$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: 9ngkEbUYsZL1q06uDZfdpoD82ZpEH4PJ8lR2FQG5IIM= Subject key identifier: 8A:62:BE:4C:E3:B4:67:C6:C0:66:A9:81:DA:EB:95:DD:89:77:52:9F Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 77AC325F2FFA5B8C54DC6D9583BD3A3C35DC7063 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 18:09:54 +0000 Manifest this update: Wed 29 Jul 2026 18:04:54 +0000 Manifest next update: Thu 30 Jul 2026 20:00:54 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: qQIXygnuJQjXjj/6F9IFH8gSbyegRAF0mUXluXNcADk=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 4: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 5: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 6: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 7: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) 8: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ac:32:5f:2f:fa:5b:8c:54:dc:6d:95:83:bd:3a:3c:35:dc:70:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Jul 29 18:04:54 2026 GMT Not After : Jul 30 20:00:54 2026 GMT Subject: CN=8A62BE4CE3B467C6C066A981DAEB95DD8977529F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:75:b4:4b:d3:9c:0f:88:30:4f:7f:63:6d: 1b:b5:b8:5a:89:9e:f0:fe:88:c1:a5:72:0d:c0:6a: c4:95:c2:0c:63:17:b4:b5:6a:cc:fd:54:d7:c7:c6: 2f:36:43:fe:69:41:80:b5:ab:e7:23:50:d6:80:c3: fd:2e:23:b0:19:c5:39:84:11:82:da:d2:2b:34:11: b8:4e:0c:d8:04:30:a8:fd:6f:6d:df:6f:47:70:9f: 58:80:24:64:a9:42:57:91:b9:67:10:08:3f:f0:8d: 83:36:50:c7:7f:9c:53:7e:c4:31:fb:19:86:ef:6b: da:f3:54:4e:d7:fc:57:20:96:6f:07:8f:5d:9c:6b: 7c:ba:50:e4:b8:58:d0:ac:58:71:4b:b1:f7:2b:7b: d0:14:cf:0a:86:da:16:94:cc:ce:f1:d8:d9:7f:51: 72:62:10:63:3a:e5:a5:7e:76:06:8d:14:5b:35:d1: ee:e5:84:ee:e5:b6:6a:b4:40:2a:69:00:04:f5:83: c2:97:3d:2d:66:7f:1a:bd:08:c9:59:c4:d7:4a:9d: ab:68:30:c4:00:a1:eb:99:d2:d4:5f:e4:55:4e:8c: 29:78:24:21:94:81:64:22:ff:53:6d:64:d5:8d:a9: 66:e5:c9:52:e9:6b:93:2a:08:e0:17:dc:61:98:5a: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:BE:4C:E3:B4:67:C6:C0:66:A9:81:DA:EB:95:DD:89:77:52:9F X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:aa:f8:ef:67:5a:46:be:8a:1b:56:c6:7e:6d:5a:a2:9d:18: 82:b6:ee:6d:cc:7e:91:40:a7:ef:8f:03:23:fd:a7:c7:8f:91: 3e:c2:53:f7:da:3c:4d:bc:0f:25:23:ec:f9:04:76:84:0e:b0: d6:49:9c:e4:30:5b:a1:e7:e3:51:b0:1a:7b:7e:12:e8:25:94: 26:17:7e:03:f6:22:6e:c7:06:26:b1:db:9e:c9:f3:f2:9c:ac: da:7b:0a:cb:93:86:ad:5b:7b:86:af:22:57:7d:79:0c:e8:39: f6:aa:6f:11:74:7f:bd:1e:b5:7e:80:d8:f6:ae:9d:8f:73:2f: 6d:15:89:c7:66:c6:d5:d9:ef:c5:14:4c:50:17:cc:86:4d:35: 2f:39:f3:d5:74:d3:c5:56:24:16:87:69:56:cf:5f:99:01:e7: 5b:1e:32:fb:63:40:02:a8:7e:74:ae:d5:19:d0:ee:ee:34:6e: 17:02:a0:d0:6c:1d:f2:26:bf:d6:16:a6:97:82:09:fe:d2:87: 3e:c0:7c:5f:22:41:aa:26:36:b5:17:7d:8a:71:d0:7c:bd:8c: 61:ef:8b:cc:71:6f:ec:56:62:e5:84:47:08:4d:58:47:4e:67: a0:36:fe:d6:cf:7f:93:24:90:e3:33:e5:d8:a1:48:36:18:ff: aa:1b:70:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd6wyXy/6W4xU3G2Vg706PDXccGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA3MjkxODA0NTRaFw0yNjA3MzAyMDAwNTRaMDMxMTAvBgNV BAMTKDhBNjJCRTRDRTNCNDY3QzZDMDY2QTk4MURBRUI5NUREODk3NzUyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSf3W0S9OcD4gwT39jbRu1uFqJ nvD+iMGlcg3AasSVwgxjF7S1asz9VNfHxi82Q/5pQYC1q+cjUNaAw/0uI7AZxTmE EYLa0is0EbhODNgEMKj9b23fb0dwn1iAJGSpQleRuWcQCD/wjYM2UMd/nFN+xDH7 GYbva9rzVE7X/Fcglm8Hj12ca3y6UOS4WNCsWHFLsfcre9AUzwqG2haUzM7x2Nl/ UXJiEGM65aV+dgaNFFs10e7lhO7ltmq0QCppAAT1g8KXPS1mfxq9CMlZxNdKnato MMQAoeuZ0tRf5FVOjCl4JCGUgWQi/1NtZNWNqWblyVLpa5MqCOAX3GGYWh5TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUimK+TOO0Z8bAZqmB2uuV3Yl3Up8wHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnar472daRr6K G1bGfm1aop0Ygrbubcx+kUCn748DI/2nx4+RPsJT99o8TbwPJSPs+QR2hA6w1kmc 5DBboefjUbAae34S6CWUJhd+A/YibscGJrHbnsnz8pys2nsKy5OGrVt7hq8iV315 DOg59qpvEXR/vR61foDY9q6dj3MvbRWJx2bG1dnvxRRMUBfMhk01Lznz1XTTxVYk FodpVs9fmQHnWx4y+2NAAqh+dK7VGdDu7jRuFwKg0Gwd8ia/1haml4IJ/tKHPsB8 XyJBqiY2tRd9inHQfL2MYe+LzHFv7FZi5YRHCE1YR05noDb+1s9/kySQ4zPl2KFI Nhj/qhtwVg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client