$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: pOhQeWOK0q3bpl1KzvdFad34smBjqHvAVaTJBpkYw8U= Subject key identifier: 56:2F:B0:EB:E0:C4:39:89:ED:95:C7:BE:19:2C:96:42:30:64:18:29 Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 059862C58E742AA3C3F9B0E5C3703487417DD9A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: EC Signing time: Tue 14 Jul 2026 00:45:00 +0000 Manifest this update: Tue 14 Jul 2026 00:40:00 +0000 Manifest next update: Wed 15 Jul 2026 04:43:00 +0000 Files and hashes: 1: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) 2: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: GiJCHHIzLIXVSZi5m9ZDr2Pmr0vEZ0H1S350CBTRu+U=) 3: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:98:62:c5:8e:74:2a:a3:c3:f9:b0:e5:c3:70:34:87:41:7d:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Jul 14 00:40:00 2026 GMT Not After : Jul 15 04:43:00 2026 GMT Subject: CN=562FB0EBE0C43989ED95C7BE192C964230641829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1d:02:fb:e8:41:25:32:38:06:4d:23:00:ef: 7a:7b:fe:cb:d4:72:bb:49:14:b6:b8:db:c7:e4:1a: 34:15:a3:6d:ae:26:db:70:5d:80:30:23:9f:7e:bb: ae:d0:d4:43:e9:a0:a9:73:87:67:b1:a5:1b:62:93: f7:f0:60:b6:a7:9f:62:43:2b:f6:c2:38:f4:0f:d7: 47:d9:8a:98:15:f4:18:cf:c4:9d:04:7a:68:2b:ad: 1c:bd:83:7f:22:9c:ce:7b:f4:8f:af:63:05:f8:98: 7e:fd:e9:1c:5d:99:86:c2:56:da:cb:f1:42:7c:db: b2:51:7b:ca:a9:cb:bf:e8:1e:de:16:1e:5a:19:20: 79:30:71:ba:db:d3:a5:1f:ef:fe:58:65:89:5c:96: 63:55:59:e5:b1:3e:e8:bb:3c:01:e8:45:10:c5:c5: a5:d5:11:c7:dc:11:59:f8:00:8e:a8:91:ab:83:01: c3:7e:f1:c8:9e:ba:ef:b2:88:00:9f:fe:88:1e:f9: 08:16:1e:f6:13:78:64:ad:18:c7:d3:d1:66:ed:25: 8a:58:7d:9b:4d:8f:07:fb:10:48:f0:19:f7:67:4c: 22:9e:7c:17:41:e8:21:2d:27:4e:42:77:a6:68:9f: e5:96:fa:5a:94:c3:ea:64:31:0e:02:ac:06:9d:7d: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:B0:EB:E0:C4:39:89:ED:95:C7:BE:19:2C:96:42:30:64:18:29 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:39:ec:a0:f9:cd:2d:82:e1:d5:64:c5:6a:1d:17:51:71:76: 43:a8:a2:e2:a0:25:6f:ee:be:be:93:de:71:53:7d:0a:2a:96: 88:2c:bd:36:98:ac:8b:bc:cf:bc:c0:34:45:7d:ae:f0:d3:b7: 43:f2:a7:ea:69:8a:06:ce:06:ab:9c:bc:ab:e2:46:ad:55:d0: 10:33:16:48:23:e6:b1:ba:31:c2:1b:c4:74:0d:dc:34:1f:74: a3:9e:88:46:36:99:3d:06:c0:b7:0d:92:20:81:b1:5a:04:7e: 57:5f:68:8a:4a:d0:82:e7:59:d8:c3:df:b3:29:21:6e:62:8a: 8a:a9:71:fd:91:f2:ef:31:9e:a5:5b:40:44:6a:87:ef:9f:e6: b9:9c:aa:36:ff:f1:68:4f:b5:37:75:d1:6f:69:d9:fb:60:29: ed:31:ab:67:2f:60:4c:37:5a:9a:7f:2c:2e:be:98:0f:1e:60: d8:a5:c2:d8:be:7a:3a:b5:41:6a:94:96:b6:d8:80:1c:8b:22: dc:a0:d3:41:01:1f:34:3e:61:49:63:87:fa:bb:f8:39:85:6f: 2c:36:01:14:86:2f:7f:f5:65:8b:68:67:c7:da:57:6c:d1:31: 8d:6b:04:4b:51:7f:2c:e5:7d:71:e3:d5:8b:78:b4:94:06:50: de:5e:5d:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBZhixY50KqPD+bDlw3A0h0F92acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjA3MTQwMDQwMDBaFw0yNjA3MTUwNDQzMDBaMDMxMTAvBgNV BAMTKDU2MkZCMEVCRTBDNDM5ODlFRDk1QzdCRTE5MkM5NjQyMzA2NDE4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHQL76EElMjgGTSMA73p7/svU crtJFLa428fkGjQVo22uJttwXYAwI59+u67Q1EPpoKlzh2expRtik/fwYLann2JD K/bCOPQP10fZipgV9BjPxJ0EemgrrRy9g38inM579I+vYwX4mH796RxdmYbCVtrL 8UJ827JRe8qpy7/oHt4WHloZIHkwcbrb06Uf7/5YZYlclmNVWeWxPui7PAHoRRDF xaXVEcfcEVn4AI6okauDAcN+8cieuu+yiACf/oge+QgWHvYTeGStGMfT0WbtJYpY fZtNjwf7EEjwGfdnTCKefBdB6CEtJ05Cd6Zon+WW+lqUw+pkMQ4CrAadfXrzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVi+w6+DEOYntlce+GSyWQjBkGCkwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDnsoPnNLYLh 1WTFah0XUXF2Q6ii4qAlb+6+vpPecVN9CiqWiCy9Npisi7zPvMA0RX2u8NO3Q/Kn 6mmKBs4Gq5y8q+JGrVXQEDMWSCPmsboxwhvEdA3cNB90o56IRjaZPQbAtw2SIIGx WgR+V19oikrQgudZ2MPfsykhbmKKiqlx/ZHy7zGepVtARGqH75/muZyqNv/xaE+1 N3XRb2nZ+2Ap7TGrZy9gTDdamn8sLr6YDx5g2KXC2L56OrVBapSWttiAHIsi3KDT QQEfND5hSWOH+rv4OYVvLDYBFIYvf/Vli2hnx9pXbNExjWsES1F/LOV9cePVi3i0 lAZQ3l5dRg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:58 2026 by rpki-client