$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json) Hash identifier: dRDXcN62ASpgAP0jCHiS8zopcPk24oSZv0OZfllRPYc= Subject key identifier: DC:8F:83:83:D3:4B:55:00:FA:A3:F2:7F:B0:EA:15:B4:ED:71:51:99 Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Certificate serial: 59F964ECC9DDC1C2F26A06D79D4FBF5910BEFB4C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft Manifest number: 4F Signing time: Fri 29 May 2026 16:23:01 +0000 Manifest this update: Fri 29 May 2026 16:18:01 +0000 Manifest next update: Sat 30 May 2026 16:56:01 +0000 Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: dnF9wQLd865ejrBj6SIKOwNAJv53O5TGYNuP9/bcc2Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f9:64:ec:c9:dd:c1:c2:f2:6a:06:d7:9d:4f:bf:59:10:be:fb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Validity Not Before: May 29 16:18:01 2026 GMT Not After : May 30 16:56:01 2026 GMT Subject: CN=DC8F8383D34B5500FAA3F27FB0EA15B4ED715199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:fe:6f:f9:f7:5b:a3:9b:1f:e5:42:25:13: 15:8a:a4:86:83:29:7e:9c:7a:c7:d2:fa:f7:b4:9c: 73:dd:de:e2:b6:ff:b9:60:db:17:22:ae:ea:54:6c: f4:f7:a8:96:94:e8:cd:ab:86:ac:93:8f:e2:eb:ad: 88:b4:e8:68:f0:de:32:98:c6:d8:81:69:4f:91:09: d3:89:1f:79:e7:b0:93:af:7c:1b:70:a4:8b:46:d0: f0:e9:45:30:9e:bc:41:73:f6:d3:b4:48:d4:51:a7: ce:53:53:e0:60:74:02:0f:34:cd:a5:45:16:0c:1f: e2:15:47:43:22:12:b3:a9:a4:46:df:4a:fe:20:00: 62:7b:bf:7b:8d:eb:3b:3e:cf:f7:bc:a0:f4:12:3b: be:15:1b:8a:58:ee:9c:7e:b2:91:f8:1c:ab:77:e0: cb:31:b1:cb:2c:9c:f2:13:0b:af:d9:2b:d9:a1:09: 00:2d:af:a7:19:69:c2:73:81:cc:ee:89:aa:7e:a6: 54:1f:49:11:0a:a9:52:11:b1:ea:3b:13:a3:ef:32: 60:49:b2:a8:a5:c2:00:ef:78:7d:0b:f0:b1:17:d0: 04:7e:b9:5b:e8:e7:66:e9:83:e1:35:7d:33:84:e2: ad:8d:40:f6:67:fe:68:62:36:41:26:f6:72:98:26: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:83:83:D3:4B:55:00:FA:A3:F2:7F:B0:EA:15:B4:ED:71:51:99 X509v3 Authority Key Identifier: keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c0:1c:a6:fd:6a:b0:cd:22:8d:e0:35:dc:9b:69:77:d8:0d: 8a:2e:53:31:e3:2b:3d:45:16:3f:12:20:74:b2:e3:30:2b:01: 71:7e:59:4c:86:8b:e8:0d:7a:65:db:8e:d1:1b:76:fe:b4:5d: 6e:80:eb:6c:6e:b9:1b:cc:eb:24:fd:d2:e9:34:19:7c:77:56: 48:97:0b:9e:01:28:cb:38:30:66:a6:cf:89:75:49:79:75:dc: 4a:96:48:a4:eb:ea:cc:83:ac:b2:a5:73:79:26:e2:bd:1a:06: 8c:20:8e:cc:c8:76:0a:9d:71:ad:4f:ca:f4:e0:c7:5a:30:bc: 0c:98:5f:5b:3f:a2:39:52:bc:93:e9:2c:4c:52:36:aa:43:e1: 41:4c:a7:20:44:ac:47:78:f9:6e:88:2c:49:36:2e:ad:0b:ce: 52:70:60:fd:95:d2:aa:94:41:b8:54:ce:eb:2f:3a:2e:12:c4: 84:98:44:c8:db:4b:22:d9:b0:d6:7e:cc:61:73:82:45:e6:42: 93:c9:a4:fd:b7:d0:ea:09:cf:2c:95:ee:2a:80:b0:9d:ef:f2: eb:ab:b9:f8:f7:56:66:24:61:42:c4:ed:26:81:f0:7e:2a:59: 06:50:a4:cb:98:4a:aa:02:b8:bf:86:fc:09:14:17:11:ff:88: 04:fc:68:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWflk7MndwcLyagbXnU+/WRC++0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2 QzM4QzE0RTAeFw0yNjA1MjkxNjE4MDFaFw0yNjA1MzAxNjU2MDFaMDMxMTAvBgNV BAMTKERDOEY4MzgzRDM0QjU1MDBGQUEzRjI3RkIwRUExNUI0RUQ3MTUxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Wv5v+fdbo5sf5UIlExWKpIaD KX6cesfS+ve0nHPd3uK2/7lg2xcirupUbPT3qJaU6M2rhqyTj+LrrYi06Gjw3jKY xtiBaU+RCdOJH3nnsJOvfBtwpItG0PDpRTCevEFz9tO0SNRRp85TU+BgdAIPNM2l RRYMH+IVR0MiErOppEbfSv4gAGJ7v3uN6zs+z/e8oPQSO74VG4pY7px+spH4HKt3 4MsxscssnPITC6/ZK9mhCQAtr6cZacJzgczuiap+plQfSREKqVIRseo7E6PvMmBJ sqilwgDveH0L8LEX0AR+uVvo52bpg+E1fTOE4q2NQPZn/mhiNkEm9nKYJmARAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3I+Dg9NLVQD6o/J/sOoVtO1xUZkwHwYDVR0j BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMAcpv1qsM0i jeA13Jtpd9gNii5TMeMrPUUWPxIgdLLjMCsBcX5ZTIaL6A16ZduO0Rt2/rRdboDr bG65G8zrJP3S6TQZfHdWSJcLngEoyzgwZqbPiXVJeXXcSpZIpOvqzIOssqVzeSbi vRoGjCCOzMh2Cp1xrU/K9ODHWjC8DJhfWz+iOVK8k+ksTFI2qkPhQUynIESsR3j5 bogsSTYurQvOUnBg/ZXSqpRBuFTO6y86LhLEhJhEyNtLItmw1n7MYXOCReZCk8mk /bfQ6gnPLJXuKoCwne/y66u5+PdWZiRhQsTtJoHwfipZBlCky5hKqgK4v4b8CRQX Ef+IBPxojA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client