$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: JPD5TTFzVVZsdYE3SPianichhEvo7L39FIF4JHB/r/g= Subject key identifier: CB:AB:C6:D5:00:D6:AE:4C:33:9A:D3:EA:86:01:23:45:0F:0C:67:51 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 6A964E38009E7E62DF8200518FAD7CF1CC23A3D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 0135 Signing time: Mon 28 Sep 2026 02:30:18 +0000 Manifest this update: Mon 28 Sep 2026 02:25:18 +0000 Manifest next update: Thu 01 Oct 2026 10:42:18 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 2: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 3: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 4: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 5: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 6: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 7: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: 2Eed5QkVY9f71OsRmTUKqRLP3JMzmBjXHuJ/lcgb7mY=) 8: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:96:4e:38:00:9e:7e:62:df:82:00:51:8f:ad:7c:f1:cc:23:a3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Sep 28 02:25:18 2026 GMT Not After : Oct 1 10:42:18 2026 GMT Subject: CN=CBABC6D500D6AE4C339AD3EA860123450F0C6751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:c4:41:f2:c4:83:bb:cb:a8:c8:99:58:1c: 2a:eb:14:d6:a5:e1:fd:f4:65:80:f2:08:1b:18:e4: 27:48:8a:73:c3:e1:0b:95:b6:8d:f7:e5:c5:49:15: 9b:4f:67:e1:bd:37:e0:1a:3e:e4:f1:f4:47:4b:d0: 89:e8:31:3a:70:e4:46:2d:2e:27:9f:e4:4e:08:8a: da:9f:3f:38:c3:15:bf:2c:57:1d:a3:79:26:2e:1f: 30:13:19:b2:79:28:0d:ba:f6:22:d8:4a:df:ec:15: 60:fc:f5:a9:90:43:94:32:b8:05:2f:8b:79:9d:c4: 4e:4d:cf:a3:b6:22:a1:7a:17:4f:0d:19:95:67:75: 64:34:9f:8a:a7:af:c8:f0:9a:23:11:38:c0:70:ca: f2:6a:bb:6f:90:12:fc:19:fc:e3:ae:8f:aa:21:a6: 7a:16:0d:43:4d:57:9f:fd:a4:5f:22:90:38:72:a6: 4a:ab:39:ff:6f:97:38:79:af:21:7e:94:35:33:63: b0:93:ed:6f:6c:d4:13:13:88:8a:7e:19:8a:f7:d6: 88:02:00:ee:87:ff:1d:bc:e4:68:19:cc:d1:b0:8e: 96:a6:9d:a9:0e:65:48:fd:6a:07:c0:09:11:b5:fe: cc:ce:bb:a1:43:09:09:02:b9:75:d2:ee:bd:47:86: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:C6:D5:00:D6:AE:4C:33:9A:D3:EA:86:01:23:45:0F:0C:67:51 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:0a:59:49:54:ef:34:ca:4a:aa:bb:ee:c3:56:5b:a9:30: 30:60:ec:48:ac:82:77:b0:48:43:69:97:88:a0:3f:a0:71:55: b5:aa:d4:a4:c3:c9:34:14:4f:3a:20:0d:ff:cf:69:d3:e3:85: a6:f2:30:a4:95:10:a0:a1:fb:1e:87:a6:c0:ff:e7:bb:fc:8f: 20:8d:e4:be:4c:37:03:2f:ed:52:b2:da:e9:5e:42:9f:fb:9c: 9d:b6:98:c8:e6:ad:d9:56:49:30:ea:cc:97:9e:a9:b6:a8:39: b5:14:85:18:f7:6e:12:a6:3f:85:e9:02:f1:de:55:96:64:3d: 1b:e6:8b:7b:0f:f6:92:8e:fd:2e:cd:84:17:38:20:5c:5c:30: 3f:c5:9f:2c:de:9c:e3:4c:77:fe:cf:03:02:2c:28:0f:1b:14: 6f:f2:74:7e:d1:fb:a1:d4:c2:87:54:39:02:d1:cf:2b:4b:c0: 4c:04:7f:e7:50:5d:5b:3a:8e:e0:14:4d:14:23:e8:8e:85:e2: fb:9c:ee:f0:50:de:ec:2a:4c:ed:c3:88:1b:6b:49:6c:a8:6e: ef:25:0f:aa:62:98:ef:18:00:68:cf:6a:db:ae:01:f9:63:29: c6:3a:32:ca:d8:2f:6e:c6:d7:30:b6:a4:a7:b6:6a:2c:79:67: 5e:89:ad:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUapZOOACefmLfggBRj6188cwjo9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA5MjgwMjI1MThaFw0yNjEwMDExMDQyMThaMDMxMTAvBgNV BAMTKENCQUJDNkQ1MDBENkFFNEMzMzlBRDNFQTg2MDEyMzQ1MEYwQzY3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkcRB8sSDu8uoyJlYHCrrFNal 4f30ZYDyCBsY5CdIinPD4QuVto335cVJFZtPZ+G9N+AaPuTx9EdL0InoMTpw5EYt Lief5E4IitqfPzjDFb8sVx2jeSYuHzATGbJ5KA269iLYSt/sFWD89amQQ5QyuAUv i3mdxE5Nz6O2IqF6F08NGZVndWQ0n4qnr8jwmiMROMBwyvJqu2+QEvwZ/OOuj6oh pnoWDUNNV5/9pF8ikDhypkqrOf9vlzh5ryF+lDUzY7CT7W9s1BMTiIp+GYr31ogC AO6H/x285GgZzNGwjpamnakOZUj9agfACRG1/szOu6FDCQkCuXXS7r1HhhjfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy6vG1QDWrkwzmtPqhgEjRQ8MZ1EwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVMKWUlU7zTK Sqq77sNWW6kwMGDsSKyCd7BIQ2mXiKA/oHFVtarUpMPJNBRPOiAN/89p0+OFpvIw pJUQoKH7HoemwP/nu/yPII3kvkw3Ay/tUrLa6V5Cn/ucnbaYyOat2VZJMOrMl56p tqg5tRSFGPduEqY/hekC8d5VlmQ9G+aLew/2ko79Ls2EFzggXFwwP8WfLN6c40x3 /s8DAiwoDxsUb/J0ftH7odTCh1Q5AtHPK0vATAR/51BdWzqO4BRNFCPojoXi+5zu 8FDe7CpM7cOIG2tJbKhu7yUPqmKY7xgAaM9q264B+WMpxjoyytgvbsbXMLakp7Zq LHlnXomtOg== -----END CERTIFICATE-----Generated at Mon Sep 28 14:13:17 2026 by rpki-client