$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: rA1XO91aSpQvu8kCQrCqpRXFFyd60cTXSQ4VfCNOHH4= Subject key identifier: 52:49:31:04:67:E8:7E:05:59:6C:B1:12:B7:3C:FE:59:B6:AA:77:E8 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 2DC75D45122CDA14E7B90F202B0DE497A32734EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: FC Signing time: Mon 27 Jul 2026 04:03:18 +0000 Manifest this update: Mon 27 Jul 2026 03:58:18 +0000 Manifest next update: Tue 28 Jul 2026 07:05:18 +0000 Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 2: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 3: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 4: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 5: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 6: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: eW6m+rW1daYKk2YFpTnZHmay7fkOEgxkT+YMv56+Q+Y=) 7: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 8: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c7:5d:45:12:2c:da:14:e7:b9:0f:20:2b:0d:e4:97:a3:27:34:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jul 27 03:58:18 2026 GMT Not After : Jul 28 07:05:18 2026 GMT Subject: CN=5249310467E87E05596CB112B73CFE59B6AA77E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:18:b1:19:65:f2:e4:67:fb:e4:d6:e2:57: b4:98:db:bd:2d:36:61:79:28:7b:25:76:20:99:f0: ce:90:37:11:a2:c9:7d:00:3a:28:79:e2:92:c8:30: ca:b0:a9:37:ef:80:d0:2b:bc:33:f6:c0:89:d0:48: 25:da:1b:ac:d5:43:e7:13:aa:09:9b:58:4d:86:f5: 4b:7a:4e:48:a6:62:40:a1:27:64:1d:3d:00:b5:c8: 16:2d:39:77:97:34:fb:78:97:6a:16:ee:3f:60:e5: d0:1c:20:20:1c:af:01:89:49:9f:55:93:85:43:1f: d8:10:09:0b:7d:bb:58:52:6e:09:c5:14:6b:1e:4c: 94:ba:94:c5:dd:fe:d2:e0:6f:fe:37:89:ed:26:01: 76:97:ed:c3:ce:a2:b2:95:d5:20:fc:21:dc:ba:30: c7:eb:c9:e9:fa:58:05:d1:58:0d:42:33:2c:27:9f: fd:e3:ea:de:da:d1:4b:c2:b1:4a:86:92:64:38:4f: 2f:4d:6b:b2:6c:7f:15:7f:a7:2d:11:35:85:ff:d3: 9f:24:ba:b1:99:fa:0c:f6:1d:0d:4f:95:31:92:79: a2:f4:bb:cd:0e:6a:2a:a6:ce:41:12:3a:be:2f:d1: b3:34:1b:3c:46:d1:67:46:ff:e5:64:d3:6a:85:a5: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:31:04:67:E8:7E:05:59:6C:B1:12:B7:3C:FE:59:B6:AA:77:E8 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2d:89:a6:08:22:a9:66:9b:a6:5f:9a:7a:83:6e:a3:ef:d6: 55:6d:74:cd:34:d8:89:ef:9d:ad:53:59:2a:cd:da:ac:ae:40: dc:bd:2c:67:1e:33:1d:52:ec:8f:8b:17:f8:64:f3:58:5d:5c: 9a:ad:8d:1d:3c:98:70:b2:2a:84:10:a6:a0:78:72:eb:c2:66: da:28:35:5d:98:20:72:98:67:c6:02:49:b0:d4:11:87:16:db: 4e:ab:a2:c7:12:7d:a4:e1:42:69:f8:64:f1:56:1d:00:9c:0a: 12:3c:93:0c:39:6a:40:d4:3d:82:2d:02:2a:ee:1e:28:9a:c9: 50:56:34:c9:f8:0b:84:09:00:47:b8:6c:2a:af:bd:f5:42:fe: 5f:44:a3:eb:be:de:35:ec:15:24:c9:39:1e:8f:b3:12:03:06: 3c:7f:a0:4c:d8:72:15:32:cb:6a:a5:72:ff:fe:11:36:76:27: fe:09:dd:86:3e:b8:03:31:72:1d:09:4f:fb:7e:00:08:e0:54: 1d:e5:09:e0:2f:04:21:79:21:99:bf:f6:40:05:b2:40:c8:54: c0:fc:0c:17:df:38:2c:09:73:45:4d:cd:69:6d:00:8c:05:0d: 07:7a:2e:3e:ee:51:72:c6:54:68:ff:34:2e:7e:6e:46:b5:a4: 2a:b7:fc:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULcddRRIs2hTnuQ8gKw3kl6MnNO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA3MjcwMzU4MThaFw0yNjA3MjgwNzA1MThaMDMxMTAvBgNV BAMTKDUyNDkzMTA0NjdFODdFMDU1OTZDQjExMkI3M0NGRTU5QjZBQTc3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiRixGWXy5Gf75NbiV7SY270t NmF5KHsldiCZ8M6QNxGiyX0AOih54pLIMMqwqTfvgNArvDP2wInQSCXaG6zVQ+cT qgmbWE2G9Ut6TkimYkChJ2QdPQC1yBYtOXeXNPt4l2oW7j9g5dAcICAcrwGJSZ9V k4VDH9gQCQt9u1hSbgnFFGseTJS6lMXd/tLgb/43ie0mAXaX7cPOorKV1SD8Idy6 MMfryen6WAXRWA1CMywnn/3j6t7a0UvCsUqGkmQ4Ty9Na7JsfxV/py0RNYX/058k urGZ+gz2HQ1PlTGSeaL0u80OaiqmzkESOr4v0bM0GzxG0WdG/+Vk02qFpVHbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUkkxBGfofgVZbLEStzz+Wbaqd+gwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi2JpggiqWab pl+aeoNuo+/WVW10zTTYie+drVNZKs3arK5A3L0sZx4zHVLsj4sX+GTzWF1cmq2N HTyYcLIqhBCmoHhy68Jm2ig1XZggcphnxgJJsNQRhxbbTquixxJ9pOFCafhk8VYd AJwKEjyTDDlqQNQ9gi0CKu4eKJrJUFY0yfgLhAkAR7hsKq+99UL+X0Sj677eNewV JMk5Ho+zEgMGPH+gTNhyFTLLaqVy//4RNnYn/gndhj64AzFyHQlP+34ACOBUHeUJ 4C8EIXkhmb/2QAWyQMhUwPwMF984LAlzRU3NaW0AjAUNB3ouPu5RcsZUaP80Ln5u RrWkKrf8EQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:57:16 2026 by rpki-client