$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: 0L0A5BetDcf+EpEeLlrBFe6VV9qzGwSVeuuzlIWIYtM= Subject key identifier: DE:8A:11:23:32:08:9C:AE:42:6C:71:C6:51:21:D7:15:4D:7C:CF:40 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 6B8BD3A3FA909C862B71888BB83CEB0113005D6E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 95 Signing time: Tue 28 Jul 2026 21:07:47 +0000 Manifest this update: Tue 28 Jul 2026 21:02:46 +0000 Manifest next update: Wed 29 Jul 2026 23:18:46 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: xGayVx8lsbU6OgwIQQuHcbIg8yjSEaPEHPANSAg13BA=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8b:d3:a3:fa:90:9c:86:2b:71:88:8b:b8:3c:eb:01:13:00:5d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Jul 28 21:02:46 2026 GMT Not After : Jul 29 23:18:46 2026 GMT Subject: CN=DE8A112332089CAE426C71C65121D7154D7CCF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:2f:a4:69:09:ab:47:53:96:ab:18:d2:0d: 49:53:62:c6:8e:eb:49:6c:9d:b0:46:1b:15:c0:44: 1c:58:a4:86:5c:b3:ea:82:bd:cf:be:96:7c:f8:fc: 30:02:d1:8a:87:69:93:05:f3:ad:12:fb:7e:78:cd: 37:ce:6b:82:22:56:fa:c8:d9:dc:99:7a:54:8b:49: 47:fd:79:15:e9:bd:20:f9:f3:7a:30:77:d5:e5:f1: ec:68:f9:ba:5c:da:f7:d8:89:b7:23:22:6d:d9:cf: 2d:d4:7f:c5:e9:78:75:89:5b:0a:a8:ea:22:f2:3f: 27:51:d3:94:51:f6:ba:79:d8:d7:d2:31:76:d5:e4: 24:60:85:2b:b1:c7:c8:87:ce:83:13:85:af:1a:ac: 31:21:0d:50:a8:c1:30:18:b4:ac:73:09:89:65:66: 4f:f7:3e:d4:48:22:ca:3b:51:18:ab:aa:d4:ee:fb: 9c:49:b8:43:fa:22:b1:27:b8:dd:ff:f4:ea:70:af: 94:64:91:96:2d:20:10:d1:3e:2b:47:1f:87:d1:ce: 4b:59:20:86:ef:0a:b3:ad:81:81:3c:2e:9e:ce:3f: b9:97:5f:3d:4f:f1:d2:0b:33:9d:07:ad:53:7b:d5: 4f:63:70:ab:8d:02:fa:e7:43:68:26:79:34:4a:59: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8A:11:23:32:08:9C:AE:42:6C:71:C6:51:21:D7:15:4D:7C:CF:40 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0b:70:34:1f:97:95:b7:6b:92:64:95:ef:42:4e:08:71:d2: 12:42:da:7a:bc:73:83:49:ec:f7:01:72:15:ea:37:7d:d2:ae: db:35:90:08:97:fa:fb:6a:53:1d:35:ee:1c:d9:48:4a:03:8a: fd:38:8a:47:35:75:58:d7:49:ac:77:8f:5a:84:ff:10:c9:65: 74:51:a9:07:1a:af:a5:a2:7a:09:71:7b:13:30:83:b3:fe:2d: fd:91:44:00:42:7b:10:e9:30:bd:87:ee:9a:0b:be:6d:f5:8c: b2:f7:84:4a:de:f8:45:b2:da:e4:b2:93:c7:84:ad:b6:77:1d: d2:6b:84:35:45:92:25:5b:20:43:8a:ab:dd:8c:ee:36:49:18: 0c:74:01:ce:b6:b4:1f:6b:40:07:69:d6:e8:f3:5e:5c:7d:3e: b1:63:a6:19:bf:56:40:41:ee:85:3a:1c:c0:7e:f9:41:79:e7: cc:6d:fe:1e:94:9f:1d:b3:f1:01:11:47:4e:0e:fe:1d:32:10: 1f:e5:c1:4d:5c:b2:e2:0e:1d:42:e4:68:83:d7:47:65:b0:6a: ca:57:91:01:78:fa:e1:1e:10:95:f7:b1:67:a1:42:e2:d4:74: bc:4e:ee:33:86:db:c9:46:7f:82:21:91:87:0f:6b:e1:b8:28: 50:90:aa:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa4vTo/qQnIYrcYiLuDzrARMAXW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA3MjgyMTAyNDZaFw0yNjA3MjkyMzE4NDZaMDMxMTAvBgNV BAMTKERFOEExMTIzMzIwODlDQUU0MjZDNzFDNjUxMjFENzE1NEQ3Q0NGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDi+kaQmrR1OWqxjSDUlTYsaO 60lsnbBGGxXARBxYpIZcs+qCvc++lnz4/DAC0YqHaZMF860S+354zTfOa4IiVvrI 2dyZelSLSUf9eRXpvSD583owd9Xl8exo+bpc2vfYibcjIm3Zzy3Uf8XpeHWJWwqo 6iLyPydR05RR9rp52NfSMXbV5CRghSuxx8iHzoMTha8arDEhDVCowTAYtKxzCYll Zk/3PtRIIso7URirqtTu+5xJuEP6IrEnuN3/9Opwr5RkkZYtIBDRPitHH4fRzktZ IIbvCrOtgYE8Lp7OP7mXXz1P8dILM50HrVN71U9jcKuNAvrnQ2gmeTRKWcuJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3ooRIzIInK5CbHHGUSHXFU18z0AwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQtwNB+Xlbdr kmSV70JOCHHSEkLaerxzg0ns9wFyFeo3fdKu2zWQCJf6+2pTHTXuHNlISgOK/TiK RzV1WNdJrHePWoT/EMlldFGpBxqvpaJ6CXF7EzCDs/4t/ZFEAEJ7EOkwvYfumgu+ bfWMsveESt74RbLa5LKTx4Sttncd0muENUWSJVsgQ4qr3YzuNkkYDHQBzra0H2tA B2nW6PNeXH0+sWOmGb9WQEHuhTocwH75QXnnzG3+HpSfHbPxARFHTg7+HTIQH+XB TVyy4g4dQuRog9dHZbBqyleRAXj64R4QlfexZ6FC4tR0vE7uM4bbyUZ/giGRhw9r 4bgoUJCqog== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:11 2026 by rpki-client