$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: NRpVWjE/de0y8DZjTLk7I7WXBAud36uFWSEkI8k+diM= Subject key identifier: 1B:F0:77:81:2D:EC:04:DB:B7:E4:75:88:6E:5B:B3:06:3D:C7:F3:93 Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 49CD8A265BA9B240B2589321BD2576AA95191231 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 52 Signing time: Fri 28 Aug 2026 06:47:46 +0000 Manifest this update: Fri 28 Aug 2026 06:42:46 +0000 Manifest next update: Mon 31 Aug 2026 08:27:46 +0000 Files and hashes: 1: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: QkQwKwkclZqFp8A0+eHZRauclvwyA28hK27Dac48P88=) 2: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cd:8a:26:5b:a9:b2:40:b2:58:93:21:bd:25:76:aa:95:19:12:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Aug 28 06:42:46 2026 GMT Not After : Aug 31 08:27:46 2026 GMT Subject: CN=1BF077812DEC04DBB7E475886E5BB3063DC7F393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:c6:c4:8f:75:93:a0:33:3e:e3:cc:69:67: 46:5b:7c:13:88:15:44:a9:fe:83:81:a0:9c:69:40: e6:76:b6:06:f0:24:9b:68:1c:70:b5:15:2b:c5:6c: ba:2f:83:70:c2:98:79:90:9f:3f:a8:7e:9c:66:2f: c4:35:43:41:f4:8e:26:21:a6:2b:25:62:68:45:93: 87:53:d0:69:71:e2:ad:de:88:cf:58:07:4f:73:8d: f0:ec:25:25:f0:5c:11:8b:02:4b:8d:05:12:42:22: 25:09:b0:9f:f9:41:f9:20:f8:c1:b0:e9:f5:71:62: a2:4f:76:58:bc:7f:83:e2:11:a4:10:c7:6c:1b:0f: 99:02:c2:75:c1:93:27:0b:2b:33:b1:d4:24:9a:72: 94:a5:63:97:f9:2c:4d:ff:f9:50:34:21:1e:71:04: 8a:bf:34:d4:36:70:3e:56:4a:bc:51:70:f2:db:86: e9:13:aa:fa:1c:05:a5:ba:97:4e:d3:55:e4:96:45: 7d:b1:16:9e:9e:c9:d3:c1:9a:0a:3e:01:75:43:72: 58:41:21:0d:92:a8:89:84:a7:70:fa:57:6c:e6:17: f4:9b:e0:f7:10:bd:46:b7:1d:f8:98:5f:9e:59:5f: 04:0d:c8:89:6f:1a:38:9e:d4:a5:22:a0:8a:c1:af: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F0:77:81:2D:EC:04:DB:B7:E4:75:88:6E:5B:B3:06:3D:C7:F3:93 X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1d:c2:bf:0a:b9:ed:55:f3:54:36:b7:32:1c:b9:94:e1:a2: 17:d0:a5:47:61:e1:01:fd:14:02:0c:1c:f0:23:3a:1b:86:31: 3b:bf:0b:25:00:77:8a:a2:b6:e1:d3:fe:c3:88:1b:28:59:80: 1f:37:52:1a:0f:8e:99:24:75:bd:a6:f3:19:3b:2b:1e:48:2a: f9:c0:b9:5e:ed:66:76:c5:9b:42:2a:ff:b4:0e:56:d0:cc:64: 55:7d:67:12:6f:2a:0d:ab:37:ad:fc:53:0c:18:15:39:8a:d4: 11:db:07:f8:00:52:ae:67:aa:f2:3c:7b:f0:e8:88:f1:2c:38: 91:78:dc:bb:42:55:33:1c:cf:18:7c:77:ab:72:46:66:03:71: c0:64:3f:d0:24:e3:f4:ed:1e:73:ba:31:85:8b:03:8e:db:d3: 3f:42:29:23:fe:fa:0c:34:9e:62:9c:17:9d:05:e8:c7:2e:f6: 29:29:8b:ef:a0:02:f3:04:de:c7:69:86:90:80:70:54:c3:c0: 0e:55:72:d9:13:f9:fe:64:91:f1:05:20:26:67:87:11:a1:08: 19:9e:b4:ae:67:d0:dd:e2:ce:ee:56:4f:06:d6:23:31:4b:cb: fd:37:d6:92:d8:d3:a2:bc:19:11:d0:8a:49:71:9f:da:43:12: 5d:87:2d:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSc2KJlupskCyWJMhvSV2qpUZEjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjA4MjgwNjQyNDZaFw0yNjA4MzEwODI3NDZaMDMxMTAvBgNV BAMTKDFCRjA3NzgxMkRFQzA0REJCN0U0NzU4ODZFNUJCMzA2M0RDN0YzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rsbEj3WToDM+48xpZ0ZbfBOI FUSp/oOBoJxpQOZ2tgbwJJtoHHC1FSvFbLovg3DCmHmQnz+ofpxmL8Q1Q0H0jiYh pislYmhFk4dT0Glx4q3eiM9YB09zjfDsJSXwXBGLAkuNBRJCIiUJsJ/5Qfkg+MGw 6fVxYqJPdli8f4PiEaQQx2wbD5kCwnXBkycLKzOx1CSacpSlY5f5LE3/+VA0IR5x BIq/NNQ2cD5WSrxRcPLbhukTqvocBaW6l07TVeSWRX2xFp6eydPBmgo+AXVDclhB IQ2SqImEp3D6V2zmF/Sb4PcQvUa3HfiYX55ZXwQNyIlvGjie1KUioIrBr1QRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG/B3gS3sBNu35HWIbluzBj3H85MwHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeR3Cvwq57VXz VDa3Mhy5lOGiF9ClR2HhAf0UAgwc8CM6G4YxO78LJQB3iqK24dP+w4gbKFmAHzdS Gg+OmSR1vabzGTsrHkgq+cC5Xu1mdsWbQir/tA5W0MxkVX1nEm8qDas3rfxTDBgV OYrUEdsH+ABSrmeq8jx78OiI8Sw4kXjcu0JVMxzPGHx3q3JGZgNxwGQ/0CTj9O0e c7oxhYsDjtvTP0IpI/76DDSeYpwXnQXoxy72KSmL76AC8wTex2mGkIBwVMPADlVy 2RP5/mSR8QUgJmeHEaEIGZ60rmfQ3eLO7lZPBtYjMUvL/TfWktjTorwZEdCKSXGf 2kMSXYctnQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:37 2026 by rpki-client