$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: NkVwtdYAQ/x4cpLLkJwEpF3YrLSI5XN+fGrPa5Eurf4= Subject key identifier: BA:FE:6A:4B:E4:C0:BE:83:36:FF:CD:55:C0:4C:81:57:BF:40:96:73 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 6557C5DCD9B84958B11265FDC8ACF67EDF211A32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: A8 Signing time: Tue 28 Jul 2026 18:02:26 +0000 Manifest this update: Tue 28 Jul 2026 17:57:26 +0000 Manifest next update: Wed 29 Jul 2026 18:24:26 +0000 Files and hashes: 1: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 2: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: R+HmOEKB/XD1nG3+bLx/ssfGJwFg2wdn5qhnIOMtFLQ=) 3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 4: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:57:c5:dc:d9:b8:49:58:b1:12:65:fd:c8:ac:f6:7e:df:21:1a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Jul 28 17:57:26 2026 GMT Not After : Jul 29 18:24:26 2026 GMT Subject: CN=BAFE6A4BE4C0BE8336FFCD55C04C8157BF409673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:63:fb:45:d0:0a:2c:98:7c:a2:be:79:d2: 70:96:6c:0b:7f:23:53:de:0e:79:6f:58:a6:b4:a5: 2d:42:1c:cb:d4:5d:05:90:e8:85:fe:b9:9d:4c:94: 07:67:e2:8b:49:23:79:62:e3:60:02:da:e3:3e:c4: 07:59:5b:b6:6b:2d:c0:5a:5a:b8:78:7b:8c:d6:a3: 58:e2:0a:7f:12:eb:e4:aa:8a:e1:bc:81:9d:db:49: b6:d9:de:64:89:f9:78:34:74:13:8a:1d:e4:77:61: c4:a0:50:ef:36:75:7e:67:53:a7:fc:a0:47:e6:12: b4:01:35:45:2c:0f:3d:84:4a:e5:56:fb:6b:06:80: 98:ad:d8:7a:10:e3:03:99:fd:3a:1d:e9:f6:d4:fc: 42:80:9d:9a:da:32:b1:aa:b7:9a:db:18:0f:60:b5: f0:64:d7:3f:73:f1:53:93:0c:b9:46:de:92:e5:df: cd:92:ab:c3:0c:a0:a6:82:09:99:7b:f9:f4:ef:56: 8e:70:ef:c7:2a:72:31:ed:78:70:b3:c1:9a:77:13: 6f:94:f8:46:06:72:c8:c1:e3:3f:fe:5f:60:91:62: af:24:fe:e1:33:a9:d3:cb:d7:09:a5:72:51:3f:89: d2:9d:61:f0:71:37:f7:04:df:d3:8b:64:83:f0:59: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:6A:4B:E4:C0:BE:83:36:FF:CD:55:C0:4C:81:57:BF:40:96:73 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5d:e2:a4:e9:9e:d9:de:22:3d:c5:e9:ce:ba:c9:6b:78:c1: 96:c8:9b:02:e1:2f:fc:59:28:ce:a7:55:2f:2b:a8:4b:9a:0f: 5e:79:1f:c2:2c:14:3f:59:40:18:67:bc:76:7b:70:08:30:82: f9:e7:20:b1:07:c3:69:fd:61:1d:47:6a:39:d1:50:d5:3c:39: 3c:05:6d:9e:d5:30:19:ca:7f:e2:87:ec:bc:b9:49:68:33:c4: d4:89:0f:e2:d3:c8:f8:c1:86:a9:99:df:f5:fc:b6:b6:f2:ec: 15:1c:d0:1d:34:c2:35:8c:a3:41:78:89:29:17:f7:08:d0:42: a5:8b:6b:95:e7:ca:0c:ff:4b:e7:1e:6b:04:29:f3:75:58:f7: b6:6c:92:a2:69:c9:68:81:c9:42:5e:e8:ba:ca:8f:d9:bc:2c: a2:f6:40:c2:81:23:5d:85:05:5c:2d:b3:2d:78:9b:9d:34:8d: 97:7a:6a:03:b9:2d:00:d3:bb:50:e8:1e:85:a3:b0:4a:89:a8: 5d:0e:11:9f:6a:75:c5:35:40:f0:fc:1f:09:27:75:c0:19:4f: 46:96:02:5b:34:d5:18:da:53:ba:7a:7b:15:63:b6:fc:a6:0e: 5d:1c:9d:5b:80:0f:ce:3f:5e:68:5c:5c:df:f2:84:fe:d0:d6: 34:36:a0:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZVfF3Nm4SVixEmX9yKz2ft8hGjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA3MjgxNzU3MjZaFw0yNjA3MjkxODI0MjZaMDMxMTAvBgNV BAMTKEJBRkU2QTRCRTRDMEJFODMzNkZGQ0Q1NUMwNEM4MTU3QkY0MDk2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTiGP7RdAKLJh8or550nCWbAt/ I1PeDnlvWKa0pS1CHMvUXQWQ6IX+uZ1MlAdn4otJI3li42AC2uM+xAdZW7ZrLcBa Wrh4e4zWo1jiCn8S6+SqiuG8gZ3bSbbZ3mSJ+Xg0dBOKHeR3YcSgUO82dX5nU6f8 oEfmErQBNUUsDz2ESuVW+2sGgJit2HoQ4wOZ/Tod6fbU/EKAnZraMrGqt5rbGA9g tfBk1z9z8VOTDLlG3pLl382Sq8MMoKaCCZl7+fTvVo5w78cqcjHteHCzwZp3E2+U +EYGcsjB4z/+X2CRYq8k/uEzqdPL1wmlclE/idKdYfBxN/cE39OLZIPwWeJxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuv5qS+TAvoM2/81VwEyBV79AlnMwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATV3ipOme2d4i PcXpzrrJa3jBlsibAuEv/FkozqdVLyuoS5oPXnkfwiwUP1lAGGe8dntwCDCC+ecg sQfDaf1hHUdqOdFQ1Tw5PAVtntUwGcp/4ofsvLlJaDPE1IkP4tPI+MGGqZnf9fy2 tvLsFRzQHTTCNYyjQXiJKRf3CNBCpYtrlefKDP9L5x5rBCnzdVj3tmySomnJaIHJ Ql7ousqP2bwsovZAwoEjXYUFXC2zLXibnTSNl3pqA7ktANO7UOgehaOwSomoXQ4R n2p1xTVA8PwfCSd1wBlPRpYCWzTVGNpTunp7FWO2/KYOXRydW4APzj9eaFxc3/KE /tDWNDagUg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:11 2026 by rpki-client