$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: O8nbLewKIGguR36BZrTPK1d6HS7Ay2+Xkt3Z0VkFISY= Subject key identifier: 3C:F5:1A:FA:30:CF:D4:B0:C4:B6:22:F6:8C:F6:0B:EA:D8:75:59:9F Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 217B5217A0D57574983A98C97CAA2FB5D950E909 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 0134 Signing time: Sat 26 Sep 2026 22:24:26 +0000 Manifest this update: Sat 26 Sep 2026 22:19:26 +0000 Manifest next update: Wed 30 Sep 2026 01:57:26 +0000 Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 3: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: KXfE0dSw4QAgaPGx7Wwr75ea4Fi9AWdSTJQP6N5BYEw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7b:52:17:a0:d5:75:74:98:3a:98:c9:7c:aa:2f:b5:d9:50:e9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Sep 26 22:19:26 2026 GMT Not After : Sep 30 01:57:26 2026 GMT Subject: CN=3CF51AFA30CFD4B0C4B622F68CF60BEAD875599F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:54:9b:b1:7f:b4:26:8e:74:c7:77:1a:c8: 6f:af:8b:c9:e4:b8:42:e7:93:68:27:b3:80:b9:2f: 54:ca:07:c0:b0:2d:18:29:ef:57:f0:a6:3b:3e:d0: 24:0a:9a:bd:20:be:83:3d:d9:74:a0:34:fe:c6:c9: 75:f0:67:0f:10:1e:9e:c2:dd:a1:d8:a4:0c:12:c1: e8:c3:79:d3:e2:07:1d:a8:f7:20:38:ba:25:07:93: 77:ec:0e:64:4f:bc:02:4c:eb:d4:e1:45:ba:66:a6: c2:d7:9d:43:56:5d:38:04:59:bd:f7:a2:d0:61:85: f2:41:af:32:97:31:a0:19:34:2c:2a:d0:fc:ca:31: 65:bd:3a:5d:3a:03:83:d3:46:58:3e:08:ea:0f:c4: bd:95:32:3e:35:32:f4:35:aa:42:dd:3d:f6:1f:2f: c1:46:8c:88:9d:ac:e9:e5:ec:36:57:a0:5a:15:06: 3c:ca:fd:2e:51:6d:25:62:11:02:b7:4c:3d:d5:5b: 68:a1:5a:f7:31:52:58:2c:3e:8f:08:1d:b6:af:05: 8b:20:86:e3:e0:6d:94:6e:06:93:ee:a4:1b:31:42: 88:72:aa:cb:62:01:70:e3:06:a6:a6:f4:fd:7b:c9: 46:b1:1a:0c:5a:ab:f6:52:9d:51:a9:82:14:2a:71: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:1A:FA:30:CF:D4:B0:C4:B6:22:F6:8C:F6:0B:EA:D8:75:59:9F X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b8:95:d8:b4:c8:65:ad:96:bc:5c:46:aa:fb:cf:f6:7c:0a: 12:da:e3:4d:02:93:7d:8f:da:ba:2e:98:fd:f7:44:ed:6c:11: 06:c1:d2:1c:b1:8a:06:b3:a0:5e:82:09:f7:34:a4:23:3b:6c: 77:3c:f9:a0:fe:fd:32:b4:9c:b3:4f:00:a3:29:b3:c2:34:31: 8f:3b:db:47:e3:c7:b0:8f:9c:9c:8f:87:f5:26:24:34:2b:50: 3d:e1:06:5c:58:9a:ec:83:72:b3:21:4b:e6:c0:0c:8f:f0:fe: 44:09:99:e3:4b:9d:bb:62:c5:36:6a:2a:7a:97:6c:ea:3f:a2: b8:12:33:fa:c6:77:4b:e6:99:7b:3e:46:3f:fa:cd:ee:30:df: ff:e7:0c:95:01:0c:bf:07:0d:05:27:8c:62:1a:0e:15:7a:e9: cc:a4:75:22:72:a4:b3:f6:a3:48:2a:6e:13:84:9b:46:d6:d9: 33:94:c2:a5:ac:de:8e:c3:01:78:2e:ff:12:5b:66:49:13:c6: f4:b6:82:34:eb:ff:88:b2:c6:22:29:bd:ef:f6:4b:46:a7:0b: 38:52:dc:44:2a:5a:d2:6f:dc:ed:5f:2e:2c:10:df:6d:3b:c1: 4d:8f:ff:c9:41:34:c8:88:46:ef:2e:e8:a1:c1:75:54:70:05: e9:46:f2:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIXtSF6DVdXSYOpjJfKovtdlQ6QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA5MjYyMjE5MjZaFw0yNjA5MzAwMTU3MjZaMDMxMTAvBgNV BAMTKDNDRjUxQUZBMzBDRkQ0QjBDNEI2MjJGNjhDRjYwQkVBRDg3NTU5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9FSbsX+0Jo50x3cayG+vi8nk uELnk2gns4C5L1TKB8CwLRgp71fwpjs+0CQKmr0gvoM92XSgNP7GyXXwZw8QHp7C 3aHYpAwSwejDedPiBx2o9yA4uiUHk3fsDmRPvAJM69ThRbpmpsLXnUNWXTgEWb33 otBhhfJBrzKXMaAZNCwq0PzKMWW9Ol06A4PTRlg+COoPxL2VMj41MvQ1qkLdPfYf L8FGjIidrOnl7DZXoFoVBjzK/S5RbSViEQK3TD3VW2ihWvcxUlgsPo8IHbavBYsg huPgbZRuBpPupBsxQohyqstiAXDjBqam9P17yUaxGgxaq/ZSnVGpghQqcadXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPPUa+jDP1LDEtiL2jPYL6th1WZ8wHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAriV2LTIZa2W vFxGqvvP9nwKEtrjTQKTfY/aui6Y/fdE7WwRBsHSHLGKBrOgXoIJ9zSkIztsdzz5 oP79MrScs08AoymzwjQxjzvbR+PHsI+cnI+H9SYkNCtQPeEGXFia7INysyFL5sAM j/D+RAmZ40udu2LFNmoqepds6j+iuBIz+sZ3S+aZez5GP/rN7jDf/+cMlQEMvwcN BSeMYhoOFXrpzKR1InKks/ajSCpuE4SbRtbZM5TCpazejsMBeC7/EltmSRPG9LaC NOv/iLLGIim97/ZLRqcLOFLcRCpa0m/c7V8uLBDfbTvBTY//yUE0yIhG7y7oocF1 VHAF6UbykQ== -----END CERTIFICATE-----Generated at Mon Sep 28 12:26:01 2026 by rpki-client