$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: 2bi6mnNycVmSetP1zfP+JC+8KWbp2MjQYStCTBHcCjA= Subject key identifier: 7F:F5:BE:C6:48:4B:36:E2:94:37:A5:E8:CC:74:7D:9B:33:E9:B7:13 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 29FDAD52B3AA1EB78D659DE35A5FAF04F0AA033A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: C8 Signing time: Fri 12 Jun 2026 15:35:23 +0000 Manifest this update: Fri 12 Jun 2026 15:30:23 +0000 Manifest next update: Sat 13 Jun 2026 17:36:23 +0000 Files and hashes: 1: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: zQbAHlHuIe8BEk4YP6clJFxPzXNhOXl7x0TJrCVd2bk=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 3: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 4: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fd:ad:52:b3:aa:1e:b7:8d:65:9d:e3:5a:5f:af:04:f0:aa:03:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Jun 12 15:30:23 2026 GMT Not After : Jun 13 17:36:23 2026 GMT Subject: CN=7FF5BEC6484B36E29437A5E8CC747D9B33E9B713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:3f:ae:f6:c0:2d:f4:1e:7a:6b:b4:c8:0c: 59:d2:80:4d:db:3d:45:a4:7b:1b:b6:19:f9:6d:17: 4d:45:45:43:28:7d:bc:68:29:cb:2a:8f:89:8e:9f: 9b:21:c1:2c:04:b7:62:22:bd:4d:a0:df:e8:5e:2e: 29:62:8e:33:1b:98:3a:c9:ff:f3:b8:18:82:0b:40: 6e:8a:c2:3e:e3:87:11:6e:8e:ab:15:1e:64:56:e2: 91:95:9f:a6:f9:16:00:c4:7d:0c:d1:4b:30:ed:e2: 00:d2:81:04:20:91:a2:c1:7e:ea:5a:09:02:9b:1d: d8:17:34:b8:0e:b8:f6:5b:07:44:d1:ab:57:cd:be: d2:15:0a:1b:a4:76:df:25:6c:4f:80:fb:50:58:37: f2:68:71:5d:d0:c0:96:07:86:61:82:81:2d:78:b6: d3:1f:b9:05:ca:d1:8b:60:94:47:2c:f5:79:61:eb: 78:84:5e:bd:b3:1f:0f:67:ff:ec:4b:3a:c6:56:a1: 91:b4:65:4d:a3:99:c9:b2:86:91:42:cb:8b:59:87: f3:f3:4f:dd:20:88:88:07:09:93:c1:72:22:9e:56: 27:61:10:ed:19:b1:64:74:79:60:e5:21:be:0a:27: 8f:7e:b6:1b:a9:5f:45:a5:3f:af:03:d7:b8:b8:70: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:BE:C6:48:4B:36:E2:94:37:A5:E8:CC:74:7D:9B:33:E9:B7:13 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5c:23:6a:49:96:d2:22:58:4f:2f:e3:08:81:70:1d:bf:e4: 42:36:3c:b8:70:4b:b6:3f:34:14:76:70:85:d6:8f:b2:fd:65: 9f:3a:9d:48:a9:c8:ed:78:70:dc:2a:d4:03:8c:40:d0:ac:83: 6a:2e:22:f7:11:92:55:03:67:eb:6a:f4:44:f9:fc:a6:d7:75: 85:50:0c:bd:a4:7c:01:c1:29:55:44:23:cd:73:17:eb:fe:27: 0e:08:43:76:f7:71:0e:6f:3f:64:97:4a:27:2e:52:cf:f5:05: ba:12:f8:69:f6:5a:1b:b7:3b:20:64:b1:33:9b:df:02:e9:b7: 1b:33:0b:7f:47:f2:f9:a4:38:49:05:92:d2:f3:06:f5:0e:50: e9:ca:2a:7e:1f:51:7a:0f:a7:5e:e8:f5:af:9e:81:4d:11:73: 57:7c:f3:70:ee:1d:00:e1:71:19:01:e6:1d:6a:7f:c4:51:65: 31:ae:a8:cb:87:1a:73:74:f8:9f:4e:2d:46:cc:f8:7a:27:ab: 7b:42:bd:b0:a9:1c:c1:6d:11:6d:84:5d:87:e0:80:f7:49:aa: ab:64:a9:d8:8c:5c:b1:77:85:df:ce:7f:28:fa:3d:9d:0f:90: d4:a6:dd:cc:18:28:04:e2:b7:13:4a:0b:20:cd:4b:1f:1f:7d: 1e:7d:5b:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKf2tUrOqHreNZZ3jWl+vBPCqAzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA2MTIxNTMwMjNaFw0yNjA2MTMxNzM2MjNaMDMxMTAvBgNV BAMTKDdGRjVCRUM2NDg0QjM2RTI5NDM3QTVFOENDNzQ3RDlCMzNFOUI3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdT+u9sAt9B56a7TIDFnSgE3b PUWkexu2GfltF01FRUMofbxoKcsqj4mOn5shwSwEt2IivU2g3+heLilijjMbmDrJ //O4GIILQG6Kwj7jhxFujqsVHmRW4pGVn6b5FgDEfQzRSzDt4gDSgQQgkaLBfupa CQKbHdgXNLgOuPZbB0TRq1fNvtIVChukdt8lbE+A+1BYN/JocV3QwJYHhmGCgS14 ttMfuQXK0YtglEcs9Xlh63iEXr2zHw9n/+xLOsZWoZG0ZU2jmcmyhpFCy4tZh/Pz T90giIgHCZPBciKeVidhEO0ZsWR0eWDlIb4KJ49+thupX0WlP68D17i4cB3RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf/W+xkhLNuKUN6XozHR9mzPptxMwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVwjakmW0iJY Ty/jCIFwHb/kQjY8uHBLtj80FHZwhdaPsv1lnzqdSKnI7Xhw3CrUA4xA0KyDai4i 9xGSVQNn62r0RPn8ptd1hVAMvaR8AcEpVUQjzXMX6/4nDghDdvdxDm8/ZJdKJy5S z/UFuhL4afZaG7c7IGSxM5vfAum3GzMLf0fy+aQ4SQWS0vMG9Q5Q6coqfh9Reg+n Xuj1r56BTRFzV3zzcO4dAOFxGQHmHWp/xFFlMa6oy4cac3T4n04tRsz4eiere0K9 sKkcwW0RbYRdh+CA90mqq2Sp2IxcsXeF385/KPo9nQ+Q1KbdzBgoBOK3E0oLIM1L Hx99Hn1bcg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:56:14 2026 by rpki-client