$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: g6akhHDQON6kRAdEVI/vmpAsHTSQoVCAlDWncjrCC08= Subject key identifier: C8:18:AB:8C:DC:E9:58:89:A0:5C:2C:18:04:EB:1A:55:3B:67:41:C3 Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 2CD3E4A8944EE9D5FF85BC0FB94A5183ED17123A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: 53 Signing time: Tue 14 Jul 2026 04:05:22 +0000 Manifest this update: Tue 14 Jul 2026 04:00:22 +0000 Manifest next update: Wed 15 Jul 2026 06:52:22 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: AgEf44iC5XAKs00nhL5/lGCmZao3LjeXs+EkmVcGQqQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d3:e4:a8:94:4e:e9:d5:ff:85:bc:0f:b9:4a:51:83:ed:17:12:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: Jul 14 04:00:22 2026 GMT Not After : Jul 15 06:52:22 2026 GMT Subject: CN=C818AB8CDCE95889A05C2C1804EB1A553B6741C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:30:0e:79:52:44:91:40:62:ec:ff:0a:89:e1: e3:ae:8c:be:9f:ea:c7:fc:57:f2:27:31:02:96:f6: fc:06:e5:70:5b:fe:7c:98:56:f4:03:b3:8b:1a:60: 9a:1b:69:b1:ec:6f:36:21:22:da:fe:7a:ed:02:6e: ac:02:6a:e4:ba:ba:9d:d0:f3:25:36:cf:00:a2:23: d8:3b:b9:b1:9e:6f:40:87:ce:7a:34:4f:4c:f7:62: f1:13:39:dc:c0:63:24:41:46:7a:bf:aa:b4:ee:42: e3:e7:03:1e:95:4d:e4:3b:ff:4e:b1:fc:cb:a3:04: 33:04:cc:c6:02:61:46:0b:64:0e:48:6b:42:2d:bb: e5:63:e8:6c:8f:94:24:a9:4e:91:a3:ec:81:e8:01: 7c:e2:c3:e9:40:09:40:12:d3:24:3b:2d:75:47:a4: f4:11:30:d6:12:a4:c3:c7:f3:da:b6:aa:0f:a7:72: 22:fe:bb:c2:6e:04:6b:eb:64:01:1b:e6:8e:ab:5c: 7a:4c:bd:ae:39:d6:0a:b4:b2:0f:26:f1:fd:2f:03: 6a:bc:64:e5:22:e4:f7:22:ae:76:64:3d:6b:89:89: aa:f4:41:5e:ff:9d:d2:c7:81:a5:0a:d7:36:3d:8c: 34:88:00:4d:7f:c8:55:0c:f9:98:59:36:f7:84:12: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:AB:8C:DC:E9:58:89:A0:5C:2C:18:04:EB:1A:55:3B:67:41:C3 X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:f6:f1:98:14:e9:d7:5d:63:a2:6f:84:82:bd:11:c0:57: 27:28:24:39:2d:9b:2a:c3:d4:a0:70:6a:2a:d5:0e:62:73:b1: e9:da:3e:8b:b1:e3:d1:1b:76:2e:e1:7b:87:d9:f9:50:e6:64: ed:1b:ff:a7:d9:74:51:56:55:0d:c1:78:b4:78:06:35:72:8d: ba:0f:46:1e:f1:b5:00:fe:60:d0:64:b6:01:f1:10:b6:d5:44: 58:27:0a:63:ae:e1:9b:c9:b9:26:6a:a5:cd:07:c3:eb:3b:df: 70:b4:b0:f1:46:04:fc:5c:ea:31:1b:ed:90:8f:00:76:84:29: 2f:e8:fd:20:53:79:76:b7:f8:b0:79:84:46:37:ee:b5:25:6c: 73:a9:c3:a6:18:29:b6:d8:34:2f:46:f0:a9:9a:88:56:2a:aa: 9b:c9:96:ba:4b:71:30:87:89:b1:fe:a1:56:2f:d2:40:8e:71: 12:5a:4e:f0:6a:d9:f1:a9:b3:98:91:b0:8d:4e:1c:cb:62:4a: e8:ee:f7:a0:0d:b2:5f:02:59:df:a4:8f:24:7a:16:c2:41:94: 63:33:c6:b0:c2:f1:9b:14:63:2b:c8:56:67:71:27:59:48:d3: bc:83:9b:1b:8e:7a:11:6a:7e:d4:0f:bd:ec:f3:c4:16:a8:4d: f8:b5:57:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULNPkqJRO6dX/hbwPuUpRg+0XEjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjA3MTQwNDAwMjJaFw0yNjA3MTUwNjUyMjJaMDMxMTAvBgNV BAMTKEM4MThBQjhDRENFOTU4ODlBMDVDMkMxODA0RUIxQTU1M0I2NzQxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMA55UkSRQGLs/wqJ4eOujL6f 6sf8V/InMQKW9vwG5XBb/nyYVvQDs4saYJobabHsbzYhItr+eu0CbqwCauS6up3Q 8yU2zwCiI9g7ubGeb0CHzno0T0z3YvETOdzAYyRBRnq/qrTuQuPnAx6VTeQ7/06x /MujBDMEzMYCYUYLZA5Ia0Itu+Vj6GyPlCSpTpGj7IHoAXziw+lACUAS0yQ7LXVH pPQRMNYSpMPH89q2qg+nciL+u8JuBGvrZAEb5o6rXHpMva451gq0sg8m8f0vA2q8 ZOUi5PcirnZkPWuJiar0QV7/ndLHgaUK1zY9jDSIAE1/yFUM+ZhZNveEEpklAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyBirjNzpWImgXCwYBOsaVTtnQcMwHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8r28ZgU6ddd Y6JvhIK9EcBXJygkOS2bKsPUoHBqKtUOYnOx6do+i7Hj0Rt2LuF7h9n5UOZk7Rv/ p9l0UVZVDcF4tHgGNXKNug9GHvG1AP5g0GS2AfEQttVEWCcKY67hm8m5JmqlzQfD 6zvfcLSw8UYE/FzqMRvtkI8AdoQpL+j9IFN5drf4sHmERjfutSVsc6nDphgpttg0 L0bwqZqIViqqm8mWuktxMIeJsf6hVi/SQI5xElpO8GrZ8amzmJGwjU4cy2JK6O73 oA2yXwJZ36SPJHoWwkGUYzPGsMLxmxRjK8hWZ3EnWUjTvIObG456EWp+1A+97PPE FqhN+LVXOw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:18 2026 by rpki-client