$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json) Hash identifier: Pv4RlCklSNMiiIUBCFexZbljlUSl+Q++0giZEoedbes= Subject key identifier: 71:46:9D:DE:E9:C8:5D:97:60:1E:03:6A:54:AC:4D:52:C6:D8:D1:76 Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 Certificate issuer: /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Certificate serial: 629A29691B2FBB9E8976467EC4E6DA41A133FAB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft Manifest number: 27 Signing time: Fri 29 May 2026 10:42:46 +0000 Manifest this update: Fri 29 May 2026 10:37:46 +0000 Manifest next update: Sat 30 May 2026 13:02:46 +0000 Files and hashes: 1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: Z5J1vN5PRm/3v9l7nIIPcs5Do2IXEDST4MV9RduCfsw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9a:29:69:1b:2f:bb:9e:89:76:46:7e:c4:e6:da:41:a1:33:fa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Validity Not Before: May 29 10:37:46 2026 GMT Not After : May 30 13:02:46 2026 GMT Subject: CN=71469DDEE9C85D97601E036A54AC4D52C6D8D176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:90:0d:c0:61:fc:1b:eb:47:71:46:6d:93:f6: 0e:99:b7:0d:60:d4:0f:96:a5:39:d2:1f:e1:3f:c2: a8:32:a5:0c:dc:e0:18:6a:a3:49:b9:26:a6:ea:d9: 81:19:ae:a4:05:7e:f4:e8:8f:d0:b7:15:f9:32:6c: 66:ea:93:ce:9e:eb:db:b9:a1:6f:14:b9:76:d7:37: e2:6b:f3:21:27:ec:5a:f7:14:84:37:b1:87:81:63: ce:a4:a8:7f:62:4d:4c:18:ab:aa:d5:7f:76:3e:ce: e8:f5:25:8d:cb:22:f5:c5:c3:54:fd:77:16:83:5b: e9:68:f7:69:07:cb:68:3f:c1:09:80:0f:d1:01:cc: bc:0f:eb:a0:18:f3:fd:e2:4c:6c:0c:c5:de:75:bd: 84:ef:5e:90:3d:d7:14:4c:74:5c:54:7e:53:7d:f3: c3:4c:c4:48:3c:cb:44:c9:55:cd:b0:f0:e3:ac:c0: ba:d1:e4:8b:3d:6a:7a:90:71:c9:d4:e7:08:c8:ff: 56:ae:24:35:2c:36:d0:fc:d4:3b:4a:24:5e:18:01: 5d:06:4b:2a:08:bc:e6:7c:a0:c8:45:93:0c:54:28: 87:99:2c:4c:0f:63:53:c7:04:a1:12:90:be:aa:d1: ba:21:82:83:b0:ff:c4:ad:c5:73:af:75:2d:a5:66: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:9D:DE:E9:C8:5D:97:60:1E:03:6A:54:AC:4D:52:C6:D8:D1:76 X509v3 Authority Key Identifier: keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ce:4c:99:d1:ba:90:26:d8:a3:20:38:a1:b2:7e:e8:88:6a: a6:41:b6:6e:48:a9:24:b0:98:71:bc:59:44:e3:46:8c:dc:3d: 52:66:75:94:64:93:e0:5c:03:bb:bb:7f:1a:87:1b:71:c6:72: 01:85:e7:6c:27:46:c3:af:1c:2f:f3:d4:c7:80:a3:d7:83:85: 47:0a:3c:f9:5a:72:65:eb:91:59:98:ae:7c:50:47:99:e3:77: ce:59:cd:c0:f7:2e:33:58:1e:83:ff:b5:26:d2:88:0d:38:1d: ab:f4:24:77:f9:57:06:65:cb:34:ae:9c:a9:1f:2a:d9:77:84: 4d:a8:79:4e:9e:9e:d1:a6:07:72:08:63:2a:62:77:ed:bd:a6: 55:53:1c:94:03:70:5e:8d:f6:ee:c6:af:f2:bf:8b:a7:fb:71: cc:c0:3f:c5:b1:51:7b:37:51:08:f5:5a:23:01:51:d1:c9:18: c8:48:8d:2c:25:5c:6a:99:81:a6:1c:05:8e:ff:f7:b0:bf:d5: 1d:11:65:ed:f5:08:e4:61:bf:9c:98:86:6c:45:2c:29:c9:00: 2a:5f:2f:12:a1:94:31:75:34:4d:ba:bc:d6:78:80:2a:02:57: 45:85:12:2d:10:58:77:cc:54:fe:04:b6:be:81:a1:ce:67:52: e7:3e:7f:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYpopaRsvu56JdkZ+xObaQaEz+rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0 NDE0MkFGNjAeFw0yNjA1MjkxMDM3NDZaFw0yNjA1MzAxMzAyNDZaMDMxMTAvBgNV BAMTKDcxNDY5RERFRTlDODVEOTc2MDFFMDM2QTU0QUM0RDUyQzZEOEQxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2kA3AYfwb60dxRm2T9g6Ztw1g 1A+WpTnSH+E/wqgypQzc4Bhqo0m5Jqbq2YEZrqQFfvToj9C3FfkybGbqk86e69u5 oW8UuXbXN+Jr8yEn7Fr3FIQ3sYeBY86kqH9iTUwYq6rVf3Y+zuj1JY3LIvXFw1T9 dxaDW+lo92kHy2g/wQmAD9EBzLwP66AY8/3iTGwMxd51vYTvXpA91xRMdFxUflN9 88NMxEg8y0TJVc2w8OOswLrR5Is9anqQccnU5wjI/1auJDUsNtD81DtKJF4YAV0G SyoIvOZ8oMhFkwxUKIeZLEwPY1PHBKESkL6q0bohgoOw/8StxXOvdS2lZp9rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcUad3unIXZdgHgNqVKxNUsbY0XYwHwYDVR0j BBgwFoAUj0hHtjnkDhkdv85/aZhfh0QUKvYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8xLzhGNDg0N0I2MzlFNDBFMTkxREJGQ0U3RjY5OTg1 Rjg3NDQxNDJBRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMS84RjQ4NDdCNjM5RTQw RTE5MURCRkNFN0Y2OTk4NUY4NzQ0MTQyQUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs5MmdG6kCbY oyA4obJ+6IhqpkG2bkipJLCYcbxZRONGjNw9UmZ1lGST4FwDu7t/GocbccZyAYXn bCdGw68cL/PUx4Cj14OFRwo8+VpyZeuRWZiufFBHmeN3zlnNwPcuM1geg/+1JtKI DTgdq/Qkd/lXBmXLNK6cqR8q2XeETah5Tp6e0aYHcghjKmJ37b2mVVMclANwXo32 7sav8r+Lp/txzMA/xbFRezdRCPVaIwFR0ckYyEiNLCVcapmBphwFjv/3sL/VHRFl 7fUI5GG/nJiGbEUsKckAKl8vEqGUMXU0Tbq81niAKgJXRYUSLRBYd8xU/gS2voGh zmdS5z5/+g== -----END CERTIFICATE-----Generated at Fri May 29 22:02:54 2026 by rpki-client