$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: osaQg7WEVj1YZtO2luYL00uRqSTJ7V2Dhw+Lyx/3UcQ= Subject key identifier: 8D:E9:61:B9:3A:3F:FB:9B:93:6B:07:19:98:95:97:CA:D4:D3:E1:36 Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 5BEC669703EA3CDE3398FDDBAF28EAF0693BEF5B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 4C Signing time: Fri 24 Jul 2026 04:40:22 +0000 Manifest this update: Fri 24 Jul 2026 04:35:22 +0000 Manifest next update: Sat 25 Jul 2026 08:12:22 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: fME0DGmTqQQ3yhkhyB8WkYDq7WzbhLsOGdrRw+21v1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ec:66:97:03:ea:3c:de:33:98:fd:db:af:28:ea:f0:69:3b:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: Jul 24 04:35:22 2026 GMT Not After : Jul 25 08:12:22 2026 GMT Subject: CN=8DE961B93A3FFB9B936B0719989597CAD4D3E136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:3d:9e:e2:4c:2b:0c:98:79:02:c8:2d:d1: 49:0b:30:f7:78:c3:65:5e:53:31:10:a0:0d:0e:86: 43:e8:95:e6:4e:c6:23:f3:f0:bd:b1:7c:8a:d0:e3: cb:d7:41:af:1d:a5:30:5f:09:ad:09:6e:73:23:40: 4e:41:75:80:6e:3b:c7:d2:98:ed:67:a7:d2:de:58: a1:4f:80:14:ae:db:55:87:f3:5a:4a:f9:6e:e2:32: ea:bf:bb:30:45:9f:0b:a6:04:ba:53:f0:70:77:cb: 5c:9d:a7:5e:d9:07:53:03:ea:dd:7d:ac:c9:07:a0: 0b:3d:92:0b:99:21:6d:3d:e8:bc:08:5f:84:54:f6: c7:7f:f9:69:1b:9f:2f:79:ec:6e:cf:c7:90:8e:f9: 15:3d:28:e8:41:a7:49:c0:85:8b:3e:9d:2f:b9:58: 8b:ba:00:b1:58:37:a9:42:30:ae:4b:70:42:e6:96: ab:e4:e9:30:7b:87:32:ad:54:de:86:18:b3:81:cb: bf:4d:44:f7:3f:4e:fd:20:fe:e8:3c:0b:9a:10:a6: 8e:f4:01:2c:9c:7a:58:e6:66:17:15:67:6a:c5:3d: 23:e6:5b:dc:98:e4:05:c1:42:cb:92:ec:f4:44:77: c6:21:f1:63:99:7b:79:fd:56:ab:dc:b5:44:f0:ab: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E9:61:B9:3A:3F:FB:9B:93:6B:07:19:98:95:97:CA:D4:D3:E1:36 X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:e8:b4:36:8b:1c:00:a4:be:93:50:5a:eb:38:a6:12:bb: f6:1f:32:2d:04:fb:bf:fe:24:aa:4e:ab:59:52:31:28:f0:81: b7:bd:3f:cf:5b:19:6b:35:34:a1:5f:8c:30:5a:64:64:9d:a6: aa:83:cf:8b:a5:7a:f5:c4:4c:57:d6:92:3e:01:f2:95:cf:05: 50:16:eb:ac:47:e6:d3:84:1c:7b:8c:81:54:d5:40:67:78:ff: 79:3a:66:03:07:7b:ad:75:c1:7f:eb:4a:07:b9:fc:a8:10:02: b9:76:33:d1:52:26:1c:e7:10:7a:0b:c1:96:7d:78:f2:9f:16: 16:f5:a4:81:12:13:22:e3:05:e9:d6:a8:9c:d8:3c:d8:83:09: dc:2e:11:16:10:ce:be:af:08:1d:bf:c3:79:79:3e:ad:3c:88: ed:0b:64:d0:c3:c0:4e:e3:b7:27:89:f7:ed:89:25:e7:db:ed: 88:b0:07:6f:50:1e:e6:1d:a5:82:bc:7e:2f:d9:74:fb:45:d3: 22:77:16:2f:9f:5b:15:fb:45:f3:e7:7e:b5:1c:65:97:58:4d: f2:60:d5:c1:4d:fc:ef:9c:69:b3:4f:cb:fb:61:38:eb:e9:90: d2:c0:93:1f:7f:14:4b:0c:71:5b:f1:21:de:31:59:94:b1:fb: e2:8c:c3:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW+xmlwPqPN4zmP3bryjq8Gk771swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjA3MjQwNDM1MjJaFw0yNjA3MjUwODEyMjJaMDMxMTAvBgNV BAMTKDhERTk2MUI5M0EzRkZCOUI5MzZCMDcxOTk4OTU5N0NBRDREM0UxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSAz2e4kwrDJh5Asgt0UkLMPd4 w2VeUzEQoA0OhkPoleZOxiPz8L2xfIrQ48vXQa8dpTBfCa0JbnMjQE5BdYBuO8fS mO1np9LeWKFPgBSu21WH81pK+W7iMuq/uzBFnwumBLpT8HB3y1ydp17ZB1MD6t19 rMkHoAs9kguZIW096LwIX4RU9sd/+Wkbny957G7Px5CO+RU9KOhBp0nAhYs+nS+5 WIu6ALFYN6lCMK5LcELmlqvk6TB7hzKtVN6GGLOBy79NRPc/Tv0g/ug8C5oQpo70 ASyceljmZhcVZ2rFPSPmW9yY5AXBQsuS7PREd8Yh8WOZe3n9VqvctUTwqzqDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjelhuTo/+5uTawcZmJWXytTT4TYwHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITfotDaLHACk vpNQWus4phK79h8yLQT7v/4kqk6rWVIxKPCBt70/z1sZazU0oV+MMFpkZJ2mqoPP i6V69cRMV9aSPgHylc8FUBbrrEfm04Qce4yBVNVAZ3j/eTpmAwd7rXXBf+tKB7n8 qBACuXYz0VImHOcQegvBln148p8WFvWkgRITIuMF6daonNg82IMJ3C4RFhDOvq8I Hb/DeXk+rTyI7Qtk0MPATuO3J4n37Ykl59vtiLAHb1Ae5h2lgrx+L9l0+0XTIncW L59bFftF8+d+tRxll1hN8mDVwU3875xps0/L+2E46+mQ0sCTH38USwxxW/Eh3jFZ lLH74ozDPQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:08:32 2026 by rpki-client