$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json) Hash identifier: CKKe+/nd/0NyWquKagqYSBm4OsEqIuFUA0BjsRnihgc= Subject key identifier: 23:49:61:67:A7:1B:7A:07:F2:06:83:14:89:E4:33:B7:59:8B:71:76 Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 32C1D5B0D1C14CA51BFAC716B5CC3C1D99B9B985 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft Manifest number: 5D Signing time: Tue 28 Jul 2026 19:07:35 +0000 Manifest this update: Tue 28 Jul 2026 19:02:35 +0000 Manifest next update: Wed 29 Jul 2026 20:50:35 +0000 Files and hashes: 1: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=) 2: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=) 3: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: JENG5IxWjrwHbNxQ38xD7fSWwAruj7R2xvn54LzIsjY=) 4: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c1:d5:b0:d1:c1:4c:a5:1b:fa:c7:16:b5:cc:3c:1d:99:b9:b9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: Jul 28 19:02:35 2026 GMT Not After : Jul 29 20:50:35 2026 GMT Subject: CN=23496167A71B7A07F206831489E433B7598B7176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:de:91:72:ce:f6:a4:8e:90:ad:84:96:55: 85:ab:fb:3e:11:b4:55:7c:55:81:2c:4f:b9:36:8c: 58:79:0f:47:4d:08:76:7d:d7:f7:c9:66:13:f3:54: 4e:90:21:b4:a6:d0:0f:b0:c8:65:9a:e7:9d:c1:8f: 7c:20:1e:d4:cd:6d:6c:cf:6b:a5:a6:f1:62:8c:f8: 83:52:33:5c:0f:d0:4c:ad:c8:78:35:87:0c:74:fa: 5b:a6:dc:ba:70:3b:10:f4:4f:da:ca:14:49:f8:7c: 71:fb:23:cb:b7:05:6c:d1:dd:85:1b:9d:c5:df:93: 38:5e:a3:8f:4e:0d:9f:48:23:97:94:22:a6:89:cb: e1:03:30:32:8d:6c:f3:a1:cb:d6:7a:82:19:87:da: c9:df:48:d8:52:33:5e:86:6d:54:07:09:6f:f6:4a: 32:93:51:4f:b5:d4:52:2f:d5:53:c1:08:f6:0a:b5: df:5f:0b:c1:19:ac:9a:df:9b:86:8c:a1:de:14:2f: 4e:fb:71:78:d1:3c:0f:84:31:c5:bd:8d:1c:2f:b5: 81:06:f1:98:08:a9:81:05:dd:62:f9:4f:5e:cd:ef: d9:a2:e0:cb:99:e9:44:4c:fe:2a:b5:6f:fd:54:cd: 49:cb:40:e5:e3:5f:de:16:32:ac:a4:55:ad:87:d4: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:49:61:67:A7:1B:7A:07:F2:06:83:14:89:E4:33:B7:59:8B:71:76 X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ae:e6:1a:c8:78:80:d5:e2:d2:f7:cc:09:95:8b:e1:64:ff: 4f:ed:0e:50:8c:d7:59:12:6e:dc:fb:a0:e2:ba:51:d6:60:bd: 69:d7:ea:80:fb:32:07:17:00:2f:13:76:8b:e7:ce:72:49:42: 6e:af:cf:10:33:b5:65:3a:f1:b3:69:07:26:74:b7:47:05:8d: 21:1a:8b:c4:87:b6:e4:a9:a6:72:95:d1:ca:67:a1:bf:e1:09: 2c:58:4c:bb:14:8d:91:9a:e2:0c:2f:ac:3f:81:3e:4d:f5:d4: 37:a9:36:8d:7b:c4:25:91:22:a2:c5:d2:c2:02:d0:e8:d4:77: 92:6a:c5:de:28:b2:d9:52:a0:6d:b2:df:dd:3e:26:cd:75:ac: 7e:73:9e:2e:8c:b4:46:22:b0:4e:3b:2c:96:df:27:a4:ad:ca: c2:ae:7b:b6:30:47:44:c1:43:94:3b:f6:27:e3:3d:0e:3f:9d: 2e:f8:21:a2:0b:67:16:13:ff:37:60:d4:5d:58:fc:19:61:95: 86:f6:48:ed:fb:8a:f2:51:8e:d6:4b:30:79:32:88:d1:d1:07: 1b:d2:4d:ba:9f:e2:ec:eb:61:40:3a:3a:6a:1a:cd:e7:e0:29: 85:a8:3f:c8:41:99:00:c5:73:89:c3:bd:b7:ad:d6:90:61:95: a9:c2:21:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMsHVsNHBTKUb+scWtcw8HZm5uYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA3MjgxOTAyMzVaFw0yNjA3MjkyMDUwMzVaMDMxMTAvBgNV BAMTKDIzNDk2MTY3QTcxQjdBMDdGMjA2ODMxNDg5RTQzM0I3NTk4QjcxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXId6Rcs72pI6QrYSWVYWr+z4R tFV8VYEsT7k2jFh5D0dNCHZ91/fJZhPzVE6QIbSm0A+wyGWa553Bj3wgHtTNbWzP a6Wm8WKM+INSM1wP0EytyHg1hwx0+lum3LpwOxD0T9rKFEn4fHH7I8u3BWzR3YUb ncXfkzheo49ODZ9II5eUIqaJy+EDMDKNbPOhy9Z6ghmH2snfSNhSM16GbVQHCW/2 SjKTUU+11FIv1VPBCPYKtd9fC8EZrJrfm4aMod4UL077cXjRPA+EMcW9jRwvtYEG 8ZgIqYEF3WL5T17N79mi4MuZ6URM/iq1b/1UzUnLQOXjX94WMqykVa2H1JjxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI0lhZ6cbegfyBoMUieQzt1mLcXYwHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwMTc2NDE4NjAzMDA4MjEvMC8wOEM3REU4OTRBNEE4 ODYyMkJBNzhCQzlFNDFERkE1Q0M2RTMwMzRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq7mGsh4gNXi 0vfMCZWL4WT/T+0OUIzXWRJu3Pug4rpR1mC9adfqgPsyBxcALxN2i+fOcklCbq/P EDO1ZTrxs2kHJnS3RwWNIRqLxIe25KmmcpXRymehv+EJLFhMuxSNkZriDC+sP4E+ TfXUN6k2jXvEJZEiosXSwgLQ6NR3kmrF3iiy2VKgbbLf3T4mzXWsfnOeLoy0RiKw Tjsslt8npK3Kwq57tjBHRMFDlDv2J+M9Dj+dLvghogtnFhP/N2DUXVj8GWGVhvZI 7fuK8lGO1ksweTKI0dEHG9JNup/i7OthQDo6ahrN5+Aphag/yEGZAMVzicO9t63W kGGVqcIhrg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:50:57 2026 by rpki-client