$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json) Hash identifier: LdtiMLWOeh5EZ61/YxVGeB7WacHSdJLmD/HjxaTHEwM= Subject key identifier: C2:4F:D3:82:22:16:49:95:60:9B:8B:D7:1A:65:69:95:84:75:8E:E0 Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Certificate serial: 73C3DD4A81403624BFC5B5C696AAB83FC981CA18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft Manifest number: 11 Signing time: Wed 29 Jul 2026 10:54:13 +0000 Manifest this update: Wed 29 Jul 2026 10:49:13 +0000 Manifest next update: Thu 30 Jul 2026 11:03:13 +0000 Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: 7jtuRqifoE7VflQANVCgYhhBAhlME0jiY8dMtPk7Tmk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c3:dd:4a:81:40:36:24:bf:c5:b5:c6:96:aa:b8:3f:c9:81:ca:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Validity Not Before: Jul 29 10:49:13 2026 GMT Not After : Jul 30 11:03:13 2026 GMT Subject: CN=C24FD38222164995609B8BD71A65699584758EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:95:ae:73:17:6d:5e:14:1e:41:3e:20:0a:bb: 3a:a3:6d:00:1c:bd:5e:16:39:f7:c3:9f:65:15:21: f6:30:ad:46:ee:98:30:4b:b1:62:31:a0:53:68:2d: 13:49:74:95:c3:8e:8b:bd:b3:95:d3:40:1f:10:c4: 0d:63:5e:0b:69:e8:64:48:78:99:37:dc:b4:ea:bb: e6:3c:dd:08:82:64:a9:71:91:fa:62:17:78:0f:e6: 98:9c:9c:d1:34:89:4c:eb:b2:d7:d7:91:91:8d:30: 06:75:00:61:51:44:e7:bf:27:af:eb:f0:9c:a8:62: 15:07:88:0d:9d:f8:31:fd:75:71:4b:da:bb:f1:d3: 87:00:11:a6:de:0f:dd:e9:95:bc:41:3d:3d:43:f0: 24:b0:e7:03:1b:9a:cd:a8:d1:f8:24:89:94:b2:09: 58:0e:44:be:2b:e9:0a:2b:fe:d8:8e:57:a5:09:e9: 11:2d:d5:29:e0:09:fb:35:2f:46:2d:4d:77:5c:6a: 61:34:02:f9:81:af:af:8c:e5:87:be:80:26:cb:0f: 88:b7:67:9c:fb:17:49:c4:2b:e4:91:bd:c2:87:d7: e2:df:91:f3:56:a2:26:9f:01:39:bc:e0:31:d2:63: 2d:b9:f3:19:5a:a3:81:c5:7f:a6:11:c2:1a:b7:cc: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4F:D3:82:22:16:49:95:60:9B:8B:D7:1A:65:69:95:84:75:8E:E0 X509v3 Authority Key Identifier: keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:30:02:01:41:e7:84:9c:a5:ef:46:0f:5b:b3:80:e0:c8: 0f:47:51:0b:4f:6b:d7:29:69:c0:98:4a:25:10:6b:10:76:12: 77:7d:be:3d:30:72:26:68:89:21:35:44:0f:e5:14:f5:11:99: 15:e4:bc:39:e8:7f:29:3e:31:86:f0:61:dc:ee:93:50:db:b9: 95:0a:c8:e3:69:1d:07:fe:52:61:28:ab:f0:16:0c:38:0d:ae: 6a:53:c9:0b:a3:79:68:db:74:ec:eb:a9:51:fc:2c:f4:46:90: 68:c7:c0:71:e7:a8:d3:01:9b:63:cf:77:72:12:14:84:df:ee: f9:dd:55:64:31:0b:87:3b:27:bc:30:58:ca:8b:06:48:b1:a2: e0:ef:c6:df:aa:6b:11:2a:01:62:4e:53:e5:71:55:a9:64:18: a3:12:1e:c9:dc:88:9f:71:1b:6b:eb:4e:8c:cc:79:cf:de:d0: f4:91:91:10:2e:2f:53:b2:d3:e9:81:aa:f2:c0:96:77:4a:b3: 30:7d:46:82:58:66:67:13:43:71:81:2f:c7:f4:9b:09:8d:59: 2c:3f:76:82:be:93:47:c4:35:b7:cc:0d:b5:e5:a8:86:dc:72: 77:ea:48:d6:ca:df:83:b4:df:33:53:8e:63:55:e2:dc:8a:56: a5:1d:92:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc8PdSoFANiS/xbXGlqq4P8mByhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD RDc2RUU4QzAeFw0yNjA3MjkxMDQ5MTNaFw0yNjA3MzAxMTAzMTNaMDMxMTAvBgNV BAMTKEMyNEZEMzgyMjIxNjQ5OTU2MDlCOEJENzFBNjU2OTk1ODQ3NThFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2la5zF21eFB5BPiAKuzqjbQAc vV4WOffDn2UVIfYwrUbumDBLsWIxoFNoLRNJdJXDjou9s5XTQB8QxA1jXgtp6GRI eJk33LTqu+Y83QiCZKlxkfpiF3gP5picnNE0iUzrstfXkZGNMAZ1AGFRROe/J6/r 8JyoYhUHiA2d+DH9dXFL2rvx04cAEabeD93plbxBPT1D8CSw5wMbms2o0fgkiZSy CVgORL4r6Qor/tiOV6UJ6REt1SngCfs1L0YtTXdcamE0AvmBr6+M5Ye+gCbLD4i3 Z5z7F0nEK+SRvcKH1+LfkfNWoiafATm84DHSYy258xlao4HFf6YRwhq3zO/dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwk/TgiIWSZVgm4vXGmVplYR1juAwHwYDVR0j BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4 MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwUwAgFB54Sc pe9GD1uzgODID0dRC09r1ylpwJhKJRBrEHYSd32+PTByJmiJITVED+UU9RGZFeS8 Oeh/KT4xhvBh3O6TUNu5lQrI42kdB/5SYSir8BYMOA2ualPJC6N5aNt07OupUfws 9EaQaMfAceeo0wGbY893chIUhN/u+d1VZDELhzsnvDBYyosGSLGi4O/G36prESoB Yk5T5XFVqWQYoxIeydyIn3Eba+tOjMx5z97Q9JGREC4vU7LT6YGq8sCWd0qzMH1G glhmZxNDcYEvx/SbCY1ZLD92gr6TR8Q1t8wNteWohtxyd+pI1srfg7TfM1OOY1Xi 3IpWpR2Spg== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:39 2026 by rpki-client