$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: iEkE4rfCVJVO6oyYRIKmNQwcvlQEAeQXY4fEFPu8zQo= Subject key identifier: 26:CF:62:8F:42:AF:63:B9:88:5A:8E:8A:AD:DE:45:1F:EE:7C:BF:57 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 6E2CCC75A6C9C523E935476744E90776A098F474 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 0162 Signing time: Mon 28 Sep 2026 22:41:42 +0000 Manifest this update: Mon 28 Sep 2026 22:36:42 +0000 Manifest next update: Fri 02 Oct 2026 04:34:42 +0000 Files and hashes: 1: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 2: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: dIyKVPYkMHs5njUMja2HxpMIr0fANeDekMuGPZ/LthY=) 3: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) 4: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2c:cc:75:a6:c9:c5:23:e9:35:47:67:44:e9:07:76:a0:98:f4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Sep 28 22:36:42 2026 GMT Not After : Oct 2 04:34:42 2026 GMT Subject: CN=26CF628F42AF63B9885A8E8AADDE451FEE7CBF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:1d:10:50:ea:34:80:90:1a:61:e5:b3:23: 02:4f:ab:f6:f0:74:16:54:d5:e5:14:c2:6e:b0:fc: 68:ea:8f:9c:7c:33:15:65:9b:db:35:07:eb:20:c8: 2e:2b:ac:d4:d2:c5:4d:c7:ff:c4:40:38:5f:90:69: 5e:1f:7a:6c:a3:b1:2b:7e:9d:ca:b1:e8:40:f1:8f: f8:f4:cd:e6:3b:de:71:0c:8e:8c:c9:2a:d7:93:5d: 75:f5:ae:ab:84:1c:1d:8d:db:77:18:80:a1:4d:66: 2f:f5:00:88:4a:54:14:5c:bc:4a:4d:59:32:94:b7: db:be:ce:c0:18:99:ff:ab:84:f1:e8:a9:b9:fc:3c: 24:c3:7d:ae:06:6e:61:0e:dd:17:32:60:82:b4:2e: 05:bd:29:b5:cf:dd:11:88:dc:03:cf:57:08:40:3f: 52:4d:67:eb:8d:c6:58:9e:78:88:a9:76:d1:56:11: b7:75:a9:01:a1:39:b5:40:98:24:54:aa:c9:5c:fb: b6:5c:11:2c:d3:26:ca:66:2c:8c:93:b0:25:27:9e: ba:6b:ae:3d:a0:2e:50:00:38:6d:4d:1a:fd:a2:67: 7d:1d:23:b9:38:21:82:5e:7b:96:09:0c:11:9b:3c: b8:6e:f0:33:98:61:e3:18:82:39:61:21:1c:bb:29: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:62:8F:42:AF:63:B9:88:5A:8E:8A:AD:DE:45:1F:EE:7C:BF:57 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:83:76:bc:6b:df:43:89:b4:af:6a:03:b2:8c:f2:94:b2:b3: 9b:44:fc:04:30:03:de:e8:97:66:3f:23:6a:16:df:f4:3a:0a: 92:85:7d:49:71:9a:14:f0:53:64:4c:f2:fb:c4:f7:3c:d2:2a: b3:40:b3:42:f1:1e:8c:25:20:31:89:0e:29:8e:bf:5a:c0:16: b6:56:4e:6e:8c:77:c7:f8:89:9c:4a:6f:30:19:4b:3c:b8:32: 55:7f:09:4b:07:b1:49:6e:28:ee:8e:0f:95:f9:40:86:f1:28: 4d:7f:b0:be:f9:22:4d:3f:61:95:f6:f3:f8:0e:86:c8:7e:c6: ca:3a:ed:d9:48:fa:0b:ec:17:32:d3:61:5c:b6:4e:51:45:85: 79:7b:9b:1b:d9:8a:18:f0:8f:49:3d:06:04:d5:88:68:df:39: 5a:5b:e7:17:42:4c:5b:a7:8b:90:ee:09:2f:40:6b:93:c9:4b: f1:65:94:d0:8d:a0:b2:ff:80:8d:76:24:72:2b:69:5d:e4:a7: 19:45:7e:d6:2b:36:31:be:f1:80:58:da:19:7f:e1:f9:2a:09: 52:31:4d:fe:04:7d:1b:c6:f1:33:d8:38:34:00:9c:55:34:3a: b5:50:d4:68:c1:3b:4c:ef:49:8f:1f:60:b5:9e:dd:03:ff:3a: 89:20:64:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbizMdabJxSPpNUdnROkHdqCY9HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA5MjgyMjM2NDJaFw0yNjEwMDIwNDM0NDJaMDMxMTAvBgNV BAMTKDI2Q0Y2MjhGNDJBRjYzQjk4ODVBOEU4QUFEREU0NTFGRUU3Q0JGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8B0QUOo0gJAaYeWzIwJPq/bw dBZU1eUUwm6w/Gjqj5x8MxVlm9s1B+sgyC4rrNTSxU3H/8RAOF+QaV4femyjsSt+ ncqx6EDxj/j0zeY73nEMjozJKteTXXX1rquEHB2N23cYgKFNZi/1AIhKVBRcvEpN WTKUt9u+zsAYmf+rhPHoqbn8PCTDfa4GbmEO3RcyYIK0LgW9KbXP3RGI3APPVwhA P1JNZ+uNxlieeIipdtFWEbd1qQGhObVAmCRUqslc+7ZcESzTJspmLIyTsCUnnrpr rj2gLlAAOG1NGv2iZ30dI7k4IYJee5YJDBGbPLhu8DOYYeMYgjlhIRy7KQszAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJs9ij0KvY7mIWo6Krd5FH+58v1cwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIN2vGvfQ4m0 r2oDsozylLKzm0T8BDAD3uiXZj8jahbf9DoKkoV9SXGaFPBTZEzy+8T3PNIqs0Cz QvEejCUgMYkOKY6/WsAWtlZObox3x/iJnEpvMBlLPLgyVX8JSwexSW4o7o4PlflA hvEoTX+wvvkiTT9hlfbz+A6GyH7Gyjrt2Uj6C+wXMtNhXLZOUUWFeXubG9mKGPCP ST0GBNWIaN85WlvnF0JMW6eLkO4JL0Brk8lL8WWU0I2gsv+AjXYkcitpXeSnGUV+ 1is2Mb7xgFjaGX/h+SoJUjFN/gR9G8bxM9g4NACcVTQ6tVDUaME7TO9Jjx9gtZ7d A/86iSBk3g== -----END CERTIFICATE-----Generated at Tue Sep 29 13:19:05 2026 by rpki-client