$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: hMMWmIe50xbTT3/p1VN5k2bWuWYWbiWCTFR4KZpMV3I= Subject key identifier: 8F:95:D8:33:60:97:59:EF:2C:68:1F:96:E1:69:16:03:C2:38:63:AD Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 59CE3729FDD9B8935F7AE3EAEBCCE674D97213D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: C3 Signing time: Tue 21 Jul 2026 14:18:55 +0000 Manifest this update: Tue 21 Jul 2026 14:13:55 +0000 Manifest next update: Wed 22 Jul 2026 16:04:55 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: 8jrz2Awpj1VPjgnIzAL6Rpq/uiuxzUJ7UITxraIr2Yg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 16:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ce:37:29:fd:d9:b8:93:5f:7a:e3:ea:eb:cc:e6:74:d9:72:13:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: Jul 21 14:13:55 2026 GMT Not After : Jul 22 16:04:55 2026 GMT Subject: CN=8F95D833609759EF2C681F96E1691603C23863AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:31:70:4a:73:a6:02:d7:3d:61:be:cb:ee: ed:ff:73:d2:30:32:64:53:a9:27:d6:be:91:c8:85: 0f:02:87:59:87:26:e8:e8:73:e0:0a:1f:8c:82:6e: d7:b0:d8:f3:c4:5d:91:5c:bf:f9:f2:7f:8e:e3:72: aa:05:4c:fc:ad:49:c0:f8:8f:b0:65:d0:c6:39:9f: 33:1c:f9:cc:23:ee:57:2d:7e:a2:e1:df:c7:e5:d5: 34:c2:28:30:75:21:45:7e:bd:42:d5:6f:6f:6e:c5: fc:53:f7:30:b1:bb:86:3f:e4:c9:00:7d:3e:4d:4e: 9b:cb:c9:73:ea:2d:a4:68:21:9f:b8:aa:74:0c:63: 40:5e:93:72:72:3f:23:b9:bd:c2:6b:52:34:5d:62: c9:9e:ae:3f:52:1f:d1:25:ce:cf:91:24:bb:4d:88: 59:b0:58:c9:d1:b1:ce:10:ed:17:65:05:20:f1:34: 26:1a:74:80:a6:61:c2:d6:51:69:57:d1:c7:67:0d: 5f:0d:34:95:4a:35:1f:39:de:b1:38:a6:d4:83:a8: 0c:34:d2:b4:27:da:ea:fb:e6:be:0f:cb:c5:c7:bf: 41:fc:d3:b4:84:b9:31:37:99:19:a4:95:d4:d4:39: a0:9c:12:01:15:24:a4:83:07:2b:73:7c:b2:bb:7f: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:95:D8:33:60:97:59:EF:2C:68:1F:96:E1:69:16:03:C2:38:63:AD X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:a5:90:e9:49:1c:23:d4:fc:e0:57:4d:3a:53:c1:86:f1: 49:44:f6:39:bd:59:0b:3e:74:3c:3f:0a:20:c7:b8:d0:13:c7: 9f:73:e8:84:1e:49:d0:bf:00:3a:81:5d:08:54:69:bc:89:75: 8f:f9:74:a0:e8:45:e1:93:71:6c:43:56:60:7a:fe:96:b6:0d: 97:32:83:2e:c5:06:64:f5:09:f2:73:92:ce:2a:f9:d3:4d:5d: 7e:3c:c4:96:28:c5:8a:10:44:dd:f9:aa:49:fc:5e:23:10:7c: c1:f0:ea:fb:a0:47:78:a1:15:5e:a8:bd:68:98:36:0d:12:fb: 8d:3c:04:e9:b3:9b:e3:1f:ec:37:67:02:17:e7:2f:c3:ac:28: 11:dc:54:bd:ef:9a:e1:e8:d0:c0:41:41:34:67:10:e4:79:2d: da:29:fb:32:fa:43:4c:4b:3e:c4:60:d2:ee:67:41:04:9e:8e: c7:83:90:1f:16:43:cd:72:52:98:e9:bf:9d:cb:c1:15:8a:64: 2b:82:ed:aa:d5:47:d8:46:76:8f:1d:8c:97:8f:84:70:0f:ad: 80:ed:ea:34:1a:7b:3c:d2:41:83:60:3c:2b:18:5d:56:ab:0b: bb:b1:95:62:a6:9b:71:5e:eb:52:75:98:51:6b:b8:06:fa:e4: df:d7:e4:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWc43Kf3ZuJNfeuPq68zmdNlyE9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjA3MjExNDEzNTVaFw0yNjA3MjIxNjA0NTVaMDMxMTAvBgNV BAMTKDhGOTVEODMzNjA5NzU5RUYyQzY4MUY5NkUxNjkxNjAzQzIzODYzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgTFwSnOmAtc9Yb7L7u3/c9Iw MmRTqSfWvpHIhQ8Ch1mHJujoc+AKH4yCbtew2PPEXZFcv/nyf47jcqoFTPytScD4 j7Bl0MY5nzMc+cwj7lctfqLh38fl1TTCKDB1IUV+vULVb29uxfxT9zCxu4Y/5MkA fT5NTpvLyXPqLaRoIZ+4qnQMY0Bek3JyPyO5vcJrUjRdYsmerj9SH9Elzs+RJLtN iFmwWMnRsc4Q7RdlBSDxNCYadICmYcLWUWlX0cdnDV8NNJVKNR853rE4ptSDqAw0 0rQn2ur75r4Py8XHv0H807SEuTE3mRmkldTUOaCcEgEVJKSDBytzfLK7f+VZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj5XYM2CXWe8saB+W4WkWA8I4Y60wHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXGlkOlJHCPU /OBXTTpTwYbxSUT2Ob1ZCz50PD8KIMe40BPHn3PohB5J0L8AOoFdCFRpvIl1j/l0 oOhF4ZNxbENWYHr+lrYNlzKDLsUGZPUJ8nOSzir5001dfjzElijFihBE3fmqSfxe IxB8wfDq+6BHeKEVXqi9aJg2DRL7jTwE6bOb4x/sN2cCF+cvw6woEdxUve+a4ejQ wEFBNGcQ5Hkt2in7MvpDTEs+xGDS7mdBBJ6Ox4OQHxZDzXJSmOm/ncvBFYpkK4Lt qtVH2EZ2jx2Ml4+EcA+tgO3qNBp7PNJBg2A8KxhdVqsLu7GVYqabcV7rUnWYUWu4 Bvrk39fkig== -----END CERTIFICATE-----Generated at Tue Jul 21 21:46:15 2026 by rpki-client