$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: cPl89HKcXMXmMkAA0R5+7Yd1d2MGV44ftcS/lGHrNmk= Subject key identifier: B1:A1:90:5B:9F:60:07:81:63:F4:A6:71:55:DD:F4:BC:45:35:33:28 Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 08A288B1884289F7257A4DC920F98DF0936FE425 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: 97 Signing time: Tue 28 Jul 2026 16:47:16 +0000 Manifest this update: Tue 28 Jul 2026 16:42:16 +0000 Manifest next update: Wed 29 Jul 2026 20:21:16 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: 0yVsioabr4+vJlSK3t/g3J2BPsvXh0enE11rXQhMJDg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a2:88:b1:88:42:89:f7:25:7a:4d:c9:20:f9:8d:f0:93:6f:e4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Jul 28 16:42:16 2026 GMT Not After : Jul 29 20:21:16 2026 GMT Subject: CN=B1A1905B9F60078163F4A67155DDF4BC45353328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:91:c4:9a:88:fa:29:b3:4c:f6:9f:89:b0: 63:ef:94:9d:c3:d8:31:d7:e5:eb:f0:49:88:e2:40: ae:4f:74:15:b4:56:06:5b:bc:c1:63:0f:3e:81:3a: bf:0b:41:23:5f:6f:f0:e4:37:d4:4f:b6:22:89:dc: 8a:1c:20:a5:40:83:ca:e8:c6:23:11:91:d8:90:32: 53:a4:20:91:0d:f7:10:79:42:a1:55:49:76:43:94: d7:c8:38:b3:e8:f3:04:67:91:9c:48:d7:4f:93:13: 4f:85:19:78:38:0b:ca:57:19:f3:85:b5:d4:bb:13: b0:9e:4c:03:1b:75:22:fd:00:47:63:01:15:08:cb: c3:d0:21:36:c7:e7:54:b2:2e:64:4d:34:a0:f5:45: 80:60:e8:b5:14:ac:52:0a:41:db:38:3c:f4:fe:87: ef:4b:b6:8e:fc:0e:8a:70:f6:74:92:8a:9f:f0:67: c3:74:d9:51:5e:6a:5f:df:5c:54:6b:70:76:f1:6c: ee:6c:ff:a8:ea:67:f4:ba:22:90:5c:ec:7e:21:a3: 0a:0a:8e:c4:c4:8e:ba:b2:a1:e8:65:5b:91:9a:e2: bf:37:0b:eb:b1:2e:eb:fa:33:f7:89:d5:d2:fe:a9: 48:13:e8:3d:3f:44:fe:8d:4c:57:50:f2:68:d4:b5: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:90:5B:9F:60:07:81:63:F4:A6:71:55:DD:F4:BC:45:35:33:28 X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:15:ce:ec:63:9e:50:c7:e2:de:51:75:4a:78:c5:a2:cc: 9a:10:b3:a1:b8:d5:fc:e0:56:9d:0b:cb:06:47:81:8d:fb:38: 17:f3:b9:98:fc:36:a5:02:f9:44:55:97:a2:d1:d2:0b:4e:3b: ec:8b:73:5d:ce:fe:c5:45:dc:53:fb:c5:df:21:1a:a9:ec:93: 63:59:e0:9a:03:51:19:29:55:2d:ed:58:f3:5f:f0:57:67:1a: ad:fb:eb:2a:5d:19:49:44:5a:5d:c0:da:c3:ff:b5:e2:06:a8: 53:f8:5f:19:3e:21:3b:66:40:59:fd:26:30:ad:67:97:4d:c2: e5:21:98:49:45:4d:b6:dc:fc:c5:21:5a:df:87:e7:bf:1b:fa: 0f:65:70:1b:6d:3e:0e:34:85:6a:a1:c2:1c:7c:a4:46:9a:16: 2f:cf:d6:b1:ec:2b:60:16:d0:89:84:5c:b8:0b:9a:93:52:fb: 1a:43:d9:92:25:7a:bd:6d:99:1a:f5:77:89:9c:3b:10:53:17: 3d:fd:dc:89:ca:7f:c8:ad:21:1a:f1:40:b2:9f:bd:c7:a6:3b: 21:4a:80:bd:20:11:6f:9a:26:5a:56:cc:61:87:b6:b0:4e:3c: d9:8e:b5:77:94:ff:e0:7c:4d:b7:61:2b:ec:5d:4a:0d:44:eb: 2a:2b:e3:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCKKIsYhCifclek3JIPmN8JNv5CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA3MjgxNjQyMTZaFw0yNjA3MjkyMDIxMTZaMDMxMTAvBgNV BAMTKEIxQTE5MDVCOUY2MDA3ODE2M0Y0QTY3MTU1RERGNEJDNDUzNTMzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t5HEmoj6KbNM9p+JsGPvlJ3D 2DHX5evwSYjiQK5PdBW0VgZbvMFjDz6BOr8LQSNfb/DkN9RPtiKJ3IocIKVAg8ro xiMRkdiQMlOkIJEN9xB5QqFVSXZDlNfIOLPo8wRnkZxI10+TE0+FGXg4C8pXGfOF tdS7E7CeTAMbdSL9AEdjARUIy8PQITbH51SyLmRNNKD1RYBg6LUUrFIKQds4PPT+ h+9Lto78Dopw9nSSip/wZ8N02VFeal/fXFRrcHbxbO5s/6jqZ/S6IpBc7H4howoK jsTEjrqyoehlW5Ga4r83C+uxLuv6M/eJ1dL+qUgT6D0/RP6NTFdQ8mjUtSStAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsaGQW59gB4Fj9KZxVd30vEU1MygwHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbwVzuxjnlDH 4t5RdUp4xaLMmhCzobjV/OBWnQvLBkeBjfs4F/O5mPw2pQL5RFWXotHSC0477Itz Xc7+xUXcU/vF3yEaqeyTY1ngmgNRGSlVLe1Y81/wV2carfvrKl0ZSURaXcDaw/+1 4gaoU/hfGT4hO2ZAWf0mMK1nl03C5SGYSUVNttz8xSFa34fnvxv6D2VwG20+DjSF aqHCHHykRpoWL8/WsewrYBbQiYRcuAuak1L7GkPZkiV6vW2ZGvV3iZw7EFMXPf3c icp/yK0hGvFAsp+9x6Y7IUqAvSARb5omWlbMYYe2sE482Y61d5T/4HxNt2Er7F1K DUTrKivjBQ== -----END CERTIFICATE-----Generated at Wed Jul 29 08:00:03 2026 by rpki-client