$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: ZquV0c5e3si1da1YZO1ilnrCZ6ogLQDbKzUljtgiYWA= Subject key identifier: 8D:54:6B:F8:F6:6E:9F:17:33:C9:EA:CA:60:A0:2C:0F:1E:AE:A7:01 Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 389801C4319BD828AD9D82E91CACE6CE6494FF10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 07:48:49 +0000 Manifest this update: Wed 29 Jul 2026 07:43:49 +0000 Manifest next update: Thu 30 Jul 2026 10:55:49 +0000 Files and hashes: 1: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: hNZbFcvkPLGzZymW5XAS6WyZX5jhxVE53uW0xqqV9Bk=) 2: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) 3: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:98:01:c4:31:9b:d8:28:ad:9d:82:e9:1c:ac:e6:ce:64:94:ff:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Jul 29 07:43:49 2026 GMT Not After : Jul 30 10:55:49 2026 GMT Subject: CN=8D546BF8F66E9F1733C9EACA60A02C0F1EAEA701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:14:00:5a:c5:48:d2:af:48:e7:3f:d2:3e: 0c:7b:cf:c5:39:8d:ec:d7:6e:84:a3:05:17:d5:ca: 70:98:53:59:93:ed:98:19:23:d9:04:55:25:36:45: 6f:a7:47:ae:cc:69:45:1d:92:2b:3a:9d:bb:64:8a: cd:80:80:10:fc:c9:a1:96:32:99:00:70:59:f6:a1: fe:cc:2f:a3:da:da:aa:64:54:73:1f:aa:7e:97:63: 03:0a:24:cc:ac:5c:8b:37:14:1d:2c:0e:63:86:87: 08:6d:0d:d1:23:40:2c:70:e8:c9:a9:6f:91:c0:53: 52:85:ab:ad:c7:c5:76:61:f3:55:b7:5c:c8:1f:f6: 64:df:70:ce:84:4b:13:1d:72:9a:2b:88:3a:79:d9: 9f:b8:95:d9:8c:cc:09:d3:c5:9e:28:4e:7e:e9:40: 74:74:0b:aa:4b:eb:9f:52:f1:ba:47:c3:41:64:ca: 46:bb:07:5a:af:a7:bc:0d:1f:ba:26:9a:50:49:bc: e9:0e:b8:6b:4b:1b:f4:24:f9:5a:1d:d2:a5:13:aa: bd:53:39:c1:f7:67:c3:cc:c3:00:4d:3a:75:65:ad: ea:d8:78:f9:41:42:59:23:cc:f8:27:7c:eb:5b:af: 2c:09:23:0e:35:5d:ef:24:e5:55:a2:33:34:28:f1: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:6B:F8:F6:6E:9F:17:33:C9:EA:CA:60:A0:2C:0F:1E:AE:A7:01 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:94:1d:eb:70:34:84:37:37:4b:11:d4:f3:e5:a5:dc:7c:2f: 45:a1:40:13:bb:03:25:e5:26:7c:2e:3c:91:6a:1f:ec:df:75: a5:6e:f5:c8:f3:ff:ed:53:44:f5:54:1b:a9:60:1d:b6:cd:f9: f0:95:42:c0:fe:9b:68:40:2d:6e:86:9c:9d:fd:63:33:4a:b1: a3:c7:09:6c:8e:05:b5:64:10:c4:98:55:c1:36:60:2b:3a:d7: c5:43:aa:1a:c0:3b:2a:5d:c1:0e:9a:d1:75:ab:ce:f6:f0:2e: 1c:ff:80:40:fc:46:73:5c:89:23:89:6b:c7:68:5d:f2:5d:f9: f2:12:b6:42:9f:39:03:2b:a3:de:97:e5:00:79:48:46:23:96: 03:93:ae:d7:85:fe:94:42:4c:75:77:41:ad:70:62:b4:85:44: 27:e0:94:74:83:a6:fa:96:89:0f:f9:0a:25:e5:5c:88:92:ef: 8f:1f:84:b3:4e:08:22:5b:6d:b2:65:c4:29:38:eb:f6:f6:8e: 39:73:68:a6:29:69:66:7d:8f:eb:36:0f:1f:4d:11:51:96:3f: 2c:92:00:22:d5:4a:a5:06:e6:47:e7:a5:c4:6f:6c:f7:8b:71: e8:9a:99:15:c9:01:e5:05:8f:c0:a0:f9:93:1d:44:3b:d1:a4: 5d:f9:13:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOJgBxDGb2CitnYLpHKzmzmSU/xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjA3MjkwNzQzNDlaFw0yNjA3MzAxMDU1NDlaMDMxMTAvBgNV BAMTKDhENTQ2QkY4RjY2RTlGMTczM0M5RUFDQTYwQTAyQzBGMUVBRUE3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwxQAWsVI0q9I5z/SPgx7z8U5 jezXboSjBRfVynCYU1mT7ZgZI9kEVSU2RW+nR67MaUUdkis6nbtkis2AgBD8yaGW MpkAcFn2of7ML6Pa2qpkVHMfqn6XYwMKJMysXIs3FB0sDmOGhwhtDdEjQCxw6Mmp b5HAU1KFq63HxXZh81W3XMgf9mTfcM6ESxMdcporiDp52Z+4ldmMzAnTxZ4oTn7p QHR0C6pL659S8bpHw0Fkyka7B1qvp7wNH7ommlBJvOkOuGtLG/Qk+Vod0qUTqr1T OcH3Z8PMwwBNOnVlrerYePlBQlkjzPgnfOtbrywJIw41Xe8k5VWiMzQo8aBzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjVRr+PZunxczyerKYKAsDx6upwEwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5Qd63A0hDc3 SxHU8+Wl3HwvRaFAE7sDJeUmfC48kWof7N91pW71yPP/7VNE9VQbqWAdts358JVC wP6baEAtboacnf1jM0qxo8cJbI4FtWQQxJhVwTZgKzrXxUOqGsA7Kl3BDprRdavO 9vAuHP+AQPxGc1yJI4lrx2hd8l358hK2Qp85Ayuj3pflAHlIRiOWA5Ou14X+lEJM dXdBrXBitIVEJ+CUdIOm+paJD/kKJeVciJLvjx+Es04IIlttsmXEKTjr9vaOOXNo pilpZn2P6zYPH00RUZY/LJIAItVKpQbmR+elxG9s94tx6JqZFckB5QWPwKD5kx1E O9GkXfkTNw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:53 2026 by rpki-client