$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft File: 82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json) Hash identifier: OqIN/O0eywc4puFXGqFGRAGe2dBILFzeA8db89zBbd4= Subject key identifier: 8A:BB:D9:50:91:D7:E4:C6:35:91:F7:5E:69:0A:B5:DD:CD:11:60:14 Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1 Certificate issuer: /CN=82611B8148EDC9354240ABCE432147501DAE52D1 Certificate serial: 09E6559BF2CB2407980BB8405ABA90DCB07AEE0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft Manifest number: 2D Signing time: Tue 14 Jul 2026 14:01:26 +0000 Manifest this update: Tue 14 Jul 2026 13:56:26 +0000 Manifest next update: Wed 15 Jul 2026 14:09:26 +0000 Files and hashes: 1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: h/TqMqgXamLyTjpblSeGLRAMYzECso6ob/g/75jP+nk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e6:55:9b:f2:cb:24:07:98:0b:b8:40:5a:ba:90:dc:b0:7a:ee:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1 Validity Not Before: Jul 14 13:56:26 2026 GMT Not After : Jul 15 14:09:26 2026 GMT Subject: CN=8ABBD95091D7E4C63591F75E690AB5DDCD116014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:9a:3e:b0:e8:4c:80:f2:88:7e:f4:7c:a4: 3d:05:df:fa:04:df:ac:9d:2d:01:31:ee:e7:4b:1f: f9:c7:37:3c:47:c8:be:a0:06:ad:d9:46:34:fa:77: 59:ac:07:36:22:2a:39:94:74:f0:54:d7:62:0d:ae: 2f:34:7d:1b:77:81:9a:05:e2:59:fe:47:40:4b:be: 66:53:4b:75:3a:3c:e8:87:6b:52:5a:a3:dc:55:81: fa:bf:d8:bf:35:00:60:64:86:e0:3b:fc:f6:76:5e: 58:1f:d7:fb:e0:7a:6a:1a:38:64:ff:a5:6e:63:78: 10:db:d1:88:d7:6b:e5:c6:13:55:2d:e1:b9:7e:fa: ed:48:44:73:6d:48:01:81:09:14:9e:d1:1c:69:06: 03:f6:90:1d:f0:39:f1:9f:54:cc:5c:2e:a2:69:bb: 36:40:eb:e2:4c:26:18:a7:d0:b7:2c:3c:5d:19:2d: 11:f8:94:dd:a7:6a:1f:5d:62:e1:ea:a4:8f:74:d8: a5:48:2e:1e:53:8e:e3:d8:3a:a0:64:39:62:00:94: 81:1d:3e:0b:1c:eb:25:f6:62:cc:49:f3:4d:da:65: c4:09:7a:19:7a:26:f2:22:5a:12:62:e6:13:74:25: 46:50:86:95:ec:0d:01:95:94:ef:82:a8:5d:1b:ef: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:D9:50:91:D7:E4:C6:35:91:F7:5E:69:0A:B5:DD:CD:11:60:14 X509v3 Authority Key Identifier: keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:0e:a5:d8:a1:7c:be:c4:55:a2:0f:cc:ca:35:88:ae:ca: 2d:27:65:9e:b0:87:93:d1:99:4f:e4:6d:ab:64:d2:8f:3b:ad: bd:15:d2:f7:ee:d0:be:a3:ef:d3:a2:69:2f:74:e9:f9:46:ab: 62:52:50:47:69:18:c9:4e:50:e3:73:5f:13:7e:0a:9c:4b:be: da:61:8b:a0:8f:93:21:bb:4f:e3:e6:29:95:2f:a6:07:83:8d: 90:72:84:fe:eb:16:48:38:37:7f:93:e8:7b:4b:1c:29:e3:b3: 8e:b8:61:47:1f:f5:2c:97:23:8c:55:14:24:d1:1a:80:9b:81: 9e:53:6f:0b:2b:6b:5c:55:f7:81:de:48:22:3d:09:02:5a:18: dc:9f:52:56:1c:74:97:33:be:0a:34:8c:ec:47:9d:16:08:93: 0b:a2:ba:96:aa:ba:ba:2d:5f:86:b7:c7:01:82:b2:2f:e8:f1: b1:b7:8c:04:53:2d:e9:95:a1:ad:c9:62:a5:08:c4:88:18:ea: c6:d9:13:05:7f:22:bb:cc:25:93:1f:1a:12:0e:7e:e6:bc:47: 86:86:c7:66:8e:a1:a7:79:d7:74:44:6d:de:fc:19:b3:d9:f9: 3b:57:05:95:fe:34:39:dd:e1:ff:69:bc:43:62:90:f4:ae:31: 5a:72:ac:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCeZVm/LLJAeYC7hAWrqQ3LB67g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI2MTFCODE0OEVEQzkzNTQyNDBBQkNFNDMyMTQ3NTAx REFFNTJEMTAeFw0yNjA3MTQxMzU2MjZaFw0yNjA3MTUxNDA5MjZaMDMxMTAvBgNV BAMTKDhBQkJEOTUwOTFEN0U0QzYzNTkxRjc1RTY5MEFCNUREQ0QxMTYwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cpo+sOhMgPKIfvR8pD0F3/oE 36ydLQEx7udLH/nHNzxHyL6gBq3ZRjT6d1msBzYiKjmUdPBU12INri80fRt3gZoF 4ln+R0BLvmZTS3U6POiHa1Jao9xVgfq/2L81AGBkhuA7/PZ2Xlgf1/vgemoaOGT/ pW5jeBDb0YjXa+XGE1Ut4bl++u1IRHNtSAGBCRSe0RxpBgP2kB3wOfGfVMxcLqJp uzZA6+JMJhin0LcsPF0ZLRH4lN2nah9dYuHqpI902KVILh5TjuPYOqBkOWIAlIEd Pgsc6yX2YsxJ803aZcQJehl6JvIiWhJi5hN0JUZQhpXsDQGVlO+CqF0b7wyNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUirvZUJHX5MY1kfdeaQq13c0RYBQwHwYDVR0j BBgwFoAUgmEbgUjtyTVCQKvOQyFHUB2uUtEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMzNTEwODc1MjI0NDc2MS8wLzgyNjExQjgxNDhFREM5MzU0MjQwQUJDRTQzMjE0 NzUwMURBRTUyRDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI2MTFCODE0OEVEQzkzNTQyNDBBQkNFNDMyMTQ3NTAxREFFNTJEMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMzUxMDg3NTIyNDQ3NjEvMC84MjYxMUI4MTQ4RURD OTM1NDI0MEFCQ0U0MzIxNDc1MDFEQUU1MkQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzsOpdihfL7E VaIPzMo1iK7KLSdlnrCHk9GZT+Rtq2TSjzutvRXS9+7QvqPv06JpL3Tp+UarYlJQ R2kYyU5Q43NfE34KnEu+2mGLoI+TIbtP4+YplS+mB4ONkHKE/usWSDg3f5Poe0sc KeOzjrhhRx/1LJcjjFUUJNEagJuBnlNvCytrXFX3gd5IIj0JAloY3J9SVhx0lzO+ CjSM7EedFgiTC6K6lqq6ui1fhrfHAYKyL+jxsbeMBFMt6ZWhrclipQjEiBjqxtkT BX8iu8wlkx8aEg5+5rxHhobHZo6hp3nXdERt3vwZs9n5O1cFlf40Od3h/2m8Q2KQ 9K4xWnKsGA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:00 2026 by rpki-client