$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: HwkE1sEv/i0bPAvgnuoYIhj5AzIByQPRDv7LTuVTmyM= Subject key identifier: 10:DB:CE:0F:CD:E5:23:30:3F:71:A1:8E:9E:CE:C1:ED:A4:05:6E:2A Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 7E897A6A23033FEA85C5CF6BE4F0ED9A2730CDEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 80 Signing time: Fri 24 Jul 2026 04:45:22 +0000 Manifest this update: Fri 24 Jul 2026 04:40:22 +0000 Manifest next update: Sat 25 Jul 2026 06:27:22 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: LYZZuD7HzqxR/iKZ8+Kpv9jzUQbwZ6zoljPnr962cmM=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:89:7a:6a:23:03:3f:ea:85:c5:cf:6b:e4:f0:ed:9a:27:30:cd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Jul 24 04:40:22 2026 GMT Not After : Jul 25 06:27:22 2026 GMT Subject: CN=10DBCE0FCDE523303F71A18E9ECEC1EDA4056E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:05:9e:4f:6d:19:60:64:db:76:3d:ae:b9: c9:d9:21:e9:45:d0:4e:8c:30:db:8f:6e:38:da:36: 5a:92:d1:b9:05:81:b0:4b:cb:44:03:84:78:c3:96: f0:d0:2c:9c:7b:fc:7f:25:73:a0:66:35:1d:93:6f: b9:95:e0:93:fb:e9:d0:4f:61:ec:e7:f6:81:4f:3c: cf:66:a7:a6:68:0c:79:04:3a:f4:79:f2:f8:6a:45: 3d:e5:71:6b:5a:45:4f:e9:3e:18:d1:47:b5:ab:66: 8d:62:70:24:be:74:7f:58:06:a4:32:ef:fe:ce:4c: d8:67:ce:54:82:d6:44:7e:40:6f:46:cc:1e:02:a1: b4:0c:a5:3d:45:17:05:b5:e0:a7:06:48:77:12:3b: 4b:c5:03:14:11:68:71:09:48:fd:9c:d5:6a:2c:37: 6b:cf:63:32:54:48:20:a2:4c:74:9b:f4:3f:b1:d0: 12:db:90:c7:6d:eb:56:86:73:9c:79:00:50:48:72: db:f9:52:0a:de:f7:39:a3:19:e5:72:bd:d3:44:01: 1c:6c:8e:d7:54:23:ca:c7:f2:e2:6e:ee:9c:2d:cb: dd:eb:11:9a:7a:6a:8c:25:34:05:83:53:f2:66:fb: 26:a0:2a:84:7a:46:44:b5:f5:40:87:a2:7a:88:4e: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:CE:0F:CD:E5:23:30:3F:71:A1:8E:9E:CE:C1:ED:A4:05:6E:2A X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9d:30:9e:60:da:cb:7e:f1:21:ca:0a:a9:79:da:d7:b5:7a: 12:97:4f:26:18:7a:b3:35:95:47:94:81:95:52:54:ac:ff:45: fc:30:05:af:89:2c:cf:0f:49:56:e3:2e:82:8c:72:c5:34:82: b3:1e:82:85:17:3c:cb:08:a5:c1:d5:45:93:5d:90:d9:20:fd: 0c:6c:19:c7:a0:4d:a0:80:ae:b5:f0:33:a5:16:45:84:4b:17: 55:66:69:e5:da:69:c9:bf:6a:ab:d7:47:c1:6d:1b:d1:fc:be: c9:03:69:35:5d:f6:e9:20:cf:15:47:d1:92:81:84:0e:39:4c: 2c:53:00:b1:85:7d:d0:d9:2d:2d:3d:b2:81:ac:7c:31:bc:23: b0:4d:ab:ed:6f:2d:9f:87:af:5b:fe:ee:7b:a9:6e:9c:8f:7c: 50:13:6f:d1:a7:14:5b:b1:dc:19:3e:2a:e6:f8:36:1f:24:1d: 84:79:9e:42:ab:23:c6:af:a4:bc:f5:b2:b2:4c:55:21:1b:57: 40:88:48:d6:ab:79:b3:9a:4e:c7:27:e1:c3:e0:0a:2e:82:65: 80:16:40:de:a7:e0:7c:cc:ca:95:f2:eb:0e:d7:d7:15:fa:7f: 86:23:ba:6f:8a:36:d4:64:11:25:cc:92:fe:f3:8a:5c:11:f6: 36:e1:69:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfol6aiMDP+qFxc9r5PDtmicwzeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA3MjQwNDQwMjJaFw0yNjA3MjUwNjI3MjJaMDMxMTAvBgNV BAMTKDEwREJDRTBGQ0RFNTIzMzAzRjcxQTE4RTlFQ0VDMUVEQTQwNTZFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZQWeT20ZYGTbdj2uucnZIelF 0E6MMNuPbjjaNlqS0bkFgbBLy0QDhHjDlvDQLJx7/H8lc6BmNR2Tb7mV4JP76dBP Yezn9oFPPM9mp6ZoDHkEOvR58vhqRT3lcWtaRU/pPhjRR7WrZo1icCS+dH9YBqQy 7/7OTNhnzlSC1kR+QG9GzB4CobQMpT1FFwW14KcGSHcSO0vFAxQRaHEJSP2c1Wos N2vPYzJUSCCiTHSb9D+x0BLbkMdt61aGc5x5AFBIctv5Ugre9zmjGeVyvdNEARxs jtdUI8rH8uJu7pwty93rEZp6aowlNAWDU/Jm+yagKoR6RkS19UCHonqITrWDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUENvOD83lIzA/caGOns7B7aQFbiowHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJ0wnmDay37x IcoKqXna17V6EpdPJhh6szWVR5SBlVJUrP9F/DAFr4kszw9JVuMugoxyxTSCsx6C hRc8ywilwdVFk12Q2SD9DGwZx6BNoICutfAzpRZFhEsXVWZp5dppyb9qq9dHwW0b 0fy+yQNpNV326SDPFUfRkoGEDjlMLFMAsYV90NktLT2ygax8MbwjsE2r7W8tn4ev W/7ue6lunI98UBNv0acUW7HcGT4q5vg2HyQdhHmeQqsjxq+kvPWyskxVIRtXQIhI 1qt5s5pOxyfhw+AKLoJlgBZA3qfgfMzKlfLrDtfXFfp/hiO6b4o21GQRJcyS/vOK XBH2NuFptA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:51:28 2026 by rpki-client