$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: 33ooVyvKtFzMtpQ4k+psScrkoegwtuGvc2DAKbiv2lk= Subject key identifier: EE:EE:D2:6B:32:07:D5:C1:64:FC:42:6E:35:3C:0D:77:9F:BA:79:30 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 15FBF836EDA2171355BDB88837AAFA974D36BA88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: CA Signing time: Sat 10 Oct 2026 06:24:22 +0000 Manifest this update: Sat 10 Oct 2026 06:19:22 +0000 Manifest next update: Tue 13 Oct 2026 12:52:22 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 2: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 3: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 4: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: tSQ0HgBj4FlMiqjzRmJ6zbz7G+b4p57s+WkVyInJtW4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fb:f8:36:ed:a2:17:13:55:bd:b8:88:37:aa:fa:97:4d:36:ba:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Oct 10 06:19:22 2026 GMT Not After : Oct 13 12:52:22 2026 GMT Subject: CN=EEEED26B3207D5C164FC426E353C0D779FBA7930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:09:de:0b:c7:af:fa:3c:bd:6f:81:78:bf: 14:a7:e4:c2:28:86:20:67:a5:39:83:85:ab:25:eb: e0:1d:c1:65:9c:45:c0:4e:2d:1a:f8:4a:2c:a5:75: 6a:9e:f0:7b:ed:92:11:5b:9d:0d:0a:08:64:f5:1f: c6:22:73:f1:6c:f5:41:a6:54:99:13:21:41:4d:e6: de:6a:e3:e8:54:69:21:11:b3:01:86:d2:f7:84:e6: 70:48:4c:82:e3:3f:c0:45:c7:88:3d:1e:b3:e6:f9: 3b:ed:9e:44:ec:c3:a3:80:61:9a:70:5f:35:47:13: 15:6b:87:ff:c2:97:0c:df:0d:86:e7:44:d1:b8:f7: 28:31:10:86:25:fb:96:68:3f:e4:8f:3f:5e:71:a4: 80:7f:8d:99:2b:25:a4:db:d4:40:c4:68:5b:87:7e: 5b:12:fc:5c:bb:7c:03:ae:94:64:30:d4:56:b3:80: 47:47:57:37:79:dc:26:87:23:8b:94:ff:e5:8b:3f: 6c:71:2a:d3:06:2c:34:59:08:09:6c:c3:3c:36:c0: 45:8c:af:c4:f2:a8:8e:37:51:e5:dc:4b:f6:8e:30: 85:b0:bc:a5:48:f8:7e:2b:e1:2d:16:5a:f6:6d:33: 91:97:a0:39:6a:50:d2:7a:c1:de:50:92:17:49:45: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:D2:6B:32:07:D5:C1:64:FC:42:6E:35:3C:0D:77:9F:BA:79:30 X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:a0:14:7d:17:20:a7:1c:26:01:3a:cd:bd:c5:16:07:0a:de: cc:60:08:c9:f5:52:70:a9:b5:94:52:ad:bc:15:57:45:9b:91: 9e:12:a0:31:2d:0c:e9:d6:87:60:9e:a2:b0:5b:3a:5c:19:d6: d4:91:58:8d:88:57:63:88:71:6d:3b:11:39:20:95:4c:0d:1b: 11:ab:53:a4:48:c4:a3:4f:73:57:bb:3a:e0:42:f1:c1:49:ea: 38:65:7c:e3:d3:e2:9b:f6:f2:d4:0c:84:be:17:44:73:fe:6a: 0a:5d:7c:9f:21:6e:50:8a:e6:1a:24:b8:70:0c:7c:d9:95:6f: b6:a3:51:65:c6:60:d6:23:ac:e5:aa:7f:86:b4:57:f2:b2:0d: dd:e5:61:bd:3a:57:5a:cb:15:70:e4:f0:07:a4:1d:cd:1b:5f: 89:7c:32:f5:4b:2e:b6:15:0c:de:fe:76:85:48:11:8d:a6:b3: 1c:81:cb:ad:3b:62:f3:20:67:ed:2f:b7:e6:4f:90:5e:28:80: af:61:62:51:de:4d:c8:c1:84:85:c8:de:70:b5:07:0c:2c:f9: cb:a8:70:45:e5:19:09:a6:26:a4:d3:1a:b8:b4:79:73:8e:cb: d8:04:cd:72:7d:be:c3:79:89:3f:93:da:32:98:9d:12:e4:08: 38:a7:18:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFfv4Nu2iFxNVvbiIN6r6l002uogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjEwMTAwNjE5MjJaFw0yNjEwMTMxMjUyMjJaMDMxMTAvBgNV BAMTKEVFRUVEMjZCMzIwN0Q1QzE2NEZDNDI2RTM1M0MwRDc3OUZCQTc5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kAneC8ev+jy9b4F4vxSn5MIo hiBnpTmDhasl6+AdwWWcRcBOLRr4SiyldWqe8HvtkhFbnQ0KCGT1H8Yic/Fs9UGm VJkTIUFN5t5q4+hUaSERswGG0veE5nBITILjP8BFx4g9HrPm+TvtnkTsw6OAYZpw XzVHExVrh//ClwzfDYbnRNG49ygxEIYl+5ZoP+SPP15xpIB/jZkrJaTb1EDEaFuH flsS/Fy7fAOulGQw1FazgEdHVzd53CaHI4uU/+WLP2xxKtMGLDRZCAlswzw2wEWM r8TyqI43UeXcS/aOMIWwvKVI+H4r4S0WWvZtM5GXoDlqUNJ6wd5QkhdJRYUTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7u7SazIH1cFk/EJuNTwNd5+6eTAwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KAUfRcgpxwm ATrNvcUWBwrezGAIyfVScKm1lFKtvBVXRZuRnhKgMS0M6daHYJ6isFs6XBnW1JFY jYhXY4hxbTsROSCVTA0bEatTpEjEo09zV7s64ELxwUnqOGV849Pim/by1AyEvhdE c/5qCl18nyFuUIrmGiS4cAx82ZVvtqNRZcZg1iOs5ap/hrRX8rIN3eVhvTpXWssV cOTwB6QdzRtfiXwy9UsuthUM3v52hUgRjaazHIHLrTti8yBn7S+35k+QXiiAr2Fi Ud5NyMGEhcjecLUHDCz5y6hwReUZCaYmpNMauLR5c47L2ATNcn2+w3mJP5PaMpid EuQIOKcYHA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:48:25 2026 by rpki-client