$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: VGzP6LU0A7FTWPi0nlSlJelatc5zLD1dSNfiPEFjz3M= Subject key identifier: 1D:25:F4:38:B3:E5:E2:50:E5:5E:EB:B9:AF:3B:9B:43:0E:A6:74:E4 Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 0BCAEA17EDBCB82F53AADC21707C8DB6DD06E441 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 04:30:21 +0000 Manifest this update: Fri 24 Jul 2026 04:25:21 +0000 Manifest next update: Sat 25 Jul 2026 07:17:21 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: T/Xrsg0OirBiYzk5jM/KcuVonNsbD/b82zQsd0KA1aw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ca:ea:17:ed:bc:b8:2f:53:aa:dc:21:70:7c:8d:b6:dd:06:e4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: Jul 24 04:25:21 2026 GMT Not After : Jul 25 07:17:21 2026 GMT Subject: CN=1D25F438B3E5E250E55EEBB9AF3B9B430EA674E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:0a:02:52:4c:e7:09:df:b4:c6:3b:7c:72: 93:cd:e9:67:90:a7:58:49:62:57:07:6a:9d:ca:d8: 7d:85:a4:1d:ee:4d:67:ca:a7:0a:0a:39:14:20:ad: 69:4e:88:8f:3a:61:32:ec:c4:23:92:a2:d4:80:d1: 56:bf:23:1e:56:6d:ab:77:6a:19:94:f9:44:0e:ec: 6f:1c:47:b6:88:41:0b:3c:93:3a:e8:8b:09:aa:c8: 78:ea:47:ec:3a:69:99:4e:5b:06:40:f7:e7:4c:af: 3d:ea:03:d8:6c:db:96:9f:0a:36:44:00:a8:45:43: 71:f9:4f:2f:54:f2:08:40:f8:34:f5:17:68:5b:db: 47:b0:7e:7d:bb:67:24:c5:2e:e1:e4:8f:8a:49:f8: c8:9d:cf:be:7c:03:e4:64:2a:31:b3:1f:21:72:8c: 8a:c2:f8:0e:f7:ce:28:3f:5b:b6:d1:9a:b7:ca:05: 29:8d:8d:e4:cc:e3:de:9d:6e:a3:c9:32:ff:a2:89: 50:7a:d3:5d:04:d5:8c:5a:02:8c:b5:5e:dc:c3:ba: d9:2e:5e:3d:94:e1:cb:55:36:fe:26:fb:0a:af:ad: 3e:ff:4c:01:37:bd:07:10:88:49:3b:a0:4c:fc:09: 4a:5d:97:d0:c6:3a:f6:e1:75:fd:33:41:3c:cd:91: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:25:F4:38:B3:E5:E2:50:E5:5E:EB:B9:AF:3B:9B:43:0E:A6:74:E4 X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:97:8d:6e:bf:f8:63:14:32:5b:c8:6b:56:4e:1f:39:97: cf:2c:be:34:f6:28:fb:5a:3e:84:35:43:05:88:8b:19:5e:28: 33:c4:d3:eb:10:8c:af:57:9d:4a:ca:3b:f6:d8:bd:42:0c:5e: 52:30:8e:97:d0:f7:a0:7e:b4:64:0e:32:c0:c3:d7:76:e9:44: 2d:a9:06:7b:4d:ba:0e:ee:c8:2c:35:68:3b:e7:c0:f4:2a:98: 89:46:67:44:23:05:33:9c:32:3b:06:72:a0:62:c4:ac:58:37: 88:79:d3:b4:2a:eb:ea:6b:5b:50:64:d2:22:93:ff:0e:7c:cc: fd:cf:71:1d:66:92:8e:9c:86:97:cb:18:8c:f3:5c:91:4f:29: 8d:34:01:9b:95:12:c2:c1:65:2d:3a:bb:85:69:91:f0:2d:9d: 34:36:20:e9:d8:2a:6d:d1:0b:c0:9b:af:e1:fb:7f:f4:61:7d: 40:c0:e8:24:42:92:4c:64:0e:cf:0c:ff:63:79:41:50:5c:52: 36:be:38:8f:94:9e:8b:20:53:86:c5:16:2b:ea:02:bc:67:2e: 8f:df:70:df:88:56:3b:f3:d1:d5:b9:52:60:9e:d5:b2:87:a5: ae:3c:ac:51:86:0c:f6:93:f7:f8:8d:45:8c:ed:58:9f:f8:6d: cc:f4:55:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC8rqF+28uC9TqtwhcHyNtt0G5EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjA3MjQwNDI1MjFaFw0yNjA3MjUwNzE3MjFaMDMxMTAvBgNV BAMTKDFEMjVGNDM4QjNFNUUyNTBFNTVFRUJCOUFGM0I5QjQzMEVBNjc0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4goCUkznCd+0xjt8cpPN6WeQ p1hJYlcHap3K2H2FpB3uTWfKpwoKORQgrWlOiI86YTLsxCOSotSA0Va/Ix5Wbat3 ahmU+UQO7G8cR7aIQQs8kzroiwmqyHjqR+w6aZlOWwZA9+dMrz3qA9hs25afCjZE AKhFQ3H5Ty9U8ghA+DT1F2hb20ewfn27ZyTFLuHkj4pJ+Midz758A+RkKjGzHyFy jIrC+A73zig/W7bRmrfKBSmNjeTM496dbqPJMv+iiVB6010E1YxaAoy1XtzDutku Xj2U4ctVNv4m+wqvrT7/TAE3vQcQiEk7oEz8CUpdl9DGOvbhdf0zQTzNkRvjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHSX0OLPl4lDlXuu5rzubQw6mdOQwHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqaXjW6/+GMU MlvIa1ZOHzmXzyy+NPYo+1o+hDVDBYiLGV4oM8TT6xCMr1edSso79ti9QgxeUjCO l9D3oH60ZA4ywMPXdulELakGe026Du7ILDVoO+fA9CqYiUZnRCMFM5wyOwZyoGLE rFg3iHnTtCrr6mtbUGTSIpP/DnzM/c9xHWaSjpyGl8sYjPNckU8pjTQBm5USwsFl LTq7hWmR8C2dNDYg6dgqbdELwJuv4ft/9GF9QMDoJEKSTGQOzwz/Y3lBUFxSNr44 j5SeiyBThsUWK+oCvGcuj99w34hWO/PR1blSYJ7VsoelrjysUYYM9pP3+I1FjO1Y n/htzPRVLQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:43:21 2026 by rpki-client