$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: xXJiPkE21YQUWBTsUL/5aS7YVatppcR3mcdr6QKLIBM= Subject key identifier: EB:F3:56:02:86:C6:1C:05:BB:E3:0C:6F:C3:B6:5A:9D:3E:6A:98:00 Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 72962782807ADE04BB1A6EED262F00A6A24B08D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: B7 Signing time: Mon 28 Sep 2026 11:50:42 +0000 Manifest this update: Mon 28 Sep 2026 11:45:42 +0000 Manifest next update: Thu 01 Oct 2026 12:53:42 +0000 Files and hashes: 1: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 3: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 4: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 5: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: XtT8z9V1BQkqdq4y00AvMUCW+QoyTbWFaNE3ytYQV6k=) 6: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 12:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:96:27:82:80:7a:de:04:bb:1a:6e:ed:26:2f:00:a6:a2:4b:08:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Sep 28 11:45:42 2026 GMT Not After : Oct 1 12:53:42 2026 GMT Subject: CN=EBF3560286C61C05BBE30C6FC3B65A9D3E6A9800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:5d:cb:c9:73:32:af:8d:ce:f0:aa:49:1b: 51:92:d6:a8:cf:0f:35:6c:09:4b:f9:59:3c:7d:3b: a9:76:43:42:42:c8:4c:46:bf:5c:49:fd:83:38:20: c4:10:19:3e:6d:aa:f5:45:b2:c2:71:a5:5f:22:fd: 6e:7c:14:77:13:1e:55:47:6f:a8:4f:30:3c:4c:88: 27:ea:e3:85:d9:30:4b:f1:1a:25:58:b1:55:b4:1f: cc:83:4e:2d:88:cf:21:68:70:5b:50:3d:42:94:77: 5a:ef:06:37:41:25:39:fb:5b:94:a5:24:27:07:c2: 21:05:f6:95:a0:bb:3f:19:44:4f:f7:d3:47:93:07: 3b:17:75:86:bd:75:93:06:f8:0d:37:e0:b9:d7:c0: fe:c2:f7:5d:dd:97:dd:15:0a:63:2f:3c:f3:71:e4: f9:5c:da:fb:73:fd:e2:8e:f7:f2:c3:b2:dd:85:7b: cf:13:e0:a6:7a:46:bc:d4:1d:e6:02:21:f0:a1:a6: 10:d0:e6:bd:9d:01:37:ff:2e:ac:b9:6a:07:cb:a1: 9d:c6:65:87:1f:fe:f0:29:5c:57:3e:52:6f:3d:c8: 00:c4:d5:be:4b:83:5d:9d:b1:3c:97:a6:ef:41:4e: 71:a1:c8:e7:73:8f:26:65:cb:31:8f:db:5e:5a:bd: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:56:02:86:C6:1C:05:BB:E3:0C:6F:C3:B6:5A:9D:3E:6A:98:00 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:2d:18:be:d7:cc:aa:f6:2e:55:39:55:f7:a5:d7:42:bf:9c: 8a:80:d7:8b:bc:0a:e0:42:63:cd:e2:1f:dd:7d:8a:d6:a3:79: 62:a8:2c:92:51:63:e5:5d:4a:4e:2b:e5:cc:5e:26:54:dd:19: a7:b1:dc:a5:13:c8:8b:f2:b7:a2:db:71:04:40:b6:70:41:ac: 4e:0d:50:af:e8:64:d3:69:6d:86:a0:28:8d:19:b5:41:02:81: 00:5e:05:f5:d5:27:27:52:98:c8:f6:c3:7c:e0:a6:01:82:fb: 93:5d:f1:39:a2:eb:06:f3:30:f0:95:bf:cf:f7:9b:ae:ba:e3: 0d:67:f3:cb:fb:fa:aa:d7:44:0d:fe:6a:ef:4e:25:c2:00:9a: 32:d1:e4:a5:9a:cf:40:ed:33:59:1f:c8:3b:84:ac:bc:b9:3c: 48:47:49:58:b8:12:71:fe:ef:64:98:56:e3:c8:e0:df:60:e1: 54:95:81:eb:e3:0c:b5:3a:9c:ce:d5:0c:0d:85:aa:c4:c4:a2: 39:64:f3:06:5f:a4:dc:41:84:9a:48:dc:01:36:05:f0:19:d9: 9e:2d:ee:e5:58:65:31:d8:53:72:1e:1e:1e:c2:bc:ff:04:10: 84:aa:21:99:90:b4:de:a0:31:1b:91:7c:d3:a2:69:6a:9c:8c: 01:da:68:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcpYngoB63gS7Gm7tJi8ApqJLCNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA5MjgxMTQ1NDJaFw0yNjEwMDExMjUzNDJaMDMxMTAvBgNV BAMTKEVCRjM1NjAyODZDNjFDMDVCQkUzMEM2RkMzQjY1QTlEM0U2QTk4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj13LyXMyr43O8KpJG1GS1qjP DzVsCUv5WTx9O6l2Q0JCyExGv1xJ/YM4IMQQGT5tqvVFssJxpV8i/W58FHcTHlVH b6hPMDxMiCfq44XZMEvxGiVYsVW0H8yDTi2IzyFocFtQPUKUd1rvBjdBJTn7W5Sl JCcHwiEF9pWguz8ZRE/300eTBzsXdYa9dZMG+A034LnXwP7C913dl90VCmMvPPNx 5Plc2vtz/eKO9/LDst2Fe88T4KZ6RrzUHeYCIfChphDQ5r2dATf/Lqy5agfLoZ3G ZYcf/vApXFc+Um89yADE1b5Lg12dsTyXpu9BTnGhyOdzjyZlyzGP215avQpfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6/NWAobGHAW74wxvw7ZanT5qmAAwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvC0YvtfMqvYu VTlV96XXQr+cioDXi7wK4EJjzeIf3X2K1qN5YqgsklFj5V1KTivlzF4mVN0Zp7Hc pRPIi/K3ottxBEC2cEGsTg1Qr+hk02lthqAojRm1QQKBAF4F9dUnJ1KYyPbDfOCm AYL7k13xOaLrBvMw8JW/z/ebrrrjDWfzy/v6qtdEDf5q704lwgCaMtHkpZrPQO0z WR/IO4SsvLk8SEdJWLgScf7vZJhW48jg32DhVJWB6+MMtTqcztUMDYWqxMSiOWTz Bl+k3EGEmkjcATYF8BnZni3u5VhlMdhTch4eHsK8/wQQhKohmZC03qAxG5F806Jp apyMAdpoIw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:44:26 2026 by rpki-client