$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: mWNbuy7+I3rI5jS6mkz38bf+F7ybImph+ZpClwI6Sgc= Subject key identifier: C4:02:2D:93:12:13:E3:91:2A:2F:6F:C7:55:73:8D:23:D9:CB:3D:E3 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 1517A9FB8DBF9AE30B7A03DAAB48B1FC54C9D241 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 84 Signing time: Mon 27 Jul 2026 04:58:23 +0000 Manifest this update: Mon 27 Jul 2026 04:53:23 +0000 Manifest next update: Tue 28 Jul 2026 05:28:23 +0000 Files and hashes: 1: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) 2: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: rWScBguj3DkBvwDrJI1lwF5jCEOmUPAkG/wu5uTGBzo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:17:a9:fb:8d:bf:9a:e3:0b:7a:03:da:ab:48:b1:fc:54:c9:d2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Jul 27 04:53:23 2026 GMT Not After : Jul 28 05:28:23 2026 GMT Subject: CN=C4022D931213E3912A2F6FC755738D23D9CB3DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:9b:3f:05:12:c9:9d:4e:c1:44:80:54:b1: 7d:db:1e:7a:c9:76:ce:39:85:d8:09:2b:56:97:51: 8f:17:0a:96:70:21:e1:64:96:53:af:62:63:63:5e: 80:a1:57:f5:80:aa:29:74:95:9a:13:e4:07:c0:c2: 09:5d:b4:56:ff:b6:01:50:be:6c:6b:ec:75:dd:9e: cd:4a:4d:a4:d5:be:f7:46:1a:69:bc:28:2f:70:4c: 2c:31:c9:4f:8b:ec:12:f2:3a:c8:8c:4a:ea:9c:57: 92:19:bb:29:de:6f:0f:46:f8:af:db:da:f1:21:6c: f3:d8:ab:8b:4f:1e:0e:8a:ae:6d:e0:dd:83:24:6e: af:f2:2e:e5:ff:12:93:6b:b3:08:89:f8:7f:8d:36: 14:8c:f4:f1:6d:d6:f8:77:7e:97:d0:f5:82:82:70: f3:c9:b4:d4:2b:6d:4e:b5:36:85:f6:75:aa:a7:39: ed:61:e8:51:24:c8:73:b8:02:b8:c0:47:4b:36:9c: e4:06:af:67:c1:fd:2c:c9:d1:2e:9a:9c:d4:0c:13: fb:90:e1:87:57:b5:65:79:e3:04:1c:54:af:70:3d: 9b:47:a0:38:47:27:7e:29:8e:49:ec:5e:4e:8f:f9: 47:2e:30:42:0e:ae:7c:bd:2d:35:76:b1:8e:08:fa: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:02:2D:93:12:13:E3:91:2A:2F:6F:C7:55:73:8D:23:D9:CB:3D:E3 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:58:c0:82:91:2c:2e:8a:9f:3e:6a:9d:16:84:d0:da:e0:38: d4:f1:55:14:99:bf:be:b7:65:e7:55:de:71:e9:77:99:3f:12: e0:9f:87:e4:35:ba:ed:8a:b3:10:37:92:43:37:d9:ef:80:dd: df:c0:d4:8c:59:98:da:2e:48:d2:2c:bd:10:5d:58:ba:c1:e0: 0a:8f:94:f8:66:13:a1:11:cf:42:c1:58:8a:52:c0:bd:fd:95: 09:a0:3e:ce:58:4a:98:2d:0c:b6:d9:2f:ba:bf:0d:5f:1a:7a: 75:2a:d4:4f:3c:68:73:51:ba:43:10:7f:de:a3:31:9b:08:5e: 39:1d:cd:10:95:2e:02:15:37:c2:d4:59:40:12:cf:e2:21:0f: 71:ba:60:19:d7:4c:09:08:72:f5:93:08:2a:7e:f8:c1:cd:2a: 34:23:91:5c:44:9e:9e:3d:76:f3:41:7a:0c:98:28:ea:37:c5: 56:3a:f7:3c:0b:0e:4e:70:37:ee:2c:2a:13:3a:46:42:ff:fe: 6e:ee:2a:40:6f:16:ac:23:ec:e0:2c:07:61:64:85:63:47:a8: 95:d2:97:73:35:cc:eb:84:9e:ef:ef:d9:01:b6:b4:13:b9:bf: 4b:a8:de:cf:92:97:5d:c7:cb:bc:e9:8d:86:e0:2b:a6:6a:ea: ae:e7:c3:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFRep+42/muMLegPaq0ix/FTJ0kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA3MjcwNDUzMjNaFw0yNjA3MjgwNTI4MjNaMDMxMTAvBgNV BAMTKEM0MDIyRDkzMTIxM0UzOTEyQTJGNkZDNzU1NzM4RDIzRDlDQjNERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Aps/BRLJnU7BRIBUsX3bHnrJ ds45hdgJK1aXUY8XCpZwIeFkllOvYmNjXoChV/WAqil0lZoT5AfAwgldtFb/tgFQ vmxr7HXdns1KTaTVvvdGGmm8KC9wTCwxyU+L7BLyOsiMSuqcV5IZuynebw9G+K/b 2vEhbPPYq4tPHg6Krm3g3YMkbq/yLuX/EpNrswiJ+H+NNhSM9PFt1vh3fpfQ9YKC cPPJtNQrbU61NoX2daqnOe1h6FEkyHO4ArjAR0s2nOQGr2fB/SzJ0S6anNQME/uQ 4YdXtWV54wQcVK9wPZtHoDhHJ34pjknsXk6P+UcuMEIOrny9LTV2sY4I+rNDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxAItkxIT45EqL2/HVXONI9nLPeMwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVjAgpEsLoqf PmqdFoTQ2uA41PFVFJm/vrdl51Xecel3mT8S4J+H5DW67YqzEDeSQzfZ74Dd38DU jFmY2i5I0iy9EF1YusHgCo+U+GYToRHPQsFYilLAvf2VCaA+zlhKmC0Mttkvur8N Xxp6dSrUTzxoc1G6QxB/3qMxmwheOR3NEJUuAhU3wtRZQBLP4iEPcbpgGddMCQhy 9ZMIKn74wc0qNCORXESenj1280F6DJgo6jfFVjr3PAsOTnA37iwqEzpGQv/+bu4q QG8WrCPs4CwHYWSFY0eoldKXczXM64Se7+/ZAba0E7m/S6jez5KXXcfLvOmNhuAr pmrqrufDUQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:55:12 2026 by rpki-client