$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: ZvGpN5NLedO9UU+mzyjsdB/y7Jy/7ZVGU5UlOl7akmk= Subject key identifier: 64:26:FF:B3:50:D6:1A:26:47:EC:2B:A7:3A:9F:F0:E1:9B:19:1E:B9 Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 0E9F46D63E8919B7EB369DD492B5017624DF9918 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: 43 Signing time: Thu 04 Jun 2026 12:09:33 +0000 Manifest this update: Thu 04 Jun 2026 12:04:33 +0000 Manifest next update: Fri 05 Jun 2026 14:31:33 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: pPhIu4XC+z8u53Bj70v7/1TkfVwuu3pz5QO5kDJB/go=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:46:d6:3e:89:19:b7:eb:36:9d:d4:92:b5:01:76:24:df:99:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: Jun 4 12:04:33 2026 GMT Not After : Jun 5 14:31:33 2026 GMT Subject: CN=6426FFB350D61A2647EC2BA73A9FF0E19B191EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:1f:85:1c:d0:2b:5c:99:8b:7e:e6:18:a9: 1c:eb:ba:d3:2b:8b:14:f2:77:31:7a:85:28:43:e7: f8:e8:96:14:d5:2e:73:14:d6:58:23:b7:4e:45:0a: ed:43:d3:a4:28:25:d1:a2:41:81:96:a1:18:a6:c6: cc:71:c7:38:13:6c:11:39:89:ef:b2:64:48:d9:18: 58:f7:e0:df:80:5a:c2:c6:19:bb:04:68:97:d4:b6: 22:85:64:04:6e:72:a8:c5:c7:36:73:e2:92:15:d6: 9b:00:a3:f4:3b:2c:5d:69:62:0f:b5:66:30:c3:39: ff:8f:15:ca:98:83:80:96:d5:7a:d4:16:f9:e6:04: 13:05:0e:37:a9:3b:c2:ff:3d:97:93:c2:25:dc:a7: 76:87:e9:2d:73:66:47:c4:18:1c:62:74:8f:77:22: f7:61:12:d0:cb:5a:38:40:fc:a6:c0:49:e4:e2:78: fa:26:d6:ef:7c:06:59:34:4f:dc:0b:ac:c0:9d:f6: 0d:74:49:91:47:f2:0a:ab:0b:12:bd:e4:0a:26:34: e8:a1:37:6d:fc:1e:15:2b:43:73:d5:08:b1:36:67: 2a:5a:d1:f3:14:a6:76:c1:47:6b:65:6a:20:7c:de: 0f:01:3d:13:a7:12:ec:a0:22:70:a0:3d:27:87:11: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:FF:B3:50:D6:1A:26:47:EC:2B:A7:3A:9F:F0:E1:9B:19:1E:B9 X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fa:d1:c7:96:ec:7a:b4:8e:a6:5e:74:3b:e2:2c:5b:57:96: 6c:2a:3e:7a:1c:04:cd:2f:d0:40:41:ac:ac:0c:a9:33:a2:fa: 35:38:fa:43:0a:ea:0e:b6:b8:51:b8:14:44:04:cf:05:36:0f: 13:77:39:ab:00:94:b4:d3:d4:16:0a:66:10:9a:cc:fc:5f:5f: 55:a6:1a:40:e2:64:e1:8a:42:8f:fd:21:5c:4b:60:74:2c:2a: 90:40:68:f0:41:44:91:43:ce:10:11:88:1b:81:91:c9:7f:e1: ce:14:b5:ec:cf:f5:5c:00:52:3f:58:9e:f2:72:f9:81:39:65: bd:4e:23:08:55:be:a2:10:96:31:08:2e:4f:9e:de:2d:ea:38: f4:ac:e9:df:93:18:25:41:7a:f4:ab:a0:76:d3:a3:a0:b8:fe: d5:05:66:ed:e1:39:a3:fa:b9:65:b0:47:da:f0:fd:62:58:54: 3c:60:8a:29:02:8a:64:5e:44:54:05:9b:d9:8f:dc:ad:5e:84: de:27:78:67:c8:b2:8b:5f:a8:83:a9:11:48:80:44:f9:10:9a: 5f:22:38:20:06:9c:be:13:73:90:19:75:9a:66:ba:4f:d6:85: 53:f2:90:d7:b6:92:dd:ca:18:79:da:1d:0f:9c:88:f6:0d:08: 73:8e:68:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDp9G1j6JGbfrNp3UkrUBdiTfmRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjA2MDQxMjA0MzNaFw0yNjA2MDUxNDMxMzNaMDMxMTAvBgNV BAMTKDY0MjZGRkIzNTBENjFBMjY0N0VDMkJBNzNBOUZGMEUxOUIxOTFFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yB+FHNArXJmLfuYYqRzrutMr ixTydzF6hShD5/jolhTVLnMU1lgjt05FCu1D06QoJdGiQYGWoRimxsxxxzgTbBE5 ie+yZEjZGFj34N+AWsLGGbsEaJfUtiKFZARucqjFxzZz4pIV1psAo/Q7LF1pYg+1 ZjDDOf+PFcqYg4CW1XrUFvnmBBMFDjepO8L/PZeTwiXcp3aH6S1zZkfEGBxidI93 IvdhEtDLWjhA/KbASeTiePom1u98Blk0T9wLrMCd9g10SZFH8gqrCxK95AomNOih N238HhUrQ3PVCLE2Zypa0fMUpnbBR2tlaiB83g8BPROnEuygInCgPSeHEQtVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZCb/s1DWGiZH7CunOp/w4ZsZHrkwHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/rRx5bserSO pl50O+IsW1eWbCo+ehwEzS/QQEGsrAypM6L6NTj6QwrqDra4UbgURATPBTYPE3c5 qwCUtNPUFgpmEJrM/F9fVaYaQOJk4YpCj/0hXEtgdCwqkEBo8EFEkUPOEBGIG4GR yX/hzhS17M/1XABSP1ie8nL5gTllvU4jCFW+ohCWMQguT57eLeo49Kzp35MYJUF6 9KugdtOjoLj+1QVm7eE5o/q5ZbBH2vD9YlhUPGCKKQKKZF5EVAWb2Y/crV6E3id4 Z8iyi1+og6kRSIBE+RCaXyI4IAacvhNzkBl1mma6T9aFU/KQ17aS3coYedodD5yI 9g0Ic45oFg== -----END CERTIFICATE-----Generated at Thu Jun 4 15:18:15 2026 by rpki-client