$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: 0QepMSDcfVaYGGmIx/BOMYCHV6o30Xze1/LxZ6F2xSg= Subject key identifier: 25:83:A1:7E:BC:8C:8C:24:AB:54:2E:B6:CA:3A:92:C3:03:E9:A5:84 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 10072470835CF007391AEE41A0727BC2D985C6EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 9A Signing time: Wed 13 May 2026 12:21:04 +0000 Manifest this update: Wed 13 May 2026 12:16:04 +0000 Manifest next update: Thu 14 May 2026 14:39:04 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: MNW9T0O6kBGgJDg6k4vW+AYKSoGrnDw+1vT+i/bEj4k=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 4: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:07:24:70:83:5c:f0:07:39:1a:ee:41:a0:72:7b:c2:d9:85:c6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: May 13 12:16:04 2026 GMT Not After : May 14 14:39:04 2026 GMT Subject: CN=2583A17EBC8C8C24AB542EB6CA3A92C303E9A584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:c4:44:f7:e2:a2:95:ae:28:ef:6b:c4:5e: bc:45:c8:ae:64:87:35:01:81:1c:4f:70:ec:2a:12: d6:49:2d:98:6f:30:10:70:2b:2f:01:35:4b:ef:3b: c4:c1:0a:20:a5:1f:5a:58:3d:2b:c2:c6:f1:73:fb: 34:93:28:b2:44:93:8e:c7:d8:c4:42:e2:82:53:24: a5:ad:b3:d7:ec:02:9e:fc:1a:1f:b1:92:f8:a7:2c: 18:a9:19:b9:cc:f8:29:4a:bb:1f:ab:c6:b0:51:91: 9b:91:e5:48:d3:35:d3:78:ec:54:19:1e:da:7d:ba: 70:aa:cb:02:92:40:be:d7:b5:41:1d:5a:e2:63:02: af:bf:a4:48:be:39:47:2a:a6:94:f3:f1:72:43:43: 7d:a3:56:1b:dd:c0:7a:7c:dc:bd:5c:da:05:2c:93: a2:35:59:90:18:66:40:e9:21:8d:23:b2:91:a0:9f: d9:a9:c5:fa:f0:09:c4:90:e7:62:6d:c7:02:3b:8d: 47:7b:6f:08:33:22:e7:04:be:c4:89:6e:22:10:4c: 38:ff:8c:8a:bc:bc:3c:a6:9f:77:f6:15:e3:c3:af: d4:f0:d1:a1:43:bd:4a:24:37:ec:57:49:d4:23:57: cc:11:6d:41:45:20:b3:b7:bb:47:6f:34:54:8b:56: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:A1:7E:BC:8C:8C:24:AB:54:2E:B6:CA:3A:92:C3:03:E9:A5:84 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:50:6c:f9:86:0a:f4:85:41:1a:1e:7e:14:02:f0:fc:6d: 3f:65:11:67:18:92:4a:72:5c:51:79:73:db:39:05:fe:19:be: 2a:fe:1c:68:07:7a:18:44:31:27:ee:1e:b4:89:67:36:d3:a2: af:33:56:3f:18:94:d2:89:ad:ba:98:24:87:49:f4:3b:bb:26: 79:35:c9:96:8a:79:62:0c:5a:5e:27:00:d7:05:fc:0e:42:53: ec:a6:3d:8a:cd:d2:71:d3:49:0c:aa:fc:8e:e3:fb:79:43:ea: 41:a8:e3:17:ba:95:fd:b0:e1:57:4f:c7:5a:1e:63:e5:65:57: 2a:fd:c4:f9:3e:b9:95:e4:a7:e9:78:85:fd:7a:33:94:0e:92: eb:bb:9b:bb:8c:1f:c9:43:56:4c:a4:1c:49:cc:ff:4c:19:42: 07:56:1c:34:cb:cc:0b:61:cd:89:44:94:6d:c1:9f:9c:97:69: 94:eb:74:bd:cb:25:c2:ac:5b:3a:8f:4f:28:12:00:a0:6d:68: aa:80:b1:13:54:19:9e:01:fc:85:97:a3:ad:14:27:52:0e:78: dd:2c:d1:50:1f:e2:28:24:44:51:a4:9b:0f:3f:af:48:74:c5: 8a:f8:61:f0:96:d6:3d:ff:80:a5:cc:16:21:04:06:21:db:81: cb:4d:19:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEAckcINc8Ac5Gu5BoHJ7wtmFxuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA1MTMxMjE2MDRaFw0yNjA1MTQxNDM5MDRaMDMxMTAvBgNV BAMTKDI1ODNBMTdFQkM4QzhDMjRBQjU0MkVCNkNBM0E5MkMzMDNFOUE1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOMRE9+Kila4o72vEXrxFyK5k hzUBgRxPcOwqEtZJLZhvMBBwKy8BNUvvO8TBCiClH1pYPSvCxvFz+zSTKLJEk47H 2MRC4oJTJKWts9fsAp78Gh+xkvinLBipGbnM+ClKux+rxrBRkZuR5UjTNdN47FQZ Htp9unCqywKSQL7XtUEdWuJjAq+/pEi+OUcqppTz8XJDQ32jVhvdwHp83L1c2gUs k6I1WZAYZkDpIY0jspGgn9mpxfrwCcSQ52JtxwI7jUd7bwgzIucEvsSJbiIQTDj/ jIq8vDymn3f2FePDr9Tw0aFDvUokN+xXSdQjV8wRbUFFILO3u0dvNFSLVnJVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJYOhfryMjCSrVC62yjqSwwPppYQwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixVQbPmGCvSF QRoefhQC8PxtP2URZxiSSnJcUXlz2zkF/hm+Kv4caAd6GEQxJ+4etIlnNtOirzNW PxiU0omtupgkh0n0O7smeTXJlop5YgxaXicA1wX8DkJT7KY9is3ScdNJDKr8juP7 eUPqQajjF7qV/bDhV0/HWh5j5WVXKv3E+T65leSn6XiF/XozlA6S67ubu4wfyUNW TKQcScz/TBlCB1YcNMvMC2HNiUSUbcGfnJdplOt0vcslwqxbOo9PKBIAoG1oqoCx E1QZngH8hZejrRQnUg543SzRUB/iKCREUaSbDz+vSHTFivhh8JbWPf+ApcwWIQQG IduBy00ZtA== -----END CERTIFICATE-----Generated at Wed May 13 20:23:42 2026 by rpki-client