$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: 7ewF6XAf0jUfmLTirZmmMwKsiArJQK7hHb8eDblq2Ts= Subject key identifier: 99:62:5A:83:C1:C1:5B:FB:90:DE:87:9F:C0:67:CD:E1:7D:97:24:65 Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 1A01081F46C6AAF12CE402FFC1DD218A3F33FBC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: 8D Signing time: Tue 21 Jul 2026 03:42:47 +0000 Manifest this update: Tue 21 Jul 2026 03:37:47 +0000 Manifest next update: Wed 22 Jul 2026 06:27:47 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: ZR8uGQODshBVRD+pCo6fRqVQrhOZB61ffOHrncFC6ZQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 06:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:01:08:1f:46:c6:aa:f1:2c:e4:02:ff:c1:dd:21:8a:3f:33:fb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Jul 21 03:37:47 2026 GMT Not After : Jul 22 06:27:47 2026 GMT Subject: CN=99625A83C1C15BFB90DE879FC067CDE17D972465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:bc:45:7d:64:09:93:92:e1:fe:58:67:63: 02:b9:c4:cc:b1:47:52:bc:e1:cf:e2:dc:37:94:f7: ca:57:11:a6:67:c4:b5:8d:1d:61:96:b6:2a:f0:67: d6:57:50:c8:e5:99:eb:e8:8b:56:f6:5c:a7:ea:80: ff:10:cc:6c:9d:05:50:16:1e:fd:53:f4:ec:56:b2: 32:26:81:7f:85:d4:51:fa:a9:74:d6:e9:da:c3:f3: 80:4d:eb:7e:44:47:c6:76:15:e1:c2:4e:5c:24:c6: 98:6f:95:a0:de:a3:b4:b0:90:ce:87:2e:02:09:7f: c0:01:d2:7d:8e:0c:53:0a:83:e7:19:99:0c:7b:fb: ef:7e:3f:bd:4a:2f:6e:3a:72:a5:6e:36:11:17:70: d5:51:43:8d:fe:4c:e3:c2:a0:43:cf:f7:73:2c:c7: 9b:32:ed:25:93:8f:69:0e:1a:e1:9a:ad:6d:9d:b4: b2:77:eb:98:7a:4b:64:8f:eb:4a:82:c0:82:ef:fb: 5f:48:d7:98:05:6c:9a:4d:8c:35:47:fc:f5:e7:7a: 70:29:6b:60:e9:7b:47:56:0f:9c:2c:00:94:74:75: 33:be:25:2a:9e:06:3c:b3:55:60:01:57:a4:ae:59: 4d:63:e0:1d:63:94:ca:b5:10:78:67:73:54:53:b9: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:5A:83:C1:C1:5B:FB:90:DE:87:9F:C0:67:CD:E1:7D:97:24:65 X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d3:29:60:96:fe:1e:ea:b3:89:73:e4:ce:84:0d:45:fb:d9: 52:ac:3e:38:68:01:14:e8:36:29:18:6f:db:08:c6:0f:b1:0b: e5:a1:81:3d:ab:11:6d:85:35:9c:4d:90:11:77:ce:51:3c:0a: ef:9c:64:ae:12:de:e8:5b:72:bd:df:2d:d6:0b:bc:7c:e6:6a: e0:b1:58:b2:74:3b:ee:7c:46:3f:24:28:24:06:87:ae:15:10: 83:bc:b4:8b:e5:dc:01:b6:02:86:82:51:54:a6:5c:d8:f0:ad: fe:5b:db:e1:25:94:18:c7:ec:dd:be:d7:f6:fd:31:37:39:b5: 1a:e3:fd:98:26:05:6f:4a:83:6d:45:33:9a:57:a8:f0:6c:1a: 9a:2c:6c:dc:7d:57:35:52:85:c6:bb:1d:23:05:75:79:06:a4: 66:80:9a:8b:37:ea:ee:25:85:5f:6e:ce:0a:8a:b5:59:41:2c: 37:8a:09:7d:26:8b:a1:eb:92:21:cc:1c:6c:13:7d:91:76:7e: b6:7a:d3:5c:29:54:1e:57:3d:d1:4d:af:0e:86:09:21:8c:c0: 22:04:35:53:f9:73:7c:2e:25:a1:0a:f3:02:09:f4:24:b6:b3: ac:1e:aa:ef:32:d8:2c:b7:da:9a:6d:0f:4d:78:1c:c3:32:a8: a9:c0:1e:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGgEIH0bGqvEs5AL/wd0hij8z+8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA3MjEwMzM3NDdaFw0yNjA3MjIwNjI3NDdaMDMxMTAvBgNV BAMTKDk5NjI1QTgzQzFDMTVCRkI5MERFODc5RkMwNjdDREUxN0Q5NzI0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W7xFfWQJk5Lh/lhnYwK5xMyx R1K84c/i3DeU98pXEaZnxLWNHWGWtirwZ9ZXUMjlmevoi1b2XKfqgP8QzGydBVAW Hv1T9OxWsjImgX+F1FH6qXTW6drD84BN635ER8Z2FeHCTlwkxphvlaDeo7SwkM6H LgIJf8AB0n2ODFMKg+cZmQx7++9+P71KL246cqVuNhEXcNVRQ43+TOPCoEPP93Ms x5sy7SWTj2kOGuGarW2dtLJ365h6S2SP60qCwILv+19I15gFbJpNjDVH/PXnenAp a2Dpe0dWD5wsAJR0dTO+JSqeBjyzVWABV6SuWU1j4B1jlMq1EHhnc1RTubvTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmWJag8HBW/uQ3oefwGfN4X2XJGUwHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9MpYJb+Huqz iXPkzoQNRfvZUqw+OGgBFOg2KRhv2wjGD7EL5aGBPasRbYU1nE2QEXfOUTwK75xk rhLe6Ftyvd8t1gu8fOZq4LFYsnQ77nxGPyQoJAaHrhUQg7y0i+XcAbYChoJRVKZc 2PCt/lvb4SWUGMfs3b7X9v0xNzm1GuP9mCYFb0qDbUUzmleo8Gwamixs3H1XNVKF xrsdIwV1eQakZoCaizfq7iWFX27OCoq1WUEsN4oJfSaLoeuSIcwcbBN9kXZ+tnrT XClUHlc90U2vDoYJIYzAIgQ1U/lzfC4loQrzAgn0JLazrB6q7zLYLLfamm0PTXgc wzKoqcAe6Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:55 2026 by rpki-client