$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: ssxiDVWxG0WkvHrm83waVwQA2f8zMSAqx373mNSpP6k= Subject key identifier: 4C:0E:E6:3D:F1:DD:69:69:F7:5D:88:6F:A3:47:19:EF:57:63:45:E8 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 0CAB550DC1318DA7B673CAB8669E80C2E941978F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: C5 Signing time: Thu 15 Oct 2026 18:56:53 +0000 Manifest this update: Thu 15 Oct 2026 18:51:53 +0000 Manifest next update: Sun 18 Oct 2026 21:12:53 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: 1IlYgYwxzjj3y+PN05Gzn3OUXeAlq9Xyeo1YrSxSZZg=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 21:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ab:55:0d:c1:31:8d:a7:b6:73:ca:b8:66:9e:80:c2:e9:41:97:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Oct 15 18:51:53 2026 GMT Not After : Oct 18 21:12:53 2026 GMT Subject: CN=4C0EE63DF1DD6969F75D886FA34719EF576345E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:48:d8:30:c4:36:ac:a2:76:a8:4f:32:19: a1:a4:12:0d:82:d9:b9:01:4d:e1:6c:ef:01:7d:d9: 25:78:f8:47:4a:2b:25:96:63:fb:51:b9:9d:8c:f1: b5:92:bf:7a:b6:77:ff:c9:4f:04:a1:f8:57:7e:d8: ba:12:f4:31:af:5b:b6:b2:09:f7:3d:1c:f1:6e:74: ac:43:8a:c7:1f:d0:3b:fd:1d:ca:87:7c:e7:a5:cd: 46:14:48:b5:97:00:f2:30:cf:7c:ee:5c:0d:68:02: 63:39:fd:f6:50:c7:97:d8:4b:63:94:86:ee:8c:f3: a0:02:29:bb:08:0e:b6:35:2e:ca:8d:9a:1b:2d:ce: 74:59:bc:e2:4d:aa:7e:2e:77:90:86:57:f0:5d:77: 44:cb:cb:22:4d:b8:ff:8a:3e:54:01:3c:15:47:14: 09:90:88:fb:ac:64:43:04:10:87:3d:a8:5f:27:f4: ed:be:44:42:16:05:d7:c8:96:ea:1f:26:f1:fd:83: b7:ed:8f:e6:bb:3e:d7:fd:76:4c:9b:8c:d3:18:28: d8:b7:a0:2e:15:60:c4:2c:3b:4f:0c:bb:56:f5:5e: 80:21:97:69:c2:10:ee:1a:c1:70:0e:eb:39:c1:9b: 77:19:fa:24:14:f7:f9:b9:a2:30:a4:f9:d2:57:3d: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:E6:3D:F1:DD:69:69:F7:5D:88:6F:A3:47:19:EF:57:63:45:E8 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:06:f2:6b:9f:4d:74:31:9e:1c:a5:8c:c5:ee:6a:cd:f5:76: 2c:b7:c6:23:0d:14:0f:32:83:e9:7c:02:6c:64:4f:98:85:d3: 1c:04:fd:85:fe:f7:8e:c8:53:aa:03:54:6f:e3:21:d3:ed:da: 4a:57:e3:da:6a:72:43:93:2e:ea:c4:d5:51:ed:30:01:a9:71: d3:79:a7:00:d7:e4:31:1b:81:60:f3:95:0c:c9:d7:da:d8:26: 46:87:be:4a:92:b3:36:ee:1e:e2:a3:16:1e:57:ad:d7:17:a2: 69:3b:7d:ee:25:82:d9:4a:a3:ac:5f:f1:27:fb:2d:d9:a7:31: a4:80:65:40:0e:98:6b:f9:d4:b5:70:01:a6:24:61:3d:c7:30: be:f9:0c:0f:3d:7f:44:cc:e3:5f:cc:5f:82:f1:95:76:73:a0: 0d:43:0e:b4:3e:0f:6d:ae:40:e2:e4:f6:a1:de:b0:4e:d8:68: 23:2a:cb:02:bc:93:88:67:1d:4c:22:aa:bd:a9:c5:c4:ef:7d: de:18:88:96:0a:14:8f:01:1e:22:11:41:08:15:f8:6d:86:3d: 76:c1:f8:ca:a7:91:af:34:6f:29:26:78:88:37:a2:0e:68:4d: 50:97:5e:05:57:2b:79:fd:08:2c:8e:96:5f:2f:35:91:d7:8c: 43:17:80:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDKtVDcExjae2c8q4Zp6AwulBl48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjEwMTUxODUxNTNaFw0yNjEwMTgyMTEyNTNaMDMxMTAvBgNV BAMTKDRDMEVFNjNERjFERDY5NjlGNzVEODg2RkEzNDcxOUVGNTc2MzQ1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVUjYMMQ2rKJ2qE8yGaGkEg2C 2bkBTeFs7wF92SV4+EdKKyWWY/tRuZ2M8bWSv3q2d//JTwSh+Fd+2LoS9DGvW7ay Cfc9HPFudKxDiscf0Dv9HcqHfOelzUYUSLWXAPIwz3zuXA1oAmM5/fZQx5fYS2OU hu6M86ACKbsIDrY1LsqNmhstznRZvOJNqn4ud5CGV/Bdd0TLyyJNuP+KPlQBPBVH FAmQiPusZEMEEIc9qF8n9O2+REIWBdfIluofJvH9g7ftj+a7Ptf9dkybjNMYKNi3 oC4VYMQsO08Mu1b1XoAhl2nCEO4awXAO6znBm3cZ+iQU9/m5ojCk+dJXPUlVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTA7mPfHdaWn3XYhvo0cZ71djRegwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQbya59NdDGe HKWMxe5qzfV2LLfGIw0UDzKD6XwCbGRPmIXTHAT9hf73jshTqgNUb+Mh0+3aSlfj 2mpyQ5Mu6sTVUe0wAalx03mnANfkMRuBYPOVDMnX2tgmRoe+SpKzNu4e4qMWHlet 1xeiaTt97iWC2UqjrF/xJ/st2acxpIBlQA6Ya/nUtXABpiRhPccwvvkMDz1/RMzj X8xfgvGVdnOgDUMOtD4Pba5A4uT2od6wTthoIyrLAryTiGcdTCKqvanFxO993hiI lgoUjwEeIhFBCBX4bYY9dsH4yqeRrzRvKSZ4iDeiDmhNUJdeBVcref0ILI6WXy81 kdeMQxeAdg== -----END CERTIFICATE-----Generated at Sat Oct 17 08:40:14 2026 by rpki-client