$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: T+Zt8ULQEBKrx2hbaVSDc8F9yCY1Km+KB7tWqfbOEpM= Subject key identifier: B5:7D:F9:DF:51:76:D3:26:57:A7:3B:3D:B9:73:31:EB:83:54:E1:B8 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 6C71BA41D88D943A6E2F375D55500CF3A2A01E1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 03:40:17 +0000 Manifest this update: Fri 24 Jul 2026 03:35:17 +0000 Manifest next update: Sat 25 Jul 2026 07:01:17 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: gQLwUBig2YwE5kBsqt1mokNBCbhl+0Fwsa0Jsl5DZ38=) 2: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 3: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:71:ba:41:d8:8d:94:3a:6e:2f:37:5d:55:50:0c:f3:a2:a0:1e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Jul 24 03:35:17 2026 GMT Not After : Jul 25 07:01:17 2026 GMT Subject: CN=B57DF9DF5176D32657A73B3DB97331EB8354E1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:81:24:43:a6:c8:40:1f:c3:6e:8f:7e:ab: 96:b1:34:2b:0a:05:21:d7:d3:cb:87:a9:b0:17:f6: 7c:3a:52:17:c3:8a:98:67:e8:7e:75:40:b4:67:0c: 12:2b:16:5f:a9:9a:54:94:ea:38:ba:8d:1f:c1:ef: 64:db:de:1d:79:5a:74:5d:1b:e7:3d:a2:28:f6:14: 6e:e6:e7:84:af:e0:ec:9a:11:07:14:d8:37:09:93: b9:68:bc:57:9d:0b:71:0f:16:58:73:bb:1e:7e:6b: 7b:94:2e:4e:7b:45:a0:5b:f5:05:29:9a:66:5c:e2: 4d:f1:68:5f:b3:70:39:1b:0d:5a:f6:1e:f6:5c:4a: da:cc:25:33:ee:75:db:94:36:70:c0:d9:e4:c4:33: 31:68:cc:70:10:f2:4c:e8:40:6b:fe:a4:22:b0:71: 5b:85:94:07:2f:51:6a:7c:34:9a:03:76:50:ed:1e: 9b:d2:7a:d5:f5:2d:3b:6f:fe:8a:10:8e:7a:81:15: 49:51:78:29:54:04:8a:d6:34:38:39:0e:5e:8d:2f: 82:10:7d:e6:99:88:8f:4f:7f:62:80:4e:b5:a3:ee: 2e:91:70:91:b5:a7:ba:b0:1c:e2:f0:1c:a4:11:af: f2:cc:de:4f:80:92:89:3c:fa:49:d7:ff:fe:5f:91: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:F9:DF:51:76:D3:26:57:A7:3B:3D:B9:73:31:EB:83:54:E1:B8 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:87:09:a9:92:4a:fb:38:7c:15:4e:5e:4c:4e:3b:bc:52:84: d1:39:c2:b5:54:ce:90:9b:97:16:e2:68:40:19:2b:c3:c1:14: 0e:0d:b0:91:8c:8e:3a:47:4e:15:15:75:f2:c2:90:88:c8:52: dd:7d:11:b8:c2:3d:a1:d3:3b:ea:45:98:3a:6d:a7:ab:d1:3d: ba:6b:7a:8e:b7:f0:f3:34:e7:a2:d5:21:77:5d:a1:4d:df:54: 7d:f5:a6:86:be:eb:e3:a4:2e:ee:09:4e:a2:78:26:0b:68:42: c3:b2:48:f9:95:6e:9f:db:01:b0:f0:50:0e:d0:06:47:af:cc: 04:ee:4f:d7:38:3d:7d:c3:ce:56:76:d8:b2:53:06:34:4b:d5: a3:26:b6:3c:e0:21:98:a5:97:b5:2f:e0:4e:74:67:d0:cc:03: e1:d9:24:06:eb:47:64:92:2f:43:fc:51:63:c0:28:95:91:4d: 2a:67:7c:ac:65:0d:39:a5:b1:de:0e:ab:e8:c0:85:12:05:db: a1:3b:c0:1c:69:e4:e9:4b:5c:22:e3:d4:f4:3a:16:94:92:cd: 7a:7e:3e:1a:13:c9:93:9f:3d:98:86:36:c0:76:ab:7d:cb:8c: f1:41:77:45:e6:04:c0:73:64:d5:43:20:21:d8:b1:26:68:b8: 2f:cf:dd:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbHG6QdiNlDpuLzddVVAM86KgHh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA3MjQwMzM1MTdaFw0yNjA3MjUwNzAxMTdaMDMxMTAvBgNV BAMTKEI1N0RGOURGNTE3NkQzMjY1N0E3M0IzREI5NzMzMUVCODM1NEUxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaIEkQ6bIQB/Dbo9+q5axNCsK BSHX08uHqbAX9nw6UhfDiphn6H51QLRnDBIrFl+pmlSU6ji6jR/B72Tb3h15WnRd G+c9oij2FG7m54Sv4OyaEQcU2DcJk7lovFedC3EPFlhzux5+a3uULk57RaBb9QUp mmZc4k3xaF+zcDkbDVr2HvZcStrMJTPudduUNnDA2eTEMzFozHAQ8kzoQGv+pCKw cVuFlAcvUWp8NJoDdlDtHpvSetX1LTtv/ooQjnqBFUlReClUBIrWNDg5Dl6NL4IQ feaZiI9Pf2KATrWj7i6RcJG1p7qwHOLwHKQRr/LM3k+Akok8+knX//5fkStlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtX3531F20yZXpzs9uXMx64NU4bgwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIcJqZJK+zh8 FU5eTE47vFKE0TnCtVTOkJuXFuJoQBkrw8EUDg2wkYyOOkdOFRV18sKQiMhS3X0R uMI9odM76kWYOm2nq9E9umt6jrfw8zTnotUhd12hTd9UffWmhr7r46Qu7glOongm C2hCw7JI+ZVun9sBsPBQDtAGR6/MBO5P1zg9fcPOVnbYslMGNEvVoya2POAhmKWX tS/gTnRn0MwD4dkkButHZJIvQ/xRY8AolZFNKmd8rGUNOaWx3g6r6MCFEgXboTvA HGnk6UtcIuPU9DoWlJLNen4+GhPJk589mIY2wHarfcuM8UF3ReYEwHNk1UMgIdix Jmi4L8/dOQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:56:34 2026 by rpki-client