$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: 5rxh/d+m1XWpqgHQjM5ib9amgd2VU+tA3QVNrsOFBcw= Subject key identifier: CC:96:86:0B:4E:38:F2:D4:1C:14:45:D9:AC:69:C6:99:DB:F5:86:FF Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 710FD1A6A614F003644EC279574972AB22A0F400 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: B0 Signing time: Fri 29 May 2026 07:27:22 +0000 Manifest this update: Fri 29 May 2026 07:22:22 +0000 Manifest next update: Sat 30 May 2026 08:53:22 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: jK8bsqBdHSkrNUFm7+LfB4beW1Vyg4VKqjfpdgBbvEU=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 4: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) 5: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 6: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 7: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 8: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:d1:a6:a6:14:f0:03:64:4e:c2:79:57:49:72:ab:22:a0:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: May 29 07:22:22 2026 GMT Not After : May 30 08:53:22 2026 GMT Subject: CN=CC96860B4E38F2D41C1445D9AC69C699DBF586FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:c2:ae:b8:26:eb:01:a2:d6:79:8f:e3:7b: ad:d3:40:df:17:8f:d7:aa:b7:bb:eb:18:2d:62:04: 74:8c:b6:b2:91:5b:87:88:43:68:be:0f:38:ce:64: 01:1b:2c:60:c1:82:c3:56:16:3b:22:1f:5b:04:ac: 2d:d8:ee:3d:91:57:17:7b:95:29:6f:b7:df:48:60: 3e:41:da:86:44:60:d3:49:d9:67:81:49:25:c9:89: 3a:0a:12:b7:c4:3c:06:62:86:01:d4:17:fc:58:ba: c3:42:33:91:a4:79:be:88:61:26:76:b7:41:0b:9a: 2e:a1:68:d2:fa:18:93:b6:0b:0e:fa:f1:50:e2:0f: c1:0a:64:25:7f:83:16:51:94:6e:58:4e:6f:e2:1e: 1e:a2:02:cd:2c:c4:db:84:fe:78:17:ba:d0:93:8d: 37:8e:d2:3f:16:28:a4:68:6e:fc:6e:3d:ff:fa:3a: 12:19:d6:7c:5b:d2:eb:e6:a3:70:68:de:81:1c:e5: f3:24:ba:60:67:de:8b:c9:eb:d6:56:21:36:5b:a5: 00:b7:ee:e4:c3:1f:1d:8b:27:d4:7c:a8:5e:d0:40: 40:b6:50:2e:bb:d5:65:4a:8e:12:4e:28:2e:00:fc: ed:8c:ef:de:8a:ab:5b:14:19:c9:37:1a:56:39:b5: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:86:0B:4E:38:F2:D4:1C:14:45:D9:AC:69:C6:99:DB:F5:86:FF X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f8:1a:f3:e6:4c:c9:4e:53:c1:60:c0:95:b3:39:dd:e9:5f: 70:1e:1e:27:c9:28:a7:40:ce:5e:e7:3f:61:30:97:5d:19:34: bc:72:42:12:db:1a:7d:d8:c3:31:18:c4:81:3c:df:ff:2e:84: ad:15:54:4f:79:17:71:e2:ed:58:97:f2:47:5a:61:c1:93:d6: b2:83:8e:51:96:15:b6:3b:fa:d7:bc:be:d1:07:37:3a:79:8a: 7b:c7:04:dc:3f:3a:5c:a9:ac:94:0f:31:ce:c7:1a:4b:38:5f: 31:2d:95:02:f4:f5:d6:52:1b:50:95:73:49:fa:a3:67:6f:fa: 54:64:dc:30:70:19:c0:f8:59:f2:bc:1d:73:bd:ad:22:01:04: 04:6a:74:f1:93:7b:b1:e5:04:2c:73:4f:72:b4:7b:48:e5:38: 4d:eb:81:c1:8f:b8:79:3e:3a:61:0a:5b:70:9f:fd:f3:1e:a7: cb:ac:d1:62:c8:fd:1d:61:89:6c:8d:80:1d:ae:7a:d3:fd:bb: 02:8f:3d:c3:4b:72:77:1f:8c:2e:41:7e:a7:b7:0b:e1:59:d1: 48:a4:8c:96:df:8e:ba:da:44:cd:e4:a6:c2:9a:eb:a8:bb:e6: 7f:a8:06:a4:36:ad:90:60:eb:ba:07:d6:07:54:a5:a6:fb:43: 4e:7a:2b:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcQ/RpqYU8ANkTsJ5V0lyqyKg9AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA1MjkwNzIyMjJaFw0yNjA1MzAwODUzMjJaMDMxMTAvBgNV BAMTKENDOTY4NjBCNEUzOEYyRDQxQzE0NDVEOUFDNjlDNjk5REJGNTg2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXb8KuuCbrAaLWeY/je63TQN8X j9eqt7vrGC1iBHSMtrKRW4eIQ2i+DzjOZAEbLGDBgsNWFjsiH1sErC3Y7j2RVxd7 lSlvt99IYD5B2oZEYNNJ2WeBSSXJiToKErfEPAZihgHUF/xYusNCM5Gkeb6IYSZ2 t0ELmi6haNL6GJO2Cw768VDiD8EKZCV/gxZRlG5YTm/iHh6iAs0sxNuE/ngXutCT jTeO0j8WKKRobvxuPf/6OhIZ1nxb0uvmo3Bo3oEc5fMkumBn3ovJ69ZWITZbpQC3 7uTDHx2LJ9R8qF7QQEC2UC671WVKjhJOKC4A/O2M796Kq1sUGck3GlY5tSbtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzJaGC0448tQcFEXZrGnGmdv1hv8wHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/ga8+ZMyU5T wWDAlbM53elfcB4eJ8kop0DOXuc/YTCXXRk0vHJCEtsafdjDMRjEgTzf/y6ErRVU T3kXceLtWJfyR1phwZPWsoOOUZYVtjv617y+0Qc3OnmKe8cE3D86XKmslA8xzsca SzhfMS2VAvT11lIbUJVzSfqjZ2/6VGTcMHAZwPhZ8rwdc72tIgEEBGp08ZN7seUE LHNPcrR7SOU4TeuBwY+4eT46YQpbcJ/98x6ny6zRYsj9HWGJbI2AHa560/27Ao89 w0tydx+MLkF+p7cL4VnRSKSMlt+OutpEzeSmwprrqLvmf6gGpDatkGDrugfWB1Sl pvtDTnor1Q== -----END CERTIFICATE-----Generated at Fri May 29 22:05:29 2026 by rpki-client