$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json) Hash identifier: pKW5oEj9t7iPuCWmxSasrnI9bHht9jnV7rqhoFv8YDU= Subject key identifier: 94:C3:F3:0C:D9:29:04:24:47:E7:E9:D3:D3:FE:B4:92:57:6F:99:92 Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 Certificate issuer: /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Certificate serial: 39C4D36CD53D57E3E1C71485ED100AEC4BB660DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft Manifest number: A0 Signing time: Fri 28 Aug 2026 06:47:55 +0000 Manifest this update: Fri 28 Aug 2026 06:42:55 +0000 Manifest next update: Mon 31 Aug 2026 07:03:55 +0000 Files and hashes: 1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: xa8UiJIGb2dAYCVkTnme+HMzWstEMhl0d2sqwqKQVvg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c4:d3:6c:d5:3d:57:e3:e1:c7:14:85:ed:10:0a:ec:4b:b6:60:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Validity Not Before: Aug 28 06:42:55 2026 GMT Not After : Aug 31 07:03:55 2026 GMT Subject: CN=94C3F30CD929042447E7E9D3D3FEB492576F9992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:7f:5d:a2:ef:1f:eb:49:f5:7c:d0:8d:22: 6e:b2:63:c7:81:ff:d9:e7:3c:16:94:0b:df:10:76: 61:36:1f:40:6e:73:70:69:85:97:f3:e8:2d:ac:3e: f3:2c:05:5c:ad:47:b5:da:9e:28:2f:d1:aa:f7:cd: 0f:bc:7c:f7:96:56:05:9e:7d:32:07:c8:55:de:b8: d1:47:f0:95:7c:b9:a4:46:03:83:59:6f:55:74:ca: 00:48:c3:71:d9:81:08:86:79:f8:ee:90:3c:be:b8: cf:e8:59:ae:95:94:18:56:63:97:28:c8:fa:9e:5e: ff:2b:ac:50:e6:78:49:f0:b9:39:ae:f3:d3:91:b6: 76:e4:f8:72:24:e3:bf:e6:ae:e9:70:8d:c8:1e:b9: 97:b3:b4:29:81:af:e5:b8:e9:12:5a:19:62:4e:34: 4b:ae:86:4c:de:09:37:fd:4e:19:9f:ab:dc:92:ef: 47:fe:ee:71:f3:4b:99:a6:2e:76:3c:f2:5c:18:16: ae:b1:97:98:15:b0:58:46:88:5d:e9:19:00:9a:c8: 81:93:b8:53:f1:f6:e6:47:d3:5d:62:8e:1d:d7:2b: 80:ca:92:a0:0e:1d:78:ab:2d:27:a4:37:ea:e4:fe: e6:69:b0:57:30:45:c9:78:21:09:35:a6:96:8e:be: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C3:F3:0C:D9:29:04:24:47:E7:E9:D3:D3:FE:B4:92:57:6F:99:92 X509v3 Authority Key Identifier: keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:55:8e:67:b1:37:b1:68:51:10:20:0a:4d:03:57:30:a4:ef: be:ac:a6:d0:09:a6:45:11:e1:2f:a0:37:c4:b1:a9:c6:ac:63: 17:d7:99:75:ea:16:a3:6d:2a:62:05:51:e9:67:f5:b4:99:b0: 82:a9:1b:a7:7a:01:2a:08:27:7f:ac:82:7c:77:91:dc:07:39: 89:fd:a1:8d:60:cd:dd:47:15:3f:37:a9:bc:7b:6e:2f:c0:18: 6b:c9:e3:ee:47:79:0c:e6:8f:08:fb:86:fd:52:68:ba:73:cc: e1:18:a6:ef:0b:39:41:39:99:f0:38:54:9a:16:6f:a9:67:4d: 1b:1e:52:54:f2:bf:54:c5:bb:c3:7a:d6:6e:2b:6e:f2:49:87: 54:de:65:16:ef:11:04:dd:46:4b:6a:b4:96:3e:84:34:b9:2f: ba:cd:20:dd:ed:54:d5:88:8a:74:5b:61:6c:32:1a:13:98:88: b8:b2:eb:8d:47:98:d8:90:c0:e8:56:b4:5b:d4:de:6d:95:ac: 0a:e4:d7:92:8d:5d:3d:d9:ca:70:23:8e:1e:b0:67:a3:1e:ca: c2:65:bd:51:ce:81:67:5f:56:4b:6b:e3:c5:e9:ac:c7:fa:24: 65:20:2a:e9:c6:22:44:87:6c:5a:f1:87:9a:d0:5a:15:4a:ef: eb:fd:e0:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOcTTbNU9V+PhxxSF7RAK7Eu2YNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0 NDE0MkFGNjAeFw0yNjA4MjgwNjQyNTVaFw0yNjA4MzEwNzAzNTVaMDMxMTAvBgNV BAMTKDk0QzNGMzBDRDkyOTA0MjQ0N0U3RTlEM0QzRkVCNDkyNTc2Rjk5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyDX9dou8f60n1fNCNIm6yY8eB /9nnPBaUC98QdmE2H0Buc3BphZfz6C2sPvMsBVytR7Xanigv0ar3zQ+8fPeWVgWe fTIHyFXeuNFH8JV8uaRGA4NZb1V0ygBIw3HZgQiGefjukDy+uM/oWa6VlBhWY5co yPqeXv8rrFDmeEnwuTmu89ORtnbk+HIk47/mrulwjcgeuZeztCmBr+W46RJaGWJO NEuuhkzeCTf9Thmfq9yS70f+7nHzS5mmLnY88lwYFq6xl5gVsFhGiF3pGQCayIGT uFPx9uZH011ijh3XK4DKkqAOHXirLSekN+rk/uZpsFcwRcl4IQk1ppaOvoB9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlMPzDNkpBCRH5+nT0/60kldvmZIwHwYDVR0j BBgwFoAUj0hHtjnkDhkdv85/aZhfh0QUKvYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8xLzhGNDg0N0I2MzlFNDBFMTkxREJGQ0U3RjY5OTg1 Rjg3NDQxNDJBRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMS84RjQ4NDdCNjM5RTQw RTE5MURCRkNFN0Y2OTk4NUY4NzQ0MTQyQUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklWOZ7E3sWhR ECAKTQNXMKTvvqym0AmmRRHhL6A3xLGpxqxjF9eZdeoWo20qYgVR6Wf1tJmwgqkb p3oBKggnf6yCfHeR3Ac5if2hjWDN3UcVPzepvHtuL8AYa8nj7kd5DOaPCPuG/VJo unPM4Rim7ws5QTmZ8DhUmhZvqWdNGx5SVPK/VMW7w3rWbitu8kmHVN5lFu8RBN1G S2q0lj6ENLkvus0g3e1U1YiKdFthbDIaE5iIuLLrjUeY2JDA6Fa0W9TebZWsCuTX ko1dPdnKcCOOHrBnox7KwmW9Uc6BZ19WS2vjxemsx/okZSAq6cYiRIdsWvGHmtBa FUrv6/3gNw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:04:02 2026 by rpki-client