$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: bH4fLZBL1gIQHzW71vXeuh4UjE2cL8jyPH/V4Lm08iM= Subject key identifier: 65:46:F2:63:FA:2E:E3:4B:A5:3D:FD:2C:3A:6A:98:69:7C:10:8A:F4 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 5E5AA023310F041385BF62BE8C7247C49632512D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 8F Signing time: Fri 24 Jul 2026 10:46:01 +0000 Manifest this update: Fri 24 Jul 2026 10:41:01 +0000 Manifest next update: Sat 25 Jul 2026 10:58:01 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: kfNPFxhI7Pc1YaYkAuDXfe8n5fRR9hWjbDFbCEthYf4=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5a:a0:23:31:0f:04:13:85:bf:62:be:8c:72:47:c4:96:32:51:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Jul 24 10:41:01 2026 GMT Not After : Jul 25 10:58:01 2026 GMT Subject: CN=6546F263FA2EE34BA53DFD2C3A6A98697C108AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:2c:51:1f:ec:e0:44:94:b5:c1:a1:63:a7: 4c:7d:22:26:d8:b1:c8:bb:91:b3:8e:04:19:2a:77: f4:49:60:d6:24:40:a2:19:56:0b:e1:51:7f:23:f4: e7:1c:4e:98:51:b2:86:09:69:82:fc:6a:09:15:b5: d6:13:98:72:42:54:3d:9e:09:48:0d:b1:5b:fe:35: bf:76:05:a6:b7:36:c0:9c:ec:ce:5a:e1:68:d2:a9: cf:9d:98:00:47:50:05:be:a3:12:77:d6:e5:22:68: 9c:79:93:7e:48:5e:9a:17:8a:33:84:66:68:cc:33: 9d:ac:08:15:48:d9:67:95:0d:f1:90:7e:2a:77:55: 83:b0:d2:ed:ea:a8:83:b0:e7:b6:25:ff:fc:09:65: 3f:91:f5:7b:3e:96:cd:eb:58:48:ca:f4:84:76:72: 10:83:f2:1b:d7:1c:ac:a7:d9:f7:02:b9:10:cc:6f: 16:57:d6:3b:47:ac:11:7d:c3:b5:5a:db:9a:86:49: 9b:56:76:f2:8b:13:2f:45:89:f7:cc:14:44:99:30: c4:00:11:bd:f2:f0:b1:ec:3e:f9:ae:e9:f9:78:2a: 39:a9:d8:a3:a4:d7:18:bb:af:18:1b:f9:6f:04:8d: 09:ae:af:e7:a4:f4:d7:e6:80:54:66:09:c5:3e:ca: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:F2:63:FA:2E:E3:4B:A5:3D:FD:2C:3A:6A:98:69:7C:10:8A:F4 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:f0:66:21:88:7f:7f:88:ed:c3:e3:e7:76:8e:ba:b4:95: 44:a5:52:cf:55:af:53:d4:7c:5a:1b:66:e6:58:46:31:02:d1: f6:0d:eb:f0:6d:ff:94:b3:54:fa:67:2b:55:bb:4b:4f:a5:5b: 89:83:c8:20:18:c2:09:9a:77:7c:6d:47:11:7a:3f:e9:4f:a6: b5:64:d4:57:60:0d:f2:df:59:3e:c5:a4:9f:f7:ca:2a:af:7c: 9b:ac:a8:e8:be:19:f3:c1:32:34:bc:29:9e:1c:40:8d:ba:7c: a1:33:32:e5:eb:30:cd:a2:46:ef:8f:3a:9b:84:5b:0f:f8:57: ef:1c:f2:12:79:26:e8:c4:c2:1b:b0:3d:29:f4:fe:e9:98:45: ae:f6:f4:8d:05:f2:b7:e9:15:d0:f4:90:50:76:29:15:1b:9b: 03:7f:cf:de:51:75:6f:38:44:3c:16:45:e7:ee:2f:45:f4:62: 85:6a:80:f0:ed:35:19:56:f4:44:57:1c:21:88:8c:1f:54:52: f0:ff:0c:fe:4d:60:58:79:43:ba:66:ae:ae:61:4b:dc:c8:c6: 09:26:a4:55:4e:03:b1:36:15:64:09:cc:01:0a:59:50:e8:05: 46:4b:9a:38:11:8b:b5:08:07:05:b1:07:43:ca:6b:13:22:75: 3c:d9:bc:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXlqgIzEPBBOFv2K+jHJHxJYyUS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA3MjQxMDQxMDFaFw0yNjA3MjUxMDU4MDFaMDMxMTAvBgNV BAMTKDY1NDZGMjYzRkEyRUUzNEJBNTNERkQyQzNBNkE5ODY5N0MxMDhBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGixRH+zgRJS1waFjp0x9IibY sci7kbOOBBkqd/RJYNYkQKIZVgvhUX8j9OccTphRsoYJaYL8agkVtdYTmHJCVD2e CUgNsVv+Nb92Baa3NsCc7M5a4WjSqc+dmABHUAW+oxJ31uUiaJx5k35IXpoXijOE ZmjMM52sCBVI2WeVDfGQfip3VYOw0u3qqIOw57Yl//wJZT+R9Xs+ls3rWEjK9IR2 chCD8hvXHKyn2fcCuRDMbxZX1jtHrBF9w7Va25qGSZtWdvKLEy9FiffMFESZMMQA Eb3y8LHsPvmu6fl4Kjmp2KOk1xi7rxgb+W8EjQmur+ek9NfmgFRmCcU+yqnXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZUbyY/ou40ulPf0sOmqYaXwQivQwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyrwZiGIf3+I 7cPj53aOurSVRKVSz1WvU9R8Whtm5lhGMQLR9g3r8G3/lLNU+mcrVbtLT6VbiYPI IBjCCZp3fG1HEXo/6U+mtWTUV2AN8t9ZPsWkn/fKKq98m6yo6L4Z88EyNLwpnhxA jbp8oTMy5eswzaJG7486m4RbD/hX7xzyEnkm6MTCG7A9KfT+6ZhFrvb0jQXyt+kV 0PSQUHYpFRubA3/P3lF1bzhEPBZF5+4vRfRihWqA8O01GVb0RFccIYiMH1RS8P8M /k1gWHlDumaurmFL3MjGCSakVU4DsTYVZAnMAQpZUOgFRkuaOBGLtQgHBbEHQ8pr EyJ1PNm8sQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:41 2026 by rpki-client