$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: E2MC7xqSr75qJr2pG/O9IiTWVJrZ/f8gy4OhZRHfeCs= Subject key identifier: 0B:8C:A1:F1:C2:A9:76:85:25:32:C0:01:78:6D:E6:2B:88:F4:05:1A Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 656CAC59F4FB11C17C078D579152D7B4932494EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: ED Signing time: Tue 14 Jul 2026 10:06:01 +0000 Manifest this update: Tue 14 Jul 2026 10:01:01 +0000 Manifest next update: Wed 15 Jul 2026 11:48:01 +0000 Files and hashes: 1: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 2: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 3: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 4: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 5: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: bKDyTLNunhM5LoFjffbNLYHrhpBlzRnwk3dcoa18DWM=) 6: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) 7: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 8: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6c:ac:59:f4:fb:11:c1:7c:07:8d:57:91:52:d7:b4:93:24:94:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Jul 14 10:01:01 2026 GMT Not After : Jul 15 11:48:01 2026 GMT Subject: CN=0B8CA1F1C2A976852532C001786DE62B88F4051A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:be:5f:c9:df:9f:27:b6:63:71:b4:ad:e2: 1d:c9:fe:2c:0c:c7:01:15:6e:12:b2:78:1c:9d:68: 22:7a:99:b2:31:8e:69:88:73:15:6e:71:03:48:f7: 73:40:43:e4:75:c2:78:4c:b8:7f:91:34:71:1d:28: 14:e3:18:42:2b:67:20:ed:4e:5d:54:16:78:06:6c: b7:e2:8c:ef:69:07:0c:b8:5e:2c:c6:3e:15:14:e5: fe:65:09:87:3c:69:1c:5f:4d:89:d7:4a:68:2f:58: d5:71:ff:3b:17:0e:e7:f7:f6:01:5c:7c:17:fb:20: d5:db:9a:bf:1e:fd:3b:0d:c5:d1:55:a9:7a:f1:e7: a5:c5:80:04:2a:7d:2f:1a:ae:4a:43:82:9c:6d:9f: b2:e7:a5:f3:e8:a7:b7:c3:73:87:65:89:13:ec:f6: b8:94:3b:97:66:32:61:de:a1:d4:92:01:1c:e1:cc: 54:63:3a:49:cf:72:34:6e:fa:cf:6a:73:32:6d:dc: d1:89:ec:2c:1d:24:56:ba:50:9e:43:54:b9:07:a1: 7f:49:1c:79:37:9e:6d:f2:1c:f0:a9:ec:7b:06:be: 7c:a4:31:49:3b:7a:c9:83:c7:8d:e8:6c:f3:c1:15: 9d:62:6d:e3:16:49:b2:68:81:23:41:62:cf:80:2e: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8C:A1:F1:C2:A9:76:85:25:32:C0:01:78:6D:E6:2B:88:F4:05:1A X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:62:17:38:05:92:55:bb:f2:08:28:fa:b4:79:a4:08:bf:2a: 5b:8a:9f:f6:62:f6:40:e5:74:81:cd:ca:c6:4a:98:ea:71:42: 82:20:b3:d5:99:37:79:0f:98:16:bd:9e:a3:f0:16:99:46:d2: b9:85:6a:ed:89:58:42:38:3c:63:5f:b3:b4:74:5b:86:22:3d: 45:52:85:0b:94:e4:1b:df:02:ab:49:ed:af:75:71:8d:08:06: fa:05:3b:a2:41:89:28:de:ea:4c:6b:86:3e:c4:55:fb:cf:aa: 87:2d:a9:7e:73:a0:77:3e:a6:b1:09:00:f5:9b:99:cd:5e:34: 8d:91:bb:70:a8:3c:91:b1:57:df:37:32:d4:ed:09:95:ea:5d: 1b:76:99:26:d7:1d:8b:d5:d2:4a:d6:b7:0d:8e:a5:8c:2e:ea: 26:bd:dd:45:65:8c:2d:66:14:d6:c9:aa:fa:5b:44:f6:62:b4: 32:c5:14:45:fb:c8:7b:bc:75:6c:54:7a:fd:08:52:ff:f4:28: 4f:1c:bd:b0:67:cf:4b:c1:df:c1:b2:92:8e:b7:93:c9:63:b2: fe:84:75:4d:50:8f:a2:71:5b:73:83:62:79:70:c2:d4:12:7e: 94:d7:4b:1b:bb:09:ee:51:57:78:18:36:68:bd:de:b6:24:a1: 50:4c:ad:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZWysWfT7EcF8B41XkVLXtJMklOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA3MTQxMDAxMDFaFw0yNjA3MTUxMTQ4MDFaMDMxMTAvBgNV BAMTKDBCOENBMUYxQzJBOTc2ODUyNTMyQzAwMTc4NkRFNjJCODhGNDA1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Kr5fyd+fJ7ZjcbSt4h3J/iwM xwEVbhKyeBydaCJ6mbIxjmmIcxVucQNI93NAQ+R1wnhMuH+RNHEdKBTjGEIrZyDt Tl1UFngGbLfijO9pBwy4XizGPhUU5f5lCYc8aRxfTYnXSmgvWNVx/zsXDuf39gFc fBf7INXbmr8e/TsNxdFVqXrx56XFgAQqfS8arkpDgpxtn7LnpfPop7fDc4dliRPs 9riUO5dmMmHeodSSARzhzFRjOknPcjRu+s9qczJt3NGJ7CwdJFa6UJ5DVLkHoX9J HHk3nm3yHPCp7HsGvnykMUk7esmDx43obPPBFZ1ibeMWSbJogSNBYs+ALsCzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC4yh8cKpdoUlMsABeG3mK4j0BRowHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmIXOAWSVbvy CCj6tHmkCL8qW4qf9mL2QOV0gc3KxkqY6nFCgiCz1Zk3eQ+YFr2eo/AWmUbSuYVq 7YlYQjg8Y1+ztHRbhiI9RVKFC5TkG98Cq0ntr3VxjQgG+gU7okGJKN7qTGuGPsRV +8+qhy2pfnOgdz6msQkA9ZuZzV40jZG7cKg8kbFX3zcy1O0JlepdG3aZJtcdi9XS Sta3DY6ljC7qJr3dRWWMLWYU1smq+ltE9mK0MsUURfvIe7x1bFR6/QhS//QoTxy9 sGfPS8HfwbKSjreTyWOy/oR1TVCPonFbc4NieXDC1BJ+lNdLG7sJ7lFXeBg2aL3e tiShUEytVw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:44 2026 by rpki-client