$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: LSsdfr+rSts1yYdS2IRkCgNcgp1j2f5NKo1fqLtbgls= Subject key identifier: 49:78:25:09:9C:A7:C1:48:A5:E8:B2:7C:C4:E2:5C:D2:80:01:A2:2E Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 2415DFFDEB74A6F033AF300DB7BA550CB980904A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 0125 Signing time: Fri 24 Jul 2026 15:46:35 +0000 Manifest this update: Fri 24 Jul 2026 15:41:35 +0000 Manifest next update: Sat 25 Jul 2026 19:30:35 +0000 Files and hashes: 1: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: 8l1AuwBQySVMRSepKi2uj2BHmbeCdXa9P9GVxfMeXTw=) 2: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 3: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 4: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:15:df:fd:eb:74:a6:f0:33:af:30:0d:b7:ba:55:0c:b9:80:90:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Jul 24 15:41:35 2026 GMT Not After : Jul 25 19:30:35 2026 GMT Subject: CN=497825099CA7C148A5E8B27CC4E25CD28001A22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:28:66:7b:2f:29:0b:bc:06:06:7c:de:4d: 75:63:ff:fb:94:8c:1e:7f:da:c7:99:30:dc:b9:e9: da:7a:3e:41:70:cf:3e:a3:e3:84:21:c7:77:e2:dd: c7:51:83:19:51:5c:78:29:19:eb:24:5b:16:2a:55: 00:65:a9:02:1b:81:0d:73:8c:8b:99:f9:56:1d:6b: c3:27:77:3a:40:43:fc:38:8e:8c:8e:a0:64:14:69: c0:02:21:b8:d9:b8:3b:c5:6c:f1:5a:1d:ea:27:18: 1f:cd:9b:ca:3c:0b:d7:e1:85:3e:ca:47:5e:20:42: 88:64:8c:18:66:44:12:70:01:e9:e1:87:70:a5:58: 36:b2:e8:c8:33:da:10:38:c1:a6:fb:db:71:8a:35: fd:bc:b5:b9:f1:35:28:a6:f3:87:99:18:23:cf:f9: 74:ae:60:54:70:83:47:c5:39:09:26:60:c4:6c:f6: 86:c6:ae:b5:d3:50:8d:39:1d:0f:49:84:37:fc:13: 1b:22:72:f3:d5:4d:b7:e8:4b:a3:8a:51:6f:7a:8c: 08:0f:48:0f:fe:27:86:5d:98:d4:49:c6:58:c2:45: c5:62:fe:3a:09:ab:5f:f2:cd:f6:2a:b3:c2:51:53: 37:0f:43:ae:89:fa:a4:af:d2:eb:54:87:45:6c:19: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:78:25:09:9C:A7:C1:48:A5:E8:B2:7C:C4:E2:5C:D2:80:01:A2:2E X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:04:44:c2:89:db:ad:bc:06:66:89:fc:8e:49:27:17:68:c2: a8:a6:cd:21:d7:a4:16:32:ca:c4:25:75:dc:fd:89:dd:a5:9e: ff:ed:f9:2f:95:ff:76:4a:49:07:8f:cb:c0:9f:3b:f6:fe:dc: 2a:6f:2d:69:f6:2d:45:ba:27:49:2c:69:4b:75:72:ec:ca:8f: 42:5d:ba:89:fd:42:cf:cf:5a:88:b7:36:89:95:ad:84:0c:a1: 70:0a:a9:a5:25:6b:1d:6c:9d:d5:35:61:d7:0d:e8:4c:60:10: b1:23:36:1b:52:de:53:4c:81:2b:0a:66:63:1c:e7:90:52:d1: 28:05:f1:b7:35:09:63:14:6b:34:a1:96:ce:bc:54:46:af:af: ec:72:53:14:50:a0:c6:c7:b0:9e:0f:75:d0:25:32:00:d0:08: c5:0e:e9:7a:68:c7:2f:a1:76:ac:29:b7:9a:c7:cb:95:42:10: f2:f1:b0:c7:e9:2a:0e:35:65:32:a9:80:d7:6a:ea:2a:2c:10: cf:a6:9b:f2:22:a0:05:6b:58:24:1a:19:3c:69:7c:0d:d1:0f: 99:2f:2d:66:94:0a:b5:b3:03:27:84:47:9a:64:ff:20:21:66: 66:1e:90:47:3f:6a:61:7d:fe:42:0b:a4:52:33:a9:fb:4e:e8: 90:cd:d8:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJBXf/et0pvAzrzANt7pVDLmAkEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA3MjQxNTQxMzVaFw0yNjA3MjUxOTMwMzVaMDMxMTAvBgNV BAMTKDQ5NzgyNTA5OUNBN0MxNDhBNUU4QjI3Q0M0RTI1Q0QyODAwMUEyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCShmey8pC7wGBnzeTXVj//uU jB5/2seZMNy56dp6PkFwzz6j44Qhx3fi3cdRgxlRXHgpGeskWxYqVQBlqQIbgQ1z jIuZ+VYda8MndzpAQ/w4joyOoGQUacACIbjZuDvFbPFaHeonGB/Nm8o8C9fhhT7K R14gQohkjBhmRBJwAenhh3ClWDay6Mgz2hA4wab723GKNf28tbnxNSim84eZGCPP +XSuYFRwg0fFOQkmYMRs9obGrrXTUI05HQ9JhDf8ExsicvPVTbfoS6OKUW96jAgP SA/+J4ZdmNRJxljCRcVi/joJq1/yzfYqs8JRUzcPQ66J+qSv0utUh0VsGQ8LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSXglCZynwUil6LJ8xOJc0oABoi4wHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgREwonbrbwG Zon8jkknF2jCqKbNIdekFjLKxCV13P2J3aWe/+35L5X/dkpJB4/LwJ879v7cKm8t afYtRbonSSxpS3Vy7MqPQl26if1Cz89aiLc2iZWthAyhcAqppSVrHWyd1TVh1w3o TGAQsSM2G1LeU0yBKwpmYxznkFLRKAXxtzUJYxRrNKGWzrxURq+v7HJTFFCgxsew ng910CUyANAIxQ7pemjHL6F2rCm3msfLlUIQ8vGwx+kqDjVlMqmA12rqKiwQz6ab 8iKgBWtYJBoZPGl8DdEPmS8tZpQKtbMDJ4RHmmT/ICFmZh6QRz9qYX3+QgukUjOp +07okM3YYw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:39:56 2026 by rpki-client