$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: 1DrQ6FApwVHvFmvDJykkYVpMOBoNJHUyY1LdvpTB0Vs= Subject key identifier: D3:F4:7D:D2:B1:F0:1F:E7:32:F6:85:64:61:53:6E:80:10:48:2E:74 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 0F033E458C98D9BB94925C30AC9A633B89DF67 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: FA Signing time: Fri 24 Jul 2026 09:35:55 +0000 Manifest this update: Fri 24 Jul 2026 09:30:55 +0000 Manifest next update: Sat 25 Jul 2026 12:44:55 +0000 Files and hashes: 1: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 4: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 5: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 6: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 7: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: RvuMbK+qwhKcNvV91Crmbxk4YwMICI6WNYdoXoSlcsg=) 8: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:03:3e:45:8c:98:d9:bb:94:92:5c:30:ac:9a:63:3b:89:df:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Jul 24 09:30:55 2026 GMT Not After : Jul 25 12:44:55 2026 GMT Subject: CN=D3F47DD2B1F01FE732F6856461536E8010482E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:03:60:ef:e6:95:ca:da:f4:7b:73:54:e3: cb:67:a5:7a:67:fd:92:d2:b9:87:c0:08:ee:38:b3: 24:de:a2:66:12:2f:5a:d0:60:48:45:20:44:6d:8d: e6:27:97:d4:a4:c5:4f:fb:8a:7e:0a:7e:d6:b8:2d: c8:ac:dc:7a:28:46:0a:92:6d:ae:79:85:a3:11:c0: 3e:59:c7:46:6f:42:77:df:ef:8d:6f:3a:bb:60:5b: 05:68:b1:7f:7f:b9:8b:26:42:6c:23:48:1a:35:ec: 00:eb:1c:08:58:32:97:43:cb:23:50:f8:af:fc:c5: 1a:eb:b2:e9:db:46:f0:84:5f:1f:ed:51:9c:56:a8: 6c:80:b4:8c:1b:96:11:1b:d8:b7:97:8c:2e:12:ba: 39:0a:8a:88:ca:77:59:23:4b:79:6c:8c:f6:15:12: dd:9c:1d:a5:af:21:a4:d1:fc:7e:36:95:31:89:4d: 29:04:62:7d:89:d5:cb:be:36:39:12:59:6a:e7:12: 59:8a:92:48:90:b5:49:f6:55:65:38:64:b8:56:f9: 4f:6c:3f:53:b0:24:d7:3b:25:5b:30:88:55:b5:e2: 1b:32:11:89:6f:12:4e:8f:bc:c2:25:78:7c:ea:06: ed:20:9a:f5:f9:ff:5a:db:70:06:f7:a3:52:70:c8: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F4:7D:D2:B1:F0:1F:E7:32:F6:85:64:61:53:6E:80:10:48:2E:74 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:77:0e:43:6f:1c:ce:80:f5:8d:da:22:5f:90:12:a3:3e:1d: 73:a5:5b:ee:e4:78:9e:7a:1d:33:82:1d:19:92:cf:58:85:0d: 88:12:89:4b:7b:cc:e4:48:47:49:40:b3:ed:15:1a:48:3a:a9: 63:fb:d5:77:60:8b:e3:0d:b6:86:03:8e:93:ed:dd:fc:cb:b9: 9c:ac:a4:34:6b:35:e1:50:c9:8b:8a:fc:f6:e9:a3:ff:4e:05: 3e:c1:e8:1e:4a:ab:6a:fe:f8:6a:9e:62:80:d6:be:8e:80:46: 31:41:5a:42:80:40:56:e9:00:2d:c6:ea:9b:63:82:8d:0c:1c: 57:9b:69:b9:69:e1:e9:49:03:3b:d6:3d:40:c1:83:13:dc:f3: 28:93:95:5d:2c:e9:8c:b1:58:c4:c3:f8:22:e6:ba:91:b2:e3: a0:a6:d7:84:59:ad:5f:79:d2:f7:25:e4:03:6f:0e:a7:0e:70: 5b:c5:82:a0:e3:99:5e:aa:d3:af:d9:4f:cd:20:d5:3a:a8:3f: e0:5e:04:aa:c9:9b:bb:e1:06:ae:f2:62:71:9a:e5:1a:e3:36: 89:b8:44:df:36:63:93:82:cb:22:d0:2c:c8:4e:29:dd:f6:27: 11:8e:67:b3:e8:3c:ec:4c:29:20:41:f1:eb:5b:e4:9d:80:b5: ea:a0:46:76 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITDwM+RYyY2buUklwwrJpjO4nfZzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4RkFCMjc0NTJEODBEMjcwNTgyRTg4QzNGNzdGMTM3MzRB MzE3MjBEMB4XDTI2MDcyNDA5MzA1NVoXDTI2MDcyNTEyNDQ1NVowMzExMC8GA1UE AxMoRDNGNDdERDJCMUYwMUZFNzMyRjY4NTY0NjE1MzZFODAxMDQ4MkU3NDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbHA2Dv5pXK2vR7c1Tjy2elemf9 ktK5h8AI7jizJN6iZhIvWtBgSEUgRG2N5ieX1KTFT/uKfgp+1rgtyKzceihGCpJt rnmFoxHAPlnHRm9Cd9/vjW86u2BbBWixf3+5iyZCbCNIGjXsAOscCFgyl0PLI1D4 r/zFGuuy6dtG8IRfH+1RnFaobIC0jBuWERvYt5eMLhK6OQqKiMp3WSNLeWyM9hUS 3Zwdpa8hpNH8fjaVMYlNKQRifYnVy742ORJZaucSWYqSSJC1SfZVZThkuFb5T2w/ U7Ak1zslWzCIVbXiGzIRiW8STo+8wiV4fOoG7SCa9fn/WttwBvejUnDIDo0CAwEA AaOCAh0wggIZMB0GA1UdDgQWBBTT9H3SsfAf5zL2hWRhU26AEEgudDAfBgNVHSME GDAWgBSPqydFLYDScFguiMP3fxNzSjFyDTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTgzMjIxOTcyMjcxMTA3LzAvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEz NzM0QTMxNzIwRC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS84RkFCMjc0NTJEODBEMjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQy NzA1ODJFODhDM0Y3N0YxMzczNEEzMTcyMEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8dw5DbxzOgPWN 2iJfkBKjPh1zpVvu5Hieeh0zgh0Zks9YhQ2IEolLe8zkSEdJQLPtFRpIOqlj+9V3 YIvjDbaGA46T7d38y7mcrKQ0azXhUMmLivz26aP/TgU+wegeSqtq/vhqnmKA1r6O gEYxQVpCgEBW6QAtxuqbY4KNDBxXm2m5aeHpSQM71j1AwYMT3PMok5VdLOmMsVjE w/gi5rqRsuOgpteEWa1fedL3JeQDbw6nDnBbxYKg45leqtOv2U/NINU6qD/gXgSq yZu74Qau8mJxmuUa4zaJuETfNmOTgssi0CzITind9icRjmez6DzsTCkgQfHrW+Sd gLXqoEZ2 -----END CERTIFICATE-----Generated at Fri Jul 24 15:58:38 2026 by rpki-client