$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: Lx6ChstKG+ZaHRe6LIGOHeejW1MeDMsYc9M1LJhTfgc= Subject key identifier: 66:55:21:D3:1C:A5:2B:42:3C:F9:F7:F5:E0:0B:F2:25:6F:76:2D:85 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 157D78EA6DD88C4F2629146719307871175E320E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 8B Signing time: Tue 28 Jul 2026 13:01:51 +0000 Manifest this update: Tue 28 Jul 2026 12:56:51 +0000 Manifest next update: Wed 29 Jul 2026 16:27:51 +0000 Files and hashes: 1: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 2: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 3: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: uzj5MXM6zG1tlWGyHcJFb3Fa3JpekOQoFEs/fhAlUjE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7d:78:ea:6d:d8:8c:4f:26:29:14:67:19:30:78:71:17:5e:32:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Jul 28 12:56:51 2026 GMT Not After : Jul 29 16:27:51 2026 GMT Subject: CN=665521D31CA52B423CF9F7F5E00BF2256F762D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:b9:1b:b3:ca:f1:24:b0:1a:5a:f1:5e:b2: 44:62:f9:a7:cc:44:e8:b9:ae:10:ff:85:5b:cb:18: 9d:4e:3a:b3:dd:9b:23:61:a9:dd:3a:29:e2:1f:4e: c1:bc:7e:dc:55:3c:5e:bc:f6:0f:1d:39:65:8d:4d: da:9b:59:41:e0:79:0a:fc:a0:33:3d:43:ab:89:1d: 7f:62:58:48:5b:f7:1e:4a:d2:2a:d2:a8:3a:2e:15: 77:5a:08:7c:59:60:ea:76:98:fc:71:ff:17:a4:3c: 90:8c:e4:2a:1c:b0:93:79:b5:b8:33:35:49:60:91: b4:5d:2c:c2:cb:9b:d4:89:3b:1d:42:79:5c:f5:69: be:99:2a:fd:12:35:2f:85:38:72:3f:f3:57:89:3e: 9e:de:b2:6b:0e:65:7e:e6:7c:0a:9e:bf:ba:d0:4b: 43:c8:84:61:f3:41:fa:af:4d:60:9f:12:08:44:73: bc:15:75:26:4e:9d:26:be:69:4d:d5:95:bd:fc:26: 1c:71:b3:ee:47:31:24:b6:a6:85:49:94:04:2d:e0: 52:00:a5:77:6d:42:42:9a:f2:d0:01:2b:54:2a:50: 88:6c:9a:2a:d3:a2:0f:81:80:f5:9b:2e:95:8d:ab: 0d:66:18:5e:1a:6d:76:da:04:13:ce:c5:2f:b5:9a: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:55:21:D3:1C:A5:2B:42:3C:F9:F7:F5:E0:0B:F2:25:6F:76:2D:85 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f8:09:23:fe:4a:f3:3e:5c:95:35:56:48:04:f5:81:81:2f: 23:8b:d9:a7:ab:c0:a5:57:42:de:c1:58:69:f0:47:a8:e9:28: 83:7f:a3:96:d0:8a:23:50:72:31:cd:f8:d3:de:80:e9:78:70: 08:d2:b2:d1:b9:6e:53:c9:98:31:0a:5b:53:d6:6a:b6:f4:49: 02:18:65:cd:bc:31:60:00:b9:60:89:0b:c0:db:17:15:63:50: 9c:24:11:68:e7:df:7d:fb:2d:79:c4:af:bc:84:a4:6b:55:65: 8f:82:3d:e8:3b:1b:d1:da:81:da:6e:4a:ec:d6:4f:02:07:52: b4:9c:64:27:4c:e8:c3:3f:91:32:30:01:cc:8d:d3:f7:04:3d: 65:01:59:08:42:70:c8:1a:bb:c2:76:18:de:1b:a1:6a:70:ad: 4f:7f:0b:27:2e:09:ee:92:c8:7c:6c:05:a4:6d:c3:5a:b4:a9: 0d:83:88:69:ab:54:95:77:b3:30:25:54:d1:d6:1d:ea:21:a1: da:b6:ce:17:4c:52:ff:34:36:63:c0:01:24:e1:84:af:11:1e: 00:f8:41:4f:b7:c8:38:18:1e:e1:4e:6a:d8:17:f0:68:eb:78: 27:64:df:d5:60:a1:aa:39:ca:f0:8d:2a:72:75:7b:61:2d:3f: 9d:1b:bd:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFX146m3YjE8mKRRnGTB4cRdeMg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA3MjgxMjU2NTFaFw0yNjA3MjkxNjI3NTFaMDMxMTAvBgNV BAMTKDY2NTUyMUQzMUNBNTJCNDIzQ0Y5RjdGNUUwMEJGMjI1NkY3NjJEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGrkbs8rxJLAaWvFeskRi+afM ROi5rhD/hVvLGJ1OOrPdmyNhqd06KeIfTsG8ftxVPF689g8dOWWNTdqbWUHgeQr8 oDM9Q6uJHX9iWEhb9x5K0irSqDouFXdaCHxZYOp2mPxx/xekPJCM5CocsJN5tbgz NUlgkbRdLMLLm9SJOx1CeVz1ab6ZKv0SNS+FOHI/81eJPp7esmsOZX7mfAqev7rQ S0PIhGHzQfqvTWCfEghEc7wVdSZOnSa+aU3Vlb38Jhxxs+5HMSS2poVJlAQt4FIA pXdtQkKa8tABK1QqUIhsmirTog+BgPWbLpWNqw1mGF4abXbaBBPOxS+1mtPBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZlUh0xylK0I8+ff14AvyJW92LYUwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfgJI/5K8z5c lTVWSAT1gYEvI4vZp6vApVdC3sFYafBHqOkog3+jltCKI1ByMc34096A6XhwCNKy 0bluU8mYMQpbU9ZqtvRJAhhlzbwxYAC5YIkLwNsXFWNQnCQRaOffffstecSvvISk a1Vlj4I96Dsb0dqB2m5K7NZPAgdStJxkJ0zowz+RMjABzI3T9wQ9ZQFZCEJwyBq7 wnYY3huhanCtT38LJy4J7pLIfGwFpG3DWrSpDYOIaatUlXezMCVU0dYd6iGh2rbO F0xS/zQ2Y8ABJOGErxEeAPhBT7fIOBge4U5q2BfwaOt4J2Tf1WChqjnK8I0qcnV7 YS0/nRu9oA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:01:01 2026 by rpki-client