$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: dDB+gvCfB2IGrstMMwdYzl4cB3pdVy/+qOj77f9ib9k= Subject key identifier: FE:99:9E:BD:54:A4:F0:AE:4C:E5:49:23:A9:93:14:F5:3F:4E:35:C0 Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 5ED731E67AB4A622A479880AA0E00BDE9B30E81B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: 7C Signing time: Fri 24 Jul 2026 07:15:36 +0000 Manifest this update: Fri 24 Jul 2026 07:10:36 +0000 Manifest next update: Sat 25 Jul 2026 10:01:36 +0000 Files and hashes: 1: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: 7hMi0rVX2OdnMnofa8QMYEECtaTpJPucpsorDwarcqQ=) 2: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 3: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d7:31:e6:7a:b4:a6:22:a4:79:88:0a:a0:e0:0b:de:9b:30:e8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Jul 24 07:10:36 2026 GMT Not After : Jul 25 10:01:36 2026 GMT Subject: CN=FE999EBD54A4F0AE4CE54923A99314F53F4E35C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:9e:39:e3:ef:6b:c0:a3:a7:60:0b:5f:c0: ae:d5:d3:a7:dc:6e:18:96:49:91:d5:07:95:ff:ec: 5d:9c:46:17:8b:26:f7:2e:29:8d:65:e8:c4:fe:61: d7:6a:11:34:12:2f:09:9c:35:14:58:97:b0:3d:24: 41:ef:07:15:d6:14:73:c7:a3:bb:13:74:d4:4a:7b: d4:dc:e8:7a:12:3e:0c:38:08:0d:6d:8f:2f:1b:3c: 2e:f6:36:6f:98:bb:03:36:ed:b4:e4:40:87:f9:8d: 25:71:30:9a:86:a1:64:2e:98:b7:96:4e:f3:02:4d: d1:f7:3d:5e:79:79:1f:49:e7:fd:b9:ff:89:2c:c4: 52:48:2d:df:1e:cc:6f:07:5c:4f:66:5d:72:a6:a8: 08:2a:e3:cc:f2:26:e4:cb:fa:fc:e5:e3:36:1d:68: f7:7c:91:da:e9:29:9f:54:2b:a0:ca:4f:dc:84:51: be:b7:fe:6a:93:6c:23:d8:7e:1e:e9:de:95:f4:d7: 50:fe:ce:f9:87:b4:fb:c3:f1:00:b3:2e:26:c0:85: a8:17:dc:c5:4a:9d:fa:b3:74:bd:53:0f:7e:aa:de: 99:f0:bd:bc:9e:44:90:6e:09:39:06:77:ce:c0:d8: 45:2c:8a:5f:6a:e0:01:da:4b:f4:a7:d7:eb:ac:c5: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:9E:BD:54:A4:F0:AE:4C:E5:49:23:A9:93:14:F5:3F:4E:35:C0 X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1c:09:54:89:89:21:a5:37:45:d5:51:1a:c8:c9:84:33:d2: b6:77:57:dd:ec:d6:92:42:ee:7a:2d:50:fd:c6:f8:28:28:98: 04:53:81:92:36:eb:de:d3:d1:af:d5:c4:ff:7d:12:8e:b0:d5: be:ad:a4:83:f7:46:c6:67:7e:f5:5a:17:63:cd:71:18:6d:bd: ff:ed:c9:dd:dc:26:97:ac:04:87:bd:5b:b0:74:07:61:ad:34: db:2f:f2:9a:bb:76:ea:48:9e:f4:50:8d:d8:42:96:cd:03:2d: f7:9a:11:7b:1d:b0:13:a2:a5:72:38:01:b0:ad:eb:d2:3f:3a: d8:61:4c:44:40:86:51:b4:a4:b1:da:9b:b8:7a:00:61:05:9a: b4:ce:8c:57:72:da:7d:eb:d2:01:73:eb:22:10:bd:3d:ee:61: 8a:a5:f3:a9:2a:52:43:30:44:d8:fe:b8:88:95:9c:8b:79:b3: 3c:05:11:3b:6f:f8:a8:71:1e:00:ea:49:36:24:cf:db:7d:81: e0:c5:f7:5c:c3:76:0e:9e:fb:ee:24:f5:c2:4d:5c:6c:45:08: 1a:ca:16:c9:03:6a:b0:04:c2:50:b9:60:88:75:d7:5d:92:7a: d5:5f:d7:68:85:c3:a3:5b:12:ee:86:fe:10:ab:3d:f9:64:5e: 8b:a3:47:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXtcx5nq0piKkeYgKoOAL3psw6BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjA3MjQwNzEwMzZaFw0yNjA3MjUxMDAxMzZaMDMxMTAvBgNV BAMTKEZFOTk5RUJENTRBNEYwQUU0Q0U1NDkyM0E5OTMxNEY1M0Y0RTM1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjx5454+9rwKOnYAtfwK7V06fc bhiWSZHVB5X/7F2cRheLJvcuKY1l6MT+YddqETQSLwmcNRRYl7A9JEHvBxXWFHPH o7sTdNRKe9Tc6HoSPgw4CA1tjy8bPC72Nm+YuwM27bTkQIf5jSVxMJqGoWQumLeW TvMCTdH3PV55eR9J5/25/4ksxFJILd8ezG8HXE9mXXKmqAgq48zyJuTL+vzl4zYd aPd8kdrpKZ9UK6DKT9yEUb63/mqTbCPYfh7p3pX011D+zvmHtPvD8QCzLibAhagX 3MVKnfqzdL1TD36q3pnwvbyeRJBuCTkGd87A2EUsil9q4AHaS/Sn1+usxaVfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/pmevVSk8K5M5UkjqZMU9T9ONcAwHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBwJVImJIaU3 RdVRGsjJhDPStndX3ezWkkLuei1Q/cb4KCiYBFOBkjbr3tPRr9XE/30SjrDVvq2k g/dGxmd+9VoXY81xGG29/+3J3dwml6wEh71bsHQHYa002y/ymrt26kie9FCN2EKW zQMt95oRex2wE6KlcjgBsK3r0j862GFMRECGUbSksdqbuHoAYQWatM6MV3LafevS AXPrIhC9Pe5hiqXzqSpSQzBE2P64iJWci3mzPAURO2/4qHEeAOpJNiTP232B4MX3 XMN2Dp777iT1wk1cbEUIGsoWyQNqsATCULlgiHXXXZJ61V/XaIXDo1sS7ob+EKs9 +WRei6NHKA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:15:11 2026 by rpki-client