$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: r/oaZGmxLdMez1d39UcyCQccDstxmY8Cu92ml9jiEbY= Subject key identifier: BE:CE:AF:3F:72:7E:12:9E:1D:E5:CE:2D:9C:AB:2C:11:87:90:47:6F Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 7F12D05DC733C117B7E8AB2E666C339465FB803B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 94 Signing time: Fri 24 Jul 2026 04:50:22 +0000 Manifest this update: Fri 24 Jul 2026 04:45:22 +0000 Manifest next update: Sat 25 Jul 2026 06:32:22 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 2: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 3: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 4: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 5: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 6: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: NJv//JGM2E3Rs5okty8ZGRHHv/DKcaAHjgZfZqnahh0=) 7: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:12:d0:5d:c7:33:c1:17:b7:e8:ab:2e:66:6c:33:94:65:fb:80:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Jul 24 04:45:22 2026 GMT Not After : Jul 25 06:32:22 2026 GMT Subject: CN=BECEAF3F727E129E1DE5CE2D9CAB2C118790476F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:28:37:d8:ec:e3:01:80:85:9d:d8:ef:13: 73:2d:05:b8:51:35:6f:d3:a2:cd:75:35:f3:04:18: 2c:52:de:5f:ef:0d:42:ed:8d:c8:a5:af:95:77:b4: 1f:5c:c6:c0:46:a7:e5:8d:40:12:06:e9:2b:44:14: 38:57:aa:87:c3:6c:42:26:b9:19:81:0d:b1:b4:7c: 6b:1a:80:5b:b5:01:24:29:b9:e9:86:e4:ec:2c:d8: ae:08:ca:9f:b0:e6:d0:bd:b0:06:14:87:e5:f6:ae: 72:05:1a:b5:3a:f1:a5:be:61:a0:4d:00:36:24:28: cf:e4:a1:32:5c:2e:40:33:2c:09:be:5d:d7:dc:ef: 11:47:07:45:87:fb:6d:74:48:4a:5d:5d:7a:87:54: ce:85:51:e5:1e:8a:f1:0b:a4:f5:59:f3:77:f5:4e: 1c:85:e0:b0:d7:f8:d7:3f:3e:c8:1b:b9:58:86:48: 78:c5:8f:0b:ae:af:cd:75:b2:f9:70:0b:eb:29:fd: c2:77:96:58:6e:3d:1c:6e:64:fb:f6:1d:0b:45:1b: 13:3a:d2:1a:b0:db:13:de:e9:eb:ea:c7:17:2d:00: 3b:37:1e:14:cc:9d:eb:d6:91:05:9d:d3:d9:45:c1: 06:08:89:a6:8d:a4:fc:3f:73:4b:27:aa:09:f0:95: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CE:AF:3F:72:7E:12:9E:1D:E5:CE:2D:9C:AB:2C:11:87:90:47:6F X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:76:b9:11:98:99:2a:a4:fa:d7:ca:04:55:bb:34:e5:83:44: be:0b:29:25:97:13:db:8b:7e:80:ec:66:c8:b9:51:d7:7b:8a: e3:f2:ba:4c:0f:5c:c9:f2:4b:0b:3f:ed:67:33:5e:c3:56:b6: 67:59:ab:4d:68:f2:ec:76:8d:aa:d0:5a:65:7f:6d:32:db:c7: d8:df:25:88:a9:71:1e:6a:44:c7:71:06:84:5b:0a:03:38:c3: 16:8c:03:1a:83:67:d2:ee:5d:69:3d:fe:8c:8f:81:99:94:0e: 82:dc:e0:b1:41:00:74:18:14:ae:d0:92:16:b8:ee:47:61:72: 99:18:ac:3d:f8:84:c6:84:2b:bb:a3:12:74:fd:81:9b:3b:dd: 66:97:4f:93:5f:d8:0c:e9:ce:07:01:ed:73:d6:c4:68:a2:1e: aa:48:7d:24:ac:e2:2e:91:d6:be:31:af:f7:2f:ba:1f:64:f3: 3c:3b:9e:f6:58:8b:b3:00:66:f8:6b:ad:da:bb:84:7e:c7:e4: 7f:e7:79:a4:67:d1:6e:97:9c:9e:78:a4:2b:d5:14:32:e5:10: 30:84:c8:b4:ac:dc:89:5b:58:ee:31:fb:c8:df:fd:d9:62:a0: 09:57:74:85:4d:37:00:c6:d2:57:d6:e5:2c:88:8f:b4:28:34: 94:c9:a1:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfxLQXcczwRe36KsuZmwzlGX7gDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA3MjQwNDQ1MjJaFw0yNjA3MjUwNjMyMjJaMDMxMTAvBgNV BAMTKEJFQ0VBRjNGNzI3RTEyOUUxREU1Q0UyRDlDQUIyQzExODc5MDQ3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCig32OzjAYCFndjvE3MtBbhR NW/Tos11NfMEGCxS3l/vDULtjcilr5V3tB9cxsBGp+WNQBIG6StEFDhXqofDbEIm uRmBDbG0fGsagFu1ASQpuemG5Ows2K4Iyp+w5tC9sAYUh+X2rnIFGrU68aW+YaBN ADYkKM/koTJcLkAzLAm+Xdfc7xFHB0WH+210SEpdXXqHVM6FUeUeivELpPVZ83f1 ThyF4LDX+Nc/PsgbuViGSHjFjwuur811svlwC+sp/cJ3llhuPRxuZPv2HQtFGxM6 0hqw2xPe6evqxxctADs3HhTMnevWkQWd09lFwQYIiaaNpPw/c0snqgnwlZslAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvs6vP3J+Ep4d5c4tnKssEYeQR28wHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXa5EZiZKqT6 18oEVbs05YNEvgspJZcT24t+gOxmyLlR13uK4/K6TA9cyfJLCz/tZzNew1a2Z1mr TWjy7HaNqtBaZX9tMtvH2N8liKlxHmpEx3EGhFsKAzjDFowDGoNn0u5daT3+jI+B mZQOgtzgsUEAdBgUrtCSFrjuR2FymRisPfiExoQru6MSdP2BmzvdZpdPk1/YDOnO BwHtc9bEaKIeqkh9JKziLpHWvjGv9y+6H2TzPDue9liLswBm+Gut2ruEfsfkf+d5 pGfRbpecnnikK9UUMuUQMITItKzciVtY7jH7yN/92WKgCVd0hU03AMbSV9blLIiP tCg0lMmhBw== -----END CERTIFICATE-----Generated at Fri Jul 24 20:26:21 2026 by rpki-client