$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: A4Rwub/s5gfQJ8FLjMB/nkoh9WRgngyzohOznDQ4p6k= Subject key identifier: D8:27:A1:10:BA:B4:50:40:BC:64:F0:72:29:EF:4F:4A:69:1F:7F:69 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 5671C911C7D586990E6D4EEC311CE952EC4EB8CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 8D Signing time: Mon 27 Jul 2026 15:09:19 +0000 Manifest this update: Mon 27 Jul 2026 15:04:19 +0000 Manifest next update: Tue 28 Jul 2026 15:54:19 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 2: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: orwwLmUeKwb0Wdgcjf4D0rVg18HxinUXpkr0Go+yC9M=) 3: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 4: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:71:c9:11:c7:d5:86:99:0e:6d:4e:ec:31:1c:e9:52:ec:4e:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Jul 27 15:04:19 2026 GMT Not After : Jul 28 15:54:19 2026 GMT Subject: CN=D827A110BAB45040BC64F07229EF4F4A691F7F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:39:22:9d:07:15:cb:7a:8a:c5:c4:63:44: 1d:16:6d:d0:a9:d0:1d:20:51:1a:ab:56:ef:a4:0d: 78:ac:99:4b:60:f5:91:d5:80:69:d4:d0:97:81:b7: da:2e:d7:60:39:c3:41:b4:c9:b5:1c:f8:0f:87:46: 4e:9c:5c:cb:2a:bc:3d:c7:09:f8:89:ec:42:82:ef: f8:ec:81:a2:60:ed:dc:7e:c6:50:86:7b:c2:d5:30: 03:b2:d9:22:a7:bd:cd:1e:49:e9:f2:dc:59:ec:1c: dc:32:c8:b0:61:d1:27:de:0f:77:be:9d:71:49:cc: b5:ca:02:e4:59:56:75:ac:f6:45:ca:7b:69:6b:8c: 83:4e:84:88:cd:b0:36:f9:48:f4:0e:b8:72:94:a2: 63:07:37:21:be:e3:c4:7a:52:f9:8f:5b:f5:b7:b5: 3f:b8:72:d9:69:c9:53:bd:b8:b6:22:ab:31:47:ef: 1d:c0:a5:2f:c9:e1:f9:6a:59:9d:6d:11:8d:38:b2: d9:13:81:dc:54:8d:59:31:4c:dd:25:b5:b5:fe:5e: fb:ec:85:f2:f5:74:a3:c6:f3:ad:2c:58:38:b4:2f: 87:a4:52:1b:75:d5:1f:ab:fe:5d:9b:18:99:d9:d8: 61:a1:51:ba:d5:19:69:21:a1:a5:5f:4c:62:ca:96: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:27:A1:10:BA:B4:50:40:BC:64:F0:72:29:EF:4F:4A:69:1F:7F:69 X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ff:93:37:29:d3:78:3a:0d:8c:1e:5f:01:48:ed:84:ed:ed: f8:96:f5:0e:67:df:37:f3:1f:77:5a:96:66:a5:74:56:41:ca: dd:25:94:8c:67:fe:ad:63:a8:bf:e8:10:21:b6:30:ad:85:94: 66:0a:f0:c0:8d:48:ad:d5:c3:a0:9f:2f:ef:ce:fa:5d:ad:fb: 71:c9:c1:27:a5:09:86:58:55:97:a7:1d:02:26:bc:2d:53:6c: b8:40:7f:6b:7c:29:4c:e5:43:45:29:00:65:03:d6:44:70:5c: 97:38:40:b7:fc:ba:7e:b9:ef:86:29:b6:1b:07:4c:3f:92:0f: ed:7c:65:89:e4:eb:ac:0b:8d:d6:e9:a4:b1:90:d1:5d:0e:88: 6f:e5:4a:8f:08:35:c6:54:dd:99:94:ab:21:8d:4b:0e:97:1b: 66:f0:eb:54:4f:d6:f2:51:82:63:41:94:e1:1b:e0:0c:8e:7d: e1:b5:d9:f4:78:bd:58:8d:1c:c2:47:86:1f:24:08:0b:06:e8: b4:ec:02:59:2c:f1:d9:fd:91:12:fa:f1:17:5c:4a:b6:bc:4c: b4:e6:e8:7e:1a:43:06:9a:ed:b7:a5:10:f7:66:96:45:d2:e0: 30:60:84:ba:f8:da:82:cc:30:86:fe:a4:f5:29:a8:8d:16:b3: 1b:60:38:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVnHJEcfVhpkObU7sMRzpUuxOuM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA3MjcxNTA0MTlaFw0yNjA3MjgxNTU0MTlaMDMxMTAvBgNV BAMTKEQ4MjdBMTEwQkFCNDUwNDBCQzY0RjA3MjI5RUY0RjRBNjkxRjdGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sjkinQcVy3qKxcRjRB0WbdCp 0B0gURqrVu+kDXismUtg9ZHVgGnU0JeBt9ou12A5w0G0ybUc+A+HRk6cXMsqvD3H CfiJ7EKC7/jsgaJg7dx+xlCGe8LVMAOy2SKnvc0eSeny3FnsHNwyyLBh0SfeD3e+ nXFJzLXKAuRZVnWs9kXKe2lrjINOhIjNsDb5SPQOuHKUomMHNyG+48R6UvmPW/W3 tT+4ctlpyVO9uLYiqzFH7x3ApS/J4flqWZ1tEY04stkTgdxUjVkxTN0ltbX+Xvvs hfL1dKPG860sWDi0L4ekUht11R+r/l2bGJnZ2GGhUbrVGWkhoaVfTGLKlkR3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2CehELq0UEC8ZPByKe9PSmkff2kwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVv+TNynTeDoN jB5fAUjthO3t+Jb1DmffN/Mfd1qWZqV0VkHK3SWUjGf+rWOov+gQIbYwrYWUZgrw wI1IrdXDoJ8v7876Xa37ccnBJ6UJhlhVl6cdAia8LVNsuEB/a3wpTOVDRSkAZQPW RHBclzhAt/y6frnvhim2GwdMP5IP7XxlieTrrAuN1umksZDRXQ6Ib+VKjwg1xlTd mZSrIY1LDpcbZvDrVE/W8lGCY0GU4RvgDI594bXZ9Hi9WI0cwkeGHyQICwbotOwC WSzx2f2REvrxF1xKtrxMtObofhpDBprtt6UQ92aWRdLgMGCEuvjagswwhv6k9Smo jRazG2A4Ow== -----END CERTIFICATE-----Generated at Mon Jul 27 16:24:48 2026 by rpki-client