$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: wZ497F1+1nQEK/L3mMYJVvwKFUZRunfkeLoVAVyMlmI= Subject key identifier: CA:29:BB:49:F4:C0:FA:EE:18:F9:8E:80:44:FC:C2:EF:A6:FC:B8:9B Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 5D591D17CA7F24916A06CF50BA994936208C7079 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: 65 Signing time: Tue 07 Jul 2026 01:13:07 +0000 Manifest this update: Tue 07 Jul 2026 01:08:07 +0000 Manifest next update: Wed 08 Jul 2026 02:43:07 +0000 Files and hashes: 1: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: wORiUSDRxLzBRds2o5V7x0Bd8GTePZYAzMhJnHZnw/4=) 2: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 3: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 02:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:59:1d:17:ca:7f:24:91:6a:06:cf:50:ba:99:49:36:20:8c:70:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Jul 7 01:08:07 2026 GMT Not After : Jul 8 02:43:07 2026 GMT Subject: CN=CA29BB49F4C0FAEE18F98E8044FCC2EFA6FCB89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:41:84:25:69:3e:2e:8c:c1:51:c3:96:ab: 00:26:5d:c3:df:c5:51:51:34:a0:c3:d4:dd:a5:a0: ea:eb:10:80:05:31:5c:2a:6f:71:bc:c6:1c:64:26: aa:16:8f:a1:b5:f5:6e:b1:d3:7c:dc:0a:dd:9f:dc: ed:b3:2d:72:89:00:7b:b0:dc:2f:44:f9:4d:ad:ee: 5a:92:4e:2c:53:f7:a4:c2:7c:5a:36:d7:f3:2a:b2: 82:56:0c:43:dd:ec:7d:59:6a:79:64:f6:09:05:2c: 35:3e:08:9d:46:49:b0:a9:87:ad:af:40:ef:62:d3: 7b:03:f9:03:c3:07:ee:a8:3e:35:b0:8c:fc:e7:d3: 6b:b8:9e:3b:1a:42:c3:b2:15:f4:df:dc:90:14:25: dc:06:15:a2:97:b4:29:1e:22:c2:f6:c9:26:05:e5: d1:78:5a:6f:8c:e4:97:6d:b5:3b:91:f4:83:49:0b: 80:0a:da:13:da:92:e5:fc:38:94:16:d0:97:3e:78: 96:66:c2:2b:f2:94:3c:26:48:5e:46:91:49:ee:14: 6f:4c:ad:d7:80:4f:fc:a8:42:06:83:27:75:49:9b: 74:77:bf:5c:da:ca:8f:6a:bf:95:c2:bd:37:84:fb: 98:94:4f:cb:be:79:b4:b5:b9:74:93:bc:84:93:34: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:BB:49:F4:C0:FA:EE:18:F9:8E:80:44:FC:C2:EF:A6:FC:B8:9B X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:29:5b:60:be:03:1f:43:28:a5:5e:bd:4c:38:54:a3:dc:14: 22:d3:35:c9:f6:27:17:8f:d1:60:2c:a8:60:87:f7:71:8d:3e: a0:60:95:71:60:53:e3:0d:42:49:92:fd:1e:d8:e5:18:a7:e6: 8f:b5:6c:d6:ed:0e:ac:12:9e:d3:53:13:73:fa:bd:42:36:0d: ac:64:6e:df:63:07:4c:ad:3e:ba:b1:50:fe:87:5c:56:5e:52: 75:ee:56:a1:02:94:6f:b7:df:6b:2c:ba:f1:bc:d8:16:63:56: 49:3a:5b:d2:92:d6:4e:99:a1:7b:e4:e2:2c:c2:cc:87:64:2e: 74:da:f3:b6:1e:7e:fb:43:70:74:c1:5c:0f:b8:aa:94:ed:18: b5:74:92:2e:98:6a:48:c5:a7:56:a3:62:84:d4:2c:e0:90:37: 04:54:74:24:3e:93:bd:99:a6:1d:a3:47:ce:53:2f:9d:a4:c6: 1f:eb:70:89:cd:2b:aa:da:1d:37:c8:af:02:28:2b:20:d4:b8: 60:88:4d:5d:d0:bc:66:55:7f:f2:77:c6:d6:79:4e:6d:c5:4c: 84:db:11:15:19:d9:87:a0:40:e9:06:84:eb:60:e5:b8:82:cc: 56:5c:84:c8:8d:fb:36:11:e5:47:b7:f2:a1:9f:0d:bd:ad:69: d3:1b:77:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXVkdF8p/JJFqBs9QuplJNiCMcHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjA3MDcwMTA4MDdaFw0yNjA3MDgwMjQzMDdaMDMxMTAvBgNV BAMTKENBMjlCQjQ5RjRDMEZBRUUxOEY5OEU4MDQ0RkNDMkVGQTZGQ0I4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76EGEJWk+LozBUcOWqwAmXcPf xVFRNKDD1N2loOrrEIAFMVwqb3G8xhxkJqoWj6G19W6x03zcCt2f3O2zLXKJAHuw 3C9E+U2t7lqSTixT96TCfFo21/MqsoJWDEPd7H1Zanlk9gkFLDU+CJ1GSbCph62v QO9i03sD+QPDB+6oPjWwjPzn02u4njsaQsOyFfTf3JAUJdwGFaKXtCkeIsL2ySYF 5dF4Wm+M5JdttTuR9INJC4AK2hPakuX8OJQW0Jc+eJZmwivylDwmSF5GkUnuFG9M rdeAT/yoQgaDJ3VJm3R3v1zayo9qv5XCvTeE+5iUT8u+ebS1uXSTvISTNKIZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyim7SfTA+u4Y+Y6ARPzC76b8uJswHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkilbYL4DH0Mo pV69TDhUo9wUItM1yfYnF4/RYCyoYIf3cY0+oGCVcWBT4w1CSZL9HtjlGKfmj7Vs 1u0OrBKe01MTc/q9QjYNrGRu32MHTK0+urFQ/odcVl5Sde5WoQKUb7ffayy68bzY FmNWSTpb0pLWTpmhe+TiLMLMh2QudNrzth5++0NwdMFcD7iqlO0YtXSSLphqSMWn VqNihNQs4JA3BFR0JD6TvZmmHaNHzlMvnaTGH+twic0rqtodN8ivAigrINS4YIhN XdC8ZlV/8nfG1nlObcVMhNsRFRnZh6BA6QaE62DluILMVlyEyI37NhHlR7fyoZ8N va1p0xt3zg== -----END CERTIFICATE-----Generated at Tue Jul 7 10:47:21 2026 by rpki-client