$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: Lzi3MwhGMaf+fG7Gnl2aNpKf1crfV0U4Jw/EMs7DyIo= Subject key identifier: 70:7F:CC:FC:38:8E:F0:E3:21:B9:0A:11:2B:7A:75:8B:BC:C6:2D:7B Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 351E841E5AC59CD00B04E17F01F51725FFD9C276 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 57 Signing time: Wed 29 Jul 2026 14:44:36 +0000 Manifest this update: Wed 29 Jul 2026 14:39:36 +0000 Manifest next update: Thu 30 Jul 2026 16:03:36 +0000 Files and hashes: 1: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) 2: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: K2Xw7sLEdnCwUF++9Zray1ryXHa9VgP+krFNw3HaCyU=) 3: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 4: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 5: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1e:84:1e:5a:c5:9c:d0:0b:04:e1:7f:01:f5:17:25:ff:d9:c2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Jul 29 14:39:36 2026 GMT Not After : Jul 30 16:03:36 2026 GMT Subject: CN=707FCCFC388EF0E321B90A112B7A758BBCC62D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:05:ba:45:06:71:c4:26:2b:c9:53:e0:d7: 2b:8e:d5:fb:0b:f9:2e:8f:0d:d7:0c:0a:57:82:f1: 6b:be:10:ef:eb:10:2c:cf:dc:ae:52:0d:68:b3:ef: 15:7a:d2:b4:f1:aa:8c:9b:fa:0a:58:e3:a2:38:5d: 08:97:3b:a7:1b:f6:1a:89:3f:6b:ff:11:aa:48:ab: 4b:35:93:3c:b7:b2:88:7a:89:89:0a:35:f1:4f:60: 99:b6:be:3e:a7:61:b5:de:97:b6:d4:b1:22:32:63: 10:73:a0:f5:be:0a:88:67:1b:f0:d6:13:7b:1b:f8: bf:a9:e3:9c:ea:ec:5c:10:21:85:76:3f:bf:09:ed: 35:78:c5:83:4e:aa:cc:1d:cc:98:e3:56:d5:1c:fb: fe:83:81:c3:de:67:c2:b4:37:82:38:1d:db:e9:53: 6b:dc:d1:a1:a6:78:33:3b:c3:bb:95:56:dd:f3:3a: 20:73:49:f4:fe:57:16:ae:7a:20:8e:a0:04:c6:e2: e1:a6:78:be:1d:2a:92:4f:31:7d:8d:7a:2a:9c:96: 38:ca:55:44:ba:62:1a:83:7c:27:8a:da:f5:c7:6d: 13:23:70:c0:ce:dc:81:82:5f:f9:eb:60:fe:1b:84: f8:01:ce:53:47:7e:0c:d4:4d:3f:64:4f:61:42:49: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:CC:FC:38:8E:F0:E3:21:B9:0A:11:2B:7A:75:8B:BC:C6:2D:7B X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3c:01:f4:bc:2d:eb:7f:01:7c:49:7e:eb:bb:1d:e4:93:5a: 6f:8c:48:ca:2a:57:b1:be:18:44:8e:f9:a8:f8:76:3c:90:38: 54:8b:12:84:d7:6a:81:70:d3:22:4f:e6:da:3c:bc:16:44:6b: b9:c9:d0:48:0e:81:ce:07:b2:5f:c9:9a:a5:73:e9:9d:26:77: 2d:3f:cb:ce:54:00:d4:bc:1e:bc:dc:43:72:4e:bc:cc:b0:62: b9:cb:5b:1a:80:87:96:d2:3c:81:10:7c:ac:81:b5:e4:dc:bf: 89:61:a1:f2:4a:11:6b:ff:b2:21:ca:bd:52:26:bc:e2:a1:eb: 6e:ce:34:06:6c:83:22:28:c0:38:ba:10:c5:d7:5c:2b:8c:e0: b8:89:9b:d1:22:9f:54:ef:d2:63:77:76:1c:f7:60:8c:01:06: 44:42:a4:98:b7:05:c6:e6:12:b0:94:55:ce:23:f2:45:f4:3b: c2:f1:1b:8e:42:f3:84:b0:25:cc:bc:78:01:3e:d5:4d:aa:62: 5c:e4:e4:a7:d4:fc:aa:33:de:16:8a:b4:b1:ab:ca:fd:9d:b1: 0e:34:07:e3:44:73:7c:6d:8e:4e:99:db:20:a9:98:f8:f0:50: e2:6a:8c:ec:fe:f6:1f:c6:20:23:89:33:46:56:c5:85:75:a5: 11:e5:fb:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNR6EHlrFnNALBOF/AfUXJf/ZwnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA3MjkxNDM5MzZaFw0yNjA3MzAxNjAzMzZaMDMxMTAvBgNV BAMTKDcwN0ZDQ0ZDMzg4RUYwRTMyMUI5MEExMTJCN0E3NThCQkNDNjJEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhuQW6RQZxxCYryVPg1yuO1fsL +S6PDdcMCleC8Wu+EO/rECzP3K5SDWiz7xV60rTxqoyb+gpY46I4XQiXO6cb9hqJ P2v/EapIq0s1kzy3soh6iYkKNfFPYJm2vj6nYbXel7bUsSIyYxBzoPW+CohnG/DW E3sb+L+p45zq7FwQIYV2P78J7TV4xYNOqswdzJjjVtUc+/6DgcPeZ8K0N4I4Hdvp U2vc0aGmeDM7w7uVVt3zOiBzSfT+VxaueiCOoATG4uGmeL4dKpJPMX2NeiqcljjK VUS6YhqDfCeK2vXHbRMjcMDO3IGCX/nrYP4bhPgBzlNHfgzUTT9kT2FCSRNnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcH/M/DiO8OMhuQoRK3p1i7zGLXswHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTwB9Lwt638B fEl+67sd5JNab4xIyipXsb4YRI75qPh2PJA4VIsShNdqgXDTIk/m2jy8FkRrucnQ SA6BzgeyX8mapXPpnSZ3LT/LzlQA1LwevNxDck68zLBiuctbGoCHltI8gRB8rIG1 5Ny/iWGh8koRa/+yIcq9Uia84qHrbs40BmyDIijAOLoQxddcK4zguImb0SKfVO/S Y3d2HPdgjAEGREKkmLcFxuYSsJRVziPyRfQ7wvEbjkLzhLAlzLx4AT7VTapiXOTk p9T8qjPeFoq0savK/Z2xDjQH40RzfG2OTpnbIKmY+PBQ4mqM7P72H8YgI4kzRlbF hXWlEeX7ag== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:09 2026 by rpki-client