$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: GMS0eKzYIdXEdEhRNGpRayVAaqoQGeqYD+v6WBJKdDA= Subject key identifier: 1B:8D:BD:03:C4:A2:65:DE:26:10:4A:94:63:D5:C4:07:12:40:49:D3 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 42FC9B5EE615FF8390B55ABEA1D67C7FC230A9E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: C0 Signing time: Wed 07 Oct 2026 12:36:12 +0000 Manifest this update: Wed 07 Oct 2026 12:31:12 +0000 Manifest next update: Sat 10 Oct 2026 22:24:12 +0000 Files and hashes: 1: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: 7dy5XIlXpmaMzy4lTDIkYAYrmMj8F4b0Lf72ESn0+8U=) 2: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 3: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 4: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 22:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fc:9b:5e:e6:15:ff:83:90:b5:5a:be:a1:d6:7c:7f:c2:30:a9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Oct 7 12:31:12 2026 GMT Not After : Oct 10 22:24:12 2026 GMT Subject: CN=1B8DBD03C4A265DE26104A9463D5C407124049D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:14:0b:e2:e9:52:1d:9e:52:fe:2a:f9:22: 18:11:49:4c:c2:3d:c7:45:a7:45:57:84:7c:b6:1a: 8d:94:b4:b9:3a:bb:86:33:bc:24:38:b1:7a:ac:bd: 29:79:84:90:42:8a:82:bc:a8:44:5c:14:78:bb:a7: 0a:49:c8:d6:a2:f1:4d:3b:7d:08:c4:84:13:53:12: 96:b4:35:13:f9:fe:96:9b:a4:6e:59:70:93:5e:72: 0e:0f:08:08:33:9c:12:c4:0d:be:a1:65:20:31:96: 36:59:e6:7f:b4:1e:b9:ff:3b:f7:90:aa:b9:7a:ec: b4:f0:b6:5c:bd:fc:90:9a:ef:c5:12:b5:ee:22:c7: 48:00:fe:cf:29:5c:f6:3a:6a:5c:9c:ac:4a:b7:f6: b6:ba:42:ea:7e:b2:81:3a:a9:01:42:b0:a5:82:60: 8f:09:c1:dd:54:3e:f2:8c:1d:1d:8f:49:24:6d:e1: c2:44:9b:48:3c:ed:5a:a3:3d:f1:9a:fb:40:83:e0: 96:a8:b4:9c:41:94:25:01:f6:64:75:57:fd:ec:7a: ec:1b:16:c2:a4:79:fb:12:9b:c7:6b:e1:e5:e1:8d: ac:1f:22:d0:a0:65:db:a8:49:d5:d9:c2:d0:fb:b1: 56:cb:a5:d9:3e:1a:15:3f:ea:f4:2f:44:2f:13:f9: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:BD:03:C4:A2:65:DE:26:10:4A:94:63:D5:C4:07:12:40:49:D3 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ab:58:0b:2d:6f:ea:ea:e1:ce:17:3f:32:fd:33:e8:19:89: 71:d7:14:cf:eb:11:44:79:23:a5:cb:e7:43:35:0c:f5:ed:ac: a3:72:8c:ba:c7:10:30:4c:d0:cb:44:ef:f2:14:d5:fc:88:7f: 3a:1b:bc:0c:57:f1:1f:20:2e:0c:d8:5e:ec:7c:78:87:f1:7d: 1a:7d:89:19:38:0c:7c:ee:dc:69:bf:7e:56:e7:d0:fa:d5:db: ea:bf:f7:69:dd:5a:17:84:cf:af:e6:0e:dc:dd:29:1d:fa:6c: cc:aa:c2:7e:f9:7b:2d:f8:8f:fc:a4:a5:fd:db:5b:9e:c8:be: 78:a9:36:ff:f5:72:55:0e:58:15:8a:c3:d3:f8:0e:5a:0e:06: 8c:55:6f:85:08:9f:7f:69:3e:4f:d3:dd:d0:aa:54:10:70:81: aa:31:da:8e:25:9a:12:4d:fe:a7:8e:05:78:ee:90:c0:5c:30: 4a:c2:c2:eb:a2:e6:0d:d6:2f:79:9d:42:92:2c:6f:46:d7:00: 0a:a6:6a:80:1a:9c:91:d6:07:40:ab:94:d4:dc:75:bc:f5:84: b9:38:c6:35:0c:ea:e6:08:d6:3a:88:23:93:da:6b:c4:0c:08: c4:64:1c:44:f4:33:cf:91:bf:2c:15:0c:30:37:0e:1b:4f:e5: b8:b3:be:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQvybXuYV/4OQtVq+odZ8f8IwqeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjEwMDcxMjMxMTJaFw0yNjEwMTAyMjI0MTJaMDMxMTAvBgNV BAMTKDFCOERCRDAzQzRBMjY1REUyNjEwNEE5NDYzRDVDNDA3MTI0MDQ5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5xQL4ulSHZ5S/ir5IhgRSUzC PcdFp0VXhHy2Go2UtLk6u4YzvCQ4sXqsvSl5hJBCioK8qERcFHi7pwpJyNai8U07 fQjEhBNTEpa0NRP5/pabpG5ZcJNecg4PCAgznBLEDb6hZSAxljZZ5n+0Hrn/O/eQ qrl67LTwtly9/JCa78USte4ix0gA/s8pXPY6alycrEq39ra6Qup+soE6qQFCsKWC YI8Jwd1UPvKMHR2PSSRt4cJEm0g87VqjPfGa+0CD4JaotJxBlCUB9mR1V/3seuwb FsKkefsSm8dr4eXhjawfItCgZduoSdXZwtD7sVbLpdk+GhU/6vQvRC8T+SY3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG429A8SiZd4mEEqUY9XEBxJASdMwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKtYCy1v6urh zhc/Mv0z6BmJcdcUz+sRRHkjpcvnQzUM9e2so3KMuscQMEzQy0Tv8hTV/Ih/Ohu8 DFfxHyAuDNhe7Hx4h/F9Gn2JGTgMfO7cab9+VufQ+tXb6r/3ad1aF4TPr+YO3N0p HfpszKrCfvl7LfiP/KSl/dtbnsi+eKk2//VyVQ5YFYrD0/gOWg4GjFVvhQiff2k+ T9Pd0KpUEHCBqjHajiWaEk3+p44FeO6QwFwwSsLC66LmDdYveZ1CkixvRtcACqZq gBqckdYHQKuU1Nx1vPWEuTjGNQzq5gjWOogjk9prxAwIxGQcRPQzz5G/LBUMMDcO G0/luLO+Qw== -----END CERTIFICATE-----Generated at Thu Oct 8 16:15:43 2026 by rpki-client