$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: SiZCFSF7cI1sOxMIbBOKw/irFRfMU7XCoGe9KEKlRak= Subject key identifier: 9F:AB:C4:48:6F:45:DB:A5:85:0A:7A:61:FE:B8:4F:9F:C2:8B:F4:B3 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 536D8B81C2C6D3A602E486D9A2DA2C2FF7EE6AEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 87 Signing time: Wed 29 Jul 2026 09:23:59 +0000 Manifest this update: Wed 29 Jul 2026 09:18:59 +0000 Manifest next update: Thu 30 Jul 2026 10:01:59 +0000 Files and hashes: 1: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) 2: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: ivhjYNdYUG5O8xDH8rtMzzLfg6tHPgkJbBwhTNPxzFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6d:8b:81:c2:c6:d3:a6:02:e4:86:d9:a2:da:2c:2f:f7:ee:6a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Jul 29 09:18:59 2026 GMT Not After : Jul 30 10:01:59 2026 GMT Subject: CN=9FABC4486F45DBA5850A7A61FEB84F9FC28BF4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:9b:2c:d4:40:67:91:3c:ac:88:69:20:9c: 91:3c:b1:b7:0a:a0:a3:c6:6f:b1:d5:b4:a6:08:28: 18:da:54:d1:ca:ec:8c:53:93:f2:f6:dd:f7:61:87: 45:a9:27:97:74:b3:ab:fb:fb:2a:e6:8f:9b:bd:38: 2e:b8:a4:12:4e:47:ae:23:19:14:4f:1e:eb:a7:db: 61:c7:e5:ef:72:da:73:de:90:a4:f9:4b:09:da:28: af:68:a5:ac:52:4b:79:6a:ca:01:e6:86:e8:e2:8a: 1f:4e:0c:d0:bf:03:59:a6:ef:67:94:a0:fb:c8:a3: a3:a5:ff:30:6b:fa:52:b4:71:cd:88:05:34:63:3f: 91:58:d6:b6:20:fe:e3:13:fd:fc:de:31:59:1e:c0: 5c:1b:db:28:df:1e:af:fb:e3:90:00:53:22:70:19: a9:bc:02:1c:47:e8:fc:a8:5c:58:3d:78:d8:8a:64: 50:bf:c2:f1:4d:41:43:87:81:ca:86:35:75:85:a7: c3:5b:39:11:dc:f1:2c:e8:4b:03:16:b5:23:32:3e: 26:15:03:af:5a:a8:22:b1:f0:82:12:1a:62:a8:50: bd:04:a8:79:70:2f:20:e5:49:55:59:63:15:8c:79: c4:6c:45:f7:f8:ca:2f:2c:11:41:3f:a1:a1:e1:c5: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AB:C4:48:6F:45:DB:A5:85:0A:7A:61:FE:B8:4F:9F:C2:8B:F4:B3 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c5:1c:a5:8f:06:f4:ad:56:91:12:38:0e:2f:d9:58:18:9f: 1a:0a:0b:2d:c4:93:c4:40:ee:91:cc:be:cf:53:b6:d8:8c:cd: d6:ed:d2:10:e8:31:f5:59:e6:6f:2d:b8:c6:2b:9e:e2:9a:49: 24:8e:0d:0c:69:85:7c:1d:11:d3:41:67:e6:86:17:1d:fd:14: 41:95:f9:21:17:a6:bb:0c:f1:b0:0f:27:13:bc:0a:c8:45:92: b2:c6:0b:70:48:18:28:b9:2d:74:e6:5d:5a:c6:7e:f3:7b:42: 2c:f9:1c:fd:30:98:4c:20:db:e6:6b:6c:5c:74:b1:08:32:45: 48:bd:cc:db:35:60:b9:64:53:2b:8d:58:59:2f:e4:94:5e:7e: 70:89:d3:96:ba:33:48:ac:77:d6:a2:c0:43:2c:7b:67:42:b6: a0:27:64:b8:a7:29:3d:b9:61:d6:6f:bc:1b:aa:67:37:09:c1: 86:66:ad:2d:f5:8a:55:1a:87:e9:08:80:c0:df:0c:ba:dc:05: 67:5b:98:a1:d8:42:7f:c1:7b:3d:31:50:28:29:d2:aa:b5:9c: b8:2d:50:42:a0:1d:c0:53:b9:d2:3a:31:f1:9b:b8:4b:4f:38: c8:e7:29:4d:36:09:ac:36:32:01:49:f4:79:da:ea:98:69:97: df:62:be:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU22LgcLG06YC5IbZotosL/fuauswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA3MjkwOTE4NTlaFw0yNjA3MzAxMDAxNTlaMDMxMTAvBgNV BAMTKDlGQUJDNDQ4NkY0NURCQTU4NTBBN0E2MUZFQjg0RjlGQzI4QkY0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WZss1EBnkTysiGkgnJE8sbcK oKPGb7HVtKYIKBjaVNHK7IxTk/L23fdhh0WpJ5d0s6v7+yrmj5u9OC64pBJOR64j GRRPHuun22HH5e9y2nPekKT5SwnaKK9opaxSS3lqygHmhujiih9ODNC/A1mm72eU oPvIo6Ol/zBr+lK0cc2IBTRjP5FY1rYg/uMT/fzeMVkewFwb2yjfHq/745AAUyJw Gam8AhxH6PyoXFg9eNiKZFC/wvFNQUOHgcqGNXWFp8NbORHc8SzoSwMWtSMyPiYV A69aqCKx8IISGmKoUL0EqHlwLyDlSVVZYxWMecRsRff4yi8sEUE/oaHhxV8TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn6vESG9F26WFCnph/rhPn8KL9LMwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsUcpY8G9K1W kRI4Di/ZWBifGgoLLcSTxEDukcy+z1O22IzN1u3SEOgx9Vnmby24xiue4ppJJI4N DGmFfB0R00Fn5oYXHf0UQZX5IRemuwzxsA8nE7wKyEWSssYLcEgYKLktdOZdWsZ+ 83tCLPkc/TCYTCDb5mtsXHSxCDJFSL3M2zVguWRTK41YWS/klF5+cInTlrozSKx3 1qLAQyx7Z0K2oCdkuKcpPblh1m+8G6pnNwnBhmatLfWKVRqH6QiAwN8MutwFZ1uY odhCf8F7PTFQKCnSqrWcuC1QQqAdwFO50jox8Zu4S084yOcpTTYJrDYyAUn0edrq mGmX32K+Lw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:14:46 2026 by rpki-client