$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json) Hash identifier: Um+hq2f5c3OUG3k1Kk8G5CSU6+jyflylUi9w8fbW1z4= Subject key identifier: CA:8A:4A:28:54:A7:C3:DA:F3:F6:31:28:8D:AF:99:19:39:37:6D:98 Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 5056E65C88944006E5D620A62D4692504EAAF2D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft Manifest number: 20 Signing time: Sat 13 Jun 2026 10:06:44 +0000 Manifest this update: Sat 13 Jun 2026 10:01:44 +0000 Manifest next update: Sun 14 Jun 2026 10:13:44 +0000 Files and hashes: 1: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=) 2: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=) 3: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: OjymRI6T86H4q8veZSxP4WXkU9MmefC+MFkUYNoYbek=) 4: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:56:e6:5c:88:94:40:06:e5:d6:20:a6:2d:46:92:50:4e:aa:f2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: Jun 13 10:01:44 2026 GMT Not After : Jun 14 10:13:44 2026 GMT Subject: CN=CA8A4A2854A7C3DAF3F631288DAF991939376D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:49:99:ff:34:3a:b0:2b:33:bb:1e:02:17: b2:a8:00:72:cf:f4:1b:45:2d:1c:7d:bc:8c:bc:58: 8a:11:43:d2:91:f6:c9:6e:5a:b7:f7:10:0f:87:09: ef:7f:46:48:7c:54:11:fb:cf:ce:6b:2f:7f:93:33: b9:ae:13:83:16:40:21:f6:aa:3e:f7:3f:54:0e:c5: 35:dc:5a:ae:fb:5c:cc:f7:ac:6a:04:1b:70:e8:ea: e7:2b:20:a4:46:fc:33:ec:34:95:60:71:cc:e1:33: ea:33:ed:5f:d2:40:c7:ed:dd:c7:77:5a:57:58:28: e8:ef:ed:8c:6d:c9:22:00:90:5d:23:14:3d:de:18: fd:b3:52:bf:27:7d:fc:f7:60:2f:b6:e9:4c:04:6b: ac:ad:d4:14:92:84:0b:0c:2e:8b:b7:2f:e7:de:95: 82:6f:39:9e:61:0b:ee:ad:6e:42:fc:12:70:df:cb: c4:8c:8a:07:d0:86:06:5f:d6:8d:02:ba:b2:a7:71: ae:6b:7e:e8:c3:f1:76:78:39:54:a1:04:8d:a1:03: 2b:3d:72:b6:51:a6:dd:a2:e5:11:7b:07:cc:c8:65: e3:cb:4d:aa:dc:3f:8c:d8:0c:18:10:31:3f:78:a7: 5e:0b:28:7a:6f:a4:10:d6:6f:1d:c7:e7:4f:a2:82: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:4A:28:54:A7:C3:DA:F3:F6:31:28:8D:AF:99:19:39:37:6D:98 X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9e:40:0e:67:09:32:c0:f4:a5:e8:12:36:96:16:b1:3a:49: 80:a0:96:52:57:c6:fb:e5:d7:53:41:a9:eb:57:20:1e:1a:77: d5:45:02:5c:97:a1:df:d1:a3:14:4e:25:ce:c1:a7:fc:0c:d8: 06:4c:a1:19:6c:28:a9:db:ea:72:9e:a5:3f:ff:f1:51:29:57: 4c:57:d9:aa:8b:f4:14:e3:3e:28:36:41:1f:81:dc:55:45:2f: a6:3b:c3:a0:77:f7:70:1a:54:f9:f0:37:09:24:f6:b3:50:d3: 40:bf:da:86:a8:e7:2d:fc:de:11:fd:38:a5:fc:12:c2:bf:16: 92:3a:78:40:64:30:6a:d6:5b:1f:df:41:04:b0:96:60:7f:02: b4:77:c9:d6:24:4b:dd:61:82:c7:2b:1b:a1:36:70:b5:5d:5a: 88:b9:42:c8:9b:26:9b:43:31:8c:35:ee:65:9e:70:7d:9f:7a: fb:f0:0e:77:44:7d:4b:45:fc:c2:bc:af:7d:1f:18:65:42:b2: a1:48:dd:12:e6:b7:06:d5:e7:23:da:e0:f2:b0:44:a0:38:38: 12:96:2b:da:4d:60:b6:65:48:7a:09:61:e4:7d:82:62:d3:d0: 5f:c0:74:34:09:a8:66:9e:e0:8f:26:e4:1e:01:98:8d:20:92: 2e:4a:30:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUFbmXIiUQAbl1iCmLUaSUE6q8tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA2MTMxMDAxNDRaFw0yNjA2MTQxMDEzNDRaMDMxMTAvBgNV BAMTKENBOEE0QTI4NTRBN0MzREFGM0Y2MzEyODhEQUY5OTE5MzkzNzZEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfEmZ/zQ6sCszux4CF7KoAHLP 9BtFLRx9vIy8WIoRQ9KR9sluWrf3EA+HCe9/Rkh8VBH7z85rL3+TM7muE4MWQCH2 qj73P1QOxTXcWq77XMz3rGoEG3Do6ucrIKRG/DPsNJVgcczhM+oz7V/SQMft3cd3 WldYKOjv7YxtySIAkF0jFD3eGP2zUr8nffz3YC+26UwEa6yt1BSShAsMLou3L+fe lYJvOZ5hC+6tbkL8EnDfy8SMigfQhgZf1o0CurKnca5rfujD8XZ4OVShBI2hAys9 crZRpt2i5RF7B8zIZePLTarcP4zYDBgQMT94p14LKHpvpBDWbx3H50+igqdzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyopKKFSnw9rz9jEoja+ZGTk3bZgwHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwMTc2NDE4NjAzMDA4MjEvMC8wOEM3REU4OTRBNEE4 ODYyMkJBNzhCQzlFNDFERkE1Q0M2RTMwMzRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ5ADmcJMsD0 pegSNpYWsTpJgKCWUlfG++XXU0Gp61cgHhp31UUCXJeh39GjFE4lzsGn/AzYBkyh GWwoqdvqcp6lP//xUSlXTFfZqov0FOM+KDZBH4HcVUUvpjvDoHf3cBpU+fA3CST2 s1DTQL/ahqjnLfzeEf04pfwSwr8Wkjp4QGQwatZbH99BBLCWYH8CtHfJ1iRL3WGC xysboTZwtV1aiLlCyJsmm0MxjDXuZZ5wfZ96+/AOd0R9S0X8wryvfR8YZUKyoUjd Eua3BtXnI9rg8rBEoDg4EpYr2k1gtmVIeglh5H2CYtPQX8B0NAmoZp7gjybkHgGY jSCSLkowGQ== -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:52 2026 by rpki-client