$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: xyox2j1zhkgUwd2Mn831rYYeGs3w992JZ+0EiYe9M8M= Subject key identifier: 2C:41:2D:72:CE:E3:E5:0B:D2:FC:84:24:20:52:5D:AB:E1:08:13:77 Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 31237BA020C7881986A6B0CDCE28E4F699392382 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: BC Signing time: Tue 06 Oct 2026 13:15:13 +0000 Manifest this update: Tue 06 Oct 2026 13:10:13 +0000 Manifest next update: Fri 09 Oct 2026 23:43:13 +0000 Files and hashes: 1: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: X7V+XDUT3mM64U2ybMPWdL4XEHxF9GiDmLL7HRJ1m5g=) 2: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 3: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:23:7b:a0:20:c7:88:19:86:a6:b0:cd:ce:28:e4:f6:99:39:23:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Oct 6 13:10:13 2026 GMT Not After : Oct 9 23:43:13 2026 GMT Subject: CN=2C412D72CEE3E50BD2FC842420525DABE1081377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:dc:72:1d:ce:c6:0d:35:56:04:50:1b:d9: 60:02:81:6c:96:cc:0f:4c:02:76:6e:b5:78:e3:95: 7e:27:bc:83:dc:3f:99:ef:b3:77:6d:44:d9:ba:3f: 34:99:b4:7d:e4:91:39:10:0d:44:80:38:d4:b6:88: 76:b8:31:c9:83:a9:e2:85:29:63:31:11:0d:59:e4: f9:72:35:9a:3f:f3:28:1b:ef:18:ba:71:4f:e3:be: 9c:e9:29:c5:2e:a0:59:86:9d:58:a4:5d:08:08:26: ee:be:bd:59:f0:3f:84:18:2f:4b:8b:56:07:46:0b: 4a:bf:a6:04:a1:ee:0c:a8:71:68:18:70:65:e5:7e: 0a:83:26:5f:d7:9c:35:cb:16:16:07:40:d6:9b:e1: 84:6b:62:4a:cf:ce:21:18:71:3f:85:70:15:e6:d6: b2:d1:ce:cf:0b:90:bc:9f:47:c4:53:92:40:f9:74: 58:cf:1a:25:46:68:52:df:b4:60:c1:a5:32:22:90: 24:f3:dc:c6:00:71:07:25:92:c5:db:e0:44:ce:b9: d1:f1:a4:b7:54:5d:b1:5f:1b:4b:c0:8f:62:b1:e8: 4c:b4:30:53:dc:aa:ba:1f:31:d7:04:57:58:08:d8: 79:a9:78:68:6b:78:6b:d7:a4:2b:1a:ef:ed:b0:94: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:2D:72:CE:E3:E5:0B:D2:FC:84:24:20:52:5D:AB:E1:08:13:77 X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0e:2c:a7:f5:e7:c7:9a:61:ff:a7:8c:71:48:45:3d:ab:39: 65:a0:48:43:1f:ae:7d:c2:52:a7:8e:c6:0f:df:23:5a:1a:a5: 0f:c2:d8:08:8d:c7:f9:6f:91:0e:17:4d:3e:5f:05:7c:52:01: 46:cc:5e:c2:50:54:32:f8:7f:09:72:9c:0b:94:6b:4d:5f:34: 22:ec:53:f7:6c:81:0a:cc:1a:31:b7:dc:32:3b:ab:3d:7e:68: 78:e7:38:bd:d9:20:54:d2:8d:8a:d6:40:12:36:1e:ee:ad:9d: 00:e1:96:2b:43:a2:74:ab:29:82:8f:64:80:47:3b:39:73:a9: e1:e7:2d:86:cc:d5:36:89:30:aa:21:f1:59:4a:86:c0:20:2f: 99:5b:4c:6f:48:8e:71:34:7d:f7:bd:19:09:63:62:6e:f1:62: 71:62:ec:7b:6d:76:7a:d0:13:80:34:75:01:49:3a:93:44:56: e9:99:1f:45:20:30:db:e6:62:2b:e9:a6:75:74:53:fa:c8:d6: bb:51:8f:94:0e:a6:7e:0a:06:c8:7a:62:c7:bc:0e:54:2e:9b: 6c:50:74:d2:48:f6:bc:48:b3:fa:ae:8d:9f:ac:2d:b3:08:3f: 31:f2:66:d0:b1:4a:31:28:ce:d2:36:38:9c:43:cd:64:3f:30: d4:f0:12:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMSN7oCDHiBmGprDNzijk9pk5I4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjEwMDYxMzEwMTNaFw0yNjEwMDkyMzQzMTNaMDMxMTAvBgNV BAMTKDJDNDEyRDcyQ0VFM0U1MEJEMkZDODQyNDIwNTI1REFCRTEwODEzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sdxyHc7GDTVWBFAb2WACgWyW zA9MAnZutXjjlX4nvIPcP5nvs3dtRNm6PzSZtH3kkTkQDUSAONS2iHa4McmDqeKF KWMxEQ1Z5PlyNZo/8ygb7xi6cU/jvpzpKcUuoFmGnVikXQgIJu6+vVnwP4QYL0uL VgdGC0q/pgSh7gyocWgYcGXlfgqDJl/XnDXLFhYHQNab4YRrYkrPziEYcT+FcBXm 1rLRzs8LkLyfR8RTkkD5dFjPGiVGaFLftGDBpTIikCTz3MYAcQclksXb4ETOudHx pLdUXbFfG0vAj2Kx6Ey0MFPcqrofMdcEV1gI2HmpeGhreGvXpCsa7+2wlKTbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULEEtcs7j5QvS/IQkIFJdq+EIE3cwHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANg4sp/Xnx5ph /6eMcUhFPas5ZaBIQx+ufcJSp47GD98jWhqlD8LYCI3H+W+RDhdNPl8FfFIBRsxe wlBUMvh/CXKcC5RrTV80IuxT92yBCswaMbfcMjurPX5oeOc4vdkgVNKNitZAEjYe 7q2dAOGWK0OidKspgo9kgEc7OXOp4ecthszVNokwqiHxWUqGwCAvmVtMb0iOcTR9 970ZCWNibvFicWLse212etATgDR1AUk6k0RW6ZkfRSAw2+ZiK+mmdXRT+sjWu1GP lA6mfgoGyHpix7wOVC6bbFB00kj2vEiz+q6Nn6wtswg/MfJm0LFKMSjO0jY4nEPN ZD8w1PAS1w== -----END CERTIFICATE-----Generated at Thu Oct 8 13:39:14 2026 by rpki-client