$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: UqfmgUwR7/O6wTLaDCtesDCJ1pAlu4HczD9ym9RgfFg= Subject key identifier: 1A:F8:92:11:D7:6F:CC:3B:10:34:9D:BC:13:67:0E:F4:DF:19:15:77 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 175B2DAABCA6A90946A1A3E92C546AA8AD85CFB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 012A Signing time: Tue 28 Jul 2026 10:31:42 +0000 Manifest this update: Tue 28 Jul 2026 10:26:42 +0000 Manifest next update: Wed 29 Jul 2026 11:39:42 +0000 Files and hashes: 1: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 3: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 4: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: BWb8a639t/1TJ4ZawKW1iOH/csNBO0eSMds2g1PIlcY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:2d:aa:bc:a6:a9:09:46:a1:a3:e9:2c:54:6a:a8:ad:85:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Jul 28 10:26:42 2026 GMT Not After : Jul 29 11:39:42 2026 GMT Subject: CN=1AF89211D76FCC3B10349DBC13670EF4DF191577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:d4:b3:96:a9:65:d5:7b:f8:4d:8d:52:37: 97:05:59:c0:49:a3:eb:75:ac:46:9d:dc:36:6a:a4: 0a:dc:a0:db:da:00:2b:0a:36:77:f3:f3:d5:d2:b9: 50:d4:d1:70:51:b8:d8:df:81:d5:ac:c6:67:fb:f1: b6:3e:28:3c:3d:68:3c:b3:2d:4f:79:fa:df:fc:e0: b0:6e:ff:a3:56:a6:58:a7:8f:e9:4f:ea:3e:28:6b: 44:48:16:12:ca:82:dd:bb:46:bd:51:6e:6a:0f:23: d1:81:18:5e:e4:ec:a6:f2:92:f3:80:45:29:59:ff: 3d:13:5f:83:8d:3b:1d:5a:e7:72:c9:c7:de:98:4a: a3:53:20:09:bf:b0:9e:9c:e2:a8:74:c6:ac:ef:88: bf:af:13:47:69:cf:2c:ce:0f:17:9c:88:15:dd:5e: 98:bc:06:d6:50:aa:32:f4:7e:9e:f2:ed:ae:75:b5: 27:bc:26:fa:e1:03:5f:46:c4:cc:7b:19:ed:45:fc: 8c:85:e7:c4:d3:e7:a1:44:f5:3c:0d:07:2e:5d:f7: 5c:22:a5:5e:45:5f:43:c4:91:41:7d:73:43:04:7a: 29:3a:07:92:2c:8d:5c:f2:bd:ce:ad:71:5a:44:7b: e8:88:f9:e0:61:d1:87:88:23:10:ff:cc:b6:74:10: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:92:11:D7:6F:CC:3B:10:34:9D:BC:13:67:0E:F4:DF:19:15:77 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8e:ef:22:e2:f8:aa:44:16:42:24:6d:8e:f6:c3:43:50:94: b9:b0:a5:a1:bd:81:ea:f6:01:2d:40:fc:a9:12:c3:b3:9c:ff: ee:71:16:14:12:d8:60:c1:6a:16:2c:c5:86:7f:71:66:17:47: 1a:1e:29:10:42:b3:f6:5e:ad:f5:d6:fa:bc:f5:65:67:ab:c8: 96:59:36:79:6e:d5:9b:ff:37:d1:46:08:27:fb:eb:1b:ad:48: 53:68:3e:75:40:02:ad:5d:97:ff:44:4b:ca:92:b5:71:f6:a9: f4:46:78:a5:d5:3c:07:eb:c4:23:5e:7a:52:8e:92:e8:96:d1: 3d:2d:83:f4:bc:0b:f3:db:c6:5d:89:53:3f:b4:77:b9:aa:68: ea:88:4f:89:29:39:eb:dc:9d:03:4b:fa:f6:65:23:6f:8a:2d: b3:04:e2:9b:cc:4b:6e:d7:c4:61:d4:37:a2:87:5a:e1:04:7e: 73:f2:4b:53:f5:82:63:88:3c:aa:63:e6:fd:66:3f:35:fb:a5: 35:16:19:7b:f4:68:e1:d3:b1:10:a9:e5:c0:3c:a6:de:de:65: ba:2d:78:d6:30:86:1a:e2:4c:30:da:2f:63:df:44:ed:cb:db: 96:df:87:51:99:4f:5b:4b:7a:25:fe:46:1a:1e:96:60:f1:d2: 34:d7:ac:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF1stqrymqQlGoaPpLFRqqK2Fz7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA3MjgxMDI2NDJaFw0yNjA3MjkxMTM5NDJaMDMxMTAvBgNV BAMTKDFBRjg5MjExRDc2RkNDM0IxMDM0OURCQzEzNjcwRUY0REYxOTE1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12tSzlqll1Xv4TY1SN5cFWcBJ o+t1rEad3DZqpArcoNvaACsKNnfz89XSuVDU0XBRuNjfgdWsxmf78bY+KDw9aDyz LU95+t/84LBu/6NWplinj+lP6j4oa0RIFhLKgt27Rr1RbmoPI9GBGF7k7KbykvOA RSlZ/z0TX4ONOx1a53LJx96YSqNTIAm/sJ6c4qh0xqzviL+vE0dpzyzODxeciBXd Xpi8BtZQqjL0fp7y7a51tSe8JvrhA19GxMx7Ge1F/IyF58TT56FE9TwNBy5d91wi pV5FX0PEkUF9c0MEeik6B5IsjVzyvc6tcVpEe+iI+eBh0YeIIxD/zLZ0EIt7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGviSEddvzDsQNJ28E2cO9N8ZFXcwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS47vIuL4qkQW QiRtjvbDQ1CUubClob2B6vYBLUD8qRLDs5z/7nEWFBLYYMFqFizFhn9xZhdHGh4p EEKz9l6t9db6vPVlZ6vIllk2eW7Vm/830UYIJ/vrG61IU2g+dUACrV2X/0RLypK1 cfap9EZ4pdU8B+vEI156Uo6S6JbRPS2D9LwL89vGXYlTP7R3uapo6ohPiSk569yd A0v69mUjb4otswTim8xLbtfEYdQ3ooda4QR+c/JLU/WCY4g8qmPm/WY/NfulNRYZ e/Ro4dOxEKnlwDym3t5lui141jCGGuJMMNovY99E7cvblt+HUZlPW0t6Jf5GGh6W YPHSNNesyg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:50:59 2026 by rpki-client