$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: ejzhGESX4gy170QuZGL2pRXDcGnQhyVdb4ILXCwxIag= Subject key identifier: 1A:5A:71:33:B2:5B:E5:E4:65:46:99:C2:46:4C:4B:55:1D:3A:E5:C6 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 7DBE862CF7B764FCE7389CB1F9C9E765DF022FCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 05:00:24 +0000 Manifest this update: Fri 24 Jul 2026 04:55:24 +0000 Manifest next update: Sat 25 Jul 2026 07:03:24 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: Goby6FCQs7Xraar5JEbHhtycfdQis1uz7jROhqITZS4=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:be:86:2c:f7:b7:64:fc:e7:38:9c:b1:f9:c9:e7:65:df:02:2f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jul 24 04:55:24 2026 GMT Not After : Jul 25 07:03:24 2026 GMT Subject: CN=1A5A7133B25BE5E4654699C2464C4B551D3AE5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:84:5b:6a:7e:3b:4e:a3:2c:f9:e9:74:cd: 57:a0:fa:e5:6c:c1:df:e7:7e:6e:f6:e3:9f:7b:55: 37:04:a5:8c:65:1b:0e:6a:5c:d6:33:46:1b:1e:7b: 38:90:88:4e:93:65:34:66:81:bf:14:28:28:0b:b6: 3a:c9:92:cf:dd:7e:a0:cb:9f:35:de:69:42:55:94: f0:19:a3:5d:43:f9:a0:96:7b:b6:cb:6b:9e:10:88: dd:2f:bf:76:5c:48:2d:14:27:1d:bb:44:a1:3c:55: 1d:1e:6b:c2:e8:1a:09:9e:7b:2b:08:df:d8:d0:36: 65:e4:86:f6:93:8d:ee:36:76:02:fd:ef:35:55:b5: a9:3c:34:10:17:6f:88:7d:5c:63:7c:26:9d:3f:bf: dc:a5:d9:6c:b3:73:64:14:99:20:3b:4f:66:0e:89: 13:48:77:63:ab:d5:e5:20:16:d7:ca:6c:5e:4a:6b: 0d:ce:de:95:10:af:3e:3a:80:4a:a4:ad:90:27:2b: 24:1a:1f:9c:d1:b2:ad:ad:ae:37:94:6b:69:89:6c: 18:b3:7e:a3:9c:30:1f:33:25:18:7c:94:0c:14:d2: e6:f3:69:52:57:06:e2:83:b8:5b:bd:cb:01:d2:83: 82:50:63:dd:d6:e0:41:48:d6:2c:46:1d:59:3a:5f: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:71:33:B2:5B:E5:E4:65:46:99:C2:46:4C:4B:55:1D:3A:E5:C6 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:69:8c:7e:d2:86:87:e7:48:3a:96:4f:53:56:9b:36:43: a7:2b:56:6e:b0:3b:fa:b6:c1:07:48:88:c8:2d:a7:84:f3:1a: 05:1b:ba:53:41:c9:00:0a:b9:63:1c:27:a0:30:54:10:0e:a1: 00:48:47:7a:7e:b8:ff:67:53:09:d7:fe:63:71:9f:fa:34:b0: 44:6c:ec:6f:12:9e:db:48:ad:d6:9a:cc:d7:cd:dd:43:22:da: 5f:65:01:75:5c:2e:e3:99:32:ab:c9:84:99:e6:c4:47:df:c2: 48:9f:bd:25:b0:9b:cb:68:c7:de:c1:28:5d:64:39:70:32:d4: d5:28:c7:18:7b:2b:38:0a:26:79:7a:b8:ec:3b:99:10:db:93: c5:07:7b:c6:ce:62:2e:1f:d0:01:e0:5b:8e:6c:18:2d:d5:8c: f6:8c:73:c7:01:4e:85:ab:9a:4c:d0:ad:cc:22:99:c1:1e:7c: 8b:aa:2d:4a:ed:af:ee:89:69:6b:02:03:2b:a7:53:ba:79:92: 42:cc:48:bb:b5:f4:b5:09:ba:61:26:45:2a:7c:e6:2c:9b:43: e2:c4:9c:8b:c4:1b:32:12:f0:ff:1b:f4:95:f7:6b:03:d5:2e: cb:34:c3:65:b9:18:97:62:c8:60:a8:bf:28:e6:2d:80:a2:a8: 53:b8:9a:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfb6GLPe3ZPznOJyx+cnnZd8CL8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA3MjQwNDU1MjRaFw0yNjA3MjUwNzAzMjRaMDMxMTAvBgNV BAMTKDFBNUE3MTMzQjI1QkU1RTQ2NTQ2OTlDMjQ2NEM0QjU1MUQzQUU1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPCIRban47TqMs+el0zVeg+uVs wd/nfm724597VTcEpYxlGw5qXNYzRhseeziQiE6TZTRmgb8UKCgLtjrJks/dfqDL nzXeaUJVlPAZo11D+aCWe7bLa54QiN0vv3ZcSC0UJx27RKE8VR0ea8LoGgmeeysI 39jQNmXkhvaTje42dgL97zVVtak8NBAXb4h9XGN8Jp0/v9yl2Wyzc2QUmSA7T2YO iRNId2Or1eUgFtfKbF5Kaw3O3pUQrz46gEqkrZAnKyQaH5zRsq2trjeUa2mJbBiz fqOcMB8zJRh8lAwU0ubzaVJXBuKDuFu9ywHSg4JQY93W4EFI1ixGHVk6Xx/ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGlpxM7Jb5eRlRpnCRkxLVR065cYwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6ppjH7Shofn SDqWT1NWmzZDpytWbrA7+rbBB0iIyC2nhPMaBRu6U0HJAAq5YxwnoDBUEA6hAEhH en64/2dTCdf+Y3Gf+jSwRGzsbxKe20it1prM183dQyLaX2UBdVwu45kyq8mEmebE R9/CSJ+9JbCby2jH3sEoXWQ5cDLU1SjHGHsrOAomeXq47DuZENuTxQd7xs5iLh/Q AeBbjmwYLdWM9oxzxwFOhauaTNCtzCKZwR58i6otSu2v7olpawIDK6dTunmSQsxI u7X0tQm6YSZFKnzmLJtD4sSci8QbMhLw/xv0lfdrA9UuyzTDZbkYl2LIYKi/KOYt gKKoU7iagw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:37:14 2026 by rpki-client