$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: Drm8PE4mVelp3XHWdAj6Kx5SGs66GdM0kCOTOH5Da8g= Subject key identifier: 74:91:BF:93:76:CD:36:8C:47:EE:E1:E8:00:5A:19:6A:DA:1F:AF:8D Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 5389393842372CF2CDC6E1E4B098396D86905142 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 53 Signing time: Wed 29 Jul 2026 12:04:18 +0000 Manifest this update: Wed 29 Jul 2026 11:59:18 +0000 Manifest next update: Thu 30 Jul 2026 13:44:18 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: vuT+YigbjEm3A7+p7eGdzVv8HQG2JDzuoMdIwVkttPo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:89:39:38:42:37:2c:f2:cd:c6:e1:e4:b0:98:39:6d:86:90:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: Jul 29 11:59:18 2026 GMT Not After : Jul 30 13:44:18 2026 GMT Subject: CN=7491BF9376CD368C47EEE1E8005A196ADA1FAF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:df:39:39:9c:83:e5:b2:42:12:48:32:81: ef:2f:be:75:15:d3:b7:cf:22:fb:bc:51:aa:95:bd: e9:0d:c9:ee:ca:c4:d5:e2:4e:4b:dd:7b:5c:07:5d: e8:9e:1f:cb:31:fd:43:ed:1a:0c:b2:89:fa:7a:47: 27:3e:79:43:02:34:bd:c7:0c:7d:16:98:34:db:33: dd:e9:1c:70:4c:54:ad:5b:29:47:57:42:cf:bf:69: ca:69:b2:25:50:6e:8c:f3:84:ae:ac:9a:7d:e3:5c: 8b:13:d0:39:5f:7a:a2:24:d7:28:fa:a3:0c:07:58: d9:88:ab:f7:c4:ef:7b:dd:fc:dc:47:81:65:a2:b9: df:5a:ed:97:ff:0e:5d:43:9f:57:cf:ee:b5:5d:58: 65:eb:78:40:8a:d0:fb:15:57:00:de:95:6d:ef:af: db:8a:2b:8e:cf:60:cd:0c:58:62:46:77:5c:af:38: 73:0e:85:06:fb:e3:45:2d:43:bd:00:be:4a:f5:78: 59:16:78:2e:be:93:f9:49:61:1a:ca:23:ca:5b:b0: 04:a8:59:32:d6:d5:d8:aa:72:61:8f:07:70:00:c7: ab:a5:6c:0a:fc:3b:10:27:da:9c:cf:79:22:a9:b6: c1:28:fa:9a:5a:99:59:22:ff:b9:6d:dc:8b:80:d9: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:BF:93:76:CD:36:8C:47:EE:E1:E8:00:5A:19:6A:DA:1F:AF:8D X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ed:e4:13:c0:c9:6a:89:b5:52:f5:ad:54:31:55:df:e8:ef: f2:a2:29:b1:36:a6:c1:40:fd:6b:cb:80:c1:58:82:26:4a:4b: 4f:0e:7d:4a:3c:bc:33:5b:ec:a3:7a:42:57:ee:f2:93:7f:15: c7:de:f7:be:ac:dd:4c:96:fc:a2:a4:3d:f2:48:57:db:9b:7b: 15:84:ec:ed:0d:0c:3b:05:61:8c:26:64:56:b6:0e:64:b2:b0: ba:2e:27:0c:00:50:d7:ee:71:16:d0:2d:9e:47:5c:3d:8a:64: f5:d3:2c:92:04:81:6e:33:df:7d:68:68:df:7c:30:1c:c6:81: f1:e1:66:20:53:9a:c7:cf:c4:e4:6d:b3:c5:47:97:89:c3:45: 30:f0:eb:66:d6:75:07:b7:22:e2:9e:08:ef:4d:8c:cd:69:3a: 03:52:a9:90:b9:14:7b:29:60:ec:3e:fe:16:de:44:a8:50:74: c9:12:73:2f:d8:d2:10:0e:60:90:41:48:79:7f:86:72:08:df: e0:72:ee:c6:73:58:3f:03:08:b9:b6:ca:51:1e:78:33:27:0e: 1a:cb:4a:54:f3:9a:c4:e9:0e:d2:72:03:d6:d1:e7:5e:d8:c9: 11:b0:d1:a0:78:ba:c5:c4:37:f1:e1:c6:78:b1:18:8f:47:67: 3c:6f:23:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU4k5OEI3LPLNxuHksJg5bYaQUUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjA3MjkxMTU5MThaFw0yNjA3MzAxMzQ0MThaMDMxMTAvBgNV BAMTKDc0OTFCRjkzNzZDRDM2OEM0N0VFRTFFODAwNUExOTZBREExRkFGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaL985OZyD5bJCEkgyge8vvnUV 07fPIvu8UaqVvekNye7KxNXiTkvde1wHXeieH8sx/UPtGgyyifp6Ryc+eUMCNL3H DH0WmDTbM93pHHBMVK1bKUdXQs+/acppsiVQbozzhK6smn3jXIsT0DlfeqIk1yj6 owwHWNmIq/fE73vd/NxHgWWiud9a7Zf/Dl1Dn1fP7rVdWGXreECK0PsVVwDelW3v r9uKK47PYM0MWGJGd1yvOHMOhQb740UtQ70Avkr1eFkWeC6+k/lJYRrKI8pbsASo WTLW1diqcmGPB3AAx6ulbAr8OxAn2pzPeSKptsEo+ppamVki/7lt3IuA2eLDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdJG/k3bNNoxH7uHoAFoZatofr40wHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+3kE8DJaom1 UvWtVDFV3+jv8qIpsTamwUD9a8uAwViCJkpLTw59Sjy8M1vso3pCV+7yk38Vx973 vqzdTJb8oqQ98khX25t7FYTs7Q0MOwVhjCZkVrYOZLKwui4nDABQ1+5xFtAtnkdc PYpk9dMskgSBbjPffWho33wwHMaB8eFmIFOax8/E5G2zxUeXicNFMPDrZtZ1B7ci 4p4I702MzWk6A1KpkLkUeylg7D7+Ft5EqFB0yRJzL9jSEA5gkEFIeX+Gcgjf4HLu xnNYPwMIubbKUR54MycOGstKVPOaxOkO0nID1tHnXtjJEbDRoHi6xcQ38eHGeLEY j0dnPG8j4w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:49 2026 by rpki-client