$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: 9ShNW1lyLnjTXC9Rq0A+N0r48aDTp1bc0CDXErUQyF4= Subject key identifier: 52:54:64:C0:81:B8:02:B3:D7:F9:AA:D9:A5:81:2D:43:C0:B3:EA:38 Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 78F93797BEE93B576B52E25006B612C3EA213ABF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 7F Signing time: Fri 28 Aug 2026 06:48:09 +0000 Manifest this update: Fri 28 Aug 2026 06:43:09 +0000 Manifest next update: Mon 31 Aug 2026 15:26:09 +0000 Files and hashes: 1: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 2: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) 3: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: POUiPBPgTfR9I/6AWJvimklJWpwgGDfoeKMdsvmEaD0=) 4: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) 5: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f9:37:97:be:e9:3b:57:6b:52:e2:50:06:b6:12:c3:ea:21:3a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Aug 28 06:43:09 2026 GMT Not After : Aug 31 15:26:09 2026 GMT Subject: CN=525464C081B802B3D7F9AAD9A5812D43C0B3EA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:e0:ff:36:8a:dd:14:7a:65:6a:37:83:1a: 2b:55:b4:7e:b8:34:70:57:5f:95:5e:a2:16:c3:21: ae:41:65:3e:ba:f8:48:02:46:99:dc:d9:a2:6f:55: e2:b4:76:b1:c5:c7:7e:3c:5c:80:1e:89:92:44:49: d9:d0:02:f6:69:86:bd:81:f9:9b:e3:d6:d2:ad:a9: 38:db:af:b1:47:09:c1:77:59:99:18:0a:d0:cf:e3: 4f:2a:5e:8f:b2:fd:61:12:91:85:53:f3:ea:cb:f4: 34:ca:14:8b:df:68:98:54:66:93:2e:6e:bd:e9:58: 82:21:fb:35:b1:c2:e3:b8:4c:e2:61:51:db:6f:af: 5c:f3:25:a7:15:96:b7:07:53:94:24:57:1d:82:1a: 56:57:53:4d:b1:30:02:d9:86:94:87:67:ec:bc:08: 20:e7:77:54:d4:0f:70:2f:6f:df:a5:a4:e8:76:2b: 4a:62:8d:28:a5:13:20:37:86:3c:b2:dc:fa:6e:ab: 96:b3:91:57:62:82:f0:8c:1f:e6:95:f4:a7:d8:b2: 14:8c:86:73:b1:60:5b:fb:3c:0b:70:57:fb:41:3a: 08:ee:ed:88:76:60:d4:ce:b7:41:06:5e:de:da:ff: b3:68:e4:68:4e:9c:b4:c8:97:27:bd:0c:e6:39:df: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:54:64:C0:81:B8:02:B3:D7:F9:AA:D9:A5:81:2D:43:C0:B3:EA:38 X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a5:29:04:84:bd:cc:3a:62:53:41:23:0e:a3:0f:54:c6:3a: 34:9a:0f:26:56:7b:39:75:2a:80:b1:f3:f6:ac:06:43:a8:81: 2a:6c:16:ac:dc:93:1b:30:77:fe:81:f6:a2:c2:aa:45:c2:9a: 9e:aa:fb:31:80:51:f5:ae:f1:d3:c2:56:2b:5f:c9:b2:2d:af: dc:7b:95:d4:b0:d9:7d:2e:ee:87:e8:38:ed:a7:81:20:c6:f7: fe:03:51:31:d1:68:94:c1:54:2e:3d:02:56:37:61:2a:ed:b7: 60:c8:57:46:e0:4b:62:b7:ad:6d:fd:f8:52:3e:ee:59:48:f1: ec:df:ac:63:4a:68:e1:c8:d2:03:3f:fa:aa:41:d3:02:f1:32: a4:df:83:bc:ee:78:20:ce:2a:06:0c:70:b9:69:3f:90:31:6f: 99:f3:24:24:f2:a9:03:79:d6:14:60:d4:f2:89:21:a3:bd:b7: 83:54:fc:74:ac:41:e0:f9:e6:2e:b9:24:fb:95:c5:3b:97:1d: 58:23:a9:a2:14:4c:6a:1f:59:52:89:71:f7:11:85:cc:19:95: a7:64:ab:f7:c9:97:c6:10:ae:c5:05:25:43:f1:f1:f2:35:de: 96:3a:a8:33:e8:a4:c7:eb:c2:9b:e3:b0:be:60:b6:08:fb:4e: f2:3d:e4:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUePk3l77pO1drUuJQBrYSw+ohOr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA4MjgwNjQzMDlaFw0yNjA4MzExNTI2MDlaMDMxMTAvBgNV BAMTKDUyNTQ2NEMwODFCODAyQjNEN0Y5QUFEOUE1ODEyRDQzQzBCM0VBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApuD/NordFHplajeDGitVtH64 NHBXX5VeohbDIa5BZT66+EgCRpnc2aJvVeK0drHFx348XIAeiZJESdnQAvZphr2B +Zvj1tKtqTjbr7FHCcF3WZkYCtDP408qXo+y/WESkYVT8+rL9DTKFIvfaJhUZpMu br3pWIIh+zWxwuO4TOJhUdtvr1zzJacVlrcHU5QkVx2CGlZXU02xMALZhpSHZ+y8 CCDnd1TUD3Avb9+lpOh2K0pijSilEyA3hjyy3Ppuq5azkVdigvCMH+aV9KfYshSM hnOxYFv7PAtwV/tBOgju7Yh2YNTOt0EGXt7a/7No5GhOnLTIlye9DOY537kLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUlRkwIG4ArPX+arZpYEtQ8Cz6jgwHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKUpBIS9zDpi U0EjDqMPVMY6NJoPJlZ7OXUqgLHz9qwGQ6iBKmwWrNyTGzB3/oH2osKqRcKanqr7 MYBR9a7x08JWK1/Jsi2v3HuV1LDZfS7uh+g47aeBIMb3/gNRMdFolMFULj0CVjdh Ku23YMhXRuBLYretbf34Uj7uWUjx7N+sY0po4cjSAz/6qkHTAvEypN+DvO54IM4q BgxwuWk/kDFvmfMkJPKpA3nWFGDU8okho723g1T8dKxB4PnmLrkk+5XFO5cdWCOp ohRMah9ZUolx9xGFzBmVp2Sr98mXxhCuxQUlQ/Hx8jXeljqoM+ikx+vCm+OwvmC2 CPtO8j3k/w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:29 2026 by rpki-client