$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: DDgDPrIos39vNST81aVMRkiHkgCZ/GrwiM6i4+WqvJM= Subject key identifier: 88:A9:CD:FA:DB:C6:DB:48:5A:E7:96:69:91:5D:DB:E8:13:6C:52:4D Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 06269DB23C890E67919BF80DCB7FD3741996E361 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 8F Signing time: Wed 29 Jul 2026 03:13:16 +0000 Manifest this update: Wed 29 Jul 2026 03:08:16 +0000 Manifest next update: Thu 30 Jul 2026 06:45:16 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 2: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 3: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: d+V22OslWVyvYmCXanHn3pVSmzrY2MvvAMsGrDjD/wI=) 4: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:26:9d:b2:3c:89:0e:67:91:9b:f8:0d:cb:7f:d3:74:19:96:e3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Jul 29 03:08:16 2026 GMT Not After : Jul 30 06:45:16 2026 GMT Subject: CN=88A9CDFADBC6DB485AE79669915DDBE8136C524D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:0a:53:30:70:a7:7d:a0:6f:25:b7:cd:42: c1:21:fe:fa:a1:d2:d3:11:35:0f:97:4d:70:c6:c5: 17:25:49:93:d4:8b:3a:8f:fc:a0:be:70:7a:8d:d4: af:3d:0c:dd:22:aa:67:d4:92:9c:a3:fc:da:25:87: 7d:d4:e3:99:4d:05:30:51:ef:7c:69:55:8f:d0:4d: 45:4e:fa:82:ea:1b:90:ab:ad:08:05:2c:91:41:22: 6f:a3:6c:de:da:d9:b7:9d:8c:7e:cc:98:0b:04:ec: 69:70:08:ec:09:98:51:74:ab:e5:94:91:9d:ea:18: 3e:b5:3d:ef:5b:bc:83:25:74:72:92:c1:67:aa:d1: 00:e2:49:88:74:2b:ee:96:92:6c:00:9e:94:92:30: 28:fc:b8:2c:2f:cf:63:16:8e:50:6a:82:b0:54:00: dd:10:ae:49:96:29:95:35:87:d2:65:82:1f:0f:7e: b4:d4:8e:08:ac:93:65:c4:f4:33:20:55:bb:ed:25: 71:52:d8:97:35:05:39:7b:4f:73:b5:68:b7:78:5b: 78:fb:87:ee:56:ac:1e:6c:e0:35:17:93:1f:7a:6f: 79:c1:29:93:d0:8a:24:4c:aa:ea:6e:54:b1:d1:af: 50:a8:2c:59:e4:07:ce:c3:e3:6a:bb:0c:f7:e4:03: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:CD:FA:DB:C6:DB:48:5A:E7:96:69:91:5D:DB:E8:13:6C:52:4D X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f0:69:86:f2:7a:b3:a8:03:1d:dc:90:ee:c4:fd:de:aa:06: a1:97:b5:7f:c5:4f:0d:28:53:4a:94:e6:66:b2:80:8b:a9:ae: d1:e3:87:12:68:55:82:d0:3b:18:8e:a1:83:c5:7a:ab:3f:bf: 59:50:f7:8e:b5:df:ba:6c:27:fa:f0:f1:a0:32:de:21:f8:9c: 08:98:cb:8f:4e:f5:59:f3:e2:d3:01:13:a6:36:69:e7:b0:ef: d9:1a:8f:08:2b:e6:b1:5a:1b:12:9d:c3:1f:55:42:d6:e1:3f: 3a:bd:48:61:ea:23:d9:ee:9b:48:1d:58:9b:5c:30:0e:e6:ff: 06:bb:8b:c1:4e:9e:71:0d:2f:b1:a3:9a:2d:bc:e4:bd:31:34: d7:7b:22:02:b6:71:83:8d:dd:ee:3d:e7:c0:8e:aa:26:d3:7f: ef:44:da:7c:bb:0e:16:c3:83:70:4e:71:95:d6:17:b0:7d:53: c0:49:a7:f9:37:42:81:95:1c:66:fc:03:5d:61:a6:d3:b6:32: 49:0e:d1:ca:ff:7f:31:f7:02:e3:8c:f1:ee:84:f0:75:4e:83: c0:45:6d:fb:79:67:ed:a4:13:ae:91:ac:46:e4:35:39:e9:d8: 99:b8:b7:9c:59:28:08:54:c7:18:c3:ff:22:72:37:dd:84:7e: 38:bb:cb:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBiadsjyJDmeRm/gNy3/TdBmW42EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA3MjkwMzA4MTZaFw0yNjA3MzAwNjQ1MTZaMDMxMTAvBgNV BAMTKDg4QTlDREZBREJDNkRCNDg1QUU3OTY2OTkxNUREQkU4MTM2QzUyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqwpTMHCnfaBvJbfNQsEh/vqh 0tMRNQ+XTXDGxRclSZPUizqP/KC+cHqN1K89DN0iqmfUkpyj/Nolh33U45lNBTBR 73xpVY/QTUVO+oLqG5CrrQgFLJFBIm+jbN7a2bedjH7MmAsE7GlwCOwJmFF0q+WU kZ3qGD61Pe9bvIMldHKSwWeq0QDiSYh0K+6WkmwAnpSSMCj8uCwvz2MWjlBqgrBU AN0QrkmWKZU1h9Jlgh8PfrTUjgisk2XE9DMgVbvtJXFS2Jc1BTl7T3O1aLd4W3j7 h+5WrB5s4DUXkx96b3nBKZPQiiRMqupuVLHRr1CoLFnkB87D42q7DPfkA2S9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiKnN+tvG20ha55ZpkV3b6BNsUk0wHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPBphvJ6s6gD HdyQ7sT93qoGoZe1f8VPDShTSpTmZrKAi6mu0eOHEmhVgtA7GI6hg8V6qz+/WVD3 jrXfumwn+vDxoDLeIficCJjLj071WfPi0wETpjZp57Dv2RqPCCvmsVobEp3DH1VC 1uE/Or1IYeoj2e6bSB1Ym1wwDub/BruLwU6ecQ0vsaOaLbzkvTE013siArZxg43d 7j3nwI6qJtN/70TafLsOFsODcE5xldYXsH1TwEmn+TdCgZUcZvwDXWGm07YySQ7R yv9/MfcC44zx7oTwdU6DwEVt+3ln7aQTrpGsRuQ1OenYmbi3nFkoCFTHGMP/InI3 3YR+OLvL7g== -----END CERTIFICATE-----Generated at Wed Jul 29 13:28:43 2026 by rpki-client