$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: 6h7oLOlK0RUJSLQ5AjcJteXnTiBAqN4+Pq9M88IgpsA= Subject key identifier: B3:85:B2:CD:83:72:D0:27:5B:53:95:62:58:73:BC:FD:F3:F2:3D:4D Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 19706C313EBF6F4C6E6A8BE3779A2B6E02A96AE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: 25 Signing time: Wed 13 May 2026 08:26:02 +0000 Manifest this update: Wed 13 May 2026 08:21:02 +0000 Manifest next update: Thu 14 May 2026 11:03:02 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: sSPvyUxN9tfdrMojaNuvN/y1lkJWDdQy/a0HSfmbRF8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:70:6c:31:3e:bf:6f:4c:6e:6a:8b:e3:77:9a:2b:6e:02:a9:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: May 13 08:21:02 2026 GMT Not After : May 14 11:03:02 2026 GMT Subject: CN=B385B2CD8372D0275B5395625873BCFDF3F23D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:0c:32:b3:48:e2:15:16:15:ec:f4:e7:bd: c1:cf:da:d9:3c:39:00:79:7c:e4:25:d5:03:e0:6a: 8c:39:6b:d2:95:9c:a3:b2:ee:44:54:67:10:a8:05: 55:a1:de:31:da:2b:e7:de:4b:98:a0:83:bf:1a:38: 27:d2:6a:64:b6:cf:8c:5f:ba:3b:13:8e:04:f0:cb: ec:a9:56:46:27:b5:8a:90:7e:b4:4a:e3:b7:a6:42: 23:e5:39:b6:b1:2c:d4:f1:cb:b2:44:c4:89:c7:0b: e1:a4:31:b6:56:2b:0a:d3:5d:c3:97:ee:0c:71:df: 02:96:82:c3:91:1b:76:cd:98:3c:84:04:9c:2f:5f: c2:29:b2:4f:f0:68:7f:f9:b6:bf:8e:3a:37:65:79: c6:fb:ed:59:9a:26:1a:28:58:43:0f:c1:8d:15:05: 60:b3:df:8b:0f:c2:bc:52:39:29:c1:73:97:fc:8d: ed:c9:80:b5:cc:4d:90:5e:fc:57:53:d0:e7:68:ee: 62:49:c3:73:c7:91:ac:02:4d:f5:90:a4:37:b5:1d: 03:0e:53:ad:a4:bd:ae:b0:c7:cd:69:c9:8d:51:05: e2:c0:b4:00:c0:11:40:4b:4d:dc:16:7f:d3:a6:d6: 78:39:3e:e5:51:89:98:de:d5:7e:fc:3e:b5:71:4d: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:B2:CD:83:72:D0:27:5B:53:95:62:58:73:BC:FD:F3:F2:3D:4D X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e3:73:99:73:ce:63:5f:2b:7c:71:45:c3:40:a6:3e:1e:46: 11:e9:e6:9c:32:62:d2:e9:d7:15:c5:90:4f:b5:a2:3b:f1:a2: eb:7e:60:e5:d8:39:ea:5d:8e:7c:e6:8b:fd:66:5c:59:78:ad: e7:87:62:97:ac:e3:9c:4e:85:e6:ee:94:ac:99:54:6b:be:d6: 5c:56:b0:7b:69:96:f7:67:06:d9:47:32:27:54:a5:45:91:65: 4f:36:c8:da:bb:80:5f:5c:bf:7a:3c:55:de:c8:68:9b:a9:57: 66:a9:4f:3d:04:43:17:44:17:49:53:3b:de:bd:a5:09:b1:90: 63:43:5e:6d:07:d3:71:ee:1f:30:d7:3a:33:45:23:51:ac:9c: d7:06:43:c5:8d:e0:41:eb:7c:b5:f1:f3:48:f8:01:a2:a4:64: dd:3c:55:d4:5a:17:ce:ff:30:53:66:c9:20:db:94:e4:6a:41: be:32:f7:bb:79:08:2c:6d:3e:3f:7b:ae:c8:e2:9b:f8:f2:5d: a2:ae:5e:b8:d8:d3:59:2b:50:93:d2:4d:92:98:82:a8:73:25: eb:ed:b7:cf:28:f9:9c:54:6e:91:fc:f7:3d:8e:28:2e:11:9d: 51:84:b4:e1:c6:77:ae:95:40:3d:06:5e:a7:8a:55:18:80:96: 0e:7e:e0:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGXBsMT6/b0xuaovjd5orbgKpaucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjA1MTMwODIxMDJaFw0yNjA1MTQxMTAzMDJaMDMxMTAvBgNV BAMTKEIzODVCMkNEODM3MkQwMjc1QjUzOTU2MjU4NzNCQ0ZERjNGMjNENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8wwys0jiFRYV7PTnvcHP2tk8 OQB5fOQl1QPgaow5a9KVnKOy7kRUZxCoBVWh3jHaK+feS5igg78aOCfSamS2z4xf ujsTjgTwy+ypVkYntYqQfrRK47emQiPlObaxLNTxy7JExInHC+GkMbZWKwrTXcOX 7gxx3wKWgsORG3bNmDyEBJwvX8Ipsk/waH/5tr+OOjdlecb77VmaJhooWEMPwY0V BWCz34sPwrxSOSnBc5f8je3JgLXMTZBe/FdT0Odo7mJJw3PHkawCTfWQpDe1HQMO U62kva6wx81pyY1RBeLAtADAEUBLTdwWf9Om1ng5PuVRiZje1X78PrVxTVJHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs4WyzYNy0CdbU5ViWHO8/fPyPU0wHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+NzmXPOY18r fHFFw0CmPh5GEenmnDJi0unXFcWQT7WiO/Gi635g5dg56l2OfOaL/WZcWXit54di l6zjnE6F5u6UrJlUa77WXFawe2mW92cG2UcyJ1SlRZFlTzbI2ruAX1y/ejxV3sho m6lXZqlPPQRDF0QXSVM73r2lCbGQY0NebQfTce4fMNc6M0UjUayc1wZDxY3gQet8 tfHzSPgBoqRk3TxV1FoXzv8wU2bJINuU5GpBvjL3u3kILG0+P3uuyOKb+PJdoq5e uNjTWStQk9JNkpiCqHMl6+23zyj5nFRukfz3PY4oLhGdUYS04cZ3rpVAPQZep4pV GICWDn7gvw== -----END CERTIFICATE-----Generated at Wed May 13 17:33:02 2026 by rpki-client