$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: GGOnKiwDjdwrn2E6Fbg2SdPrAbrEwlfGlmxLzRXBT8w= Subject key identifier: AE:0C:34:96:9F:FF:F6:30:57:A0:2F:04:6D:39:49:86:B0:46:46:31 Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 18B5D3B1C11B8590494F8102000BD760C4AEACE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: 92 Signing time: Fri 24 Jul 2026 22:57:22 +0000 Manifest this update: Fri 24 Jul 2026 22:52:22 +0000 Manifest next update: Sun 26 Jul 2026 00:59:22 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: ZH67FyPGvnk9eY2X1YbU9/747D1NbfaymrdarLsoohI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b5:d3:b1:c1:1b:85:90:49:4f:81:02:00:0b:d7:60:c4:ae:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Jul 24 22:52:22 2026 GMT Not After : Jul 26 00:59:22 2026 GMT Subject: CN=AE0C34969FFFF63057A02F046D394986B0464631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:a3:7d:c5:07:dd:31:60:53:e7:5e:e6:bb: 81:97:26:9f:b1:d3:5f:ef:49:f7:45:62:4b:2f:3c: f3:3d:8e:fa:b2:03:60:1d:45:e3:db:9f:26:e4:3e: ea:4b:cb:cc:af:8e:33:49:29:c8:a4:96:13:1d:3e: b7:26:1e:99:52:8a:d8:c7:d0:54:fc:b5:a3:56:84: 89:8f:57:11:d5:5f:a9:8c:4c:3d:f3:ae:b3:a6:66: 19:08:a2:2e:5c:47:8b:c0:dd:60:85:50:2c:29:ec: 2e:97:fa:44:c6:20:b7:3f:74:4e:bb:00:c7:ce:ec: 15:86:dc:2c:25:2f:99:5f:f8:69:13:1f:41:0f:70: 52:de:48:f1:90:83:c4:33:cc:53:ad:0b:27:7f:bd: a2:cd:b4:e4:d4:1c:a1:a3:14:b9:a1:f2:50:36:8f: 1d:e6:e5:dc:83:12:8c:a2:e8:39:26:c9:e8:58:d4: 1b:17:73:24:d5:55:92:b8:1d:4b:3d:d2:81:1a:25: 1d:a1:cc:7f:f3:3a:5b:fe:46:29:f6:87:ee:3c:c4: 59:aa:20:d0:b2:c2:f0:59:8b:d2:19:a0:60:c1:6d: 95:db:9b:2f:11:c1:54:0a:b4:14:0f:80:f7:fa:7e: 96:1d:59:6a:9d:8d:01:46:a9:07:d3:66:0f:e3:24: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:34:96:9F:FF:F6:30:57:A0:2F:04:6D:39:49:86:B0:46:46:31 X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d7:a1:6f:c8:5d:3a:3c:bd:32:fc:e4:27:d0:16:32:70:09: db:5c:06:eb:d9:cc:07:0b:16:f6:62:9e:8d:f1:d5:b0:43:8c: 2e:e0:41:2d:c9:91:4d:9f:d3:ae:1a:a4:91:b0:56:20:c9:d7: 9e:18:fb:ad:e8:81:dc:c9:13:40:2a:b2:0f:4d:75:2f:32:1d: cb:ef:2a:20:3d:87:5e:d4:fa:25:d5:c2:9d:6b:c8:7c:f4:38: 1e:e2:3d:a7:a3:1d:b8:9f:d2:f3:e1:61:62:99:ac:f9:39:f4: fe:c2:cf:88:d0:d6:79:14:b7:96:24:73:d9:54:6e:bc:32:76: fb:eb:ef:61:9a:89:68:e0:04:60:bd:f6:fe:2f:5f:fe:2d:42: 3f:00:53:7c:f5:96:1f:63:f0:5f:06:b7:9a:10:9e:9f:07:42: 10:10:09:1e:20:53:4e:aa:88:a7:7e:01:4b:53:4e:c3:d2:56: cd:17:e2:7e:26:58:44:fd:cf:e2:ce:b6:36:e3:c6:4d:4e:e6: 61:e7:21:89:b4:32:ef:a9:2d:32:54:ed:0a:ff:bc:15:4e:2e: 5b:c7:ce:51:22:5d:8c:b6:f9:22:bb:54:70:b7:59:c8:bf:bd: a2:66:45:aa:cd:91:bc:67:55:3d:ee:89:24:14:cf:69:17:6e: d9:e3:2e:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGLXTscEbhZBJT4ECAAvXYMSurOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA3MjQyMjUyMjJaFw0yNjA3MjYwMDU5MjJaMDMxMTAvBgNV BAMTKEFFMEMzNDk2OUZGRkY2MzA1N0EwMkYwNDZEMzk0OTg2QjA0NjQ2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPqN9xQfdMWBT517mu4GXJp+x 01/vSfdFYksvPPM9jvqyA2AdRePbnybkPupLy8yvjjNJKciklhMdPrcmHplSitjH 0FT8taNWhImPVxHVX6mMTD3zrrOmZhkIoi5cR4vA3WCFUCwp7C6X+kTGILc/dE67 AMfO7BWG3CwlL5lf+GkTH0EPcFLeSPGQg8QzzFOtCyd/vaLNtOTUHKGjFLmh8lA2 jx3m5dyDEoyi6DkmyehY1BsXcyTVVZK4HUs90oEaJR2hzH/zOlv+Rin2h+48xFmq INCywvBZi9IZoGDBbZXbmy8RwVQKtBQPgPf6fpYdWWqdjQFGqQfTZg/jJHqZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrgw0lp//9jBXoC8EbTlJhrBGRjEwHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtehb8hdOjy9 MvzkJ9AWMnAJ21wG69nMBwsW9mKejfHVsEOMLuBBLcmRTZ/TrhqkkbBWIMnXnhj7 reiB3MkTQCqyD011LzIdy+8qID2HXtT6JdXCnWvIfPQ4HuI9p6MduJ/S8+FhYpms +Tn0/sLPiNDWeRS3liRz2VRuvDJ2++vvYZqJaOAEYL32/i9f/i1CPwBTfPWWH2Pw Xwa3mhCenwdCEBAJHiBTTqqIp34BS1NOw9JWzRfifiZYRP3P4s62NuPGTU7mYech ibQy76ktMlTtCv+8FU4uW8fOUSJdjLb5IrtUcLdZyL+9omZFqs2RvGdVPe6JJBTP aRdu2eMusw== -----END CERTIFICATE-----Generated at Sat Jul 25 02:11:39 2026 by rpki-client