$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json) Hash identifier: xhgX7ORRHyO1V8jqQ8+qCW5RXDrjDRTNwlSsgcRk3eM= Subject key identifier: F7:ED:67:CB:C8:48:57:24:19:1D:3C:0C:D2:D3:88:39:19:78:31:54 Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 Certificate issuer: /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Certificate serial: 706C01139918276EE2F7147F6CC2E0FBA1A012EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft Manifest number: 3B Signing time: Sat 13 Jun 2026 12:21:49 +0000 Manifest this update: Sat 13 Jun 2026 12:16:49 +0000 Manifest next update: Sun 14 Jun 2026 14:45:49 +0000 Files and hashes: 1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: MP8xIpC1Uz21vE3QU7RJiJGlwZZS4AMZndv0KrSI8yA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 14:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6c:01:13:99:18:27:6e:e2:f7:14:7f:6c:c2:e0:fb:a1:a0:12:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Validity Not Before: Jun 13 12:16:49 2026 GMT Not After : Jun 14 14:45:49 2026 GMT Subject: CN=F7ED67CBC8485724191D3C0CD2D3883919783154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:da:7b:f9:4b:41:77:a2:a6:1a:cd:71:e8: a5:25:22:37:6a:25:12:59:c4:8f:9b:c2:ae:84:3c: c9:a2:12:f9:69:68:70:9c:fc:16:8a:cd:05:c9:ea: 2e:20:be:87:dc:ee:0e:2d:f4:7f:e7:e9:4e:d2:3e: f4:3c:65:fa:d6:1b:2a:17:40:f5:90:0d:b3:1b:b3: 08:dc:2b:7d:67:1c:e0:70:a3:ac:90:10:a4:57:21: 3c:48:60:e8:c2:e8:aa:9a:ae:18:96:f4:fd:a4:54: 86:b7:54:ad:22:5f:b1:9d:ca:44:65:a2:1a:cd:64: 8e:34:4f:f9:d8:a4:45:92:c5:73:e3:11:f6:07:02: 7b:60:2d:e8:fc:cc:a4:52:1a:c2:53:0d:a9:27:bb: 70:b0:74:39:88:80:88:aa:b5:96:0b:70:07:da:78: c3:cf:cb:2d:22:5c:48:79:b9:05:c9:56:e3:1a:59: 9e:b4:7c:61:bc:9f:f1:68:41:24:48:c3:42:46:f1: 5a:9a:5e:ac:72:2e:e3:cc:d1:06:a7:1f:39:35:f8: 10:0c:3d:4b:ab:62:f1:c9:bc:7f:3b:2e:cc:6f:40: be:dd:aa:0d:68:58:5c:83:35:e2:49:6d:da:4d:7e: 39:ba:26:ff:4d:6d:7e:22:58:be:e5:44:46:ef:f5: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:ED:67:CB:C8:48:57:24:19:1D:3C:0C:D2:D3:88:39:19:78:31:54 X509v3 Authority Key Identifier: keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:83:58:e4:46:07:ae:59:7e:36:af:dc:f3:de:e1:0e:9a: c4:b8:e8:f6:60:a3:78:69:61:03:b9:12:47:f3:ab:f9:5e:7f: 35:38:76:30:60:81:1b:a1:d0:07:85:31:03:11:fd:03:84:5b: 0b:e7:33:97:b3:ce:1e:a8:c4:3a:7a:1d:9b:3f:43:d5:2c:e3: 73:5a:24:db:c6:53:89:e5:15:0a:76:90:4d:9c:f8:ff:fd:38: 11:db:36:7c:0e:5d:fe:1b:36:8d:08:f3:78:a3:e3:39:ce:88: b5:f7:64:0a:be:a0:58:43:62:70:82:21:fb:ec:e7:68:10:12: b3:08:a7:a8:c3:35:d5:52:47:af:c7:60:ce:64:e8:0b:b6:a1: 6d:76:f1:a6:b4:c1:8f:12:c5:99:99:cb:32:25:17:8e:61:3e: 51:25:f9:7c:65:b3:93:10:ad:6e:aa:2a:2d:82:b9:31:28:19: 40:18:05:79:83:a8:e6:dd:ec:d8:95:13:a1:2e:7b:1c:f6:ca: 21:94:92:91:ec:e9:4d:45:60:64:6b:2b:e8:1c:c9:00:f4:fb: 51:6f:05:b7:44:54:e6:38:90:5a:f1:41:af:26:53:10:9f:11: a3:26:ed:92:f4:97:d5:c6:0a:82:42:b3:cb:72:4e:7a:64:36: 87:eb:eb:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcGwBE5kYJ27i9xR/bMLg+6GgEu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0 NDE0MkFGNjAeFw0yNjA2MTMxMjE2NDlaFw0yNjA2MTQxNDQ1NDlaMDMxMTAvBgNV BAMTKEY3RUQ2N0NCQzg0ODU3MjQxOTFEM0MwQ0QyRDM4ODM5MTk3ODMxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2tp7+UtBd6KmGs1x6KUlIjdq JRJZxI+bwq6EPMmiEvlpaHCc/BaKzQXJ6i4gvofc7g4t9H/n6U7SPvQ8ZfrWGyoX QPWQDbMbswjcK31nHOBwo6yQEKRXITxIYOjC6KqarhiW9P2kVIa3VK0iX7GdykRl ohrNZI40T/nYpEWSxXPjEfYHAntgLej8zKRSGsJTDaknu3CwdDmIgIiqtZYLcAfa eMPPyy0iXEh5uQXJVuMaWZ60fGG8n/FoQSRIw0JG8VqaXqxyLuPM0QanHzk1+BAM PUurYvHJvH87LsxvQL7dqg1oWFyDNeJJbdpNfjm6Jv9NbX4iWL7lREbv9bCTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9+1ny8hIVyQZHTwM0tOIORl4MVQwHwYDVR0j BBgwFoAUj0hHtjnkDhkdv85/aZhfh0QUKvYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8xLzhGNDg0N0I2MzlFNDBFMTkxREJGQ0U3RjY5OTg1 Rjg3NDQxNDJBRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMS84RjQ4NDdCNjM5RTQw RTE5MURCRkNFN0Y2OTk4NUY4NzQ0MTQyQUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhguDWORGB65Z fjav3PPe4Q6axLjo9mCjeGlhA7kSR/Or+V5/NTh2MGCBG6HQB4UxAxH9A4RbC+cz l7POHqjEOnodmz9D1Szjc1ok28ZTieUVCnaQTZz4//04Eds2fA5d/hs2jQjzeKPj Oc6ItfdkCr6gWENicIIh++znaBASswinqMM11VJHr8dgzmToC7ahbXbxprTBjxLF mZnLMiUXjmE+USX5fGWzkxCtbqoqLYK5MSgZQBgFeYOo5t3s2JUToS57HPbKIZSS kezpTUVgZGsr6BzJAPT7UW8Ft0RU5jiQWvFBryZTEJ8RoybtkvSX1cYKgkKzy3JO emQ2h+vrYw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:03 2026 by rpki-client