$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: 52bgFG0WKNcI3t+QqfOWQopZVwdGE8vv6chesibN2fw= Subject key identifier: 88:6D:56:25:97:B5:38:9B:8E:21:76:5B:42:38:88:5A:DF:10:0A:56 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 20FFCE5C53D477C4B7EA1D44F970C3245CA12CA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 0136 Signing time: Mon 28 Sep 2026 16:06:01 +0000 Manifest this update: Mon 28 Sep 2026 16:01:01 +0000 Manifest next update: Thu 01 Oct 2026 22:38:01 +0000 Files and hashes: 1: 323430363a646438303a3a2f33322d3338203d3e20333938373034.roa (hash: ENP5tby2AQP2mIEBBre2hkAZ950/9PGnJK3kH/gWR+s=) 2: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) 3: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 4: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: S3gEMMYW8ob0G5uZEbqhso4EOqTVfgDWigoJ8DBi/nQ=) 5: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 6: 323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa (hash: xU6UP1bnP18c+EUx+ZQZ6GxBjOFs2tV0/H/ebp6xq4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ff:ce:5c:53:d4:77:c4:b7:ea:1d:44:f9:70:c3:24:5c:a1:2c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Sep 28 16:01:01 2026 GMT Not After : Oct 1 22:38:01 2026 GMT Subject: CN=886D562597B5389B8E21765B4238885ADF100A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:4b:17:7f:39:59:ee:89:85:85:f9:6b:42: 16:02:4a:b7:f2:0f:06:85:95:fc:b2:ca:35:62:33: 5a:19:6b:bd:79:4b:fb:bb:cc:1c:84:37:29:a7:e8: 8b:c8:f7:86:26:d3:aa:a9:06:11:11:c3:dc:d3:af: f8:30:2c:57:ca:5d:f9:11:53:e6:98:00:29:d7:f3: b7:14:5a:42:44:7d:3c:2f:8f:44:03:3a:af:a5:06: 90:5c:23:45:65:b9:34:f8:f3:80:c1:41:de:54:1e: a8:1f:28:a6:d7:e4:4a:61:01:c2:ba:71:3a:38:c1: 98:7a:c7:f0:bc:a3:9f:2b:82:57:ae:35:a1:7a:0b: b9:20:f7:6a:5b:cc:cc:8a:e7:a2:b6:e9:99:51:e4: 5a:be:3a:1f:16:fc:7a:f0:4f:15:b9:8a:64:3f:ed: e3:41:79:be:3b:25:5f:49:df:40:fa:01:de:5f:21: b0:70:6d:84:f1:6c:1d:ac:00:d7:af:2d:a3:64:a7: 2b:12:7d:57:2a:52:f1:87:5c:46:da:03:bb:b3:66: b1:ee:41:9c:17:df:df:a1:cb:0c:b5:b2:af:4e:d0: 99:cb:01:de:88:88:44:ab:00:bd:25:8e:73:16:be: 3e:94:05:23:6f:a5:23:14:5d:52:d7:0c:d7:25:ac: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:56:25:97:B5:38:9B:8E:21:76:5B:42:38:88:5A:DF:10:0A:56 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4e:45:2e:a0:cc:5f:2f:c5:1e:db:a8:6f:24:2e:37:2f:d6: ec:97:47:8f:97:3b:78:54:9e:04:f9:ee:49:d3:cf:62:17:a4: 3e:bd:e8:ed:b5:53:e1:f5:f9:e3:19:7a:a7:b4:56:9a:a4:6c: f0:06:35:70:c5:02:a2:c7:cd:81:85:24:97:2d:a4:4a:3b:1a: d1:78:5b:54:c7:18:a0:97:1a:5b:77:e9:6e:b6:02:66:dc:e3: 56:56:fe:ca:ab:64:59:42:2f:41:d9:25:62:f7:52:17:c8:13: 2c:55:51:94:e4:2e:8d:2b:86:31:6d:6f:b0:8d:f6:8b:c1:6a: 40:ec:da:ff:2b:6d:3e:e7:bd:72:1c:e6:38:d8:1d:73:2d:88: 39:3f:f7:dd:1e:56:47:d0:c5:8d:b1:93:2f:b0:e6:42:0c:cf: 31:2c:6e:33:c6:3a:e1:eb:96:3e:09:2d:fc:1c:75:d8:7d:a7: 09:b7:d3:97:d9:65:f1:96:2a:c0:66:26:d3:bc:d8:4c:85:5d: b2:2f:26:4b:84:ea:18:e1:1d:85:e3:11:64:b3:0c:85:0b:89: 5a:f6:43:f5:5e:44:92:30:f9:32:c2:e7:ab:c6:78:1c:38:92: 47:8b:9e:a8:91:2d:91:d2:79:84:fa:c4:24:f3:bc:e0:94:d1: 62:46:81:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIP/OXFPUd8S36h1E+XDDJFyhLKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjA5MjgxNjAxMDFaFw0yNjEwMDEyMjM4MDFaMDMxMTAvBgNV BAMTKDg4NkQ1NjI1OTdCNTM4OUI4RTIxNzY1QjQyMzg4ODVBREYxMDBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVq0sXfzlZ7omFhflrQhYCSrfy DwaFlfyyyjViM1oZa715S/u7zByENymn6IvI94Ym06qpBhERw9zTr/gwLFfKXfkR U+aYACnX87cUWkJEfTwvj0QDOq+lBpBcI0VluTT484DBQd5UHqgfKKbX5EphAcK6 cTo4wZh6x/C8o58rgleuNaF6C7kg92pbzMyK56K26ZlR5Fq+Oh8W/HrwTxW5imQ/ 7eNBeb47JV9J30D6Ad5fIbBwbYTxbB2sANevLaNkpysSfVcqUvGHXEbaA7uzZrHu QZwX39+hywy1sq9O0JnLAd6IiESrAL0ljnMWvj6UBSNvpSMUXVLXDNclrCF1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiG1WJZe1OJuOIXZbQjiIWt8QClYwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASk5FLqDMXy/F HtuobyQuNy/W7JdHj5c7eFSeBPnuSdPPYhekPr3o7bVT4fX54xl6p7RWmqRs8AY1 cMUCosfNgYUkly2kSjsa0XhbVMcYoJcaW3fpbrYCZtzjVlb+yqtkWUIvQdklYvdS F8gTLFVRlOQujSuGMW1vsI32i8FqQOza/yttPue9chzmONgdcy2IOT/33R5WR9DF jbGTL7DmQgzPMSxuM8Y64euWPgkt/Bx12H2nCbfTl9ll8ZYqwGYm07zYTIVdsi8m S4TqGOEdheMRZLMMhQuJWvZD9V5EkjD5MsLnq8Z4HDiSR4ueqJEtkdJ5hPrEJPO8 4JTRYkaBlg== -----END CERTIFICATE-----Generated at Wed Sep 30 15:21:36 2026 by rpki-client