$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json) Hash identifier: dCrCOuJddnh5iR8+E90lURe56Kv1lq0FtVWAyVQliOQ= Subject key identifier: 35:25:BD:F4:D1:F9:5D:83:30:FA:BA:15:9D:8F:94:17:BE:EF:FA:70 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 55FFB68978AD6422857B3A855AD0817B5C66E59E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft Manifest number: 0139 Signing time: Mon 21 Sep 2026 15:58:15 +0000 Manifest this update: Mon 21 Sep 2026 15:53:15 +0000 Manifest next update: Thu 24 Sep 2026 22:49:15 +0000 Files and hashes: 1: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=) 2: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=) 3: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=) 4: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=) 5: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=) 6: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=) 7: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=) 8: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=) 9: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=) 10: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: OsDBS14PO/bTgZnw/O+kP1QBWuvgY+VLu1UCPEngO4A=) 11: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=) 12: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=) 13: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=) 14: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=) 15: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=) 16: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ff:b6:89:78:ad:64:22:85:7b:3a:85:5a:d0:81:7b:5c:66:e5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Sep 21 15:53:15 2026 GMT Not After : Sep 24 22:49:15 2026 GMT Subject: CN=3525BDF4D1F95D8330FABA159D8F9417BEEFFA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:4a:15:1c:39:cb:14:25:c9:95:d1:65:81: 3b:63:6c:f4:ad:a2:eb:62:7d:80:83:6f:f4:79:95: ff:24:60:3c:69:42:8d:b7:c5:47:9c:43:aa:25:bd: 87:57:4c:65:be:15:8e:c8:d0:14:e4:41:e1:f6:a1: 46:c1:1e:a2:f7:1f:d8:3d:e1:12:fd:4c:9d:b8:1a: 7f:88:10:ea:f2:e3:de:49:cb:46:36:6c:7b:3f:51: 23:d5:1b:05:36:99:51:9b:df:93:30:a4:0a:19:c8: 86:2d:b0:37:fd:61:58:ca:8b:af:f2:d0:01:9b:c9: 7c:4a:32:ca:e3:e7:44:86:e0:7a:fa:6f:c8:cf:bf: 9a:1d:bc:00:50:da:05:ff:56:0f:40:fd:28:e5:9b: 38:10:e7:04:8c:31:71:e8:1a:00:e6:a2:78:18:3f: b0:1a:2d:ef:36:82:12:fe:fa:e4:d7:2e:73:45:c2: 8f:1c:4b:12:b9:71:3b:da:d3:e1:36:ec:c0:3d:35: dc:29:37:dd:a9:fe:2c:c6:20:76:49:1d:af:7f:72: b1:a3:d7:a1:96:ca:7d:6c:79:74:5d:12:78:5a:22: 83:fd:22:55:e9:52:c1:cd:ea:a2:e7:07:cf:e2:e4: bd:4a:83:84:4d:cb:3c:90:f9:ab:58:97:2e:7a:b5: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:25:BD:F4:D1:F9:5D:83:30:FA:BA:15:9D:8F:94:17:BE:EF:FA:70 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cb:8c:3d:5f:89:b8:ad:96:41:f2:d2:d1:12:f7:ca:67:63: ba:88:5d:e1:b5:2c:f7:76:7b:12:b5:34:4d:41:5d:8a:ab:05: b7:95:70:1d:e1:cf:3d:33:95:cf:02:df:a4:69:d3:96:23:2f: d3:7b:63:c8:ce:48:0d:a5:13:c6:fd:8d:78:0a:eb:ae:6e:dc: 68:a9:8a:df:f7:3e:59:01:f0:ce:77:c1:fa:c5:12:d9:75:71: 0f:ab:87:40:6d:09:99:4e:8a:fc:71:96:24:b4:81:a8:69:2a: 8b:1f:6a:75:65:a7:8d:62:93:cf:76:14:4c:a1:70:78:c2:ce: 7d:14:17:c7:fc:84:ba:3a:f4:92:52:de:ff:d7:df:21:d2:39: 98:e6:52:ac:e8:25:71:43:85:be:34:21:71:98:99:f4:5b:23: a4:39:34:0b:74:39:90:ab:6f:86:9d:4a:72:7d:cb:21:89:8b: b1:e7:2c:83:e9:05:d2:67:5f:1a:e7:32:12:52:ef:eb:d2:96: 78:28:6f:24:6d:c7:ad:70:a6:74:b3:24:6d:47:44:0b:ae:d5: cb:f1:f3:8a:7f:a2:90:51:6d:42:1b:13:94:94:62:9c:d5:7b: 23:11:94:e4:72:a6:9d:a6:99:bd:ad:45:10:37:df:61:9c:e8: c0:07:0a:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVf+2iXitZCKFezqFWtCBe1xm5Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjA5MjExNTUzMTVaFw0yNjA5MjQyMjQ5MTVaMDMxMTAvBgNV BAMTKDM1MjVCREY0RDFGOTVEODMzMEZBQkExNTlEOEY5NDE3QkVFRkZBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY10oVHDnLFCXJldFlgTtjbPSt outifYCDb/R5lf8kYDxpQo23xUecQ6olvYdXTGW+FY7I0BTkQeH2oUbBHqL3H9g9 4RL9TJ24Gn+IEOry495Jy0Y2bHs/USPVGwU2mVGb35MwpAoZyIYtsDf9YVjKi6/y 0AGbyXxKMsrj50SG4Hr6b8jPv5odvABQ2gX/Vg9A/SjlmzgQ5wSMMXHoGgDmongY P7AaLe82ghL++uTXLnNFwo8cSxK5cTva0+E27MA9NdwpN92p/izGIHZJHa9/crGj 16GWyn1seXRdEnhaIoP9IlXpUsHN6qLnB8/i5L1Kg4RNyzyQ+atYly56teuBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNSW99NH5XYMw+roVnY+UF77v+nAwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC83MTk1MkIwRkY5QkNB N0NFNTQzNkIwREI1MDA5Q0EwOUY2MTBGM0MwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsuMPV+JuK2W QfLS0RL3ymdjuohd4bUs93Z7ErU0TUFdiqsFt5VwHeHPPTOVzwLfpGnTliMv03tj yM5IDaUTxv2NeArrrm7caKmK3/c+WQHwznfB+sUS2XVxD6uHQG0JmU6K/HGWJLSB qGkqix9qdWWnjWKTz3YUTKFweMLOfRQXx/yEujr0klLe/9ffIdI5mOZSrOglcUOF vjQhcZiZ9FsjpDk0C3Q5kKtvhp1Kcn3LIYmLsecsg+kF0mdfGucyElLv69KWeChv JG3HrXCmdLMkbUdEC67Vy/Hzin+ikFFtQhsTlJRinNV7IxGU5HKmnaaZva1FEDff YZzowAcKDw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:24:22 2026 by rpki-client