$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: lHfRgA72BOjFvhiMCfiGZy4u2xo2aNWgVAs+nCopx0k= Subject key identifier: 56:57:CA:9C:8E:19:55:02:AA:58:53:BC:E5:6E:AC:BB:79:0E:12:46 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 33CC46B2622A623370EEC733792B952018B14763 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 013B Signing time: Fri 09 Oct 2026 23:08:58 +0000 Manifest this update: Fri 09 Oct 2026 23:03:58 +0000 Manifest next update: Tue 13 Oct 2026 08:24:58 +0000 Files and hashes: 1: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 2: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 3: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: s0lGarLgnfzKcSNGRcMe0la/ld7L4MC9SIberAzPYBI=) 4: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 5: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 6: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 7: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cc:46:b2:62:2a:62:33:70:ee:c7:33:79:2b:95:20:18:b1:47:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Oct 9 23:03:58 2026 GMT Not After : Oct 13 08:24:58 2026 GMT Subject: CN=5657CA9C8E195502AA5853BCE56EACBB790E1246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:c9:91:b2:02:95:e5:2b:f6:e9:9c:68:cb: ad:f8:95:06:b2:b8:dc:8d:4b:9f:a8:c0:71:06:e5: c1:f6:98:87:f3:58:c6:18:aa:e0:4d:ab:10:db:f3: ee:d2:17:f1:81:ed:30:0d:bd:20:ad:66:7d:a0:ec: a4:12:31:cc:20:8b:fa:e0:6c:fc:36:c7:23:bc:28: 24:a8:8e:65:c1:60:68:81:38:ae:a0:6a:07:ee:f6: 48:32:bb:7d:9b:9a:03:f9:36:2c:57:86:2b:a4:a3: b0:51:13:64:1b:86:9c:82:c5:7a:64:cf:95:b7:2f: 10:f3:d4:47:ae:60:f8:1a:e5:57:40:ed:2d:f4:12: 96:98:29:94:14:86:18:8a:1e:b0:47:21:13:59:84: de:4d:9b:bf:7b:aa:eb:2c:83:17:3c:38:8f:ff:c3: aa:af:b6:15:09:f6:0d:91:59:21:20:53:e0:e3:ae: f2:af:e8:fb:67:70:8e:21:ea:7b:42:b7:b1:9d:62: 54:1d:7c:af:18:e1:a7:32:84:34:3b:d2:ef:2f:6a: 9b:36:72:06:65:ce:82:d4:a6:13:f5:95:73:83:7b: 82:85:19:de:15:05:9a:97:be:a7:3e:d5:13:c1:ac: 7a:22:12:59:cd:5c:3a:2f:c0:8c:8f:41:d8:55:6b: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:57:CA:9C:8E:19:55:02:AA:58:53:BC:E5:6E:AC:BB:79:0E:12:46 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dc:83:64:41:35:c1:6b:99:aa:b3:b1:e0:da:7b:90:68:7c: 2d:6a:96:5a:19:94:cf:10:39:a7:c1:e1:68:fd:0b:8b:74:0c: a4:10:77:28:ed:fb:18:8f:b8:fd:da:7c:ee:ce:d5:8d:5b:2d: 24:dc:2f:08:f3:5b:6f:08:de:84:f3:af:9a:91:36:41:42:16: 22:ea:84:fb:15:32:01:68:54:e6:f8:5e:c0:5e:cd:96:fd:f7: df:b8:40:83:29:78:92:60:ab:47:a3:89:8e:c1:e7:eb:73:07: ea:6a:a8:05:56:05:77:88:22:7b:bb:3b:7a:fb:cc:dd:5f:c2: 25:1e:5b:c5:5d:32:0b:c9:9f:22:89:77:3f:ca:68:e9:05:81: 3a:38:19:04:74:68:72:17:f7:80:16:1f:fa:cd:60:10:b0:d3: 47:48:d4:35:13:4b:92:25:27:ea:b2:fd:be:a6:c8:9d:3d:e6: 25:1b:af:11:63:82:14:45:1d:15:bb:bf:ce:77:cc:1d:39:d5: 51:2f:f0:47:36:89:a9:8a:ea:22:2e:8c:8d:16:04:fd:8f:d1: ab:15:6c:e1:e5:42:5c:0c:5b:68:28:fd:a3:25:8b:66:fa:38: 69:b1:d0:cb:1b:5c:9a:df:c4:bc:00:89:fa:af:59:37:f7:0a: d4:ba:5c:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM8xGsmIqYjNw7sczeSuVIBixR2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjEwMDkyMzAzNThaFw0yNjEwMTMwODI0NThaMDMxMTAvBgNV BAMTKDU2NTdDQTlDOEUxOTU1MDJBQTU4NTNCQ0U1NkVBQ0JCNzkwRTEyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74smRsgKV5Sv26Zxoy634lQay uNyNS5+owHEG5cH2mIfzWMYYquBNqxDb8+7SF/GB7TANvSCtZn2g7KQSMcwgi/rg bPw2xyO8KCSojmXBYGiBOK6gagfu9kgyu32bmgP5NixXhiuko7BRE2QbhpyCxXpk z5W3LxDz1EeuYPga5VdA7S30EpaYKZQUhhiKHrBHIRNZhN5Nm797qussgxc8OI// w6qvthUJ9g2RWSEgU+DjrvKv6PtncI4h6ntCt7GdYlQdfK8Y4acyhDQ70u8vaps2 cgZlzoLUphP1lXODe4KFGd4VBZqXvqc+1RPBrHoiElnNXDovwIyPQdhVa9G3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVlfKnI4ZVQKqWFO85W6su3kOEkYwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdyDZEE1wWuZ qrOx4Np7kGh8LWqWWhmUzxA5p8HhaP0Li3QMpBB3KO37GI+4/dp87s7VjVstJNwv CPNbbwjehPOvmpE2QUIWIuqE+xUyAWhU5vhewF7Nlv3337hAgyl4kmCrR6OJjsHn 63MH6mqoBVYFd4gie7s7evvM3V/CJR5bxV0yC8mfIol3P8po6QWBOjgZBHRochf3 gBYf+s1gELDTR0jUNRNLkiUn6rL9vqbInT3mJRuvEWOCFEUdFbu/znfMHTnVUS/w RzaJqYrqIi6MjRYE/Y/RqxVs4eVCXAxbaCj9oyWLZvo4abHQyxtcmt/EvACJ+q9Z N/cK1Lpcxw== -----END CERTIFICATE-----Generated at Mon Oct 12 10:17:45 2026 by rpki-client