$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: q1q+jUPTHpc32Dp3oU7Npk9mbOHeOSyg/4mz2D+V+kw= Subject key identifier: 2B:FC:2E:E8:32:77:D9:25:25:41:A3:02:82:42:32:43:AE:C0:AC:4E Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 34603890A40827CCFB21558E137A3126AE4EE277 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 0127 Signing time: Sun 26 Jul 2026 07:15:57 +0000 Manifest this update: Sun 26 Jul 2026 07:10:57 +0000 Manifest next update: Mon 27 Jul 2026 07:20:57 +0000 Files and hashes: 1: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 3: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: /LiYt6Y1ooJVCtcJz8b3FkuDYQFY4MMWqgt0Chset6w=) 4: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 07:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:60:38:90:a4:08:27:cc:fb:21:55:8e:13:7a:31:26:ae:4e:e2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Jul 26 07:10:57 2026 GMT Not After : Jul 27 07:20:57 2026 GMT Subject: CN=2BFC2EE83277D9252541A30282423243AEC0AC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:b8:26:1b:61:be:43:58:6b:94:8a:31:e2: f5:ff:ec:69:f4:91:16:72:db:23:7a:c9:46:75:36: fd:7e:e0:04:32:3d:f3:f5:1e:f0:9e:82:1c:f2:87: 48:4a:1b:9b:db:2d:e6:51:59:21:b2:f4:a3:d2:b2: 1e:26:1c:12:43:59:64:8d:a6:7f:de:e8:25:d4:70: b4:75:b5:74:2d:3b:17:3f:dd:32:8a:42:24:d5:7e: b2:8c:5e:5f:92:22:30:f6:8b:3b:cf:1d:0f:c6:26: de:59:c0:4c:c1:86:a9:e6:87:e1:73:a4:b1:a0:c8: b0:c9:6e:c0:07:94:1c:0d:5a:e3:bc:1a:87:7d:93: 25:d4:f8:2a:e7:72:1b:68:8b:1b:ae:e1:6a:0f:15: 35:0e:5d:6e:07:ba:85:20:9a:5c:66:76:51:d3:d2: 8f:8b:71:37:82:b0:3b:0b:de:fe:e5:b2:ae:4d:7f: ab:61:3b:f4:6c:b4:f5:75:0b:f2:ea:d4:1b:a8:b9: f8:51:43:1d:45:bc:24:29:2b:23:39:b3:0c:47:73: 8d:15:06:f3:d3:a1:f5:e2:28:60:92:b3:5d:8c:e9: 30:2b:ce:4d:0e:9b:7f:ef:d5:0d:29:cb:8b:af:ee: 48:1d:d2:71:09:9d:fa:95:90:2a:4a:69:0b:4b:a1: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FC:2E:E8:32:77:D9:25:25:41:A3:02:82:42:32:43:AE:C0:AC:4E X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:72:96:c2:9d:e8:5c:1d:59:4c:42:b3:26:63:65:01:50:56: 1a:51:ab:78:75:f9:22:cf:81:07:35:96:36:2d:fa:d4:7a:50: b8:f6:6e:3f:a4:18:ed:a1:93:d4:50:ba:59:86:71:f0:0b:f0: 50:97:d3:50:2b:6a:fb:33:80:f4:65:42:bb:91:0b:3d:08:d5: 22:04:e3:8f:21:4f:df:09:38:5b:d5:34:ce:8a:d1:4a:f1:c1: 14:33:1f:45:04:33:1c:ec:62:17:92:2c:ce:7b:bf:f1:94:e9: c4:de:6b:1d:d7:62:d6:24:ca:71:aa:32:af:0d:60:fd:a1:00: dc:62:10:87:73:be:80:39:e4:ec:aa:9a:47:75:00:4b:ca:5d: 80:73:ec:be:3f:d4:b4:2f:f6:3c:b5:72:33:5a:84:fc:6e:a7: 36:e9:60:3a:10:e1:22:00:5c:50:ec:12:60:b9:77:3e:a5:ca: ea:2c:63:35:07:8a:16:b7:82:93:40:d2:d4:54:b0:2a:73:05: ab:39:c5:47:6a:ae:cf:d4:b5:c4:47:3d:d2:7d:0c:da:30:e3: 85:9c:36:b0:da:8d:3c:45:ed:f3:c1:bf:96:46:c1:8f:e1:ca: 73:93:36:10:70:46:46:35:9d:b5:0c:7b:59:e6:2e:a5:87:ec: ca:b8:1c:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNGA4kKQIJ8z7IVWOE3oxJq5O4ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA3MjYwNzEwNTdaFw0yNjA3MjcwNzIwNTdaMDMxMTAvBgNV BAMTKDJCRkMyRUU4MzI3N0Q5MjUyNTQxQTMwMjgyNDIzMjQzQUVDMEFDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZabgmG2G+Q1hrlIox4vX/7Gn0 kRZy2yN6yUZ1Nv1+4AQyPfP1HvCeghzyh0hKG5vbLeZRWSGy9KPSsh4mHBJDWWSN pn/e6CXUcLR1tXQtOxc/3TKKQiTVfrKMXl+SIjD2izvPHQ/GJt5ZwEzBhqnmh+Fz pLGgyLDJbsAHlBwNWuO8God9kyXU+Crnchtoixuu4WoPFTUOXW4HuoUgmlxmdlHT 0o+LcTeCsDsL3v7lsq5Nf6thO/RstPV1C/Lq1BuoufhRQx1FvCQpKyM5swxHc40V BvPTofXiKGCSs12M6TArzk0Om3/v1Q0py4uv7kgd0nEJnfqVkCpKaQtLoeDrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK/wu6DJ32SUlQaMCgkIyQ67ArE4wHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3KWwp3oXB1Z TEKzJmNlAVBWGlGreHX5Is+BBzWWNi361HpQuPZuP6QY7aGT1FC6WYZx8AvwUJfT UCtq+zOA9GVCu5ELPQjVIgTjjyFP3wk4W9U0zorRSvHBFDMfRQQzHOxiF5Isznu/ 8ZTpxN5rHddi1iTKcaoyrw1g/aEA3GIQh3O+gDnk7KqaR3UAS8pdgHPsvj/UtC/2 PLVyM1qE/G6nNulgOhDhIgBcUOwSYLl3PqXK6ixjNQeKFreCk0DS1FSwKnMFqznF R2quz9S1xEc90n0M2jDjhZw2sNqNPEXt88G/lkbBj+HKc5M2EHBGRjWdtQx7WeYu pYfsyrgcLg== -----END CERTIFICATE-----Generated at Sun Jul 26 20:28:17 2026 by rpki-client