$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: jzhsr8eILXMKqXvgkeIG/YN/buhWOmDtw56O3ldLCbA= Subject key identifier: 4A:87:AC:FC:E8:D2:91:25:C8:62:82:08:D7:87:7A:20:5A:31:7D:F6 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 24DC1F79424DD8CBB8A224BD0423CA359D103045 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 8F Signing time: Mon 27 Jul 2026 07:23:40 +0000 Manifest this update: Mon 27 Jul 2026 07:18:40 +0000 Manifest next update: Tue 28 Jul 2026 09:24:40 +0000 Files and hashes: 1: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 2: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 3: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: OPkJwfMGKNO81jqZAIXP3hj5BXe8WB50QC2+3BqHHmI=) 4: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 5: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 6: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dc:1f:79:42:4d:d8:cb:b8:a2:24:bd:04:23:ca:35:9d:10:30:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Jul 27 07:18:40 2026 GMT Not After : Jul 28 09:24:40 2026 GMT Subject: CN=4A87ACFCE8D29125C8628208D7877A205A317DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:e1:72:cf:67:ed:10:de:49:ff:70:eb:c4: 1f:78:68:81:00:64:5e:fb:45:0b:8c:f2:15:5d:e4: 4c:04:19:8b:80:86:70:fa:44:25:8e:3b:62:3e:e0: ff:b9:21:8d:19:82:ab:90:2c:36:77:50:3f:c9:46: 7c:3c:44:f8:c2:67:e4:64:38:d4:97:71:17:c7:b6: 27:ab:dd:ef:1e:74:47:b0:88:9b:83:6a:a2:72:ab: ed:b2:19:a1:c6:c7:09:b0:7a:77:02:b3:93:87:69: fb:9f:91:19:f3:16:a6:8e:cb:5c:e9:75:4e:72:7b: 29:c4:ab:dc:3e:e8:ea:59:c1:f4:c8:99:b9:3e:77: e4:dd:8e:a6:3b:3f:19:0a:c2:f7:8e:d7:ac:af:f7: a5:92:12:a7:6f:1e:db:f3:3c:41:f3:64:d5:e5:63: a1:0d:58:ba:e0:bb:52:85:87:10:ab:dc:e7:29:34: d0:64:4a:6d:d4:7f:38:48:68:1b:7b:31:a5:ba:70: 35:0a:a0:dc:d1:e3:a3:0f:a6:60:b6:d1:17:9f:ae: de:66:15:ae:31:9b:a5:ba:43:14:9f:96:f4:22:1c: 22:a4:8e:1c:f3:cd:05:fa:94:99:6f:e7:42:1d:9a: 01:1f:f0:ae:4c:0c:f9:4a:5e:16:29:a1:a4:ef:be: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:AC:FC:E8:D2:91:25:C8:62:82:08:D7:87:7A:20:5A:31:7D:F6 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:39:15:4e:a4:89:f6:16:cd:cc:3f:90:17:3b:38:cf:18:95: fd:30:9d:0a:e0:24:e3:b3:73:13:5f:81:6d:3c:3b:db:d1:25: be:f2:a5:59:83:cc:bc:97:d7:ad:15:b2:50:a1:73:fa:38:a0: 62:1f:e3:6e:5b:2f:6b:85:86:8f:5b:23:36:c8:76:a0:16:13: cd:1c:d7:e3:b5:a5:86:0e:19:ff:42:69:ce:af:57:66:bb:55: 9b:7a:ce:b3:0e:1b:82:ce:73:1b:fe:08:be:95:4b:24:97:79: 66:c3:a9:46:ef:ca:cb:5b:07:1c:ac:af:2d:0a:a1:89:ae:d8: 1b:ae:60:c2:56:de:19:53:9a:fe:ae:ad:8e:69:a8:8e:50:5c: 83:09:1f:7a:2d:af:0b:42:fc:2f:6a:cc:47:b3:6a:12:69:a2: 6e:b4:cf:65:dc:57:ab:ce:ef:c0:63:6b:fa:d4:05:a8:a4:b2: 7a:ce:03:e2:51:c1:0f:24:dc:aa:14:c7:3c:34:a2:53:f2:4a: 5d:eb:3a:17:dc:41:f9:99:ba:c4:58:1a:48:36:83:a7:8c:04: 4f:58:61:f4:0f:a1:fa:b2:d1:ce:f7:e8:ce:65:a4:be:96:34: 81:ec:5f:5c:3a:e6:c5:ac:6a:99:a4:96:8b:fa:86:3b:d8:10: 0f:ab:0b:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJNwfeUJN2Mu4oiS9BCPKNZ0QMEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA3MjcwNzE4NDBaFw0yNjA3MjgwOTI0NDBaMDMxMTAvBgNV BAMTKDRBODdBQ0ZDRThEMjkxMjVDODYyODIwOEQ3ODc3QTIwNUEzMTdERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHOFyz2ftEN5J/3DrxB94aIEA ZF77RQuM8hVd5EwEGYuAhnD6RCWOO2I+4P+5IY0ZgquQLDZ3UD/JRnw8RPjCZ+Rk ONSXcRfHtier3e8edEewiJuDaqJyq+2yGaHGxwmwencCs5OHafufkRnzFqaOy1zp dU5yeynEq9w+6OpZwfTImbk+d+TdjqY7PxkKwveO16yv96WSEqdvHtvzPEHzZNXl Y6ENWLrgu1KFhxCr3OcpNNBkSm3UfzhIaBt7MaW6cDUKoNzR46MPpmC20Refrt5m Fa4xm6W6QxSflvQiHCKkjhzzzQX6lJlv50IdmgEf8K5MDPlKXhYpoaTvvmkXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSoes/OjSkSXIYoII14d6IFoxffYwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTkVTqSJ9hbN zD+QFzs4zxiV/TCdCuAk47NzE1+BbTw729ElvvKlWYPMvJfXrRWyUKFz+jigYh/j blsva4WGj1sjNsh2oBYTzRzX47Wlhg4Z/0Jpzq9XZrtVm3rOsw4bgs5zG/4IvpVL JJd5ZsOpRu/Ky1sHHKyvLQqhia7YG65gwlbeGVOa/q6tjmmojlBcgwkfei2vC0L8 L2rMR7NqEmmibrTPZdxXq87vwGNr+tQFqKSyes4D4lHBDyTcqhTHPDSiU/JKXes6 F9xB+Zm6xFgaSDaDp4wET1hh9A+h+rLRzvfozmWkvpY0gexfXDrmxaxqmaSWi/qG O9gQD6sLAw== -----END CERTIFICATE-----Generated at Mon Jul 27 15:49:25 2026 by rpki-client