhzr9cXLb OJpyl+JlOwYRcEl38jIBSqC6D5xfP4jsKo0TH/suPQqOim3aLlOz9E6JbstHE5Xi 8ZZ3vY6HnlV3sWr4CGvg9o8u91snz2B9bPFzVx4+i9SCJ/ewe8eeQmyqH3gZL6JE 3CCaXr0Vw9TYlIMHvdUqLrNCLs8W1ewSIqVQORon6WY26dkv9kPoEBy8Th0rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGNdQPFcpIiGfz1Ucp8fwdtt3UCswHwYDVR0j BBgwFoAUfo693OIzEvr5F1hYH7FD9681+o8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MDUyMzEzMTc4MTE1NS8wLzdFOEVCRERDRTIzMzEyRkFGOTE3NTg1ODFGQjE0 M0Y3QUYzNUZBOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdBRjM1RkE4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4ODA1MjMxMzE3ODExNTUvMC83RThFQkREQ0UyMzMx MkZBRjkxNzU4NTgxRkIxNDNGN0FGMzVGQThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4zYZlq1VMzT tYa6NV7nrcKksmxUxGi1cP5kJrDqY7YI6mPGUKQh7pC98M0eSPEvnk+B+jKXrPHx DOelgT01OltQuUXAXQg1Evzb1IropnAeBkIRC34yzWz3FtYuCukB1qw7hOINTxxx CMW8ZrdZIOGMPqlvBmfY6jxexjbdhNR5dqIIY5fq40KUfr16sgCZH7g14xTHO6J3 mdIkFnHvmH72gm8DdOD7VNxMr2N8VVvSiViw12lG6kQdT3ZPXU2HagpGyAG0j8I6 dqXVaMb5wYmAzff/LHeSVMomSWBgXhBvsUdNs7GZw8ee7D755OD03P89ADIwWxrH XHn1W/iFOg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:03:09 2026 by rpki-client