$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft File: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json) Hash identifier: GyJLRisHM8R0zXa3Z3h+bJKcwMZE/6V8+wRGzKzC/SY= Subject key identifier: 29:45:55:F4:3D:F6:7E:DE:4F:A7:FB:D3:49:5F:47:6E:AB:3A:C4:13 Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 Certificate issuer: /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Certificate serial: 78CE573045C6FCEBC1AF122094A7664E8B1AFE0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft Manifest number: 86 Signing time: Thu 23 Jul 2026 20:01:27 +0000 Manifest this update: Thu 23 Jul 2026 19:56:27 +0000 Manifest next update: Fri 24 Jul 2026 23:35:27 +0000 Files and hashes: 1: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=) 2: AS7497.roa (hash: Y/zfyPennx+DRI8BGLvU/n1ZQD1T1L8KB7R1aNj5vzE=) 3: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: 9HPY3om3QurOFRiw18rXD5rBrWOpw6d0dR5g75wvLXE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ce:57:30:45:c6:fc:eb:c1:af:12:20:94:a7:66:4e:8b:1a:fe:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Validity Not Before: Jul 23 19:56:27 2026 GMT Not After : Jul 24 23:35:27 2026 GMT Subject: CN=294555F43DF67EDE4FA7FBD3495F476EAB3AC413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9e:11:87:ad:d3:95:fa:0a:4f:5d:66:d1:9e: c5:7d:4e:8d:2c:c2:fd:62:0b:e6:b4:b8:c3:37:22: ba:8b:b5:f7:64:44:63:7a:67:9d:bc:8b:b5:8b:46: bf:8b:5b:86:0e:53:d1:e0:5a:26:c1:0d:7c:ab:7e: f9:e4:99:b3:af:02:7d:b8:62:f4:7a:2f:d9:1c:51: 39:57:b1:6a:02:99:c1:63:35:20:d0:ee:24:ad:a4: a8:47:73:1f:ea:6b:ed:85:30:eb:23:ee:47:a6:59: 8c:72:d0:22:b7:38:d5:f9:dd:b5:26:c3:80:3b:95: 8d:b0:2a:0b:ff:68:0e:16:e8:cf:b2:79:b4:f1:49: b4:2f:f0:2a:77:bf:19:6b:c2:26:cb:ba:f4:67:db: 3d:72:8e:32:6f:7d:49:7d:43:cc:ca:f3:03:dc:be: e2:dd:1e:61:c8:f3:85:b3:39:3e:6a:71:cf:e9:2f: 44:42:7b:9c:92:e2:61:17:25:4e:d3:eb:d8:2f:7e: 6e:77:89:1b:ee:5e:0c:9d:77:01:ba:0a:ab:b0:6d: e8:11:10:da:48:04:48:9d:7e:b9:81:67:d5:ae:77: cc:79:2b:28:3c:49:3a:52:b5:70:09:bb:8d:74:8c: 4b:a0:8f:7e:54:3d:8b:8c:b8:03:53:5c:e2:f5:b3: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:45:55:F4:3D:F6:7E:DE:4F:A7:FB:D3:49:5F:47:6E:AB:3A:C4:13 X509v3 Authority Key Identifier: keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:71:86:df:a0:e4:91:ba:75:31:b9:e0:1f:47:05:5c:b6:0b: 2c:b1:40:35:1c:13:18:fc:28:dd:33:ac:14:ff:54:cd:ca:7b: 5b:b9:dd:58:fd:ec:25:16:0b:10:a6:8d:ca:2c:7f:0e:bf:ff: ab:10:1c:4f:44:0a:43:49:fc:e2:4b:7b:2f:0a:e6:81:ff:ff: 4d:11:69:ea:00:33:18:2e:fd:26:76:1a:f8:1b:64:41:5b:65: 73:34:b8:84:fc:95:38:22:0f:a3:a1:47:98:45:c6:f1:cd:3f: 95:c1:3f:fb:21:1a:78:40:d7:be:f5:8a:93:08:c3:a8:d9:4c: 29:04:d5:39:ea:a6:23:d9:44:f5:18:4f:67:ba:62:d0:26:66: 23:e5:c4:1b:43:db:42:dd:c6:a7:4f:f8:64:dd:6f:6b:28:c1: 94:c0:a9:32:78:c1:1c:ea:cd:d5:cd:ac:3e:f7:6d:7c:82:0d: ba:f4:41:32:2f:0e:8a:4c:c9:b9:44:1e:b8:00:d9:38:cb:32: 0d:b6:07:54:f1:97:ef:9f:22:6a:bb:83:02:f4:b0:66:ea:7f: 70:dc:71:5a:90:b6:50:12:ad:52:1b:3a:2d:15:24:bd:8d:d1: e6:f1:93:ec:be:8e:4b:23:6a:61:d5:61:fa:f6:97:35:48:34: 75:d0:ea:1f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeM5XMEXG/OvBrxIglKdmTosa/gswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyg4QzA5NjVCNjJF MDhBOUZEMTZGQjdGOUExODVGQUQ0NDM4NTQ3MTYyMB4XDTI2MDcyMzE5NTYyN1oX DTI2MDcyNDIzMzUyN1owMzExMC8GA1UEAxMoMjk0NTU1RjQzREY2N0VERTRGQTdG QkQzNDk1RjQ3NkVBQjNBQzQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqeEYet05X6Ck9dZtGexX1OjSzC/WIL5rS4wzciuou192REY3pnnbyLtYtG v4tbhg5T0eBaJsENfKt++eSZs68Cfbhi9Hov2RxROVexagKZwWM1INDuJK2kqEdz H+pr7YUw6yPuR6ZZjHLQIrc41fndtSbDgDuVjbAqC/9oDhboz7J5tPFJtC/wKne/ GWvCJsu69GfbPXKOMm99SX1DzMrzA9y+4t0eYcjzhbM5Pmpxz+kvREJ7nJLiYRcl TtPr2C9+bneJG+5eDJ13AboKq7Bt6BEQ2kgESJ1+uYFn1a53zHkrKDxJOlK1cAm7 jXSMS6CPflQ9i4y4A1Nc4vWztp8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQpRVX0 PfZ+3k+n+9NJX0duqzrEEzAfBgNVHSMEGDAWgBSMCWW2Lgip/Rb7f5oYX61EOFRx YjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzEvOEMwOTY1 QjYyRTA4QTlGRDE2RkI3RjlBMTg1RkFENDQzODU0NzE2Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvakFsbHRpNElx ZjBXLTMtYUdGLXRSRGhVY1dJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8xLzhDMDk2NUI2MkUwOEE5RkQxNkZCN0Y5QTE4NUZBRDQ0Mzg1NDcx NjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAwcYbfoOSRunUxueAfRwVctgsssUA1HBMY/CjdM6wU/1TN yntbud1Y/ewlFgsQpo3KLH8Ov/+rEBxPRApDSfziS3svCuaB//9NEWnqADMYLv0m dhr4G2RBW2VzNLiE/JU4Ig+joUeYRcbxzT+VwT/7IRp4QNe+9YqTCMOo2UwpBNU5 6qYj2UT1GE9numLQJmYj5cQbQ9tC3canT/hk3W9rKMGUwKkyeMEc6s3Vzaw+9218 gg269EEyLw6KTMm5RB64ANk4yzINtgdU8ZfvnyJqu4MC9LBm6n9w3HFakLZQEq1S GzotFSS9jdHm8ZPsvo5LI2ph1WH69pc1SDR10Oof -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:01 2026 by rpki-client