$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: VEdjNVb5mhrhaF41rionSrCq/cG0wcd+IBEzXDLBkU4= Subject key identifier: 8E:4F:AB:44:15:82:89:EB:CA:4E:D9:93:33:1F:4F:C3:EC:D1:1D:35 Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 4ECBFBD33D04483F0C1A5986DB55FD798AD3A741 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: 61 Signing time: Fri 24 Jul 2026 14:26:26 +0000 Manifest this update: Fri 24 Jul 2026 14:21:26 +0000 Manifest next update: Sat 25 Jul 2026 16:10:26 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: rpMlosfvQ2FT9RX00CxCw+a43ATzJww9xLobFItuZFs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 16:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cb:fb:d3:3d:04:48:3f:0c:1a:59:86:db:55:fd:79:8a:d3:a7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: Jul 24 14:21:26 2026 GMT Not After : Jul 25 16:10:26 2026 GMT Subject: CN=8E4FAB44158289EBCA4ED993331F4FC3ECD11D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:f4:b8:1b:e2:ee:cc:f3:4e:1a:ad:af:4a: 2e:9b:59:bc:e6:cd:a8:34:7c:9b:6c:29:2b:c3:bf: 6e:2a:b0:69:23:eb:b5:3a:a1:cc:2f:01:1f:1c:07: 94:1d:2e:f0:a2:5e:23:0e:b7:35:a8:b6:64:d5:3e: fb:2e:0d:02:63:c3:be:e8:cd:c0:06:7d:27:e9:3f: 29:a4:41:0c:83:1f:ca:6c:f6:fe:7d:8e:44:9d:58: bd:17:5a:8e:0c:6b:d2:98:32:15:51:6d:de:43:5a: e3:18:0b:97:9f:ea:bc:7e:90:b5:97:af:09:f3:78: 2b:61:bb:f9:e4:2a:b8:81:6c:1c:ef:e9:72:1a:47: ca:52:35:65:0a:23:bb:1e:bb:b7:c5:8b:35:aa:33: 86:ff:ed:ec:d1:7f:ac:03:29:5f:5c:18:40:d9:e5: d5:52:3d:eb:57:cf:fa:2b:41:06:97:57:e0:e6:02: c1:84:a6:73:5f:24:40:41:12:37:03:8a:01:4d:b9: 4c:1b:62:fc:f8:9d:88:52:7e:e7:b4:93:c5:de:3f: c8:eb:21:39:2c:47:40:b9:a3:1d:93:87:81:16:ec: 1c:a6:32:0d:82:2b:a9:32:42:b3:e0:7a:d0:82:a1: 05:b1:78:c6:a1:d5:fe:4e:9d:a6:6b:bb:1a:79:15: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4F:AB:44:15:82:89:EB:CA:4E:D9:93:33:1F:4F:C3:EC:D1:1D:35 X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1f:aa:e7:6f:5a:bf:f9:83:21:54:42:e8:da:70:24:cf:c9: 9f:f7:61:b6:a1:2c:c4:71:d6:28:48:9d:0b:88:7a:2c:1a:73: f2:0a:b6:6c:62:64:c8:9e:29:74:f4:2d:48:13:15:27:0d:b7: 80:19:44:0a:f4:dd:61:4f:36:8a:27:f9:0f:7b:57:52:83:56: 39:6c:f2:07:81:e7:e4:57:b7:93:25:9d:0f:c8:50:2c:4a:3d: b8:96:7a:7a:16:7d:fc:61:03:4e:cf:a5:e6:5d:07:43:9b:89: 0d:4d:de:59:b2:50:cd:7f:8f:2f:0c:cc:a7:f6:8d:71:b9:e7: 8a:c4:cb:34:82:62:36:02:fa:d1:a0:8e:54:b3:08:69:9f:b1: 4b:73:e1:8b:5d:72:40:59:18:0f:72:d1:6c:9d:23:3e:7b:b0: 62:e7:20:4e:35:06:49:b7:25:f8:3b:ce:b2:41:15:29:7d:76: d4:af:e9:98:ff:31:03:5e:39:3b:d4:7d:6e:d6:46:76:92:a4: ae:c9:2f:d6:e7:80:a8:50:17:95:97:c0:8f:89:83:98:63:3c: cc:59:99:75:a3:fb:d7:dc:52:f2:27:e5:21:1b:9b:a9:28:1a: e7:26:e7:13:74:50:fa:bc:eb:9b:bb:50:80:4b:3d:49:3c:02: 32:44:b7:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTsv70z0ESD8MGlmG21X9eYrTp0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjA3MjQxNDIxMjZaFw0yNjA3MjUxNjEwMjZaMDMxMTAvBgNV BAMTKDhFNEZBQjQ0MTU4Mjg5RUJDQTRFRDk5MzMzMUY0RkMzRUNEMTFEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9/S4G+LuzPNOGq2vSi6bWbzm zag0fJtsKSvDv24qsGkj67U6ocwvAR8cB5QdLvCiXiMOtzWotmTVPvsuDQJjw77o zcAGfSfpPymkQQyDH8ps9v59jkSdWL0XWo4Ma9KYMhVRbd5DWuMYC5ef6rx+kLWX rwnzeCthu/nkKriBbBzv6XIaR8pSNWUKI7seu7fFizWqM4b/7ezRf6wDKV9cGEDZ 5dVSPetXz/orQQaXV+DmAsGEpnNfJEBBEjcDigFNuUwbYvz4nYhSfue0k8XeP8jr ITksR0C5ox2Th4EW7BymMg2CK6kyQrPgetCCoQWxeMah1f5OnaZruxp5FeqBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjk+rRBWCievKTtmTMx9Pw+zRHTUwHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR+q529av/mD IVRC6NpwJM/Jn/dhtqEsxHHWKEidC4h6LBpz8gq2bGJkyJ4pdPQtSBMVJw23gBlE CvTdYU82iif5D3tXUoNWOWzyB4Hn5Fe3kyWdD8hQLEo9uJZ6ehZ9/GEDTs+l5l0H Q5uJDU3eWbJQzX+PLwzMp/aNcbnnisTLNIJiNgL60aCOVLMIaZ+xS3Phi11yQFkY D3LRbJ0jPnuwYucgTjUGSbcl+DvOskEVKX121K/pmP8xA145O9R9btZGdpKkrskv 1ueAqFAXlZfAj4mDmGM8zFmZdaP719xS8iflIRubqSga5ybnE3RQ+rzrm7tQgEs9 STwCMkS3Kw== -----END CERTIFICATE-----Generated at Fri Jul 24 22:26:31 2026 by rpki-client