$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: uWSBzVAI8SryP3N0JpzHjsQe/nNOPXA9G24jKZtXGqM= Subject key identifier: 0A:B1:19:D5:25:47:24:E7:74:56:C3:09:0D:A8:6D:15:78:10:0A:64 Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 6546C7386A40BD49D22161C22EFC6AC3170498DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: 28 Signing time: Fri 22 May 2026 12:47:03 +0000 Manifest this update: Fri 22 May 2026 12:42:03 +0000 Manifest next update: Sat 23 May 2026 15:27:03 +0000 Files and hashes: 1: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 2: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) 3: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: +Zyl57i7UexQK4Obh2CvQrCp+K8rbyTqHfkrJ3tBZxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 15:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:46:c7:38:6a:40:bd:49:d2:21:61:c2:2e:fc:6a:c3:17:04:98:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: May 22 12:42:03 2026 GMT Not After : May 23 15:27:03 2026 GMT Subject: CN=0AB119D5254724E77456C3090DA86D1578100A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:cb:66:60:c2:8e:10:51:07:ef:7a:1d:11: 56:15:58:e9:79:3e:42:18:20:28:a0:6b:5e:a9:d8: e9:15:36:10:72:35:28:f4:ba:87:d5:0b:f6:75:7c: 8a:02:ae:78:5f:0e:91:8e:b1:19:0d:0e:07:2d:0f: e9:08:3c:83:c7:fd:8d:72:7a:00:4e:89:77:61:10: 6b:0b:99:93:f3:aa:e2:31:68:df:aa:c5:6b:3e:1b: 43:6c:92:b6:7f:90:b3:1c:0e:97:fd:c5:98:d1:92: aa:f6:a8:e3:64:66:3f:be:fc:26:a3:64:3f:66:7a: 68:71:8b:5f:5b:f7:c1:9a:9a:df:7d:4b:eb:c7:a4: 12:da:3b:18:81:d9:56:0e:d1:95:04:b9:84:9c:d4: 4f:86:91:51:cc:55:a1:63:bd:cb:00:c9:ee:67:5c: 08:96:b0:91:cc:74:0a:16:2b:ed:04:31:79:58:37: d0:e7:95:96:99:33:c4:6f:3f:20:31:01:f6:c8:ba: 0c:71:70:4c:41:bf:74:1d:cd:47:1c:e4:82:5b:36: 38:61:ae:fb:ab:eb:35:3c:f1:a1:35:bb:f4:22:a3: a7:ad:82:11:eb:ac:1d:ff:c2:2d:90:c2:3b:1d:f0: 24:f1:58:8b:5a:48:fd:c5:50:f9:aa:2e:a5:c6:7d: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:19:D5:25:47:24:E7:74:56:C3:09:0D:A8:6D:15:78:10:0A:64 X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:12:a2:5c:32:10:e8:ca:f1:04:e0:2b:18:f5:5d:dd:0c:57: 70:72:91:c4:54:53:5a:f1:33:1d:28:6f:55:7c:ec:22:9a:c0: 72:b5:51:a1:d9:a8:96:82:16:dc:f0:fb:4a:ca:e4:82:30:7b: 72:c4:ad:9c:ec:5b:ce:76:fa:74:40:c6:d9:4f:02:1b:bc:ab: aa:c6:98:5b:83:92:3d:a9:41:fc:27:00:4d:23:8a:63:4b:d6: 6c:6e:c8:09:57:c4:98:90:e7:0d:dc:9a:5a:dc:31:ea:35:42: 6d:96:88:af:d8:d8:34:46:4a:56:4e:3f:5a:1a:92:29:e2:14: 64:9d:40:8d:44:c7:74:fa:e3:89:32:17:4a:07:b4:c8:ee:42: ac:0c:b5:e1:66:c2:50:16:6f:87:16:9c:0c:a8:25:57:86:04: b8:30:ff:92:75:70:7a:ea:8c:3b:30:c9:43:db:73:51:fe:69: 73:86:ec:22:95:40:62:09:6f:5a:bb:22:1e:0b:10:c6:97:f1: 14:04:aa:4c:a5:a9:f0:5b:4c:76:21:f1:21:92:1f:e6:85:98: 4f:b2:b1:2f:03:60:f6:93:55:2a:9a:56:1b:82:05:a4:24:d2: e2:08:7f:75:11:9a:e9:66:c6:37:28:a3:04:e4:e6:10:7a:88: 8b:7b:44:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZUbHOGpAvUnSIWHCLvxqwxcEmN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjA1MjIxMjQyMDNaFw0yNjA1MjMxNTI3MDNaMDMxMTAvBgNV BAMTKDBBQjExOUQ1MjU0NzI0RTc3NDU2QzMwOTBEQTg2RDE1NzgxMDBBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMMtmYMKOEFEH73odEVYVWOl5 PkIYICiga16p2OkVNhByNSj0uofVC/Z1fIoCrnhfDpGOsRkNDgctD+kIPIPH/Y1y egBOiXdhEGsLmZPzquIxaN+qxWs+G0NskrZ/kLMcDpf9xZjRkqr2qONkZj++/Caj ZD9memhxi19b98Gamt99S+vHpBLaOxiB2VYO0ZUEuYSc1E+GkVHMVaFjvcsAye5n XAiWsJHMdAoWK+0EMXlYN9DnlZaZM8RvPyAxAfbIugxxcExBv3QdzUcc5IJbNjhh rvur6zU88aE1u/Qio6etghHrrB3/wi2Qwjsd8CTxWItaSP3FUPmqLqXGfe4lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCrEZ1SVHJOd0VsMJDahtFXgQCmQwHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBKiXDIQ6Mrx BOArGPVd3QxXcHKRxFRTWvEzHShvVXzsIprAcrVRodmoloIW3PD7SsrkgjB7csSt nOxbznb6dEDG2U8CG7yrqsaYW4OSPalB/CcATSOKY0vWbG7ICVfEmJDnDdyaWtwx 6jVCbZaIr9jYNEZKVk4/WhqSKeIUZJ1AjUTHdPrjiTIXSge0yO5CrAy14WbCUBZv hxacDKglV4YEuDD/knVweuqMOzDJQ9tzUf5pc4bsIpVAYglvWrsiHgsQxpfxFASq TKWp8FtMdiHxIZIf5oWYT7KxLwNg9pNVKppWG4IFpCTS4gh/dRGa6WbGNyijBOTm EHqIi3tEoA== -----END CERTIFICATE-----Generated at Sat May 23 03:45:13 2026 by rpki-client