$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: fs6XKyM7RfKLOc6BAwIhlTgro9yzNzzG0OoxpLWLfwo= Subject key identifier: 16:B9:82:51:D3:54:F2:BE:85:EE:E6:87:69:AA:2A:DC:B3:C1:AC:E2 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 177A1C310C84F099F26CAFB30E8B69B927A31D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 78 Signing time: Tue 14 Jul 2026 04:55:30 +0000 Manifest this update: Tue 14 Jul 2026 04:50:30 +0000 Manifest next update: Wed 15 Jul 2026 07:45:30 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: nCnNA1pScJJH0tMmdm1FGru0sPNalErdcW9GSGIvQIk=) 2: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 3: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7a:1c:31:0c:84:f0:99:f2:6c:af:b3:0e:8b:69:b9:27:a3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Jul 14 04:50:30 2026 GMT Not After : Jul 15 07:45:30 2026 GMT Subject: CN=16B98251D354F2BE85EEE68769AA2ADCB3C1ACE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:9b:45:c6:89:77:3a:f0:ec:e8:a8:8d:ba: 78:71:12:f5:82:71:b0:7d:27:cf:9d:b2:da:7e:0c: f2:0a:94:22:62:f1:86:10:03:77:a4:50:0f:43:0c: f5:73:2f:a0:f4:0f:a5:85:58:75:37:8f:7c:80:b3: ac:54:d6:e2:da:67:ab:66:11:67:96:87:d6:d9:67: 01:55:b1:92:b2:c7:0b:68:48:90:c5:3c:16:6e:14: a4:57:0a:85:7f:fb:08:ae:ee:16:0f:4b:6d:56:37: 6f:9c:7c:64:00:59:9f:7b:63:41:c0:9e:4c:c1:d7: 11:b4:b5:8f:85:b1:7b:5c:cb:a8:dd:9d:91:1e:28: ef:8e:01:7d:29:99:5f:a5:89:4c:27:f8:ce:bd:36: 97:e4:57:32:cb:da:ce:e4:d9:78:40:24:1b:c0:e5: ce:e1:97:85:b1:77:a1:46:e8:67:3e:9e:26:94:e5: 4e:ed:a4:c3:71:18:f1:7f:06:c0:30:a3:31:ac:ad: 54:ab:66:49:09:0e:58:37:08:d3:58:16:42:68:f2: 32:22:67:eb:94:a1:29:c9:7d:fc:8a:ec:8f:9a:28: ff:61:54:b2:29:31:23:dc:59:35:d0:31:db:5d:26: 77:8e:48:d7:f2:ee:35:90:f6:4e:32:b0:dc:e2:69: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B9:82:51:D3:54:F2:BE:85:EE:E6:87:69:AA:2A:DC:B3:C1:AC:E2 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:39:90:3d:8b:da:b9:e5:8d:8c:ca:89:94:c1:15:8b:26:47: d2:c7:0e:f8:04:a2:93:fd:01:4b:07:fb:b9:26:60:e9:ff:39: 08:a3:00:8d:43:83:2b:b3:b6:70:e6:d3:98:cb:40:87:39:27: ee:1f:07:57:6b:03:49:b7:0e:88:f3:4c:74:5c:76:11:d3:1b: 74:86:be:ec:53:a9:8e:a9:a6:9a:d7:26:c8:f4:2f:c9:eb:5d: 06:5f:b2:13:d3:cc:08:4e:87:30:86:ee:df:fc:d0:a5:26:be: 11:8c:bc:30:97:e6:ca:a2:0d:65:f9:21:f1:be:7b:e3:cf:5b: ea:5e:db:17:25:a1:25:a3:21:41:c9:e5:f8:46:85:c9:9f:e1: 43:6f:69:89:d3:57:7a:46:76:8e:06:7e:33:c3:57:25:3d:bf: 05:9e:c7:3c:d1:60:5d:92:1b:66:59:61:b8:da:c3:46:f2:f1: 20:d1:d0:d5:de:a4:9b:66:0a:26:64:ef:f8:db:5d:de:2a:e4: 9a:a2:3a:55:77:2c:8c:27:d8:72:b6:cf:e0:ed:4b:2b:c4:00: a1:ce:db:aa:ae:92:88:10:eb:0b:6d:9b:04:10:5a:8c:86:5d: d0:85:2e:89:e9:05:5d:f5:14:99:39:43:4b:30:2e:e1:0a:1b: 6c:f3:62:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITF3ocMQyE8JnybK+zDotpuSejHTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhEODY1MkEzOTFFNDREQjRFRTc2QkVFNzZBNEM0MzNGNjY2 QkI1MDdBMB4XDTI2MDcxNDA0NTAzMFoXDTI2MDcxNTA3NDUzMFowMzExMC8GA1UE AxMoMTZCOTgyNTFEMzU0RjJCRTg1RUVFNjg3NjlBQTJBRENCM0MxQUNFMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJDm0XGiXc68OzoqI26eHES9YJx sH0nz52y2n4M8gqUImLxhhADd6RQD0MM9XMvoPQPpYVYdTePfICzrFTW4tpnq2YR Z5aH1tlnAVWxkrLHC2hIkMU8Fm4UpFcKhX/7CK7uFg9LbVY3b5x8ZABZn3tjQcCe TMHXEbS1j4Wxe1zLqN2dkR4o744BfSmZX6WJTCf4zr02l+RXMsvazuTZeEAkG8Dl zuGXhbF3oUboZz6eJpTlTu2kw3EY8X8GwDCjMaytVKtmSQkOWDcI01gWQmjyMiJn 65ShKcl9/Irsj5oo/2FUsikxI9xZNdAx210md45I1/LuNZD2TjKw3OJpwfkCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBQWuYJR01TyvoXu5odpqircs8Gs4jAfBgNVHSME GDAWgBTYZSo5HkTbTudr7nakxDP2ZrtQejAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3 MDI3NzA2MzQ5OTQ0ODM0LzAvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMz RjY2NkJCNTA3QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9EODY1MkEzOTFFNDREQjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTA5NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERC NEVFNzZCRUU3NkE0QzQzM0Y2NjZCQjUwN0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmOZA9i9q55Y2M yomUwRWLJkfSxw74BKKT/QFLB/u5JmDp/zkIowCNQ4Mrs7Zw5tOYy0CHOSfuHwdX awNJtw6I80x0XHYR0xt0hr7sU6mOqaaa1ybI9C/J610GX7IT08wITocwhu7f/NCl Jr4RjLwwl+bKog1l+SHxvnvjz1vqXtsXJaEloyFByeX4RoXJn+FDb2mJ01d6RnaO Bn4zw1clPb8Fnsc80WBdkhtmWWG42sNG8vEg0dDV3qSbZgomZO/4213eKuSaojpV dyyMJ9hyts/g7UsrxAChztuqrpKIEOsLbZsEEFqMhl3QhS6J6QVd9RSZOUNLMC7h Chts82KM -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:32 2026 by rpki-client