$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: lJRacxTRU/EpVDuR2eI++YkHPE+Jn1/WsAqKoDOguTk= Subject key identifier: 84:8C:AB:82:94:D5:54:5F:4E:8A:A4:F4:86:C5:EC:11:74:94:13:71 Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 1586ED04BB3477DFE91FEF2A3BD9EF590CB27932 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: AB Signing time: Wed 07 Oct 2026 20:51:48 +0000 Manifest this update: Wed 07 Oct 2026 20:46:48 +0000 Manifest next update: Sun 11 Oct 2026 00:38:48 +0000 Files and hashes: 1: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 2: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) 3: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: YKLCRDc1YI7FhnhLf2bM3jMCSMv1PGDzL8WMC5FCoo8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 00:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:86:ed:04:bb:34:77:df:e9:1f:ef:2a:3b:d9:ef:59:0c:b2:79:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Oct 7 20:46:48 2026 GMT Not After : Oct 11 00:38:48 2026 GMT Subject: CN=848CAB8294D5545F4E8AA4F486C5EC1174941371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:35:01:3c:17:c8:fb:73:cf:8f:43:cc:38: 32:20:ad:6d:fe:8f:29:09:a2:c1:97:93:b0:0f:2f: e4:9a:cb:3c:37:3c:0d:4e:0b:be:6b:d4:e5:f1:33: 86:dd:78:68:83:71:9d:db:05:b2:1b:46:61:c2:de: 5a:77:7b:10:fc:11:f5:07:44:17:fc:66:73:8d:4e: e0:26:28:30:de:96:6a:1f:69:c5:57:dc:4c:74:fc: 6d:5d:43:b1:be:2f:b9:72:82:24:cd:d8:c6:8c:e2: 4b:11:43:51:1e:5f:8e:67:71:c5:15:d6:bb:de:5b: 7b:3b:01:e6:25:61:d0:09:3d:6c:89:39:72:eb:c5: 83:e5:8f:c0:3d:6c:c3:d6:cc:6f:9b:38:f6:a1:6d: fa:2a:ba:3b:55:58:43:44:a2:1c:e6:b7:82:e3:37: 89:20:1e:58:bd:6f:ee:ff:1d:2a:80:7a:ab:86:5d: 38:08:a0:41:4a:01:ed:93:c2:90:ee:ee:e6:34:a0: cb:ed:1f:2e:cc:5a:26:60:11:d7:2e:72:10:a8:54: 5c:7b:b7:4b:31:89:38:32:5f:48:e9:bc:da:78:76: 34:00:4f:9c:fd:9b:31:87:8e:76:79:ac:74:41:d5: 5b:00:09:3d:a7:d9:d6:00:f3:d4:74:f0:e5:f3:e2: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:AB:82:94:D5:54:5F:4E:8A:A4:F4:86:C5:EC:11:74:94:13:71 X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ef:2b:00:8a:01:dc:52:c4:0b:4c:80:2a:5c:bc:9a:93:03: f2:65:f8:54:25:ae:6f:9f:49:e4:e7:5e:b4:e4:41:23:f0:96: 54:ab:22:aa:4d:6b:0f:41:82:33:c8:ba:de:82:7d:4b:80:2c: 96:9e:11:1f:8b:d6:b8:68:5d:b8:82:cd:d1:4d:ba:3b:20:3a: 7e:7f:7e:a5:de:ed:64:07:00:85:58:e1:b0:1c:c0:78:4d:57: 53:d2:3d:67:5d:e3:49:3a:1a:19:8e:b1:b2:aa:52:c2:61:a5: d3:19:ed:ed:dd:01:49:13:43:53:a2:ce:21:ec:74:df:12:72: 40:6c:20:38:9b:df:4d:e1:b2:1e:6e:b0:55:18:08:7f:5f:e6: df:66:89:8c:0d:45:63:21:da:27:ab:51:df:2a:bf:3c:7d:89: 22:1b:17:38:c5:ac:f8:65:f7:86:3b:30:60:86:41:98:8f:8b: b5:ef:f4:d2:a0:e7:0b:ae:b6:ad:ed:71:fd:9b:9d:bb:c1:4d: 1b:85:a3:f0:3d:2d:09:23:f1:b7:ea:fb:c2:b1:b3:34:f1:24: fd:57:cc:4e:ac:19:6f:45:1a:28:88:6f:47:88:4a:68:7e:95: d0:2d:ac:ff:31:ca:2c:e2:3e:48:1b:a2:b3:ac:c2:23:15:92: 02:07:6d:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFYbtBLs0d9/pH+8qO9nvWQyyeTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjEwMDcyMDQ2NDhaFw0yNjEwMTEwMDM4NDhaMDMxMTAvBgNV BAMTKDg0OENBQjgyOTRENTU0NUY0RThBQTRGNDg2QzVFQzExNzQ5NDEzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJSzUBPBfI+3PPj0PMODIgrW3+ jykJosGXk7APL+Sayzw3PA1OC75r1OXxM4bdeGiDcZ3bBbIbRmHC3lp3exD8EfUH RBf8ZnONTuAmKDDelmofacVX3Ex0/G1dQ7G+L7lygiTN2MaM4ksRQ1EeX45nccUV 1rveW3s7AeYlYdAJPWyJOXLrxYPlj8A9bMPWzG+bOPahbfoqujtVWENEohzmt4Lj N4kgHli9b+7/HSqAequGXTgIoEFKAe2TwpDu7uY0oMvtHy7MWiZgEdcuchCoVFx7 t0sxiTgyX0jpvNp4djQAT5z9mzGHjnZ5rHRB1VsACT2n2dYA89R08OXz4tBnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhIyrgpTVVF9OiqT0hsXsEXSUE3EwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe8rAIoB3FLE C0yAKly8mpMD8mX4VCWub59J5OdetORBI/CWVKsiqk1rD0GCM8i63oJ9S4Aslp4R H4vWuGhduILN0U26OyA6fn9+pd7tZAcAhVjhsBzAeE1XU9I9Z13jSToaGY6xsqpS wmGl0xnt7d0BSRNDU6LOIex03xJyQGwgOJvfTeGyHm6wVRgIf1/m32aJjA1FYyHa J6tR3yq/PH2JIhsXOMWs+GX3hjswYIZBmI+Lte/00qDnC662re1x/Zudu8FNG4Wj 8D0tCSPxt+r7wrGzNPEk/VfMTqwZb0UaKIhvR4hKaH6V0C2s/zHKLOI+SBuis6zC IxWSAgdtVg== -----END CERTIFICATE-----Generated at Fri Oct 9 20:35:40 2026 by rpki-client