$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: ZTnbuHUeY13zS+QiBZD1PtkPe3zKpvWzrw6a2/Lb2Hs= Subject key identifier: 24:51:A3:E5:CA:B0:A3:45:3C:F3:8E:74:BD:DC:6D:81:D9:4F:85:F6 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 5C977574BFA773E1E9A1D18F505C89B2A0758B52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 9A Signing time: Tue 28 Jul 2026 17:27:21 +0000 Manifest this update: Tue 28 Jul 2026 17:22:21 +0000 Manifest next update: Wed 29 Jul 2026 18:22:21 +0000 Files and hashes: 1: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 2: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 3: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 4: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: wfcei5aTurdgp9I59aCuldg0Z8B3quSvmM7OyKS+EKQ=) 5: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 6: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 7: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:97:75:74:bf:a7:73:e1:e9:a1:d1:8f:50:5c:89:b2:a0:75:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Jul 28 17:22:21 2026 GMT Not After : Jul 29 18:22:21 2026 GMT Subject: CN=2451A3E5CAB0A3453CF38E74BDDC6D81D94F85F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:f0:fe:77:7c:8a:40:2b:c4:74:19:12:a9: 41:1e:5e:25:df:c6:ff:55:9e:62:45:18:96:3c:a0: 6e:53:b9:6f:e5:32:e6:34:b9:7f:1b:06:6a:b2:ff: 8c:a9:89:b7:6a:3c:7f:6a:5b:48:5e:3d:a0:ce:b4: aa:ff:45:e3:34:fe:94:31:b7:64:8e:ca:92:d3:6f: 15:81:83:e6:04:b6:2b:95:37:fa:f4:d1:64:94:26: c8:3c:e0:a5:4f:40:ba:ec:6e:9f:c6:8a:b0:b3:2a: 5b:bd:2b:40:16:2d:99:80:af:f8:12:05:2c:74:a7: cf:b3:f4:4e:c3:3c:33:e9:81:ba:12:83:7e:b2:bb: d1:4e:a0:16:f0:95:f0:dc:2b:dc:be:83:83:c4:8e: bc:37:f2:20:ae:92:4d:f9:07:5e:7c:ab:bc:10:04: 1c:0d:bb:99:e0:f6:b8:41:49:65:8e:80:b9:14:2a: 51:89:30:fe:28:15:f7:0d:7b:e6:2f:39:1f:ff:40: 0c:02:34:20:77:3f:90:91:a8:64:c5:09:1b:90:8b: 91:6c:3b:5d:79:eb:c2:9c:85:51:9b:eb:64:92:ee: b9:e4:17:47:22:29:16:a0:8f:04:33:0a:a5:b1:75: ae:47:b7:2d:58:fc:56:3b:7c:8b:99:6d:57:a2:17: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:A3:E5:CA:B0:A3:45:3C:F3:8E:74:BD:DC:6D:81:D9:4F:85:F6 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:45:08:ae:3f:ad:f0:d3:38:dc:38:6f:6e:cb:0e:7d:5b:e3: 25:4a:10:42:52:3f:0c:c9:37:b9:79:fb:5e:20:50:a2:f9:d6: 70:20:27:33:b0:6a:da:8f:c0:25:2a:d9:d2:ff:a0:8c:35:c6: 34:64:2d:4d:e2:1e:e2:6d:43:17:06:41:53:c3:67:88:2e:5d: 59:83:8e:4e:46:bc:02:9f:f3:04:ce:49:20:24:2e:1b:c6:cf: c0:f9:02:c0:02:7c:c3:14:ae:2a:76:dc:6a:e0:cf:97:8b:d8: c9:fd:2a:e4:88:96:db:25:fc:18:df:4b:42:7f:f4:51:68:40: 6d:21:25:d1:ea:60:59:88:16:08:f8:c2:a0:cb:9f:06:97:09: c9:70:f1:15:de:54:89:d9:73:9a:e3:40:ba:b2:12:f4:53:af: d1:ce:47:5f:ea:1d:f1:3e:2f:6c:15:1a:03:cc:41:d0:46:e8: b5:8f:be:f7:13:cb:3c:25:cd:95:d9:4d:5a:cb:6c:c0:8c:fe: 4f:74:b2:c7:4d:38:bc:84:cd:ad:98:3e:76:3f:4c:25:ae:6c: a8:ca:51:de:76:38:e7:ff:98:91:ec:ac:9b:76:ef:af:19:40: bd:f3:bf:b1:29:e7:e3:b4:48:d7:45:00:0b:6d:da:ee:f6:f7: 4c:cf:ff:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXJd1dL+nc+HpodGPUFyJsqB1i1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA3MjgxNzIyMjFaFw0yNjA3MjkxODIyMjFaMDMxMTAvBgNV BAMTKDI0NTFBM0U1Q0FCMEEzNDUzQ0YzOEU3NEJEREM2RDgxRDk0Rjg1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O/D+d3yKQCvEdBkSqUEeXiXf xv9VnmJFGJY8oG5TuW/lMuY0uX8bBmqy/4ypibdqPH9qW0hePaDOtKr/ReM0/pQx t2SOypLTbxWBg+YEtiuVN/r00WSUJsg84KVPQLrsbp/GirCzKlu9K0AWLZmAr/gS BSx0p8+z9E7DPDPpgboSg36yu9FOoBbwlfDcK9y+g4PEjrw38iCukk35B158q7wQ BBwNu5ng9rhBSWWOgLkUKlGJMP4oFfcNe+YvOR//QAwCNCB3P5CRqGTFCRuQi5Fs O11568KchVGb62SS7rnkF0ciKRagjwQzCqWxda5Hty1Y/FY7fIuZbVeiF7rXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJFGj5cqwo0U88450vdxtgdlPhfYwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUUIrj+t8NM4 3DhvbssOfVvjJUoQQlI/DMk3uXn7XiBQovnWcCAnM7Bq2o/AJSrZ0v+gjDXGNGQt TeIe4m1DFwZBU8NniC5dWYOOTka8Ap/zBM5JICQuG8bPwPkCwAJ8wxSuKnbcauDP l4vYyf0q5IiW2yX8GN9LQn/0UWhAbSEl0epgWYgWCPjCoMufBpcJyXDxFd5Uidlz muNAurIS9FOv0c5HX+od8T4vbBUaA8xB0EbotY++9xPLPCXNldlNWstswIz+T3Sy x004vITNrZg+dj9MJa5sqMpR3nY45/+Ykeysm3bvrxlAvfO/sSnn47RI10UAC23a 7vb3TM//rw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:27:02 2026 by rpki-client