$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: ieHi/ULHQ5vlLxCFWg+W0qfnlhHVXbU9oAfwchYxtBY= Subject key identifier: 94:9A:8C:63:32:A5:5C:40:10:87:64:9F:5A:FD:B6:BA:B6:99:E7:29 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 526680CACAEB35CC77DCF643EFC310058867ED7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 13:03:28 +0000 Manifest this update: Thu 26 Mar 2026 12:58:28 +0000 Manifest next update: Fri 27 Mar 2026 13:09:28 +0000 Files and hashes: 1: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 2: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: HmLmA0gNdPBYOC9S+RnuiU9161w9AvsffLE5E7XJmOw=) 3: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 4: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 5: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 6: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 7: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:66:80:ca:ca:eb:35:cc:77:dc:f6:43:ef:c3:10:05:88:67:ed:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Mar 26 12:58:28 2026 GMT Not After : Mar 27 13:09:28 2026 GMT Subject: CN=949A8C6332A55C401087649F5AFDB6BAB699E729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:d9:e8:d5:4d:27:5e:2d:4f:c3:70:e6:af: 2e:99:5f:a5:a3:3d:46:a2:b0:3c:47:a5:7e:fc:98: b3:cc:72:b4:9a:3a:d5:d2:be:13:e9:c0:bf:0e:a9: 28:37:42:04:43:9f:6f:4b:b0:d2:3f:1f:34:a6:7e: a5:4b:49:b1:59:b3:f4:e6:23:e0:0b:22:ba:25:b8: d0:d1:52:ed:b2:cd:d9:28:75:b3:77:db:99:81:5a: b3:6f:33:c5:87:ff:ea:1a:d9:21:16:44:80:4f:55: fe:cb:ba:a2:80:51:32:02:eb:48:f6:d2:9d:22:e4: 78:f4:77:3c:0f:3e:b4:ea:d3:1c:9a:8a:54:3b:5d: 0b:a3:51:b0:f0:da:c4:ee:39:29:be:8f:55:65:0b: 7a:05:7f:8d:e9:b4:01:19:67:3e:b8:23:0e:7b:56: ac:4d:f1:49:3b:d8:8d:0b:d0:2a:09:b2:e6:da:d0: a5:f7:1c:f2:56:83:d4:de:1a:ab:6e:f9:5b:30:3f: 6e:3d:d8:08:4c:d9:49:df:db:7f:7c:e5:63:4e:8c: 8f:d5:56:d8:a2:8b:1c:8a:d4:66:5f:4a:34:83:6e: 8c:98:3c:24:83:e5:e5:bb:69:3f:21:08:00:02:e9: 23:8b:cb:d4:98:e5:00:03:b9:bb:3e:6b:2a:9d:47: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9A:8C:63:32:A5:5C:40:10:87:64:9F:5A:FD:B6:BA:B6:99:E7:29 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e8:c4:0c:4a:4c:6c:72:7d:43:e9:a5:9c:79:d0:16:53:14: d0:86:b3:d5:dd:fe:af:b9:e4:0c:af:ef:e7:74:1a:df:25:3e: c2:9f:44:29:31:2e:a7:e4:00:5e:e7:95:5f:92:9e:27:c7:44: 47:c1:4c:85:d6:92:d2:12:97:ae:b7:d6:cc:b4:ab:27:6e:43: 61:c6:fe:72:71:02:3d:4d:db:6f:02:1e:f3:7a:ee:47:cc:39: 54:d0:e8:ac:dd:fa:95:c8:4d:b6:24:46:62:71:3c:e3:a4:17: 25:bd:93:19:01:3b:e1:de:f3:90:12:93:95:89:39:c1:27:16: 8c:f8:93:0c:60:de:0d:ba:15:3c:7c:59:a2:f4:ee:4f:e4:7e: bd:59:eb:7c:1f:1d:04:06:70:e8:ef:e3:6a:9c:e7:c3:88:15: c6:6b:55:d1:60:46:21:8c:d1:35:a8:2c:94:9e:55:f1:ae:98: a0:56:ec:88:22:54:65:51:c8:08:cc:97:c4:cb:e3:d3:6d:7d: a4:10:3d:cf:4a:a9:42:58:11:a0:1f:d5:69:cf:0d:20:77:d7: 55:08:3b:af:41:3a:87:32:e6:8b:a5:02:59:d0:60:fb:43:12: c6:b6:71:57:42:30:7b:12:50:40:7f:d4:f4:8a:fc:6e:ad:e9: 39:18:fb:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUmaAysrrNcx33PZD78MQBYhn7XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjAzMjYxMjU4MjhaFw0yNjAzMjcxMzA5MjhaMDMxMTAvBgNV BAMTKDk0OUE4QzYzMzJBNTVDNDAxMDg3NjQ5RjVBRkRCNkJBQjY5OUU3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Sdno1U0nXi1Pw3Dmry6ZX6Wj PUaisDxHpX78mLPMcrSaOtXSvhPpwL8OqSg3QgRDn29LsNI/HzSmfqVLSbFZs/Tm I+ALIroluNDRUu2yzdkodbN325mBWrNvM8WH/+oa2SEWRIBPVf7LuqKAUTIC60j2 0p0i5Hj0dzwPPrTq0xyailQ7XQujUbDw2sTuOSm+j1VlC3oFf43ptAEZZz64Iw57 VqxN8Uk72I0L0CoJsuba0KX3HPJWg9TeGqtu+VswP2492AhM2Unf23985WNOjI/V VtiiixyK1GZfSjSDboyYPCSD5eW7aT8hCAAC6SOLy9SY5QADubs+ayqdR6xbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlJqMYzKlXEAQh2SfWv22uraZ5ykwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+jEDEpMbHJ9 Q+mlnHnQFlMU0Iaz1d3+r7nkDK/v53Qa3yU+wp9EKTEup+QAXueVX5KeJ8dER8FM hdaS0hKXrrfWzLSrJ25DYcb+cnECPU3bbwIe83ruR8w5VNDorN36lchNtiRGYnE8 46QXJb2TGQE74d7zkBKTlYk5wScWjPiTDGDeDboVPHxZovTuT+R+vVnrfB8dBAZw 6O/japznw4gVxmtV0WBGIYzRNagslJ5V8a6YoFbsiCJUZVHICMyXxMvj0219pBA9 z0qpQlgRoB/Vac8NIHfXVQg7r0E6hzLmi6UCWdBg+0MSxrZxV0IwexJQQH/U9Ir8 bq3pORj76g== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:09 2026 by rpki-client