$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: nv306DUXZUOPwhlCeikuBjf2LDdxOeJ4TjRqG6btRDs= Subject key identifier: 12:EC:5C:BA:65:DA:43:BB:A6:F0:BE:14:4C:24:A1:14:70:12:24:19 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 48D180CDDE86E51E46940FB65EEC005D3D700B6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 7F Signing time: Fri 24 Jul 2026 04:30:21 +0000 Manifest this update: Fri 24 Jul 2026 04:25:21 +0000 Manifest next update: Sat 25 Jul 2026 07:25:21 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 2: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 3: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 4: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: LVlGa4BVy/XkZ8N12huJCB6/C6rM0OMWV/WjVgXLYaw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d1:80:cd:de:86:e5:1e:46:94:0f:b6:5e:ec:00:5d:3d:70:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Jul 24 04:25:21 2026 GMT Not After : Jul 25 07:25:21 2026 GMT Subject: CN=12EC5CBA65DA43BBA6F0BE144C24A11470122419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:47:5f:b3:43:cd:3c:86:fb:bb:fb:f8:dc: 8c:7d:0e:f3:30:8c:c5:d0:dd:f4:83:81:e9:8a:e3: 09:2e:8b:00:ca:d3:7c:d6:16:f1:ea:04:02:8a:c0: 12:08:58:ac:6e:e4:ab:66:4f:78:a6:1b:bc:48:8d: 15:03:9d:58:c2:8b:db:a9:cb:19:49:20:2a:3a:89: 91:36:dc:69:bd:4e:2d:74:10:b1:4c:38:5c:45:00: 68:32:7b:75:75:ae:33:5e:aa:77:97:22:09:a0:03: f2:bd:cc:82:40:dc:6c:1f:73:6c:32:7e:85:3f:71: fd:6d:0e:42:51:80:38:17:c5:87:89:51:93:38:72: 72:10:d9:fd:e2:30:53:e8:f4:fb:cf:69:19:d2:5e: 82:4c:9c:fc:89:71:b7:7d:95:09:50:f0:3e:9f:ab: 7b:e8:ce:ef:31:2b:38:43:0d:69:07:a4:82:87:6e: d4:23:fc:a9:fd:fe:19:f7:80:ab:0b:42:f6:57:0c: 01:61:93:af:4f:9b:c1:c2:5a:7c:39:87:52:c4:28: e7:0d:c4:4c:4a:0b:9f:96:fb:12:d5:0a:7e:0b:36: 6a:95:bd:34:69:83:d6:c9:f2:92:8d:da:79:0c:3b: a0:79:db:17:3b:0a:72:42:80:a5:92:b7:a3:a2:53: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EC:5C:BA:65:DA:43:BB:A6:F0:BE:14:4C:24:A1:14:70:12:24:19 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0d:23:e6:75:ed:68:c9:2d:bf:9d:dd:38:cb:dc:28:86:07: 0e:8b:52:26:bd:19:12:e5:67:d3:1e:53:59:92:60:b9:10:61: 8e:2b:0f:21:7e:f9:77:a8:59:23:18:fd:62:9d:e5:94:39:38: a9:b8:fe:f2:d2:bf:45:1c:95:71:ea:84:df:9a:60:86:bd:18: d9:c0:98:e6:de:a8:1b:a7:8e:af:55:b2:0b:fe:75:0b:ba:6c: 39:7d:e6:5a:5c:a8:1b:22:39:20:01:d6:2a:31:76:9c:92:f6: fa:1c:c8:aa:65:7b:a7:9c:65:f8:03:26:e6:64:d8:e1:81:b2: 7d:31:94:5d:2f:cc:cc:1a:cf:0d:27:47:25:cb:08:05:5a:27: 2a:7f:3d:5d:bb:1e:d6:96:2d:1f:e3:5d:6e:c2:6f:e4:7d:dc: d0:1b:9c:1c:24:1e:f4:36:b2:e7:dc:00:d1:a0:1c:e6:f1:0a: da:7a:28:e1:3a:d8:ab:8d:24:17:5f:8b:4f:87:06:91:99:c4: ab:6a:f8:7d:db:79:0b:ee:94:0f:ea:72:43:53:b1:ec:0a:13: 19:6a:d5:80:a5:c5:14:7b:88:47:a6:e2:a2:90:2b:bc:2c:dd: 5f:d3:79:4a:2c:e4:92:0f:64:0b:5b:b1:7f:d7:59:91:58:55: 5c:45:4a:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSNGAzd6G5R5GlA+2XuwAXT1wC2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA3MjQwNDI1MjFaFw0yNjA3MjUwNzI1MjFaMDMxMTAvBgNV BAMTKDEyRUM1Q0JBNjVEQTQzQkJBNkYwQkUxNDRDMjRBMTE0NzAxMjI0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA0dfs0PNPIb7u/v43Ix9DvMw jMXQ3fSDgemK4wkuiwDK03zWFvHqBAKKwBIIWKxu5KtmT3imG7xIjRUDnVjCi9up yxlJICo6iZE23Gm9Ti10ELFMOFxFAGgye3V1rjNeqneXIgmgA/K9zIJA3Gwfc2wy foU/cf1tDkJRgDgXxYeJUZM4cnIQ2f3iMFPo9PvPaRnSXoJMnPyJcbd9lQlQ8D6f q3vozu8xKzhDDWkHpIKHbtQj/Kn9/hn3gKsLQvZXDAFhk69Pm8HCWnw5h1LEKOcN xExKC5+W+xLVCn4LNmqVvTRpg9bJ8pKN2nkMO6B52xc7CnJCgKWSt6OiU19fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEuxcumXaQ7um8L4UTCShFHASJBkwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg0j5nXtaMkt v53dOMvcKIYHDotSJr0ZEuVn0x5TWZJguRBhjisPIX75d6hZIxj9Yp3llDk4qbj+ 8tK/RRyVceqE35pghr0Y2cCY5t6oG6eOr1WyC/51C7psOX3mWlyoGyI5IAHWKjF2 nJL2+hzIqmV7p5xl+AMm5mTY4YGyfTGUXS/MzBrPDSdHJcsIBVonKn89Xbse1pYt H+NdbsJv5H3c0BucHCQe9Day59wA0aAc5vEK2noo4TrYq40kF1+LT4cGkZnEq2r4 fdt5C+6UD+pyQ1Ox7AoTGWrVgKXFFHuIR6biopArvCzdX9N5Sizkkg9kC1uxf9dZ kVhVXEVKTQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:13:06 2026 by rpki-client