$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: RCJmwKfHYfdk2D9PK66bs1HBQWbow1P5ltlaqRU76ww= Subject key identifier: 01:31:45:2F:6A:F2:5A:0B:AA:38:AA:73:98:33:37:F3:0E:71:96:F2 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 2DBA0E7384053B8D6965B0526C937B3AF9E5387B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: 014A Signing time: Fri 02 Oct 2026 06:00:14 +0000 Manifest this update: Fri 02 Oct 2026 05:55:14 +0000 Manifest next update: Mon 05 Oct 2026 14:14:14 +0000 Files and hashes: 1: AS131314.roa (hash: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE=) 2: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: 381ZzZ5FJs80YmhRhhVYFG+RtcirCA0Z5+yyRgC0w0c=) 3: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 4: AS4847.roa (hash: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY=) 5: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 6: AS4808.roa (hash: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I=) 7: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) 8: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) 9: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 10: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ba:0e:73:84:05:3b:8d:69:65:b0:52:6c:93:7b:3a:f9:e5:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Oct 2 05:55:14 2026 GMT Not After : Oct 5 14:14:14 2026 GMT Subject: CN=0131452F6AF25A0BAA38AA73983337F30E7196F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:26:b9:df:13:10:fb:03:14:d7:3f:47:ba: 6a:a4:64:89:bd:62:1d:e3:a5:8f:3d:57:b7:9a:83: f0:95:df:fc:c1:93:f2:e0:a1:0a:9e:01:2e:53:f5: f4:c2:5e:a4:72:24:ff:d1:d7:31:e4:01:3f:cb:74: cb:ac:7f:1f:87:bc:4e:d4:14:67:38:74:fa:8c:dc: 08:eb:a2:0e:56:7e:6f:d0:dc:b1:60:e5:60:eb:41: 3d:c2:7b:a0:47:81:a1:ec:ed:48:4c:ef:18:e0:d8: 55:6b:14:9d:74:b3:18:b8:18:c8:25:a3:25:5f:7c: 42:24:e9:fb:4b:99:4c:50:e4:fa:80:cb:b7:3f:4e: 1f:98:5e:52:f5:02:31:2d:ca:02:6f:bc:b9:be:c5: 63:21:ad:c4:b0:d6:e6:53:fb:40:ad:b0:7b:fe:57: 22:e7:0f:b1:30:ab:11:2b:31:2d:d4:27:15:85:a1: b6:a5:a1:f8:e4:c8:fa:ee:48:18:d5:c4:35:e6:ed: 22:37:66:3a:d0:30:5e:0c:2e:bd:2e:9a:26:5f:b0: f0:b0:35:53:b2:15:78:d0:9e:1d:4a:af:d0:65:77: 23:b1:e5:86:7c:e7:35:d3:e8:e4:0f:23:a6:6c:2c: 03:24:0d:e3:42:b2:79:10:ca:28:04:cb:d7:9d:47: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:45:2F:6A:F2:5A:0B:AA:38:AA:73:98:33:37:F3:0E:71:96:F2 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:2d:f7:9e:ef:3a:87:fb:7b:bb:8e:d3:30:5a:65:b4:1e: 32:dd:d9:ff:28:d2:4e:a3:d7:08:04:7f:1f:64:d0:d5:13:66: 93:86:16:60:a5:30:ce:c6:9c:cb:69:d0:fc:20:dd:ab:27:40: 18:fc:8d:c9:24:2e:e9:07:86:04:9d:0f:16:68:cc:30:8d:5c: 31:ce:22:32:db:20:3c:34:67:a4:15:a4:52:a6:bf:d0:0d:4f: a0:a0:8a:08:f5:3f:f2:d9:11:a8:75:54:32:fb:bb:3b:22:75: 6c:84:e7:da:dd:be:c2:f1:58:dc:58:86:49:d0:e3:29:ad:59: 3d:d8:e6:3c:a1:5b:30:e9:6b:a1:f5:4c:5c:63:7e:35:e1:4c: 49:29:41:af:33:9d:5e:b5:f3:28:0b:23:11:11:b2:c1:9e:1d: 10:2d:41:2d:d4:19:87:eb:ed:af:84:15:14:f2:7e:aa:0c:b2: 1f:95:90:33:7b:1e:17:0f:0b:a3:d0:78:ea:44:d9:39:5f:3a: 71:08:1e:94:0f:ad:62:d9:12:59:4c:69:7c:44:97:af:c2:e7: d0:f2:6c:04:dd:93:59:50:fa:32:96:1f:ba:ec:b5:3a:31:88: 7d:d8:1e:9a:5f:c6:b0:15:4e:26:c1:fd:c6:61:bc:88:4f:e4: 51:0d:ee:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULboOc4QFO41pZbBSbJN7OvnlOHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjEwMDIwNTU1MTRaFw0yNjEwMDUxNDE0MTRaMDMxMTAvBgNV BAMTKDAxMzE0NTJGNkFGMjVBMEJBQTM4QUE3Mzk4MzMzN0YzMEU3MTk2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWia53xMQ+wMU1z9HumqkZIm9 Yh3jpY89V7eag/CV3/zBk/LgoQqeAS5T9fTCXqRyJP/R1zHkAT/LdMusfx+HvE7U FGc4dPqM3Ajrog5Wfm/Q3LFg5WDrQT3Ce6BHgaHs7UhM7xjg2FVrFJ10sxi4GMgl oyVffEIk6ftLmUxQ5PqAy7c/Th+YXlL1AjEtygJvvLm+xWMhrcSw1uZT+0CtsHv+ VyLnD7EwqxErMS3UJxWFobalofjkyPruSBjVxDXm7SI3ZjrQMF4MLr0umiZfsPCw NVOyFXjQnh1Kr9BldyOx5YZ85zXT6OQPI6ZsLAMkDeNCsnkQyigEy9edR/3BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUATFFL2ryWguqOKpzmDM38w5xlvIwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARskt957vOof7 e7uO0zBaZbQeMt3Z/yjSTqPXCAR/H2TQ1RNmk4YWYKUwzsacy2nQ/CDdqydAGPyN ySQu6QeGBJ0PFmjMMI1cMc4iMtsgPDRnpBWkUqa/0A1PoKCKCPU/8tkRqHVUMvu7 OyJ1bITn2t2+wvFY3FiGSdDjKa1ZPdjmPKFbMOlrofVMXGN+NeFMSSlBrzOdXrXz KAsjERGywZ4dEC1BLdQZh+vtr4QVFPJ+qgyyH5WQM3seFw8Lo9B46kTZOV86cQge lA+tYtkSWUxpfESXr8Ln0PJsBN2TWVD6MpYfuuy1OjGIfdgeml/GsBVOJsH9xmG8 iE/kUQ3uUQ== -----END CERTIFICATE-----Generated at Sat Oct 3 09:01:08 2026 by rpki-client