$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: Kn6SU+4zRUlllGlhIwMRrrB8zOlVCJEW+DKUNQzx3Wk= Subject key identifier: 67:F7:27:03:E8:9C:C7:48:CA:A4:55:CF:8C:F4:A9:47:22:91:25:24 Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 74A60646DC50076BCD51A237B3B1BFEC49F342B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 02 Signing time: Fri 29 May 2026 06:27:20 +0000 Manifest this update: Fri 29 May 2026 06:22:20 +0000 Manifest next update: Sat 30 May 2026 07:44:20 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: 1EqAbTLMk9mGOZXqPaInFMBkDAN0hgdQmxIo9cV3tH0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:06:46:dc:50:07:6b:cd:51:a2:37:b3:b1:bf:ec:49:f3:42:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: May 29 06:22:20 2026 GMT Not After : May 30 07:44:20 2026 GMT Subject: CN=67F72703E89CC748CAA455CF8CF4A94722912524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:c9:7d:93:06:3b:46:1b:81:1c:12:ac:4b: 0e:6f:5f:79:77:db:4c:25:0b:a2:b7:3e:da:a0:72: d8:24:9c:39:27:d0:0c:78:46:85:5b:05:75:45:db: 75:9a:2a:88:4a:bd:a0:3c:dc:da:10:5c:6b:b9:59: b3:45:ef:39:04:75:db:93:e3:33:b1:17:01:c3:a1: c8:c8:23:ad:6b:d3:3b:65:82:f6:dd:df:87:c1:04: 4b:fe:e7:c0:47:2d:eb:1d:32:e9:e5:52:5b:b2:b9: 7f:93:81:82:de:d4:44:d8:ce:c7:c0:f8:c2:f8:6f: f8:37:67:b3:b8:5c:9c:f2:56:ca:bc:ba:c4:51:6c: fd:12:dd:a1:ca:f4:31:2d:d8:5a:71:5a:78:ca:dc: b0:42:cd:e6:f0:89:04:71:fa:04:3f:2b:97:05:c1: fa:31:53:8b:b7:35:30:97:57:18:d4:a1:3c:b2:37: db:4b:cf:e4:85:96:5b:9c:b2:24:c4:f4:c9:80:4d: b6:dc:d9:66:d0:0e:75:32:d2:dd:9f:86:06:a7:9a: a0:5f:5b:80:ae:1f:70:f6:9d:70:4a:92:75:fa:28: c7:68:9e:f6:13:9d:0e:a6:85:46:c7:48:a9:03:44: 1c:30:b7:eb:5e:50:01:5d:81:66:04:ea:0e:8c:ed: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F7:27:03:E8:9C:C7:48:CA:A4:55:CF:8C:F4:A9:47:22:91:25:24 X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3b:5f:1b:d9:10:3f:cd:04:d9:cf:d7:de:a0:a1:99:23:71: 78:7e:73:3a:51:0c:65:e6:25:2c:e6:5a:00:45:92:7b:45:3c: 4b:75:fb:45:b5:bf:27:b6:c6:4d:f1:99:5f:e3:f1:cc:c1:56: 28:f1:88:3d:cd:38:1f:5e:02:97:e5:39:89:7b:04:f9:9d:7e: d8:fb:fd:37:0c:f1:54:ac:79:c3:9a:f3:65:47:ef:a8:a6:24: 12:11:11:51:76:62:e3:16:7d:f9:12:25:c8:32:80:ee:ad:4b: 7e:00:0d:28:7a:22:53:a1:36:12:fe:43:d2:b7:bf:f7:5b:46: 9a:5b:0b:8e:09:40:da:46:2a:d0:f5:33:3e:f3:64:07:4d:90: 70:c2:ad:dc:d7:35:24:57:fa:3e:02:43:35:d3:54:92:88:47: 3e:eb:ea:61:dc:1f:77:b2:91:45:47:ec:c5:34:3c:81:fc:58: 7f:b7:42:b1:d5:37:91:70:69:eb:5f:0d:8a:06:99:00:a5:11: 40:08:07:51:5a:9b:af:18:84:87:28:35:31:bf:c4:1e:46:40: 66:77:91:8e:9b:d1:90:74:c9:cc:ee:fd:1f:bd:50:3f:9f:7c: 4a:b1:6d:22:68:ca:17:06:f2:ad:d4:a3:2e:53:78:af:c6:69: 1f:37:08:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdKYGRtxQB2vNUaI3s7G/7EnzQrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjA1MjkwNjIyMjBaFw0yNjA1MzAwNzQ0MjBaMDMxMTAvBgNV BAMTKDY3RjcyNzAzRTg5Q0M3NDhDQUE0NTVDRjhDRjRBOTQ3MjI5MTI1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWMl9kwY7RhuBHBKsSw5vX3l3 20wlC6K3PtqgctgknDkn0Ax4RoVbBXVF23WaKohKvaA83NoQXGu5WbNF7zkEdduT 4zOxFwHDocjII61r0ztlgvbd34fBBEv+58BHLesdMunlUluyuX+TgYLe1ETYzsfA +ML4b/g3Z7O4XJzyVsq8usRRbP0S3aHK9DEt2FpxWnjK3LBCzebwiQRx+gQ/K5cF wfoxU4u3NTCXVxjUoTyyN9tLz+SFllucsiTE9MmATbbc2WbQDnUy0t2fhganmqBf W4CuH3D2nXBKknX6KMdonvYTnQ6mhUbHSKkDRBwwt+teUAFdgWYE6g6M7c9xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ/cnA+icx0jKpFXPjPSpRyKRJSQwHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjtfG9kQP80E 2c/X3qChmSNxeH5zOlEMZeYlLOZaAEWSe0U8S3X7RbW/J7bGTfGZX+PxzMFWKPGI Pc04H14Cl+U5iXsE+Z1+2Pv9NwzxVKx5w5rzZUfvqKYkEhERUXZi4xZ9+RIlyDKA 7q1LfgANKHoiU6E2Ev5D0re/91tGmlsLjglA2kYq0PUzPvNkB02QcMKt3Nc1JFf6 PgJDNdNUkohHPuvqYdwfd7KRRUfsxTQ8gfxYf7dCsdU3kXBp618NigaZAKURQAgH UVqbrxiEhyg1Mb/EHkZAZneRjpvRkHTJzO79H71QP598SrFtImjKFwbyrdSjLlN4 r8ZpHzcIHA== -----END CERTIFICATE-----Generated at Fri May 29 22:03:40 2026 by rpki-client