$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: 7sCWslsigzjNTT8z65nkyHZdQ0jXdA1lxKMgODs6tw8= Subject key identifier: 3A:B7:05:DA:13:14:E1:0C:3A:BE:56:CA:AA:B9:A7:C4:C8:A9:0E:67 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 6D86BFE94139C5AE482DCA2AC232BD7C52376E2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: FA Signing time: Fri 24 Jul 2026 23:07:23 +0000 Manifest this update: Fri 24 Jul 2026 23:02:23 +0000 Manifest next update: Sat 25 Jul 2026 23:19:23 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: 2ubWNUgEN+6yGixDoULYiPAqm05AMNKZFHPf+m2NZKk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:86:bf:e9:41:39:c5:ae:48:2d:ca:2a:c2:32:bd:7c:52:37:6e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jul 24 23:02:23 2026 GMT Not After : Jul 25 23:19:23 2026 GMT Subject: CN=3AB705DA1314E10C3ABE56CAAAB9A7C4C8A90E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:dd:fb:f3:4d:01:62:58:d3:9e:ce:12:85: a7:10:6e:4e:a1:a0:a4:7f:38:97:f8:73:ae:8f:71: e9:c9:98:d3:6b:e8:48:45:2c:64:22:67:33:8b:d6: a8:62:c3:6f:a9:4d:bc:75:09:56:4e:e6:a7:97:5c: b9:96:25:78:ba:c9:0c:41:f2:7b:9f:72:f2:8e:8d: 29:01:05:54:db:cc:54:e6:56:9f:68:18:de:38:fe: 5f:31:7c:f6:f8:10:24:ce:87:4c:da:e4:8a:27:82: 40:29:5d:a1:e9:5e:2d:08:9a:c4:04:f7:8e:10:31: e2:1f:74:9a:08:1f:4b:f6:11:c6:c4:14:03:44:85: 08:47:c0:cb:23:f3:90:f4:6f:45:12:0e:31:e1:db: 63:08:f9:16:fe:92:81:35:66:59:f8:5f:d8:d8:97: 7b:d5:f2:7d:39:9c:00:28:9d:2d:5b:ed:e8:3d:21: 76:6a:49:66:6a:d1:a4:cd:fd:bf:4b:25:94:ca:8a: 2e:bb:d3:91:28:99:1d:de:8a:bf:b3:b4:cc:ad:fd: 4f:a2:24:1e:9a:40:a0:53:1b:d8:5e:84:11:3b:f2: a0:f9:4d:12:15:9f:11:05:78:a3:2c:f9:56:4e:e5: e3:25:9d:09:c9:c7:4f:59:37:f1:03:77:5a:a3:10: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:05:DA:13:14:E1:0C:3A:BE:56:CA:AA:B9:A7:C4:C8:A9:0E:67 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ee:b5:74:7f:3e:00:89:80:85:83:c3:4d:be:38:ba:15:c7: a9:30:3b:a3:d1:53:a3:c7:e6:d9:cb:01:05:2d:03:9c:2d:70: a0:c3:19:e4:6d:2e:20:7a:1d:3b:8b:f4:a0:94:06:6d:c5:a8: 42:ba:21:e6:08:16:94:b5:08:00:29:7e:12:00:16:d5:c1:bc: 15:4b:bf:cd:c0:9f:38:c9:72:00:07:a1:51:d5:c9:cb:86:65: ff:1a:42:2f:d9:2a:3c:46:a0:52:14:36:e5:28:a6:23:b8:b8: ea:84:a7:f0:93:7b:a3:a6:9c:c5:6d:ee:25:b4:97:43:94:92: 73:ab:46:7b:f0:f4:aa:ac:5a:d5:5c:59:c9:84:0e:53:3c:c2: db:cf:ff:18:3d:4c:4d:1d:db:9e:ff:94:c0:d3:33:7a:d3:a4: 6d:81:02:fb:de:2c:b6:d5:92:10:24:87:7a:87:82:07:2d:5c: 92:75:3c:1d:d0:1b:1a:90:91:29:13:8e:5e:d8:15:7b:77:1e: d9:1d:dd:f5:da:c5:1a:20:8d:ff:24:22:10:83:5c:d5:0f:04: 5e:a5:8b:70:c4:ab:22:c6:b9:fc:18:6e:d3:9c:ed:42:61:78: ea:23:ef:6c:dd:90:dc:cd:f9:d0:09:e1:47:11:cb:68:7c:b9: 89:17:bc:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbYa/6UE5xa5ILcoqwjK9fFI3bi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA3MjQyMzAyMjNaFw0yNjA3MjUyMzE5MjNaMDMxMTAvBgNV BAMTKDNBQjcwNURBMTMxNEUxMEMzQUJFNTZDQUFBQjlBN0M0QzhBOTBFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3d37800BYljTns4ShacQbk6h oKR/OJf4c66PcenJmNNr6EhFLGQiZzOL1qhiw2+pTbx1CVZO5qeXXLmWJXi6yQxB 8nufcvKOjSkBBVTbzFTmVp9oGN44/l8xfPb4ECTOh0za5IongkApXaHpXi0ImsQE 944QMeIfdJoIH0v2EcbEFANEhQhHwMsj85D0b0USDjHh22MI+Rb+koE1Zln4X9jY l3vV8n05nAAonS1b7eg9IXZqSWZq0aTN/b9LJZTKii6705EomR3eir+ztMyt/U+i JB6aQKBTG9hehBE78qD5TRIVnxEFeKMs+VZO5eMlnQnJx09ZN/EDd1qjEBybAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOrcF2hMU4Qw6vlbKqrmnxMipDmcwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO61dH8+AImA hYPDTb44uhXHqTA7o9FTo8fm2csBBS0DnC1woMMZ5G0uIHodO4v0oJQGbcWoQroh 5ggWlLUIACl+EgAW1cG8FUu/zcCfOMlyAAehUdXJy4Zl/xpCL9kqPEagUhQ25Sim I7i46oSn8JN7o6acxW3uJbSXQ5SSc6tGe/D0qqxa1VxZyYQOUzzC28//GD1MTR3b nv+UwNMzetOkbYEC+94sttWSECSHeoeCBy1cknU8HdAbGpCRKROOXtgVe3ce2R3d 9drFGiCN/yQiEINc1Q8EXqWLcMSrIsa5/Bhu05ztQmF46iPvbN2Q3M350AnhRxHL aHy5iRe8dA== -----END CERTIFICATE-----Generated at Sat Jul 25 00:50:32 2026 by rpki-client