$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: 5u2krChcBjtEv71fp01BHcrUYxDL5M0Gh3GT9TJhD4A= Subject key identifier: 98:6A:8A:B2:98:3F:87:D1:EA:BF:06:41:96:BA:52:94:AB:71:35:38 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 0867B36272CDB3405B7A71A9B32ABD1058F891F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: C4 Signing time: Sun 14 Jun 2026 03:12:39 +0000 Manifest this update: Sun 14 Jun 2026 03:07:39 +0000 Manifest next update: Mon 15 Jun 2026 03:35:39 +0000 Files and hashes: 1: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 2: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 3: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 4: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 5: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 6: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 7: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: RFrX7C/OEBvgy1Qga6VWlwnTP4YPcGP8StPTCGFxL/Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:67:b3:62:72:cd:b3:40:5b:7a:71:a9:b3:2a:bd:10:58:f8:91:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Jun 14 03:07:39 2026 GMT Not After : Jun 15 03:35:39 2026 GMT Subject: CN=986A8AB2983F87D1EABF064196BA5294AB713538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:22:b7:0d:a5:2a:84:4c:26:f2:39:e2:ab: 55:8c:5a:65:98:c0:73:47:ed:61:8e:81:fe:fc:b6: 84:4a:9c:14:8b:c3:db:2a:c9:e3:24:3e:9d:d6:bf: f3:8b:15:73:8a:7c:1d:ac:9e:96:e5:69:74:85:a8: f6:48:59:ee:99:2b:c2:a1:41:47:23:d9:8e:49:99: 91:77:74:37:54:00:4a:b4:92:33:9f:4c:aa:e4:21: e5:65:70:ba:d2:b4:01:43:47:ce:47:be:19:8d:9e: e0:43:f2:3f:61:cf:b1:4d:7d:ea:e1:b8:7f:80:1e: a1:5c:15:6c:75:65:67:ab:f9:df:be:7f:19:d0:04: ac:68:a5:91:de:9e:00:04:6b:33:9f:51:24:d9:9b: 3a:5f:08:ba:e7:53:b4:35:ce:8f:36:ca:ed:53:ce: 7d:9e:15:d8:4a:6c:f6:d1:e4:04:fb:9a:ec:16:f2: 50:bb:30:59:2a:0f:2d:9c:92:79:d0:97:66:3b:68: 53:26:94:4d:ea:37:8a:5d:47:2f:6a:90:38:e9:8d: 72:0e:c8:f6:7b:fe:4a:7b:a8:3d:27:35:72:7f:a4: ce:17:18:3d:9c:f6:ad:aa:c2:47:fd:4f:c1:6c:bc: ae:8c:4e:5b:fc:02:c3:c6:95:63:cd:04:f3:94:cc: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:8A:B2:98:3F:87:D1:EA:BF:06:41:96:BA:52:94:AB:71:35:38 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:0f:18:ec:47:f6:86:7e:7d:a8:8b:50:1f:4b:02:2f:4d: 30:81:c7:3c:60:88:30:c1:af:56:b3:fd:af:ea:0b:26:1b:66: c3:22:02:73:10:f1:14:7c:61:87:9f:ef:3b:42:40:9c:38:48: 62:61:1e:de:e9:bf:a2:06:51:10:08:f5:1f:dc:2a:26:d1:d4: 68:24:62:35:0b:d1:cf:33:ea:e5:87:65:c6:0c:ab:23:9f:b0: fe:a2:7d:ef:f8:01:28:bd:17:de:25:7a:84:ad:d8:83:f5:e7: 66:12:7e:9c:e1:c0:5e:3e:09:a1:5b:6b:a7:a4:35:c6:af:b1: d5:28:a4:9c:8a:c7:a1:0a:91:9a:1c:ef:bb:a9:e3:ad:84:2d: fe:bd:48:f6:f6:8f:0c:52:48:3b:44:46:19:81:7e:b7:90:66: 7c:15:ce:cf:cb:8b:f8:99:29:51:73:18:78:49:ed:de:a8:54: 3c:fb:05:de:78:d4:8b:2c:e1:13:93:58:40:93:1c:32:48:10: f8:3e:eb:f6:a2:6a:4b:5b:f8:14:89:59:a9:31:76:7c:24:93: 10:06:b4:9a:8f:8c:32:0e:df:b3:d2:7f:ee:e0:a8:06:fa:c8: 77:52:b4:a4:2d:b1:5f:8a:2e:e8:38:e9:3a:19:d6:f8:0e:f5: be:f7:f5:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGezYnLNs0BbenGpsyq9EFj4kfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjA2MTQwMzA3MzlaFw0yNjA2MTUwMzM1MzlaMDMxMTAvBgNV BAMTKDk4NkE4QUIyOTgzRjg3RDFFQUJGMDY0MTk2QkE1Mjk0QUI3MTM1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhCK3DaUqhEwm8jniq1WMWmWY wHNH7WGOgf78toRKnBSLw9sqyeMkPp3Wv/OLFXOKfB2snpblaXSFqPZIWe6ZK8Kh QUcj2Y5JmZF3dDdUAEq0kjOfTKrkIeVlcLrStAFDR85HvhmNnuBD8j9hz7FNferh uH+AHqFcFWx1ZWer+d++fxnQBKxopZHengAEazOfUSTZmzpfCLrnU7Q1zo82yu1T zn2eFdhKbPbR5AT7muwW8lC7MFkqDy2cknnQl2Y7aFMmlE3qN4pdRy9qkDjpjXIO yPZ7/kp7qD0nNXJ/pM4XGD2c9q2qwkf9T8FsvK6MTlv8AsPGlWPNBPOUzEF5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmGqKspg/h9HqvwZBlrpSlKtxNTgwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOQPGOxH9oZ+ faiLUB9LAi9NMIHHPGCIMMGvVrP9r+oLJhtmwyICcxDxFHxhh5/vO0JAnDhIYmEe 3um/ogZREAj1H9wqJtHUaCRiNQvRzzPq5YdlxgyrI5+w/qJ97/gBKL0X3iV6hK3Y g/XnZhJ+nOHAXj4JoVtrp6Q1xq+x1SiknIrHoQqRmhzvu6njrYQt/r1I9vaPDFJI O0RGGYF+t5BmfBXOz8uL+JkpUXMYeEnt3qhUPPsF3njUiyzhE5NYQJMcMkgQ+D7r 9qJqS1v4FIlZqTF2fCSTEAa0mo+MMg7fs9J/7uCoBvrId1K0pC2xX4ou6DjpOhnW +A71vvf12Q== -----END CERTIFICATE-----Generated at Sun Jun 14 08:37:15 2026 by rpki-client