$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: S38SeVV5o0lg5ChNXpXSjid/HdL7zidgnyleUwEzniM= Subject key identifier: D1:B5:4C:5B:B0:A1:8A:6D:22:74:31:98:95:E2:48:C3:5A:F7:09:5A Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 2920684B5777032EC701685C00DE7AF3B77A4B95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 7B Signing time: Fri 28 Aug 2026 06:53:28 +0000 Manifest this update: Fri 28 Aug 2026 06:48:28 +0000 Manifest next update: Mon 31 Aug 2026 07:12:28 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: LrAZbfv+0GZYiJJOxzs9jaGzRMDOHaegkcv5/LeViUc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:20:68:4b:57:77:03:2e:c7:01:68:5c:00:de:7a:f3:b7:7a:4b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: Aug 28 06:48:28 2026 GMT Not After : Aug 31 07:12:28 2026 GMT Subject: CN=D1B54C5BB0A18A6D2274319895E248C35AF7095A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:49:d2:2c:81:83:b7:d1:16:00:db:58:44: e4:7a:06:a7:8b:47:38:2b:48:d4:e7:c9:dd:a4:b3: 83:44:24:f2:a5:a6:af:f2:0d:86:e7:0a:42:d6:96: 79:af:bc:22:d2:68:d3:17:21:e5:7c:f0:07:74:a6: 71:45:f1:44:b7:53:43:bf:ba:68:bd:96:dc:26:ac: d8:9e:33:17:fe:b9:56:01:b5:b9:5a:0d:a9:64:94: 3f:14:ab:06:c8:2f:1f:e7:0a:42:a7:1d:a5:78:3d: 38:4e:01:d7:1b:69:47:2f:8b:48:a8:66:ec:be:23: 52:e8:c5:f0:e8:76:c0:7c:48:71:c3:92:e1:63:a8: aa:64:fd:ad:aa:cb:a1:2d:ff:05:ae:5e:a2:f2:00: f4:0d:c8:f6:71:2f:f2:65:26:29:e9:0f:10:8d:95: d3:17:7b:45:05:83:bd:f6:93:dd:97:74:63:ed:31: 37:ea:f3:1f:e4:03:6f:7f:a8:f5:9a:b5:b9:8f:83: b8:83:c9:d5:65:43:e0:c6:86:1b:6f:28:52:e0:a9: 99:87:80:83:a6:e5:69:98:06:b1:23:79:c2:a3:c5: 07:60:83:dc:0a:70:f2:ce:b8:ca:08:b6:05:67:55: 04:b9:ea:c2:4e:b2:ff:ef:13:3b:10:02:cd:ef:e5: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:4C:5B:B0:A1:8A:6D:22:74:31:98:95:E2:48:C3:5A:F7:09:5A X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:d3:ba:75:06:af:11:c6:cd:27:b4:5d:06:3f:cc:75:c7: 62:ab:32:1d:ec:ce:02:7f:03:51:76:9d:53:ac:34:26:86:af: 17:fb:1a:11:fd:39:84:51:c7:e9:ba:0e:b9:4a:2a:0e:12:cf: 36:7f:2b:63:2e:57:92:f0:36:86:da:63:ad:5f:42:cf:fb:94: 0d:80:ea:00:d5:9e:cd:c1:c7:c5:ba:16:bd:42:86:72:50:54: d9:00:d5:41:53:78:4d:9a:61:8e:97:cc:eb:16:d9:8b:0c:42: 80:5b:ea:b2:87:ad:92:8f:ab:e4:6e:3a:8b:cf:73:b5:e2:b7: 9b:b4:cb:da:9a:9f:4e:75:fa:d5:71:99:c3:a7:a6:a7:58:d1: d7:72:12:5c:10:78:09:14:07:70:e7:4c:98:17:c0:6a:8b:a0: d6:d8:d5:02:63:ac:f6:e0:75:68:0d:a7:91:b8:d4:67:4f:ca: aa:e8:1f:a3:0a:2d:fa:44:ef:0b:09:53:06:38:89:22:b2:4f: d2:f1:d9:35:4e:6d:33:fb:22:4d:fc:b7:73:c8:39:e0:7f:ce: 37:0d:aa:41:9c:a7:a7:a9:d5:29:a9:62:27:8d:5f:01:80:4a: 13:eb:4b:e9:6d:02:f6:47:57:61:84:b1:0a:de:84:ad:b4:0b: b1:b7:45:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKSBoS1d3Ay7HAWhcAN5687d6S5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjA4MjgwNjQ4MjhaFw0yNjA4MzEwNzEyMjhaMDMxMTAvBgNV BAMTKEQxQjU0QzVCQjBBMThBNkQyMjc0MzE5ODk1RTI0OEMzNUFGNzA5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosEnSLIGDt9EWANtYROR6BqeL RzgrSNTnyd2ks4NEJPKlpq/yDYbnCkLWlnmvvCLSaNMXIeV88Ad0pnFF8US3U0O/ umi9ltwmrNieMxf+uVYBtblaDalklD8UqwbILx/nCkKnHaV4PThOAdcbaUcvi0io Zuy+I1LoxfDodsB8SHHDkuFjqKpk/a2qy6Et/wWuXqLyAPQNyPZxL/JlJinpDxCN ldMXe0UFg732k92XdGPtMTfq8x/kA29/qPWatbmPg7iDydVlQ+DGhhtvKFLgqZmH gIOm5WmYBrEjecKjxQdgg9wKcPLOuMoItgVnVQS56sJOsv/vEzsQAs3v5X0BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0bVMW7Chim0idDGYleJIw1r3CVowHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjLTunUGrxHG zSe0XQY/zHXHYqsyHezOAn8DUXadU6w0JoavF/saEf05hFHH6boOuUoqDhLPNn8r Yy5XkvA2htpjrV9Cz/uUDYDqANWezcHHxboWvUKGclBU2QDVQVN4TZphjpfM6xbZ iwxCgFvqsoetko+r5G46i89zteK3m7TL2pqfTnX61XGZw6emp1jR13ISXBB4CRQH cOdMmBfAaoug1tjVAmOs9uB1aA2nkbjUZ0/Kqugfowot+kTvCwlTBjiJIrJP0vHZ NU5tM/siTfy3c8g54H/ONw2qQZynp6nVKaliJ41fAYBKE+tL6W0C9kdXYYSxCt6E rbQLsbdFyw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:00:21 2026 by rpki-client