$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: LZKwVvbXE2Eestf2otNuJzDCriJci3f9b2SSf2H+ckA= Subject key identifier: F0:1B:A1:61:D2:AA:B0:38:05:B1:B6:39:C6:F0:06:38:54:9B:65:93 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 3CBA6BEA48F8DC800C3428F5BE8B49520A4D76D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: F5 Signing time: Tue 21 Jul 2026 09:38:29 +0000 Manifest this update: Tue 21 Jul 2026 09:33:29 +0000 Manifest next update: Wed 22 Jul 2026 10:55:29 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: 1AitO3GTp5DHd8bjfaeIAyViKbqZR0bESEcOtItw+aw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 10:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ba:6b:ea:48:f8:dc:80:0c:34:28:f5:be:8b:49:52:0a:4d:76:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jul 21 09:33:29 2026 GMT Not After : Jul 22 10:55:29 2026 GMT Subject: CN=F01BA161D2AAB03805B1B639C6F00638549B6593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:53:1d:9f:b4:9a:d6:8c:f4:1b:98:38:f9: 32:42:ac:9a:be:a9:06:66:e0:00:2e:78:c4:c7:ad: 23:58:e7:13:f1:1e:5f:d6:2a:99:f2:62:cc:a0:42: 84:d1:74:2e:47:2f:9c:ba:b4:bf:be:81:2a:e7:43: 99:43:fe:b8:0e:c7:cc:a0:f7:df:77:27:aa:dd:11: 5b:73:48:2e:6a:2b:29:60:67:34:47:04:0b:b2:7f: ee:11:dd:4d:80:70:83:4f:7e:b5:44:45:79:7f:41: 50:72:cd:ad:41:86:4c:58:89:d8:5d:0a:d6:1a:fc: 91:12:80:a1:13:04:b5:07:3c:b5:6f:19:3d:da:3a: 8a:d1:e7:d3:1a:b6:ab:4a:be:e7:1b:0a:45:37:a1: 99:c6:f3:2f:30:6d:de:9e:b1:e5:40:b7:36:a0:a5: 1c:40:14:01:2b:0b:34:c2:ff:32:d1:07:ae:6a:47: 04:cd:d8:ef:c8:d3:dd:c4:14:35:29:c6:50:e8:af: cc:01:ae:f6:f0:c8:c5:3a:80:de:eb:ee:d3:d5:76: cd:c0:9b:ca:14:f2:02:1f:fb:87:48:84:f3:26:dc: eb:f4:97:03:6a:da:75:f3:5c:75:af:a5:05:fc:8c: 2a:e2:ea:f9:41:fc:ab:0b:c3:22:e9:09:4d:04:f7: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:A1:61:D2:AA:B0:38:05:B1:B6:39:C6:F0:06:38:54:9B:65:93 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:e4:21:e6:1e:6f:17:5d:a9:4d:7b:5b:74:b5:ac:49:58: 0f:fd:2d:9f:ba:68:06:38:67:72:2b:1d:ec:42:f2:28:40:03: 86:cb:14:31:b4:c9:fc:e1:78:88:7b:1d:f9:81:1d:e7:e7:00: 99:c0:8f:36:b4:97:36:48:1f:84:97:0a:1e:c3:45:0b:e4:68: 6e:6b:91:de:e8:9e:58:42:13:2b:7c:45:35:78:54:e9:81:e1: 0f:99:bf:3c:08:81:13:83:ea:7f:a2:e8:42:83:15:f1:c3:2e: 4b:55:78:f9:59:99:a8:cd:8a:ee:7e:a1:e8:66:d1:85:33:af: fb:d2:74:1b:f3:bc:10:c4:0f:54:bc:4c:cc:f8:26:c9:1d:bd: 90:34:93:a5:40:8a:60:c3:3e:1d:dc:8a:1c:d8:a4:10:56:85: 8a:b5:96:e3:c4:16:cd:52:01:a6:bb:77:33:aa:b6:b2:9f:32: b9:9e:d8:da:c5:af:3b:03:95:0e:a9:c9:ac:2b:7c:b2:f4:24: d9:af:2d:6c:86:ef:46:fe:3b:10:dc:d2:ed:d0:3e:c8:ac:16: 75:58:e4:18:b7:56:f1:1b:38:82:a6:50:e1:bf:04:9e:89:5b: e4:d8:68:62:cd:7f:cd:8c:41:f8:f8:d3:23:d4:90:56:2c:23: d9:6d:3a:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPLpr6kj43IAMNCj1votJUgpNdtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA3MjEwOTMzMjlaFw0yNjA3MjIxMDU1MjlaMDMxMTAvBgNV BAMTKEYwMUJBMTYxRDJBQUIwMzgwNUIxQjYzOUM2RjAwNjM4NTQ5QjY1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNlMdn7Sa1oz0G5g4+TJCrJq+ qQZm4AAueMTHrSNY5xPxHl/WKpnyYsygQoTRdC5HL5y6tL++gSrnQ5lD/rgOx8yg 9993J6rdEVtzSC5qKylgZzRHBAuyf+4R3U2AcINPfrVERXl/QVByza1BhkxYidhd CtYa/JESgKETBLUHPLVvGT3aOorR59MatqtKvucbCkU3oZnG8y8wbd6eseVAtzag pRxAFAErCzTC/zLRB65qRwTN2O/I093EFDUpxlDor8wBrvbwyMU6gN7r7tPVds3A m8oU8gIf+4dIhPMm3Ov0lwNq2nXzXHWvpQX8jCri6vlB/KsLwyLpCU0E91DpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8BuhYdKqsDgFsbY5xvAGOFSbZZMwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnr3kIeYebxdd qU17W3S1rElYD/0tn7poBjhncisd7ELyKEADhssUMbTJ/OF4iHsd+YEd5+cAmcCP NrSXNkgfhJcKHsNFC+RobmuR3uieWEITK3xFNXhU6YHhD5m/PAiBE4Pqf6LoQoMV 8cMuS1V4+VmZqM2K7n6h6GbRhTOv+9J0G/O8EMQPVLxMzPgmyR29kDSTpUCKYMM+ HdyKHNikEFaFirWW48QWzVIBprt3M6q2sp8yuZ7Y2sWvOwOVDqnJrCt8svQk2a8t bIbvRv47ENzS7dA+yKwWdVjkGLdW8Rs4gqZQ4b8Enolb5NhoYs1/zYxB+PjTI9SQ Viwj2W064A== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:52 2026 by rpki-client