$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json) Hash identifier: GPWvJamVnPVhQwUbryArAcP4CFAaB+GbT4ie9ppgvH8= Subject key identifier: CC:C6:A8:AA:BF:10:8D:6B:0C:9F:92:23:CE:ED:F5:1E:77:22:F8:DE Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Certificate serial: 40AE259A4B587B0AD0C9C8C6A80A59CE907D3CFD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft Manifest number: 0A Signing time: Fri 24 Jul 2026 05:40:29 +0000 Manifest this update: Fri 24 Jul 2026 05:35:29 +0000 Manifest next update: Sat 25 Jul 2026 08:58:29 +0000 Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: q4MRu5/ENaniLPvIyTNbwEylzDIu1lrsjvaA31yhQac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ae:25:9a:4b:58:7b:0a:d0:c9:c8:c6:a8:0a:59:ce:90:7d:3c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Validity Not Before: Jul 24 05:35:29 2026 GMT Not After : Jul 25 08:58:29 2026 GMT Subject: CN=CCC6A8AABF108D6B0C9F9223CEEDF51E7722F8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ae:b4:54:b8:ab:5e:40:d1:69:5d:2f:48:78: d5:24:ec:d7:b0:a5:ef:8a:f8:be:4b:9d:9a:5f:27: 87:a9:23:12:bf:75:3f:ac:13:1f:dc:9c:32:9a:66: 18:fa:c3:56:89:c0:d9:5b:0b:5b:02:ea:2e:a6:1c: d1:31:32:ae:45:ae:b4:91:9a:c6:64:f1:cc:85:32: 82:56:cb:70:a1:69:c3:1b:7c:65:cd:0c:8e:3f:a5: 61:ca:7a:7a:98:21:d0:c3:7f:ac:ad:b6:5f:ab:22: ef:ff:21:45:52:f9:83:49:7a:47:14:6d:40:94:ea: a1:53:48:f2:50:00:8c:b9:da:79:b8:74:99:4f:df: 59:7a:34:08:02:25:f1:0f:2c:96:fa:20:fc:6c:26: 96:d5:ae:0c:10:67:0f:91:fb:56:79:c5:7a:8e:4d: c3:6a:07:55:b7:ba:5a:95:a1:5f:ba:54:14:3e:d8: 00:ba:55:81:15:09:8b:2a:19:35:fc:51:2f:a4:b4: 40:8d:b0:96:4b:94:ac:b8:66:ec:bf:7b:d1:c9:4d: d0:da:1b:c0:18:e9:a7:12:80:fe:ff:15:19:79:7c: 13:57:65:38:7b:78:e2:33:b1:89:19:91:7b:90:90: e9:34:51:4f:de:d2:3d:57:58:9c:57:b7:52:49:fb: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:A8:AA:BF:10:8D:6B:0C:9F:92:23:CE:ED:F5:1E:77:22:F8:DE X509v3 Authority Key Identifier: keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a1:4b:06:0d:b0:3f:8e:1f:6d:cc:f6:5a:d0:e2:6c:61:43: b0:c4:20:10:05:26:a1:a5:5a:e6:2a:69:01:96:2d:b6:a6:da: 3b:31:db:8a:be:d0:c9:0c:f5:00:d6:0a:48:0d:3d:05:7c:aa: c1:e8:08:aa:ef:b0:6e:e7:40:81:dc:bd:a2:c4:f6:91:05:41: 68:08:33:61:40:38:59:1b:46:99:8b:0f:55:40:bf:30:a8:ab: 87:22:08:6a:15:48:b6:0e:71:e7:dc:50:7a:4d:1c:ae:d0:5b: e2:e4:9a:0a:f9:00:3c:00:84:41:23:c4:93:25:a5:b8:a7:02: 62:54:35:02:70:2d:e1:e5:4c:7b:4c:0e:eb:38:3c:36:36:3f: 18:71:c3:1c:76:11:85:c0:52:60:58:13:44:63:69:15:2d:f1: 06:7c:5e:1b:03:0f:97:db:84:ea:6d:08:ec:e0:68:01:f4:c2: 73:16:d9:7c:86:ad:f6:a2:04:9a:39:d4:29:6f:9c:c1:64:1e: 8e:da:42:f4:a4:55:14:fb:37:a4:b8:75:16:ea:1a:e8:bf:b5: 7a:db:5b:1e:ac:85:ef:ab:e1:5f:83:a2:48:1d:7d:cd:06:f7: 25:f8:43:79:7f:39:44:e9:47:a3:0b:51:82:34:60:75:ab:ef: 52:f9:1d:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQK4lmktYewrQycjGqApZzpB9PP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD RDc2RUU4QzAeFw0yNjA3MjQwNTM1MjlaFw0yNjA3MjUwODU4MjlaMDMxMTAvBgNV BAMTKENDQzZBOEFBQkYxMDhENkIwQzlGOTIyM0NFRURGNTFFNzcyMkY4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxrrRUuKteQNFpXS9IeNUk7New pe+K+L5LnZpfJ4epIxK/dT+sEx/cnDKaZhj6w1aJwNlbC1sC6i6mHNExMq5FrrSR msZk8cyFMoJWy3ChacMbfGXNDI4/pWHKenqYIdDDf6yttl+rIu//IUVS+YNJekcU bUCU6qFTSPJQAIy52nm4dJlP31l6NAgCJfEPLJb6IPxsJpbVrgwQZw+R+1Z5xXqO TcNqB1W3ulqVoV+6VBQ+2AC6VYEVCYsqGTX8US+ktECNsJZLlKy4Zuy/e9HJTdDa G8AY6acSgP7/FRl5fBNXZTh7eOIzsYkZkXuQkOk0UU/e0j1XWJxXt1JJ+5SNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzMaoqr8QjWsMn5Ijzu31Hnci+N4wHwYDVR0j BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4 MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKFLBg2wP44f bcz2WtDibGFDsMQgEAUmoaVa5ippAZYttqbaOzHbir7QyQz1ANYKSA09BXyqwegI qu+wbudAgdy9osT2kQVBaAgzYUA4WRtGmYsPVUC/MKirhyIIahVItg5x59xQek0c rtBb4uSaCvkAPACEQSPEkyWluKcCYlQ1AnAt4eVMe0wO6zg8NjY/GHHDHHYRhcBS YFgTRGNpFS3xBnxeGwMPl9uE6m0I7OBoAfTCcxbZfIat9qIEmjnUKW+cwWQejtpC 9KRVFPs3pLh1Fuoa6L+1ettbHqyF76vhX4OiSB19zQb3JfhDeX85ROlHowtRgjRg davvUvkdjg== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:27 2026 by rpki-client