$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft File: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft (raw, json) Hash identifier: Gm8LNLGGKqQBtFlhPxvClK9pIpE9duyzmG8zZXWa2XQ= Subject key identifier: BE:7A:F8:1E:9A:0A:FB:B5:EA:B9:EA:CC:4A:14:72:73:41:BC:C6:B4 Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 Certificate issuer: /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Certificate serial: 4A7684224DF40738D7C061EEFB2A658CCA70A238 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft Manifest number: 03 Signing time: Wed 29 Jul 2026 21:45:19 +0000 Manifest this update: Wed 29 Jul 2026 21:40:19 +0000 Manifest next update: Thu 30 Jul 2026 23:52:19 +0000 Files and hashes: 1: 3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (hash: CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=) 2: 3130312e34392e3230372e302f32342d3234203d3e203539303638.roa (hash: mJK27tVfbdIF1xBAouziK7x1YNs7RUiymoSR83PrbWw=) 3: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl (hash: 9gHtFmLf38gR6v/fyO2/y9UUHKw/bOPYxk1accxtUto=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:76:84:22:4d:f4:07:38:d7:c0:61:ee:fb:2a:65:8c:ca:70:a2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Validity Not Before: Jul 29 21:40:19 2026 GMT Not After : Jul 30 23:52:19 2026 GMT Subject: CN=BE7AF81E9A0AFBB5EAB9EACC4A14727341BCC6B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:e0:9c:0a:50:04:34:80:b4:81:e0:41:40: 0d:4e:a2:e4:52:ba:69:12:03:98:7f:d4:f2:6e:65: 21:45:2e:b7:c6:f7:89:85:8b:b5:4f:35:91:c3:f4: 50:0a:c0:0b:55:b9:7f:f6:b2:d6:11:80:f4:63:70: 14:83:b9:28:5e:a1:0d:15:27:ad:d8:33:5d:d6:fa: bd:18:4d:ad:1d:69:5d:dc:f2:72:09:15:b0:52:c8: e9:7b:9b:5c:de:f2:1d:74:13:4c:16:ef:c1:bf:9a: 72:d3:38:d3:f5:9b:2a:86:2a:37:d0:b7:cf:17:b6: 90:a1:64:cd:5b:15:3c:89:ba:36:9c:7b:25:7e:0a: 76:d6:08:1e:74:a0:3d:57:cc:28:b9:bb:d8:37:20: 8c:43:0f:07:22:00:4c:63:ef:11:8d:21:c1:b6:c2: b6:78:b7:00:c2:aa:6a:41:65:04:49:6b:c9:e1:97: 67:30:48:61:9c:1a:d8:e3:ef:d8:de:9d:55:87:1f: c0:99:fc:06:4f:cc:7e:1b:21:90:0f:2e:56:92:67: 95:70:80:98:2c:9a:41:36:bc:a7:47:b2:3c:fb:1a: 03:de:b3:98:60:e5:37:97:d6:ff:0e:5c:8c:db:5d: 2d:78:2a:a2:51:0b:d6:0f:a5:2b:b5:2c:1a:a9:10: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7A:F8:1E:9A:0A:FB:B5:EA:B9:EA:CC:4A:14:72:73:41:BC:C6:B4 X509v3 Authority Key Identifier: keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:91:1b:04:92:1d:88:e6:24:c3:68:6d:e8:e0:6d:f3:31:8a: 96:59:06:56:14:a4:f2:cd:13:f9:90:70:d9:3e:e4:8c:6b:4a: bb:99:75:d4:2d:a3:2b:3e:e5:44:00:95:64:5e:3e:4b:a0:05: 33:91:38:21:30:b0:50:98:56:4d:84:0d:4a:28:07:dd:a5:01: 41:69:3e:61:03:63:76:8c:d1:cb:92:02:29:71:2f:dc:01:d0: 7c:d0:cb:0d:5d:a6:4c:39:4b:8d:c9:ac:a4:4b:8b:c3:7c:58: d4:d6:a7:a2:e4:1d:c7:45:21:50:5c:84:82:be:ec:42:40:6a: 25:26:93:7e:d2:f1:c0:8f:44:80:c1:a4:b6:27:e0:45:6f:d8: 5c:5b:73:15:7a:eb:49:3e:40:08:64:8c:0a:99:eb:00:30:f5: b9:1f:b3:29:71:87:d4:7e:fa:83:b2:f3:c3:d1:c7:bd:a7:40: 95:03:1b:50:3b:2c:18:69:55:55:26:7c:4a:f6:33:fe:9e:f9: 8c:0f:93:33:44:ea:d9:7a:0f:9f:d9:a4:bd:7f:8e:d9:85:ae: bf:65:48:68:e4:cc:2e:1b:25:9d:8e:96:2f:34:a6:15:e3:d1: 66:67:a6:9e:63:dc:08:04:6d:de:05:b3:bb:75:a2:71:08:7f: 22:b1:4d:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSnaEIk30BzjXwGHu+ypljMpwojgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5 MzE5RTU1OTAeFw0yNjA3MjkyMTQwMTlaFw0yNjA3MzAyMzUyMTlaMDMxMTAvBgNV BAMTKEJFN0FGODFFOUEwQUZCQjVFQUI5RUFDQzRBMTQ3MjczNDFCQ0M2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBReCcClAENIC0geBBQA1OouRS umkSA5h/1PJuZSFFLrfG94mFi7VPNZHD9FAKwAtVuX/2stYRgPRjcBSDuSheoQ0V J63YM13W+r0YTa0daV3c8nIJFbBSyOl7m1ze8h10E0wW78G/mnLTONP1myqGKjfQ t88XtpChZM1bFTyJujaceyV+CnbWCB50oD1XzCi5u9g3IIxDDwciAExj7xGNIcG2 wrZ4twDCqmpBZQRJa8nhl2cwSGGcGtjj79jenVWHH8CZ/AZPzH4bIZAPLlaSZ5Vw gJgsmkE2vKdHsjz7GgPes5hg5TeX1v8OXIzbXS14KqJRC9YPpSu1LBqpEAX9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvnr4HpoK+7XquerMShRyc0G8xrQwHwYDVR0j BBgwFoAUuK+2lsFavE/++z6x6hDv1JMZ5VkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NDY5MjY2MjUwNzQ3MDg5My8wL0I4QUZCNjk2QzE1QUJDNEZGRUZCM0VCMUVBMTBF RkQ0OTMxOUU1NTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5MzE5RTU1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzQ2OTI2NjI1MDc0NzA4OTMvMC9COEFGQjY5NkMxNUFC QzRGRkVGQjNFQjFFQTEwRUZENDkzMTlFNTU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpEbBJIdiOYk w2ht6OBt8zGKllkGVhSk8s0T+ZBw2T7kjGtKu5l11C2jKz7lRACVZF4+S6AFM5E4 ITCwUJhWTYQNSigH3aUBQWk+YQNjdozRy5ICKXEv3AHQfNDLDV2mTDlLjcmspEuL w3xY1NanouQdx0UhUFyEgr7sQkBqJSaTftLxwI9EgMGktifgRW/YXFtzFXrrST5A CGSMCpnrADD1uR+zKXGH1H76g7Lzw9HHvadAlQMbUDssGGlVVSZ8SvYz/p75jA+T M0Tq2XoPn9mkvX+O2YWuv2VIaOTMLhslnY6WLzSmFePRZmemnmPcCARt3gWzu3Wi cQh/IrFNLg== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client