$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: 8ap+wswBUEtEAwnE/wooNXdj1QCbV85GMLnNYH3P/6Q= Subject key identifier: 96:E3:64:0B:1C:92:22:EA:12:90:4E:9A:2A:0C:C4:BB:74:E6:E3:41 Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 57B457ABA40C9F847EB2EAB3F796DB97927638E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: 68 Signing time: Wed 29 Jul 2026 19:25:02 +0000 Manifest this update: Wed 29 Jul 2026 19:20:02 +0000 Manifest next update: Thu 30 Jul 2026 21:49:02 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: 0h1Npj1/OSXPpT+D1walK3+DpeIxWZKsq9H7SbpLlyY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 21:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b4:57:ab:a4:0c:9f:84:7e:b2:ea:b3:f7:96:db:97:92:76:38:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: Jul 29 19:20:02 2026 GMT Not After : Jul 30 21:49:02 2026 GMT Subject: CN=96E3640B1C9222EA12904E9A2A0CC4BB74E6E341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:ee:64:88:a3:ce:7f:89:01:b4:5e:f4:2e: 90:b0:f4:ff:ed:57:0d:30:74:b4:9a:5a:11:39:8e: 19:74:70:58:40:89:8c:2c:75:2c:af:07:1e:34:06: 8c:d3:1b:61:2e:f1:71:e5:bb:95:a5:93:85:63:51: c0:f6:2f:4e:21:ff:a9:c8:90:75:ac:9f:62:b0:c8: 24:26:70:07:30:43:d3:e8:0b:32:bb:ce:3c:42:f0: c9:7c:c0:25:b5:33:0f:71:9f:1b:b9:91:e6:72:30: e2:2e:78:66:6d:51:bd:74:54:b2:a5:e2:eb:ea:1b: 29:29:1e:da:1b:8c:1e:04:de:f7:58:c6:8c:ad:3d: 58:f6:92:79:69:ef:7b:85:09:46:72:ae:2b:22:f9: 6a:13:f0:e8:b4:d2:aa:51:0e:9d:c7:8c:fb:6b:24: e1:0e:5b:28:ab:d1:5a:8f:62:22:ce:ea:a5:45:55: 6a:15:c3:b8:d7:5d:76:ac:d0:2a:e0:e4:db:94:b2: 84:7d:e5:f0:3b:66:9b:59:f4:e1:89:9b:2a:18:52: 6f:2a:50:44:55:1b:38:5f:1d:82:7f:6a:c0:d8:db: c4:06:29:d7:bf:dd:6b:21:9c:39:6c:4a:07:7e:53: 90:68:fc:43:82:1d:25:ca:b8:b9:8c:15:84:a6:ab: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:64:0B:1C:92:22:EA:12:90:4E:9A:2A:0C:C4:BB:74:E6:E3:41 X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:23:8c:2f:25:86:a3:fc:7b:8a:d7:18:82:f4:22:6e:6c: a4:b6:b1:0c:a6:b0:cd:d7:be:a8:25:bd:2d:3b:80:db:a6:a4: 94:bd:7d:c7:81:d9:c5:41:bc:c9:a1:07:ad:48:fc:9e:08:08: 13:03:55:b2:23:f8:f0:9c:18:dc:c6:a5:42:a8:2f:66:0b:fc: 18:ee:ce:d5:2f:15:22:a1:a0:18:b7:b5:ea:74:b9:a3:98:39: 32:a5:9e:e3:76:28:a9:d0:aa:23:9f:45:35:f3:e8:c2:f5:77: 29:95:89:0d:5e:e8:01:02:5a:89:c5:9c:46:5b:96:bf:39:a3: 39:d5:e6:ec:a4:0d:e1:a3:51:80:2b:a8:8e:37:b7:ac:26:ec: b2:3a:85:70:50:4b:99:73:0f:04:2e:1b:fb:2e:d1:40:47:46: 48:06:0b:66:5a:43:b0:6d:18:60:f5:c8:08:b1:08:0f:87:76: e1:2b:b6:da:07:9f:9a:37:02:f0:e4:7c:66:8a:ae:ff:26:87: 63:94:74:44:75:25:d4:12:47:b4:c5:f6:24:41:3d:21:89:9a: 58:3f:be:e0:32:ad:92:85:8a:2c:1a:9a:54:43:9e:7d:0e:9c: 02:82:fc:f6:09:fe:61:fb:82:fb:99:f0:e8:8c:ad:05:34:d5: 71:27:41:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV7RXq6QMn4R+suqz95bbl5J2OOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjA3MjkxOTIwMDJaFw0yNjA3MzAyMTQ5MDJaMDMxMTAvBgNV BAMTKDk2RTM2NDBCMUM5MjIyRUExMjkwNEU5QTJBMENDNEJCNzRFNkUzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXu5kiKPOf4kBtF70LpCw9P/t Vw0wdLSaWhE5jhl0cFhAiYwsdSyvBx40BozTG2Eu8XHlu5Wlk4VjUcD2L04h/6nI kHWsn2KwyCQmcAcwQ9PoCzK7zjxC8Ml8wCW1Mw9xnxu5keZyMOIueGZtUb10VLKl 4uvqGykpHtobjB4E3vdYxoytPVj2knlp73uFCUZyrisi+WoT8Oi00qpRDp3HjPtr JOEOWyir0VqPYiLO6qVFVWoVw7jXXXas0Crg5NuUsoR95fA7ZptZ9OGJmyoYUm8q UERVGzhfHYJ/asDY28QGKde/3WshnDlsSgd+U5Bo/EOCHSXKuLmMFYSmq1P5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUluNkCxySIuoSkE6aKgzEu3Tm40EwHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANN4jjC8lhqP8 e4rXGIL0Im5spLaxDKawzde+qCW9LTuA26aklL19x4HZxUG8yaEHrUj8nggIEwNV siP48JwY3MalQqgvZgv8GO7O1S8VIqGgGLe16nS5o5g5MqWe43YoqdCqI59FNfPo wvV3KZWJDV7oAQJaicWcRluWvzmjOdXm7KQN4aNRgCuojje3rCbssjqFcFBLmXMP BC4b+y7RQEdGSAYLZlpDsG0YYPXICLEID4d24Su22gefmjcC8OR8Zoqu/yaHY5R0 RHUl1BJHtMX2JEE9IYmaWD++4DKtkoWKLBqaVEOefQ6cAoL89gn+YfuC+5nw6Iyt BTTVcSdBXQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:41 2026 by rpki-client