$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: J2GwGN/YGAzel0Oj5Zbn3mYCKLShPIe842lgh2QT9Uc= Subject key identifier: 18:1A:C4:FB:BE:A9:FC:AE:7B:67:9B:5A:B8:02:38:04:C9:6A:97:9A Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 778DCD623B414208DFB65386FD6C4102B72A8A89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 21:04:33 +0000 Manifest this update: Thu 23 Jul 2026 20:59:33 +0000 Manifest next update: Fri 24 Jul 2026 23:48:33 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 2: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 3: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: Esb3Dsdh9H6/xYn2434vYIgVbN68MIdQ/sM4+AoMb2o=) 4: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8d:cd:62:3b:41:42:08:df:b6:53:86:fd:6c:41:02:b7:2a:8a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Jul 23 20:59:33 2026 GMT Not After : Jul 24 23:48:33 2026 GMT Subject: CN=181AC4FBBEA9FCAE7B679B5AB8023804C96A979A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:1f:b5:8e:86:6a:c3:b4:53:56:c1:be:a0: 62:72:ce:39:ba:d5:77:da:4d:d4:c8:d7:0d:83:39: 0a:70:9e:f4:b4:58:83:b3:93:14:5f:26:20:41:69: 41:a4:2e:19:76:3a:82:e7:f7:c7:54:65:96:99:5c: ef:06:f7:bb:ae:aa:01:f4:dd:bf:ad:55:bc:39:f6: 23:54:35:bb:86:c4:1c:5f:d7:c6:35:7f:3b:1a:99: 57:1e:8c:78:32:d4:d9:89:05:a1:98:09:82:eb:9d: f9:98:0e:58:67:0a:0d:74:9b:36:6a:a7:ca:a2:c0: 0f:5d:01:78:c2:88:a1:91:d3:fe:90:f1:0d:70:65: 4e:0c:17:12:24:20:08:40:d4:2f:11:59:a8:fd:72: cb:87:24:25:12:95:1d:f6:f9:c6:72:a3:6c:3d:39: cb:d7:4f:bf:51:97:44:96:d7:e9:92:97:8a:b0:d8: f8:22:7d:80:a4:f1:4b:3f:7a:96:d1:62:30:59:16: b7:17:ad:d9:81:71:28:aa:25:f3:e2:0a:e1:03:63: 03:a8:71:8b:a8:78:eb:0b:a5:47:b5:a6:47:ec:38: 4b:16:30:40:c3:d6:a6:1a:53:dd:cb:4f:69:c2:99: e1:f0:23:c0:73:27:32:0d:2d:4d:c8:4f:59:5c:c0: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:C4:FB:BE:A9:FC:AE:7B:67:9B:5A:B8:02:38:04:C9:6A:97:9A X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:aa:e1:5c:fc:6c:76:c7:eb:fc:05:c3:62:05:cd:b5:48:f7: a0:b0:55:ac:4e:39:9f:b2:9f:8d:17:7b:c0:58:d2:9d:af:91: c9:eb:da:74:a4:23:0e:e4:59:81:42:9d:70:93:cf:cd:c4:88: 52:20:85:e3:4b:26:12:80:3c:d7:bb:25:eb:68:68:78:0c:a4: 26:bd:78:ab:3c:cd:e8:2b:44:cc:17:0e:c9:ca:f1:19:f8:c1: 46:08:aa:3d:09:49:3a:38:6f:90:0f:f5:80:4c:61:34:be:a9: 17:ce:bd:df:a9:86:95:96:35:18:f0:c6:b6:6b:5e:1d:3e:d7: 2f:60:b1:18:6a:98:4c:da:ed:59:d4:7e:04:6c:61:33:d4:4b: 01:af:2e:e3:0a:d3:70:5d:19:9a:de:95:c4:c3:04:36:92:a5: 58:d2:7a:1e:ae:de:b0:12:c6:ed:2c:f2:32:c7:63:13:f7:68: e2:c5:1f:d3:d4:7d:87:1d:29:37:36:12:32:bb:a2:39:33:02: 4d:fb:41:0d:e1:e8:76:ec:4e:b5:b1:30:62:56:bf:a3:73:79: 6c:a5:39:0a:53:1a:33:c9:ec:fc:ee:7d:4c:8e:db:42:5a:95: f9:31:9a:9c:5d:fa:61:b4:04:f5:24:56:0a:a5:4c:33:c3:36: 74:13:30:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd43NYjtBQgjftlOG/WxBArcqiokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA3MjMyMDU5MzNaFw0yNjA3MjQyMzQ4MzNaMDMxMTAvBgNV BAMTKDE4MUFDNEZCQkVBOUZDQUU3QjY3OUI1QUI4MDIzODA0Qzk2QTk3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodx+1joZqw7RTVsG+oGJyzjm6 1XfaTdTI1w2DOQpwnvS0WIOzkxRfJiBBaUGkLhl2OoLn98dUZZaZXO8G97uuqgH0 3b+tVbw59iNUNbuGxBxf18Y1fzsamVcejHgy1NmJBaGYCYLrnfmYDlhnCg10mzZq p8qiwA9dAXjCiKGR0/6Q8Q1wZU4MFxIkIAhA1C8RWaj9csuHJCUSlR32+cZyo2w9 OcvXT79Rl0SW1+mSl4qw2PgifYCk8Us/epbRYjBZFrcXrdmBcSiqJfPiCuEDYwOo cYuoeOsLpUe1pkfsOEsWMEDD1qYaU93LT2nCmeHwI8BzJzINLU3IT1lcwM+xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGBrE+76p/K57Z5tauAI4BMlql5owHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjarhXPxsdsfr /AXDYgXNtUj3oLBVrE45n7KfjRd7wFjSna+RyevadKQjDuRZgUKdcJPPzcSIUiCF 40smEoA817sl62hoeAykJr14qzzN6CtEzBcOycrxGfjBRgiqPQlJOjhvkA/1gExh NL6pF86936mGlZY1GPDGtmteHT7XL2CxGGqYTNrtWdR+BGxhM9RLAa8u4wrTcF0Z mt6VxMMENpKlWNJ6Hq7esBLG7SzyMsdjE/do4sUf09R9hx0pNzYSMruiOTMCTftB DeHoduxOtbEwYla/o3N5bKU5ClMaM8ns/O59TI7bQlqV+TGanF36YbQE9SRWCqVM M8M2dBMwMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:31:59 2026 by rpki-client