$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft File: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json) Hash identifier: 9T6hC+SNAUyAeJoh5MfaDldUuyKpi0zt/D/2MjT7vy0= Subject key identifier: 98:58:B8:76:4F:68:AB:ED:DB:31:4A:FB:9B:A6:1B:A1:C1:D1:42:4A Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Certificate serial: 67DC9563F3AD7448E53EAB68BEF0E80A9027265F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft Manifest number: C8 Signing time: Wed 14 Oct 2026 06:13:37 +0000 Manifest this update: Wed 14 Oct 2026 06:08:37 +0000 Manifest next update: Sat 17 Oct 2026 12:02:37 +0000 Files and hashes: 1: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=) 2: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=) 3: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=) 4: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=) 5: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=) 6: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: PuEVqIEG9cY75stQXgyjQafZvbEuFyVpxYarmWjF2+Q=) 7: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=) 8: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=) 9: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=) 10: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=) 11: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:dc:95:63:f3:ad:74:48:e5:3e:ab:68:be:f0:e8:0a:90:27:26:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Validity Not Before: Oct 14 06:08:37 2026 GMT Not After : Oct 17 12:02:37 2026 GMT Subject: CN=9858B8764F68ABEDDB314AFB9BA61BA1C1D1424A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:9e:22:53:01:9a:ea:49:f6:a1:1a:80:27: f8:20:e3:ce:c1:fa:1f:17:c3:38:d0:4d:c5:72:78: 16:5d:0b:2d:28:ad:ff:f2:0b:c6:2b:63:ff:78:b2: 1d:ba:ad:09:dc:31:17:64:ea:ce:3c:a4:d4:5b:59: 84:ce:5b:b6:84:9f:b7:a7:50:06:50:40:6b:c1:42: 45:94:0d:a6:86:60:da:08:9e:65:0e:22:41:5c:35: cd:40:e0:74:10:77:b4:72:48:20:f3:d9:1b:37:8c: 54:a3:a1:ca:a7:02:7d:5a:20:b7:c3:c0:19:e0:06: a9:12:15:f3:db:26:cd:9f:ed:3c:66:83:51:c6:fc: 90:01:74:1e:e0:0d:d2:a1:de:cb:0f:3b:2d:a8:4f: 49:19:ce:e8:e6:d2:55:9f:b3:27:bd:86:b0:b6:ad: 17:3d:38:94:f1:14:89:eb:5a:f0:71:ff:6d:e6:d7: 15:17:b6:35:9b:ca:92:1e:e9:2d:10:29:f2:31:3a: f2:c1:9d:45:5a:eb:89:9d:a0:3b:bb:0e:3c:56:91: 43:5f:76:3f:da:27:d3:61:af:37:87:32:48:31:1e: bc:10:98:96:d2:e1:4a:da:ff:11:2e:12:a1:5c:59: cf:cb:6e:d5:1a:cc:af:7c:db:e9:52:32:29:06:0c: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:B8:76:4F:68:AB:ED:DB:31:4A:FB:9B:A6:1B:A1:C1:D1:42:4A X509v3 Authority Key Identifier: keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:ce:ec:08:64:87:fa:34:ed:48:c5:98:04:ff:08:af:3e: 86:fa:8f:27:b0:71:f1:76:b3:11:dd:0d:2e:22:fa:fc:fc:e5: 59:21:4e:14:d1:22:99:52:b5:00:3f:e8:2e:84:ac:2e:93:da: 2b:95:9d:9d:b8:f3:84:93:bb:87:47:40:ac:f1:f5:9b:0e:67: d1:88:5d:76:7f:ea:f8:c8:0c:74:8a:22:3a:43:bb:e5:78:14: b1:d0:af:76:52:0d:ab:36:3f:a7:a6:07:fb:af:06:80:c7:a1: ca:eb:ce:18:02:d3:98:d1:b8:92:36:b5:30:b0:e6:c6:1f:7e: d9:d3:9e:63:69:c0:72:63:b0:96:61:59:cc:14:2b:85:1a:2a: 99:f3:88:7a:69:49:a4:dc:b5:40:42:3a:7a:70:9e:4b:ef:44: 23:3f:d0:53:d2:e2:51:18:91:f9:8e:83:f4:9d:9d:92:05:a4: 54:08:3e:0d:2a:e0:1f:1a:94:c0:1f:9d:81:f1:6c:66:20:3f: 26:88:5e:96:6f:8a:79:e2:14:3a:7d:5b:03:63:d2:66:38:f2: 9c:3d:9a:86:c0:c6:96:9a:02:ce:64:41:d2:b1:df:98:f8:20: 28:37:42:72:de:56:56:e6:f8:a6:db:4c:b5:40:97:ee:83:90: d8:49:1b:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ9yVY/OtdEjlPqtovvDoCpAnJl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw RTVEMzE3MjAeFw0yNjEwMTQwNjA4MzdaFw0yNjEwMTcxMjAyMzdaMDMxMTAvBgNV BAMTKDk4NThCODc2NEY2OEFCRUREQjMxNEFGQjlCQTYxQkExQzFEMTQyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU954iUwGa6kn2oRqAJ/gg487B +h8XwzjQTcVyeBZdCy0orf/yC8YrY/94sh26rQncMRdk6s48pNRbWYTOW7aEn7en UAZQQGvBQkWUDaaGYNoInmUOIkFcNc1A4HQQd7RySCDz2Rs3jFSjocqnAn1aILfD wBngBqkSFfPbJs2f7Txmg1HG/JABdB7gDdKh3ssPOy2oT0kZzujm0lWfsye9hrC2 rRc9OJTxFInrWvBx/23m1xUXtjWbypIe6S0QKfIxOvLBnUVa64mdoDu7DjxWkUNf dj/aJ9NhrzeHMkgxHrwQmJbS4Ura/xEuEqFcWc/LbtUazK982+lSMikGDC8bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmFi4dk9oq+3bMUr7m6YbocHRQkowHwYDVR0j BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3 NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5ODk0MDk1OTc0ODkxNTMvMC9CMEQxMjRBN0RBNzFG MUM3NDY2RUI5RTA3MTBFNzQ2ODBFNUQzMTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGLO7Ahkh/o0 7UjFmAT/CK8+hvqPJ7Bx8XazEd0NLiL6/PzlWSFOFNEimVK1AD/oLoSsLpPaK5Wd nbjzhJO7h0dArPH1mw5n0Yhddn/q+MgMdIoiOkO75XgUsdCvdlINqzY/p6YH+68G gMehyuvOGALTmNG4kja1MLDmxh9+2dOeY2nAcmOwlmFZzBQrhRoqmfOIemlJpNy1 QEI6enCeS+9EIz/QU9LiURiR+Y6D9J2dkgWkVAg+DSrgHxqUwB+dgfFsZiA/Johe lm+KeeIUOn1bA2PSZjjynD2ahsDGlpoCzmRB0rHfmPggKDdCct5WVub4pttMtUCX 7oOQ2EkbbQ== -----END CERTIFICATE-----Generated at Thu Oct 15 08:13:51 2026 by rpki-client