$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: QV12YqfQmq/5qong393PvMh/hcJ2UDpDFBoBfcqxDrQ= Subject key identifier: B1:DE:F1:E7:FF:E4:25:7F:96:E6:52:21:0C:C0:7E:34:35:99:94:08 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 40ECFBBF7193EF7FA9136CAC971790187E542A87 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 85 Signing time: Tue 28 Jul 2026 16:12:13 +0000 Manifest this update: Tue 28 Jul 2026 16:07:13 +0000 Manifest next update: Wed 29 Jul 2026 18:00:13 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 2: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: lnhuod8Gi8eg6XKvyFaMXmcFxnKw0FvIkt8ACyJSCgY=) 3: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 4: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ec:fb:bf:71:93:ef:7f:a9:13:6c:ac:97:17:90:18:7e:54:2a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Jul 28 16:07:13 2026 GMT Not After : Jul 29 18:00:13 2026 GMT Subject: CN=B1DEF1E7FFE4257F96E652210CC07E3435999408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:26:e9:be:db:e2:92:62:48:08:e4:7d:3d: 13:66:04:50:40:2b:1b:0d:15:17:77:b3:15:db:e7: a3:d3:51:c9:80:83:27:55:92:5e:25:d4:88:5a:0f: 5a:36:c1:5e:92:fc:78:9b:84:07:68:43:bf:a8:b6: c8:8c:5d:83:33:12:38:e8:a7:a7:ec:e6:71:0d:cc: 2d:ce:31:a2:11:a5:12:42:37:f5:03:6a:0a:d8:5f: d1:01:af:e4:21:47:3d:e8:e4:d7:6c:92:7a:9c:c6: a7:0c:1a:de:a0:ea:59:87:fe:55:28:4b:fc:02:ac: 5a:fd:25:2f:6b:27:b2:f0:86:b1:3a:da:c8:a6:ac: 86:7f:80:ce:b2:72:da:c6:80:c3:fd:c6:dd:91:9a: 1c:95:72:c2:7e:49:ae:73:d5:65:ba:38:2c:40:98: d8:72:c8:c0:26:2e:cf:95:c6:2a:f3:cc:25:7d:fb: 4a:8a:e1:c4:a0:f5:58:d9:d9:bf:9c:dc:cd:7d:f0: be:b0:0f:ac:9f:f8:24:db:43:f4:2a:1f:a1:1f:65: 90:85:d9:48:21:a7:f8:30:2f:d8:07:40:f8:2d:0d: 79:d6:b1:18:fa:ae:43:5e:d4:e9:64:94:f3:85:50: 3a:cd:2e:85:71:4f:9f:78:96:61:c4:9e:37:34:9c: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:F1:E7:FF:E4:25:7F:96:E6:52:21:0C:C0:7E:34:35:99:94:08 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ea:1d:d7:2c:20:1f:f0:93:f0:fe:f3:c3:f0:4c:ca:c8:c5: 74:63:97:f9:17:51:74:6e:80:bd:80:d4:f2:7a:18:b2:67:98: 00:f5:f1:6e:fa:c6:ef:53:ab:ab:33:cc:d5:22:f7:e5:45:e3: 12:af:11:79:a9:28:af:ba:d3:95:94:b9:1a:49:76:96:da:a3: 50:5c:f2:34:58:e4:bc:c7:41:8d:af:c9:0e:46:13:a8:1d:ea: 96:7c:d4:0e:e4:74:71:f2:77:a7:c4:8c:59:25:2f:1f:79:d7: af:9a:f0:8e:e4:7b:fe:ba:45:f2:12:99:c7:c9:61:f4:bf:f3: 22:58:a1:90:de:1d:b1:42:b5:c3:9c:9b:36:e0:ce:a7:0d:38: 8b:e5:3c:3e:a9:d0:f5:2e:5f:ec:ee:6e:27:96:02:87:7b:06: 0d:7b:ac:a3:1c:ab:6b:eb:14:72:c8:1c:f9:34:c1:fb:e7:fa: 85:ac:bc:dd:77:81:a6:fe:1c:49:1b:14:a9:07:47:de:b3:fa: 74:31:2d:f2:a4:f2:0e:ba:6c:ee:a0:2a:64:2c:45:5c:f3:16: c7:12:39:94:27:23:7f:70:0e:0b:bb:35:52:40:3c:6c:28:04: e0:20:36:a6:0b:50:6c:77:31:e2:7b:56:dd:b3:b7:f9:70:51: 23:48:e7:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQOz7v3GT73+pE2yslxeQGH5UKocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA3MjgxNjA3MTNaFw0yNjA3MjkxODAwMTNaMDMxMTAvBgNV BAMTKEIxREVGMUU3RkZFNDI1N0Y5NkU2NTIyMTBDQzA3RTM0MzU5OTk0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflibpvtvikmJICOR9PRNmBFBA KxsNFRd3sxXb56PTUcmAgydVkl4l1IhaD1o2wV6S/HibhAdoQ7+otsiMXYMzEjjo p6fs5nENzC3OMaIRpRJCN/UDagrYX9EBr+QhRz3o5NdsknqcxqcMGt6g6lmH/lUo S/wCrFr9JS9rJ7LwhrE62simrIZ/gM6yctrGgMP9xt2RmhyVcsJ+Sa5z1WW6OCxA mNhyyMAmLs+VxirzzCV9+0qK4cSg9VjZ2b+c3M198L6wD6yf+CTbQ/QqH6EfZZCF 2Ughp/gwL9gHQPgtDXnWsRj6rkNe1OlklPOFUDrNLoVxT594lmHEnjc0nN3hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsd7x5//kJX+W5lIhDMB+NDWZlAgwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguod1ywgH/CT 8P7zw/BMysjFdGOX+RdRdG6AvYDU8noYsmeYAPXxbvrG71OrqzPM1SL35UXjEq8R eakor7rTlZS5Gkl2ltqjUFzyNFjkvMdBja/JDkYTqB3qlnzUDuR0cfJ3p8SMWSUv H3nXr5rwjuR7/rpF8hKZx8lh9L/zIlihkN4dsUK1w5ybNuDOpw04i+U8PqnQ9S5f 7O5uJ5YCh3sGDXusoxyra+sUcsgc+TTB++f6hay83XeBpv4cSRsUqQdH3rP6dDEt 8qTyDrps7qAqZCxFXPMWxxI5lCcjf3AOC7s1UkA8bCgE4CA2pgtQbHcx4ntW3bO3 +XBRI0jnpQ== -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:55 2026 by rpki-client