$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: czNzBU0E9L7uRxUn7fPkYfs6zwkTcFMshGr908BNORk= Subject key identifier: 22:D7:D6:B2:B2:1F:A7:EF:C5:37:BC:03:17:25:1F:9E:9E:09:33:AE Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 1BB8CA8A7013DBB4D1D21D9B727CCB7C6122CDE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: 1C Signing time: Wed 13 May 2026 11:01:03 +0000 Manifest this update: Wed 13 May 2026 10:56:03 +0000 Manifest next update: Thu 14 May 2026 11:52:03 +0000 Files and hashes: 1: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: wEvUNZFAMN0RaKCgG6oGHX9olAOYQSdvphr4G3epug8=) 2: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) 3: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b8:ca:8a:70:13:db:b4:d1:d2:1d:9b:72:7c:cb:7c:61:22:cd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: May 13 10:56:03 2026 GMT Not After : May 14 11:52:03 2026 GMT Subject: CN=22D7D6B2B21FA7EFC537BC0317251F9E9E0933AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ca:d8:a4:bb:71:df:2d:88:be:9f:37:79:1f: 25:6c:12:2d:6c:9e:ce:6f:b8:34:75:c3:f6:cb:fc: 30:7c:45:84:45:24:90:6c:c9:9f:ea:50:04:f0:a1: 72:be:c1:9d:94:8c:38:c0:7d:fb:be:a0:0a:19:d4: 4d:e2:7f:c3:92:b0:00:7a:1c:bf:58:e2:0b:3e:db: 91:c0:62:87:f1:bd:50:a8:ac:f0:db:15:d8:b8:36: 23:de:4a:ac:b6:47:57:c7:b1:6f:59:df:bf:f4:c1: c6:f9:12:c0:1e:37:1f:87:5f:9b:ea:25:eb:c7:cd: dc:5e:9f:5c:1f:05:de:57:05:42:73:e0:97:6a:23: ad:e6:8c:55:d5:fa:44:2e:84:79:e0:18:c3:04:0c: e6:10:1a:2c:27:df:b0:3b:37:86:72:9f:87:6b:16: 62:af:bd:68:98:ee:18:d9:52:bd:9c:95:7b:8d:78: 01:8b:eb:5f:bf:cb:9c:f1:97:c4:dd:ec:ff:30:de: 30:61:41:4a:a1:4d:36:bb:be:df:b0:43:2d:28:2a: a0:c6:51:9a:b3:8f:89:2f:e0:83:45:d8:de:3b:72: 1e:f2:67:ea:e9:0c:8f:ae:4a:49:c4:52:46:a9:4b: f2:d5:d7:a7:50:96:2c:25:b4:11:60:af:c5:bf:6f: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D7:D6:B2:B2:1F:A7:EF:C5:37:BC:03:17:25:1F:9E:9E:09:33:AE X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:80:e4:a0:fa:65:eb:a7:08:50:92:fe:8d:d1:a5:b4:d2:e0: 9e:bb:0b:d9:8b:2f:43:8b:f2:d2:6d:99:6b:5a:62:d5:a4:30: 3c:99:89:95:ba:b1:18:a4:1b:fd:a1:42:70:6b:0e:9b:c3:bf: 60:22:8a:3d:64:6f:c8:24:3b:cf:b4:6b:f4:46:61:8b:b2:6e: e3:b0:f7:d5:1a:ea:30:32:c5:73:ec:ba:44:d1:17:74:1e:1c: 18:bc:d3:8f:93:7c:bf:d2:25:56:ad:03:85:f9:36:f2:d1:d9: 0a:7d:10:dc:5a:a3:2d:6e:ca:f6:cc:af:01:8c:a0:6b:f7:8c: 4d:bb:c0:39:65:27:cb:3f:1c:b8:6d:1a:f8:49:4a:4a:3c:97: ee:51:9f:38:83:39:73:af:b2:6a:95:8c:38:4c:dc:01:33:ac: eb:db:40:33:e3:ef:60:cd:10:9d:21:c6:6d:85:2a:79:70:ce: ff:0e:6b:c4:b7:11:7b:8f:7b:8e:fa:54:6f:c4:d8:d3:d0:e2: c1:ad:b7:e1:ff:6f:8b:ec:9e:52:2c:b2:b3:26:2d:da:cb:93: d3:37:5c:19:a5:22:ce:25:6b:38:6b:6d:79:17:53:4b:e4:a8: 07:b3:b0:ee:e2:b0:dc:93:19:7b:06:d5:d3:80:51:50:e1:e5: 7c:7c:5b:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG7jKinAT27TR0h2bcnzLfGEizecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjA1MTMxMDU2MDNaFw0yNjA1MTQxMTUyMDNaMDMxMTAvBgNV BAMTKDIyRDdENkIyQjIxRkE3RUZDNTM3QkMwMzE3MjUxRjlFOUUwOTMzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFytiku3HfLYi+nzd5HyVsEi1s ns5vuDR1w/bL/DB8RYRFJJBsyZ/qUATwoXK+wZ2UjDjAffu+oAoZ1E3if8OSsAB6 HL9Y4gs+25HAYofxvVCorPDbFdi4NiPeSqy2R1fHsW9Z37/0wcb5EsAeNx+HX5vq JevHzdxen1wfBd5XBUJz4JdqI63mjFXV+kQuhHngGMMEDOYQGiwn37A7N4Zyn4dr FmKvvWiY7hjZUr2clXuNeAGL61+/y5zxl8Td7P8w3jBhQUqhTTa7vt+wQy0oKqDG UZqzj4kv4INF2N47ch7yZ+rpDI+uSknEUkapS/LV16dQliwltBFgr8W/b2DBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUItfWsrIfp+/FN7wDFyUfnp4JM64wHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYDkoPpl66cI UJL+jdGltNLgnrsL2YsvQ4vy0m2Za1pi1aQwPJmJlbqxGKQb/aFCcGsOm8O/YCKK PWRvyCQ7z7Rr9EZhi7Ju47D31RrqMDLFc+y6RNEXdB4cGLzTj5N8v9IlVq0Dhfk2 8tHZCn0Q3FqjLW7K9syvAYyga/eMTbvAOWUnyz8cuG0a+ElKSjyX7lGfOIM5c6+y apWMOEzcATOs69tAM+PvYM0QnSHGbYUqeXDO/w5rxLcRe497jvpUb8TY09Diwa23 4f9vi+yeUiyysyYt2suT0zdcGaUiziVrOGtteRdTS+SoB7Ow7uKw3JMZewbV04BR UOHlfHxbNw== -----END CERTIFICATE-----Generated at Wed May 13 13:33:56 2026 by rpki-client