$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json) Hash identifier: RD0yON2WNSFlFvltLTv7it/Y4nJ4p/CWNE0zJFDD82k= Subject key identifier: 5C:7C:0C:B3:7C:AE:C0:18:67:BD:40:D5:D9:D6:31:55:FA:8B:37:3C Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Certificate serial: 02BE3072A625A32F3DE9D348A45D35431C1B07A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft Manifest number: 39 Signing time: Tue 12 May 2026 23:45:49 +0000 Manifest this update: Tue 12 May 2026 23:40:49 +0000 Manifest next update: Thu 14 May 2026 01:35:49 +0000 Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: 7kk0orYyE6KBl0pc1Q5q+MPh3XZNTcgs9ajzu92Cxic=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:30:72:a6:25:a3:2f:3d:e9:d3:48:a4:5d:35:43:1c:1b:07:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Validity Not Before: May 12 23:40:49 2026 GMT Not After : May 14 01:35:49 2026 GMT Subject: CN=5C7C0CB37CAEC01867BD40D5D9D63155FA8B373C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:c6:12:58:00:a9:66:58:9c:86:4b:c4:8c: c9:29:a9:4d:48:22:00:47:fb:db:7b:91:89:6f:89: da:4f:78:31:94:16:a6:79:a6:4f:e7:1b:03:7f:25: 0f:44:d5:a0:0a:9c:4b:07:da:ca:2f:b9:00:99:47: b6:55:f0:a6:52:c2:9b:8a:be:7b:bf:a0:87:e8:9c: b5:8b:6e:82:43:34:43:26:f7:5d:10:e1:22:5f:31: 1e:85:aa:b0:21:91:f6:bd:b2:8c:41:3e:1c:9c:a5: 7a:2d:f6:bf:6e:db:24:35:fd:17:02:17:31:78:64: d8:ff:c6:4b:4a:00:8a:0a:02:6c:78:57:40:39:56: 81:e1:5b:2a:bc:58:ec:8b:9a:68:12:90:e5:bb:ad: 46:bb:36:77:20:94:ae:f5:a2:9a:39:86:fb:bc:e0: e2:eb:8b:f1:a9:e5:ff:a8:ab:c7:3c:75:08:c0:cf: 42:e3:7c:8f:d7:56:41:d1:81:49:41:58:47:4a:db: 54:eb:cb:07:ff:9d:6e:c9:ee:06:4b:8c:64:fe:3b: 2b:0a:bd:c7:a5:0e:ad:37:2e:bf:dd:03:46:20:04: e4:33:48:b5:7e:b4:36:b7:ce:a7:35:1d:68:16:9b: 1e:e4:8a:e5:91:cc:f6:1e:a7:bf:c5:9d:aa:0b:62: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7C:0C:B3:7C:AE:C0:18:67:BD:40:D5:D9:D6:31:55:FA:8B:37:3C X509v3 Authority Key Identifier: keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:00:8b:cb:84:81:cc:76:34:db:cc:f8:98:42:5c:40:2a:1e: 46:de:ea:03:b7:f1:54:e6:2a:a9:81:16:a9:90:7e:73:de:42: a0:ae:4c:3a:23:ad:cb:a8:c1:6d:08:86:77:91:1c:8c:ed:04: 9c:69:fd:52:53:e9:20:7e:ca:dd:e0:6c:d2:df:49:ef:9d:44: 9a:54:c8:a6:a3:4a:cc:08:51:9f:0e:60:61:7f:6f:a7:e1:e2: e8:a1:1c:7a:56:95:ee:cf:b6:a9:d8:6b:e7:6a:3f:f2:ad:d2: 06:d0:39:8c:67:2c:58:59:82:58:9b:55:46:0e:dd:e5:15:c1: c7:12:ca:ef:8d:95:e7:87:3b:e4:d9:0f:1e:58:f0:5d:c3:31: ff:f5:17:7a:e9:e5:eb:22:96:13:ef:00:4a:3b:b4:39:86:ac: 1e:b9:19:19:a2:1b:7d:3f:f1:57:ab:8e:ad:91:e0:fa:63:3e: 0b:6c:42:85:1b:fc:af:41:64:ab:fd:05:c2:7f:99:42:70:bf: cb:33:67:39:d3:92:99:b4:5d:c1:e5:bb:ac:e6:e6:e2:d1:7a: 85:f4:9e:02:75:f5:14:41:18:e5:05:7d:21:f1:32:8b:f9:de: 27:1d:51:e4:1c:70:49:60:bc:c8:ed:d4:4b:ca:f9:bc:3d:2f: f5:fc:d4:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAr4wcqYloy896dNIpF01QxwbB6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2 QzM4QzE0RTAeFw0yNjA1MTIyMzQwNDlaFw0yNjA1MTQwMTM1NDlaMDMxMTAvBgNV BAMTKDVDN0MwQ0IzN0NBRUMwMTg2N0JENDBENUQ5RDYzMTU1RkE4QjM3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtF8YSWACpZlichkvEjMkpqU1I IgBH+9t7kYlvidpPeDGUFqZ5pk/nGwN/JQ9E1aAKnEsH2sovuQCZR7ZV8KZSwpuK vnu/oIfonLWLboJDNEMm910Q4SJfMR6FqrAhkfa9soxBPhycpXot9r9u2yQ1/RcC FzF4ZNj/xktKAIoKAmx4V0A5VoHhWyq8WOyLmmgSkOW7rUa7NncglK71opo5hvu8 4OLri/Gp5f+oq8c8dQjAz0LjfI/XVkHRgUlBWEdK21Trywf/nW7J7gZLjGT+OysK vcelDq03Lr/dA0YgBOQzSLV+tDa3zqc1HWgWmx7kiuWRzPYep7/FnaoLYt69AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXHwMs3yuwBhnvUDV2dYxVfqLNzwwHwYDVR0j BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQCLy4SBzHY0 28z4mEJcQCoeRt7qA7fxVOYqqYEWqZB+c95CoK5MOiOty6jBbQiGd5EcjO0EnGn9 UlPpIH7K3eBs0t9J751EmlTIpqNKzAhRnw5gYX9vp+Hi6KEcelaV7s+2qdhr52o/ 8q3SBtA5jGcsWFmCWJtVRg7d5RXBxxLK742V54c75NkPHljwXcMx//UXeunl6yKW E+8ASju0OYasHrkZGaIbfT/xV6uOrZHg+mM+C2xChRv8r0Fkq/0Fwn+ZQnC/yzNn OdOSmbRdweW7rObm4tF6hfSeAnX1FEEY5QV9IfEyi/neJx1R5BxwSWC8yO3US8r5 vD0v9fzUhg== -----END CERTIFICATE-----Generated at Wed May 13 20:17:09 2026 by rpki-client