$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: DBdg3rd5qUL2Tb6AO1vJU7KOjPiYehDseXel3eArA/Q= Subject key identifier: F8:FF:34:D6:F4:51:BA:36:C5:03:AF:D2:A1:5C:8C:B8:58:30:7A:0D Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 37025BA90CD6C2EDEABF4E5B1C50B3FC92478592 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: FF Signing time: Tue 28 Jul 2026 16:57:18 +0000 Manifest this update: Tue 28 Jul 2026 16:52:18 +0000 Manifest next update: Wed 29 Jul 2026 17:27:18 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: fDLnN7wpCwwc263s3s35UyxCRFBU0B5DFMIzx0KMNyc=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 3: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:02:5b:a9:0c:d6:c2:ed:ea:bf:4e:5b:1c:50:b3:fc:92:47:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Jul 28 16:52:18 2026 GMT Not After : Jul 29 17:27:18 2026 GMT Subject: CN=F8FF34D6F451BA36C503AFD2A15C8CB858307A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:a1:f0:6a:9c:de:87:bb:18:0e:ec:6b:b3: e2:77:32:fd:e8:00:65:eb:1d:fc:54:49:c4:f4:8e: ea:0a:9e:2e:9f:c8:2f:d3:01:fe:4c:02:ee:01:da: ba:4e:fc:6b:25:51:ad:ad:9e:13:6f:70:44:1b:08: e8:d0:a2:05:9d:3c:fd:81:f5:cc:bb:cb:d9:65:2c: 34:c1:07:62:bf:1b:ff:58:39:4e:75:c5:01:36:01: 12:df:35:4e:b4:fd:ab:46:96:e1:70:40:da:ed:c2: a3:00:68:d0:7a:e3:81:be:bb:06:95:3b:ec:b1:5c: 2d:55:4e:08:13:c6:33:f1:07:ec:6c:15:13:1b:08: 22:28:64:4a:73:ab:a6:d8:9e:bc:f3:dd:83:81:d7: 60:83:cb:28:ee:5e:db:c6:f0:11:51:34:2e:06:3b: e4:a7:bb:8a:8f:96:16:6f:cc:5a:66:a6:8b:28:a5: d6:21:49:ea:c9:6e:77:00:8f:bc:c8:40:df:5b:bc: 54:2f:60:71:33:19:c3:df:4e:9e:57:3e:40:c2:44: bf:24:81:c2:0c:7f:7a:02:31:d5:dc:75:9b:ba:d3: 7d:39:4b:cb:05:6c:4f:ce:9d:32:ce:d6:8c:55:ba: 31:1b:4f:b6:2a:38:57:61:08:74:65:12:ca:4e:11: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FF:34:D6:F4:51:BA:36:C5:03:AF:D2:A1:5C:8C:B8:58:30:7A:0D X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bb:ef:aa:5f:51:64:64:ce:b1:ec:12:41:7c:90:6d:f1:33: 5b:5c:ed:d0:fb:7b:40:cd:c7:72:1b:73:93:3d:68:ae:42:9d: 40:5e:d3:a3:b0:78:b6:a0:3d:e2:8d:83:30:46:49:f1:df:1c: a4:df:1c:78:88:7d:d0:1e:6a:fa:dd:8a:21:7b:54:bf:d1:1a: 25:e8:22:47:f7:d1:a0:07:19:5c:db:b2:ca:67:20:b7:bd:c5: ff:2c:ff:b7:e0:95:3a:23:c0:2f:1e:bf:53:4e:a9:94:15:24: 9b:86:86:1a:36:41:d8:9b:67:23:c5:b8:c9:c0:33:b3:29:0f: ff:48:c9:5e:b3:cc:7a:6e:30:07:35:b8:cd:d6:0a:64:77:1d: 03:47:f2:7e:7f:5e:6b:ad:bb:7a:ee:ad:63:09:1e:ec:86:a5: 97:75:28:2a:e8:0e:68:41:44:9d:e6:d6:83:69:29:21:f4:f4: b5:e0:f6:da:12:81:ef:59:64:47:32:57:8e:e8:61:15:4d:58: c6:bd:84:b3:6d:97:b8:aa:63:14:4c:9b:11:dc:9c:aa:d9:1d: 00:2f:55:d7:d7:e8:b1:3a:ef:cb:de:ac:5a:07:5a:dc:07:f7: e1:92:95:97:30:bf:ca:16:e0:a1:76:d2:ea:b8:8f:80:91:e6: 51:d8:19:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNwJbqQzWwu3qv05bHFCz/JJHhZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA3MjgxNjUyMThaFw0yNjA3MjkxNzI3MThaMDMxMTAvBgNV BAMTKEY4RkYzNEQ2RjQ1MUJBMzZDNTAzQUZEMkExNUM4Q0I4NTgzMDdBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE36Hwapzeh7sYDuxrs+J3Mv3o AGXrHfxUScT0juoKni6fyC/TAf5MAu4B2rpO/GslUa2tnhNvcEQbCOjQogWdPP2B 9cy7y9llLDTBB2K/G/9YOU51xQE2ARLfNU60/atGluFwQNrtwqMAaNB644G+uwaV O+yxXC1VTggTxjPxB+xsFRMbCCIoZEpzq6bYnrzz3YOB12CDyyjuXtvG8BFRNC4G O+Snu4qPlhZvzFpmposopdYhSerJbncAj7zIQN9bvFQvYHEzGcPfTp5XPkDCRL8k gcIMf3oCMdXcdZu60305S8sFbE/OnTLO1oxVujEbT7YqOFdhCHRlEspOEX+/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+P801vRRujbFA6/SoVyMuFgweg0wHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbvvql9RZGTO sewSQXyQbfEzW1zt0Pt7QM3Hchtzkz1orkKdQF7To7B4tqA94o2DMEZJ8d8cpN8c eIh90B5q+t2KIXtUv9EaJegiR/fRoAcZXNuyymcgt73F/yz/t+CVOiPALx6/U06p lBUkm4aGGjZB2JtnI8W4ycAzsykP/0jJXrPMem4wBzW4zdYKZHcdA0fyfn9ea627 eu6tYwke7Iall3UoKugOaEFEnebWg2kpIfT0teD22hKB71lkRzJXjuhhFU1Yxr2E s22XuKpjFEybEdycqtkdAC9V19fosTrvy96sWgda3Af34ZKVlzC/yhbgoXbS6riP gJHmUdgZEw== -----END CERTIFICATE-----Generated at Wed Jul 29 06:49:47 2026 by rpki-client