$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json) Hash identifier: 83w0Zu01Nb2hAY4cMl7z2F7apg/dSx5i0bHbj85HLo8= Subject key identifier: 31:1A:A1:6B:38:BA:2D:44:97:D8:8C:8E:27:5C:0F:80:4A:0B:BF:80 Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 0DD379519893BFD18482CC45A60B4CF8ACE4C57C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft Manifest number: 86 Signing time: Fri 28 Aug 2026 06:47:55 +0000 Manifest this update: Fri 28 Aug 2026 06:42:55 +0000 Manifest next update: Mon 31 Aug 2026 07:38:55 +0000 Files and hashes: 1: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=) 2: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: s/tG4mxOSMKJB7Qv4yDevzXwFiUT1aXygLhelzOTfyY=) 3: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=) 4: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d3:79:51:98:93:bf:d1:84:82:cc:45:a6:0b:4c:f8:ac:e4:c5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: Aug 28 06:42:55 2026 GMT Not After : Aug 31 07:38:55 2026 GMT Subject: CN=311AA16B38BA2D4497D88C8E275C0F804A0BBF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:90:9e:cf:5e:c6:ac:fd:d4:0a:3d:9a:e0: 4b:c9:21:8a:6f:35:75:47:3f:43:24:c0:1d:9f:50: c0:72:2d:69:c8:14:b0:2e:fe:95:29:b3:17:7a:61: dc:09:54:ee:de:11:3a:21:98:d6:40:91:2f:bd:8f: e2:4c:02:97:24:b4:0c:d7:ec:46:63:d5:31:59:87: af:81:08:68:8e:1a:ae:2c:1a:71:5e:28:4b:d8:73: 14:68:09:33:e8:8a:89:2a:cd:91:1b:84:88:9f:70: f0:2f:97:81:14:9c:9c:96:64:3b:44:f9:de:71:72: f4:66:5b:5e:58:93:4e:d3:95:f2:9b:ae:ca:d6:4b: db:52:c2:6e:d8:de:2c:28:26:25:1d:3d:39:3c:b1: 94:3b:4e:5e:9e:0e:48:dd:74:31:86:65:44:3c:26: e9:86:d5:2c:08:75:7c:30:15:61:d6:d9:34:f0:3a: 05:93:ff:8b:13:aa:44:4a:cb:2a:ab:50:7c:fb:4a: 77:ca:90:8c:cf:59:e1:81:4d:c5:27:5e:0c:ae:12: b9:6e:f5:f4:9d:b1:78:ae:2d:4a:7f:14:ba:19:11: 5b:02:f8:d3:fc:ea:42:5b:a1:ec:e5:5d:24:1a:ef: 04:c9:a8:70:d8:dd:97:8b:97:00:05:04:d8:fb:7f: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1A:A1:6B:38:BA:2D:44:97:D8:8C:8E:27:5C:0F:80:4A:0B:BF:80 X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:48:eb:52:55:41:2e:00:71:92:dc:8e:b2:46:06:67:0b: a6:80:a0:79:e6:82:0f:5e:8b:18:22:5c:62:f3:47:9e:42:0a: 67:10:59:02:43:5b:2c:8b:0b:97:de:b9:46:e7:59:b1:15:e8: a7:2a:03:d1:48:2f:b2:67:55:89:d5:9e:04:87:a6:74:39:a1: af:14:63:08:f7:c7:ce:cc:f9:7b:42:2c:e5:e0:40:8d:63:28: 7a:1a:b8:d7:4b:08:44:3d:30:95:81:b4:2f:8f:8b:92:1f:d9: aa:3e:65:7d:09:04:fc:e2:f4:9c:fc:8b:a5:33:a0:1d:de:07: 75:b6:5b:3d:e1:24:35:80:56:1d:49:d1:9d:d8:98:f1:8b:80: e5:03:0c:7e:cd:b5:8c:48:82:de:d2:3a:fc:bb:8c:72:67:c5: 94:5d:fe:15:24:45:22:78:10:61:08:94:9b:95:62:2c:17:a8: 26:c9:9b:8e:4d:2c:85:e2:e8:a3:6c:0f:ce:05:95:0f:e4:bd: 69:90:09:3b:30:47:2c:9a:b8:ec:0e:df:d5:35:35:db:67:c7: cd:e7:1f:76:bd:23:dc:ef:8f:b3:cf:77:72:89:fd:71:51:51: 18:97:2b:5e:dd:1f:39:57:a9:f2:1a:40:c2:1d:13:31:a1:51: 92:c2:be:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDdN5UZiTv9GEgsxFpgtM+KzkxXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA4MjgwNjQyNTVaFw0yNjA4MzEwNzM4NTVaMDMxMTAvBgNV BAMTKDMxMUFBMTZCMzhCQTJENDQ5N0Q4OEM4RTI3NUMwRjgwNEEwQkJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnpCez17GrP3UCj2a4EvJIYpv NXVHP0MkwB2fUMByLWnIFLAu/pUpsxd6YdwJVO7eETohmNZAkS+9j+JMApcktAzX 7EZj1TFZh6+BCGiOGq4sGnFeKEvYcxRoCTPoiokqzZEbhIifcPAvl4EUnJyWZDtE +d5xcvRmW15Yk07TlfKbrsrWS9tSwm7Y3iwoJiUdPTk8sZQ7Tl6eDkjddDGGZUQ8 JumG1SwIdXwwFWHW2TTwOgWT/4sTqkRKyyqrUHz7SnfKkIzPWeGBTcUnXgyuErlu 9fSdsXiuLUp/FLoZEVsC+NP86kJboezlXSQa7wTJqHDY3ZeLlwAFBNj7fwJlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMRqhazi6LUSX2IyOJ1wPgEoLv4AwHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwMTc2NDE4NjAzMDA4MjEvMC8wOEM3REU4OTRBNEE4 ODYyMkJBNzhCQzlFNDFERkE1Q0M2RTMwMzRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5ZI61JVQS4A cZLcjrJGBmcLpoCgeeaCD16LGCJcYvNHnkIKZxBZAkNbLIsLl965RudZsRXopyoD 0UgvsmdVidWeBIemdDmhrxRjCPfHzsz5e0Is5eBAjWMoehq410sIRD0wlYG0L4+L kh/Zqj5lfQkE/OL0nPyLpTOgHd4HdbZbPeEkNYBWHUnRndiY8YuA5QMMfs21jEiC 3tI6/LuMcmfFlF3+FSRFIngQYQiUm5ViLBeoJsmbjk0sheLoo2wPzgWVD+S9aZAJ OzBHLJq47A7f1TU122fHzecfdr0j3O+Ps893con9cVFRGJcrXt0fOVep8hpAwh0T MaFRksK+dw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:30 2026 by rpki-client