$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json) Hash identifier: Szq39Yy0tWWN8iHjM8ca3dmULOn0LD0KMcd0GBfJj0w= Subject key identifier: 73:EE:C4:07:E9:AE:EA:24:70:99:C6:EA:AC:DF:3C:97:2C:FF:DE:86 Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Certificate serial: 19842C85F60BE9B72881E41137EFE263BF84DC3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft Manifest number: 3A Signing time: Fri 28 Aug 2026 06:48:25 +0000 Manifest this update: Fri 28 Aug 2026 06:43:25 +0000 Manifest next update: Mon 31 Aug 2026 15:39:25 +0000 Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: 2XOqw4JpbHJUcdU8KWMFnudodoq6Feh3lOODf2o5m68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:84:2c:85:f6:0b:e9:b7:28:81:e4:11:37:ef:e2:63:bf:84:dc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Validity Not Before: Aug 28 06:43:25 2026 GMT Not After : Aug 31 15:39:25 2026 GMT Subject: CN=73EEC407E9AEEA247099C6EAACDF3C972CFFDE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:d5:17:f4:cb:2c:81:b1:45:21:2f:4f:6b: a5:9d:3d:95:7b:e9:fb:e0:42:01:2e:bc:8f:d7:ac: 4b:06:33:3e:ec:6e:60:9a:7d:e0:2c:c9:16:ae:fa: 7f:bf:51:63:00:7c:b7:1c:ef:e2:74:4b:49:20:a8: 1a:8e:96:23:cb:d2:19:51:a8:a8:e5:ca:95:8f:16: ab:0b:d3:bd:d3:46:33:24:49:00:17:8f:36:4e:7c: c2:20:1a:4a:16:a9:c0:ae:6b:1f:56:d5:83:65:2b: dc:45:5c:92:da:be:9a:4e:fc:4a:af:34:c7:34:eb: a3:ef:8f:df:05:55:dd:31:16:be:6d:5c:5c:74:8c: 76:04:ad:e1:5b:9f:0f:9c:59:63:07:42:82:6b:28: 78:00:6a:1a:41:57:ea:dc:5c:30:e1:ab:d1:07:43: 0f:ce:6a:0b:4e:4c:01:13:a3:17:5b:b4:19:b2:4b: c5:0f:6f:5b:ad:95:28:f4:2a:cf:a7:df:09:95:b9: c9:3e:b8:2d:c3:bf:c8:f6:6d:58:c0:f4:6a:e3:3c: e4:02:bc:1c:26:db:64:84:ea:58:8c:26:20:68:77: e3:c4:56:f9:62:f6:90:c5:41:69:ad:2b:f2:da:12: 09:45:23:6b:c1:e3:d8:e9:8a:67:7b:20:ca:e9:59: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:C4:07:E9:AE:EA:24:70:99:C6:EA:AC:DF:3C:97:2C:FF:DE:86 X509v3 Authority Key Identifier: keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:19:12:a1:b0:50:c5:20:0a:e6:c2:25:77:3d:cc:eb:c4:04: 0d:89:f9:3d:00:5d:f3:21:71:7a:50:6e:87:fd:2d:c2:38:c9: b9:e5:42:e4:82:ee:6e:b9:ba:0a:8a:53:8f:ff:35:86:5e:18: ca:c8:95:68:7a:03:68:1d:b2:41:af:97:cc:bb:1d:85:2b:91: 0e:91:ac:63:ec:eb:25:c0:40:bd:b0:60:15:5b:6b:62:ff:bf: 43:f7:2c:26:fc:a8:97:00:d3:c6:5a:0b:79:79:e3:25:0e:f8: bf:f0:d3:18:90:a8:9b:db:8d:2d:fd:57:8f:d7:64:84:d8:ab: b7:40:8f:51:68:05:1b:c4:a2:d9:43:08:ea:fb:69:91:ff:e2: e3:18:9f:4f:bf:b6:23:d1:0e:89:05:99:59:35:18:5c:c2:22: 9b:89:30:90:97:b7:37:f8:81:b3:81:89:cf:9c:46:22:af:d6: 5a:bc:6a:f9:c9:e9:13:6e:65:bc:c8:9b:cd:2e:b0:07:58:cd: 0d:47:10:1c:3c:5c:23:95:b2:2d:e1:d5:ea:7f:58:ab:3c:03: 0f:e5:fc:42:3e:1a:8c:4e:c8:f1:40:b2:73:86:16:25:66:d7: ae:84:a1:33:1e:f0:5c:9e:52:33:0e:66:0c:c7:46:7a:7e:e9: eb:cf:9a:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGYQshfYL6bcogeQRN+/iY7+E3D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD RDc2RUU4QzAeFw0yNjA4MjgwNjQzMjVaFw0yNjA4MzExNTM5MjVaMDMxMTAvBgNV BAMTKDczRUVDNDA3RTlBRUVBMjQ3MDk5QzZFQUFDREYzQzk3MkNGRkRFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0NUX9MssgbFFIS9Pa6WdPZV7 6fvgQgEuvI/XrEsGMz7sbmCafeAsyRau+n+/UWMAfLcc7+J0S0kgqBqOliPL0hlR qKjlypWPFqsL073TRjMkSQAXjzZOfMIgGkoWqcCuax9W1YNlK9xFXJLavppO/Eqv NMc066Pvj98FVd0xFr5tXFx0jHYEreFbnw+cWWMHQoJrKHgAahpBV+rcXDDhq9EH Qw/OagtOTAEToxdbtBmyS8UPb1utlSj0Ks+n3wmVuck+uC3Dv8j2bVjA9GrjPOQC vBwm22SE6liMJiBod+PEVvli9pDFQWmtK/LaEglFI2vB49jpimd7IMrpWcgNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc+7EB+mu6iRwmcbqrN88lyz/3oYwHwYDVR0j BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4 MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBkSobBQxSAK 5sIldz3M68QEDYn5PQBd8yFxelBuh/0twjjJueVC5ILubrm6CopTj/81hl4YysiV aHoDaB2yQa+XzLsdhSuRDpGsY+zrJcBAvbBgFVtrYv+/Q/csJvyolwDTxloLeXnj JQ74v/DTGJCom9uNLf1Xj9dkhNirt0CPUWgFG8Si2UMI6vtpkf/i4xifT7+2I9EO iQWZWTUYXMIim4kwkJe3N/iBs4GJz5xGIq/WWrxq+cnpE25lvMibzS6wB1jNDUcQ HDxcI5WyLeHV6n9YqzwDD+X8Qj4ajE7I8UCyc4YWJWbXroShMx7wXJ5SMw5mDMdG en7p68+axQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:53 2026 by rpki-client