$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: Q8vf3xsbX8megiEkAN/3Ho/uORXTrt027CB0FXnQODk= Subject key identifier: 69:09:B7:16:02:EC:3E:75:B6:F9:04:5F:15:4B:8A:59:8E:92:42:D6 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 31676E45B9545D3440631A0B2B611E77E6BD1E12 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 013A Signing time: Tue 06 Oct 2026 03:09:47 +0000 Manifest this update: Tue 06 Oct 2026 03:04:47 +0000 Manifest next update: Fri 09 Oct 2026 06:11:47 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: SKLNX1qiZ0OrPhPi1MIIXlCv6u0VcEemrfKEzmzoFXE=) 2: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 3: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 4: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 5: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 6: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 7: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) 8: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:67:6e:45:b9:54:5d:34:40:63:1a:0b:2b:61:1e:77:e6:bd:1e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Oct 6 03:04:47 2026 GMT Not After : Oct 9 06:11:47 2026 GMT Subject: CN=6909B71602EC3E75B6F9045F154B8A598E9242D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:11:c5:66:ce:e3:62:8c:2d:74:7e:7d:ff: 26:03:98:41:8d:b5:04:0f:6c:90:c6:8d:e3:1d:06: 0d:de:9a:fc:d3:db:1b:fa:f8:08:22:c9:b1:32:af: fe:f3:5f:4f:8b:f8:b6:c3:15:53:17:f2:8e:86:7d: 3c:40:08:4c:5d:6f:09:b0:aa:cd:46:d6:fd:bf:c9: 81:9d:f4:c4:19:dc:91:43:ec:2a:40:b0:d8:1e:28: 2f:71:b6:da:ab:c8:7b:91:78:1c:e5:d2:e1:78:a0: c5:bd:70:97:17:93:1e:2f:e9:7b:b0:ad:35:db:f5: d4:fd:b3:ac:89:9e:74:9b:e7:8e:44:60:08:b9:d5: 02:f9:89:3c:ea:42:ae:c5:6f:25:77:27:61:f8:77: 69:9f:e2:b5:16:1a:3a:7e:41:4b:de:52:f6:07:d6: af:24:da:2d:4e:fb:b3:0a:82:82:9d:95:7a:0e:c3: 26:04:dc:a6:3b:87:59:e9:fc:a9:0f:26:0d:9f:78: fa:c8:7a:1a:ae:76:a3:1b:af:5d:3b:77:6a:5e:bf: b7:cc:8c:6c:5c:6e:fd:ae:74:5d:94:38:61:2e:2c: a6:5f:0f:30:a2:aa:10:8e:f6:f7:cf:b7:8d:7d:84: 04:b9:0e:6b:ea:1b:7e:2e:b7:d0:36:8d:6f:10:0f: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:B7:16:02:EC:3E:75:B6:F9:04:5F:15:4B:8A:59:8E:92:42:D6 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a4:f4:40:0e:c3:dc:3a:17:d9:52:5a:2d:75:61:0a:64:46: 34:fe:67:ea:d8:41:0f:1b:fe:8d:02:a9:84:27:e7:48:7b:75: 24:5c:d5:1e:7d:1e:17:e3:35:50:f7:51:8a:da:b7:f5:77:91: e0:2f:54:6b:59:80:28:45:d7:d0:ee:13:da:c0:b4:ee:d2:7f: b1:23:1b:f5:7e:b5:4e:20:af:c7:88:29:89:74:0e:88:a1:7a: 93:4b:cf:f9:22:13:07:91:1e:e5:9d:0f:26:12:18:57:38:d2: 55:8f:84:ec:fd:ba:2f:b2:00:60:c6:53:4e:8f:1a:2b:67:74: 77:5f:6c:5c:93:e0:17:42:78:cd:13:f0:f1:37:c4:96:09:6c: 5c:cf:29:ea:71:cd:64:bb:9d:cf:86:1a:de:9a:39:0a:20:cd: 08:4e:0c:60:83:21:4b:e2:f6:9e:22:3d:d7:72:53:5c:0a:4a: f9:64:38:79:e1:a3:b0:e9:b5:70:31:16:21:e2:a9:af:b4:39: cc:87:3d:33:db:0f:5b:e5:5e:7d:b1:a6:71:7f:f8:9d:1c:5e: 2d:a1:3a:6b:55:a7:03:1a:c9:60:9f:e3:0f:fc:24:50:54:0b: c7:b1:d8:07:11:3e:58:7e:2f:0a:58:d2:60:f1:02:92:fb:43: 2d:c3:39:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMWduRblUXTRAYxoLK2Eed+a9HhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjEwMDYwMzA0NDdaFw0yNjEwMDkwNjExNDdaMDMxMTAvBgNV BAMTKDY5MDlCNzE2MDJFQzNFNzVCNkY5MDQ1RjE1NEI4QTU5OEU5MjQyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfBHFZs7jYowtdH59/yYDmEGN tQQPbJDGjeMdBg3emvzT2xv6+AgiybEyr/7zX0+L+LbDFVMX8o6GfTxACExdbwmw qs1G1v2/yYGd9MQZ3JFD7CpAsNgeKC9xttqryHuReBzl0uF4oMW9cJcXkx4v6Xuw rTXb9dT9s6yJnnSb545EYAi51QL5iTzqQq7FbyV3J2H4d2mf4rUWGjp+QUveUvYH 1q8k2i1O+7MKgoKdlXoOwyYE3KY7h1np/KkPJg2fePrIehqudqMbr107d2pev7fM jGxcbv2udF2UOGEuLKZfDzCiqhCO9vfPt419hAS5DmvqG34ut9A2jW8QD7J/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaQm3FgLsPnW2+QRfFUuKWY6SQtYwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqT0QA7D3DoX 2VJaLXVhCmRGNP5n6thBDxv+jQKphCfnSHt1JFzVHn0eF+M1UPdRitq39XeR4C9U a1mAKEXX0O4T2sC07tJ/sSMb9X61TiCvx4gpiXQOiKF6k0vP+SITB5Ee5Z0PJhIY VzjSVY+E7P26L7IAYMZTTo8aK2d0d19sXJPgF0J4zRPw8TfElglsXM8p6nHNZLud z4Ya3po5CiDNCE4MYIMhS+L2niI913JTXApK+WQ4eeGjsOm1cDEWIeKpr7Q5zIc9 M9sPW+VefbGmcX/4nRxeLaE6a1WnAxrJYJ/jD/wkUFQLx7HYBxE+WH4vCljSYPEC kvtDLcM5Pw== -----END CERTIFICATE-----Generated at Tue Oct 6 15:57:09 2026 by rpki-client