$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: fmbUScfxqmSauQQxIYqKf9Z92vladTSYxwDELF6GCO8= Subject key identifier: 4F:C5:EB:E8:F2:D7:3A:4C:12:E0:D8:83:5B:0C:D0:0F:72:4D:3D:1D Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 0416E8D46F43816FA868383AC733F505744AF582 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 0101 Signing time: Thu 30 Jul 2026 02:05:51 +0000 Manifest this update: Thu 30 Jul 2026 02:00:51 +0000 Manifest next update: Fri 31 Jul 2026 02:57:51 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: QWLJCfqGVH4Vmu3WOzh8+DOVb+EvmniNJP4qs0NsRAg=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:16:e8:d4:6f:43:81:6f:a8:68:38:3a:c7:33:f5:05:74:4a:f5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jul 30 02:00:51 2026 GMT Not After : Jul 31 02:57:51 2026 GMT Subject: CN=4FC5EBE8F2D73A4C12E0D8835B0CD00F724D3D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:9a:1b:f1:9d:c4:c2:b8:ff:90:8b:c7:54: 81:6c:bb:76:2f:22:2f:a7:10:51:b4:64:57:8d:68: 94:d9:ca:ea:da:84:0b:c4:cf:66:57:16:44:51:8d: 53:d0:ba:3d:e2:26:c3:61:1e:86:db:de:96:bc:93: a5:bb:3d:14:df:75:c3:88:21:28:4f:d5:de:39:3a: ca:7f:4c:e7:4f:ba:82:ac:54:6f:30:3e:a6:70:bb: 4d:b4:32:70:b9:1a:f2:87:04:76:5b:42:3d:a2:42: 38:bc:17:cf:8b:ab:28:b4:0f:9e:67:80:87:6d:8a: f0:7f:a5:e9:90:2e:f8:a3:85:95:66:ea:3e:86:ad: af:80:a1:e3:68:b3:13:19:f5:25:82:c1:42:92:b1: 8a:43:c3:50:75:ad:a1:9c:bd:de:5b:a8:13:94:2c: f5:31:af:59:69:46:62:10:9b:06:07:47:77:b6:4b: 1d:31:ce:fe:f2:7f:d9:51:59:86:c2:b8:44:3d:c2: 1c:c9:02:56:9a:a4:21:63:6f:c3:5e:b8:79:12:87: 96:72:6c:08:d1:a2:7a:5d:cd:a4:4c:1d:98:e7:70: 19:78:f2:d1:03:9b:50:a9:38:bf:20:e4:66:ca:ab: 6b:bf:2c:d5:cc:5f:fd:6b:3d:56:36:d6:ec:c1:a8: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C5:EB:E8:F2:D7:3A:4C:12:E0:D8:83:5B:0C:D0:0F:72:4D:3D:1D X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:42:23:9c:6d:fc:92:01:d1:41:61:7d:e6:9d:90:d5:44:70: cc:d4:99:e9:b9:8c:85:b1:28:a2:b5:11:62:41:f0:77:d1:14: 12:2e:55:0d:d8:72:25:fe:46:8e:ee:9d:e2:84:f7:79:85:8c: 66:88:f1:9e:b9:25:26:0b:94:3f:32:f6:ce:e3:84:ea:82:03: 3e:33:2b:1c:73:2b:46:6d:09:4e:9d:01:a6:42:76:1b:df:d8: b9:c4:f3:87:31:9e:79:b8:45:62:54:cf:c6:d2:7b:50:4b:dc: cf:6d:e7:32:87:ed:b1:c7:48:cc:bf:ab:ee:9e:75:50:8e:9c: d6:c6:33:1b:fa:54:bf:cc:e0:7b:46:24:b2:ad:4b:0e:31:c8: ff:88:72:c1:ea:64:3d:ed:81:a8:50:aa:f6:08:fc:13:bb:f1: df:da:51:86:f5:30:2f:13:28:d9:d7:6a:d4:b8:c5:eb:0a:69: 49:b1:00:fc:ef:8d:6a:fe:d8:86:ca:8f:ad:7a:56:ce:99:72: 64:8c:28:fe:6e:08:b5:46:6d:d5:87:30:19:54:b9:ad:57:e0: 00:7a:b8:ff:2e:1e:c8:11:47:95:3f:b6:4f:35:24:3c:32:93: c1:77:a2:02:1e:9f:7a:78:6a:ea:51:a8:63:95:c0:3b:88:2b: 7b:ee:11:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBBbo1G9DgW+oaDg6xzP1BXRK9YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA3MzAwMjAwNTFaFw0yNjA3MzEwMjU3NTFaMDMxMTAvBgNV BAMTKDRGQzVFQkU4RjJENzNBNEMxMkUwRDg4MzVCMENEMDBGNzI0RDNEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATZob8Z3Ewrj/kIvHVIFsu3Yv Ii+nEFG0ZFeNaJTZyurahAvEz2ZXFkRRjVPQuj3iJsNhHobb3pa8k6W7PRTfdcOI IShP1d45Osp/TOdPuoKsVG8wPqZwu020MnC5GvKHBHZbQj2iQji8F8+Lqyi0D55n gIdtivB/pemQLvijhZVm6j6Gra+AoeNosxMZ9SWCwUKSsYpDw1B1raGcvd5bqBOU LPUxr1lpRmIQmwYHR3e2Sx0xzv7yf9lRWYbCuEQ9whzJAlaapCFjb8NeuHkSh5Zy bAjRonpdzaRMHZjncBl48tEDm1CpOL8g5GbKq2u/LNXMX/1rPVY21uzBqLmLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT8Xr6PLXOkwS4NiDWwzQD3JNPR0wHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kIjnG38kgHR QWF95p2Q1URwzNSZ6bmMhbEoorURYkHwd9EUEi5VDdhyJf5Gju6d4oT3eYWMZojx nrklJguUPzL2zuOE6oIDPjMrHHMrRm0JTp0BpkJ2G9/YucTzhzGeebhFYlTPxtJ7 UEvcz23nMoftscdIzL+r7p51UI6c1sYzG/pUv8zge0Yksq1LDjHI/4hywepkPe2B qFCq9gj8E7vx39pRhvUwLxMo2ddq1LjF6wppSbEA/O+Nav7YhsqPrXpWzplyZIwo /m4ItUZt1YcwGVS5rVfgAHq4/y4eyBFHlT+2TzUkPDKTwXeiAh6fenhq6lGoY5XA O4gre+4RiQ== -----END CERTIFICATE-----Generated at Thu Jul 30 03:09:27 2026 by rpki-client