$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: AgaTmBw6RQzNV6PEKUYCBxV0QfEJ+qU+ysRLUihpX/o= Subject key identifier: 53:2B:91:D1:89:01:E7:3D:3D:51:1A:08:5C:39:66:A2:90:A6:B3:31 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 097FD6286099C4E5523A1D12A441CFD7C4E730A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 87 Signing time: Tue 14 Jul 2026 05:55:34 +0000 Manifest this update: Tue 14 Jul 2026 05:50:34 +0000 Manifest next update: Wed 15 Jul 2026 09:42:34 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 2: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 3: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 4: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 5: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 6: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: ps0zQSIYFtT8Mb5E0Hf0Ct248S/zUm635rOWx+A5Y4M=) 7: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7f:d6:28:60:99:c4:e5:52:3a:1d:12:a4:41:cf:d7:c4:e7:30:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Jul 14 05:50:34 2026 GMT Not After : Jul 15 09:42:34 2026 GMT Subject: CN=532B91D18901E73D3D511A085C3966A290A6B331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:7c:ac:52:df:bd:29:83:c9:2e:89:67:98: 42:ba:e6:66:05:69:0b:c9:71:db:ff:31:38:44:dd: b9:fb:96:6b:ff:b1:25:a9:e4:d1:2f:b6:ea:fb:29: d4:91:90:f6:4d:26:71:b5:65:b8:69:87:51:e9:a9: 35:6e:4f:66:93:af:70:57:3c:78:94:30:d0:8c:93: 61:21:bd:12:7f:e8:f6:58:26:10:6b:a1:28:f7:e5: ba:72:c4:54:0d:7e:93:18:5d:ca:70:08:8e:f4:95: b7:13:95:12:97:94:6c:83:0a:70:4e:be:c7:6d:85: 80:76:81:36:96:3e:23:c1:95:70:7b:3a:14:0e:fd: 70:a0:4e:ea:09:3b:80:35:b8:47:23:ed:44:c2:b7: a0:80:19:98:af:0f:fd:8b:30:9d:fa:fa:cf:cc:03: 24:29:c8:5f:d2:20:19:a3:02:55:e9:41:6b:08:6a: 75:ad:ef:f5:6e:d6:94:02:9b:e0:fa:01:32:71:e6: db:b7:86:b1:53:e4:23:41:7a:81:ff:ab:fb:4d:69: 54:04:6f:95:f1:c2:aa:5c:b4:06:00:a0:62:a5:cf: d7:b3:cd:ed:fc:1e:4a:d4:b1:24:94:53:84:a3:13: c4:50:89:be:49:9d:15:41:97:6d:4d:a6:d3:ba:83: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:91:D1:89:01:E7:3D:3D:51:1A:08:5C:39:66:A2:90:A6:B3:31 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:67:74:81:7a:a3:bd:93:b6:6c:af:b4:ff:44:48:5a:0a:aa: 91:e7:fd:cc:35:87:47:20:2c:9f:ab:7e:61:d7:50:1d:f4:46: 17:fd:9f:3c:34:6f:b8:22:5e:6b:4d:22:fa:18:f1:e4:d0:55: 27:c3:61:57:05:48:96:ec:2c:4d:5e:e1:b7:75:7e:2d:63:9b: d7:e5:f8:0e:49:e9:27:e9:18:9d:24:7f:b3:21:b8:60:f9:8e: a4:4d:fd:cb:73:1c:22:a4:db:a3:10:6f:84:ce:0e:ff:c2:62: 61:b0:a4:78:e7:37:38:1c:ef:99:d1:0e:52:72:70:0e:8e:70: 35:63:51:d7:f1:ba:20:d0:1c:a4:fd:c8:89:94:61:9b:2f:ef: 86:d9:60:72:9d:89:63:4d:ae:31:01:c2:c2:ce:5d:a6:a1:f3: 0e:b7:48:c8:bd:c9:f1:c4:3e:0c:54:c1:08:a1:01:4d:cc:1c: 7c:cf:ee:e8:fd:9a:ca:fb:81:bf:78:e9:2f:96:37:90:bc:37: 38:fc:c6:1d:70:54:5e:3b:fd:bc:f5:35:ac:f5:4f:82:18:1f: 8c:a5:fb:ea:a7:4e:cf:65:dd:df:35:88:bb:b2:6b:30:70:bd: ed:08:99:60:5f:1c:1d:d2:f3:2d:00:a4:00:5b:9c:a3:05:f5: bd:4a:27:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCX/WKGCZxOVSOh0SpEHP18TnMKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA3MTQwNTUwMzRaFw0yNjA3MTUwOTQyMzRaMDMxMTAvBgNV BAMTKDUzMkI5MUQxODkwMUU3M0QzRDUxMUEwODVDMzk2NkEyOTBBNkIzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2nysUt+9KYPJLolnmEK65mYF aQvJcdv/MThE3bn7lmv/sSWp5NEvtur7KdSRkPZNJnG1Zbhph1HpqTVuT2aTr3BX PHiUMNCMk2EhvRJ/6PZYJhBroSj35bpyxFQNfpMYXcpwCI70lbcTlRKXlGyDCnBO vsdthYB2gTaWPiPBlXB7OhQO/XCgTuoJO4A1uEcj7UTCt6CAGZivD/2LMJ36+s/M AyQpyF/SIBmjAlXpQWsIanWt7/Vu1pQCm+D6ATJx5tu3hrFT5CNBeoH/q/tNaVQE b5XxwqpctAYAoGKlz9ezze38HkrUsSSUU4SjE8RQib5JnRVBl21NptO6g2vHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUyuR0YkB5z09URoIXDlmopCmszEwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmd0gXqjvZO2 bK+0/0RIWgqqkef9zDWHRyAsn6t+YddQHfRGF/2fPDRvuCJea00i+hjx5NBVJ8Nh VwVIluwsTV7ht3V+LWOb1+X4DknpJ+kYnSR/syG4YPmOpE39y3McIqTboxBvhM4O /8JiYbCkeOc3OBzvmdEOUnJwDo5wNWNR1/G6INAcpP3IiZRhmy/vhtlgcp2JY02u MQHCws5dpqHzDrdIyL3J8cQ+DFTBCKEBTcwcfM/u6P2ayvuBv3jpL5Y3kLw3OPzG HXBUXjv9vPU1rPVPghgfjKX76qdOz2Xd3zWIu7JrMHC97QiZYF8cHdLzLQCkAFuc owX1vUon7w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:32 2026 by rpki-client