$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: TQuUPkEi3VZRBxyE4N2poMJnPBJzoWetcEeUp5sYAoc= Subject key identifier: 8A:87:0E:72:8E:9D:69:4E:34:1D:37:73:6E:CB:69:3F:BE:23:C4:F2 Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 3B468F86EC5B5112CEF9E600E85019444C732024 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 8E Signing time: Wed 30 Sep 2026 23:33:40 +0000 Manifest this update: Wed 30 Sep 2026 23:28:40 +0000 Manifest next update: Sun 04 Oct 2026 10:47:40 +0000 Files and hashes: 1: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 2: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: huV3YNIVAQI9aRhDYbwWds/aocvy8BI/QB0AZ02h9P0=) 3: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 4: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) 5: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 05:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:46:8f:86:ec:5b:51:12:ce:f9:e6:00:e8:50:19:44:4c:73:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Sep 30 23:28:40 2026 GMT Not After : Oct 4 10:47:40 2026 GMT Subject: CN=8A870E728E9D694E341D37736ECB693FBE23C4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:d6:45:a8:0f:44:d7:9f:ef:bd:75:09:b6: 1f:93:2c:bf:f6:a4:a3:e7:07:af:a1:be:60:a7:77: 4f:d5:36:8a:d9:18:ec:cb:c2:08:97:81:4e:40:6c: 25:c2:01:a4:3b:af:88:a7:8b:25:f2:f7:8d:29:97: 0a:42:94:de:de:57:6c:4d:80:23:64:90:11:40:a4: 35:a4:ab:36:16:af:32:12:b4:45:c5:4f:3a:8f:e8: 0f:9a:81:d7:dc:4c:09:d8:7b:8d:fd:bd:7b:6f:35: 89:86:f3:37:e2:4b:ca:d7:9f:8a:f0:27:b6:9d:d3: 0f:4a:d1:7b:4e:69:4f:29:bd:cd:b9:6a:ab:bc:5f: 82:87:c1:a3:00:5a:21:06:07:89:e1:32:b9:a0:f2: 6c:ea:4c:78:f8:b1:19:53:bd:f5:a9:8f:19:b1:cf: 7b:73:51:49:35:49:92:e7:98:60:07:5a:3b:00:9d: e9:6b:d3:f4:aa:eb:1f:50:5d:57:64:fe:73:71:d5: e6:1e:fb:98:79:f4:f7:0d:4f:7f:13:60:e8:1e:fb: 46:82:1e:19:7b:84:c2:b6:c6:06:25:ba:21:37:1a: 09:52:82:4f:f3:2d:52:bb:5b:c8:1c:6c:1a:ab:9a: c3:8a:62:21:a7:66:3d:9e:ff:5a:9c:57:7a:59:06: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:87:0E:72:8E:9D:69:4E:34:1D:37:73:6E:CB:69:3F:BE:23:C4:F2 X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:36:cd:38:cc:20:1d:19:18:62:05:dd:33:af:d6:fc:ed:c8: cc:e1:21:f6:ae:58:a7:35:a2:a9:4e:32:cd:26:2b:30:16:49: 52:a0:02:0d:68:84:4c:d1:03:b1:45:06:49:d4:7f:20:49:bf: 25:bc:ed:c6:0d:af:b4:87:fc:c9:83:52:54:50:ef:41:86:21: fa:26:0b:3f:9d:78:3b:14:bc:1f:bc:d8:ee:68:1a:42:91:01: 6f:18:ea:4f:ee:cd:6e:7f:11:d9:83:a2:6d:aa:33:81:c2:e2: 77:1a:11:bc:89:1f:f4:f7:d0:b2:3a:67:a4:3e:8f:fd:34:fe: eb:7b:ad:1e:ac:4a:ed:fc:b6:49:69:dc:14:85:95:60:bb:9d: ee:50:6e:a9:28:df:ee:86:69:50:5f:1a:33:db:73:4e:3a:37: f0:af:f9:86:92:02:39:63:c6:e3:3b:70:16:f4:bb:a5:3d:4b: 39:a7:b3:5b:ca:45:ed:0a:f4:86:9c:2d:90:a3:41:65:77:54: 10:8f:54:e6:a0:dd:d2:d7:aa:97:e1:4a:0c:07:4c:cf:42:39: 1b:e6:7f:61:1c:25:a8:a7:d8:cf:30:5d:53:66:b2:c8:bb:e4: 1e:19:85:6c:99:e6:51:ee:48:96:e7:e6:93:ff:37:14:2d:52: c6:fb:05:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO0aPhuxbURLO+eYA6FAZRExzICQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA5MzAyMzI4NDBaFw0yNjEwMDQxMDQ3NDBaMDMxMTAvBgNV BAMTKDhBODcwRTcyOEU5RDY5NEUzNDFEMzc3MzZFQ0I2OTNGQkUyM0M0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WNZFqA9E15/vvXUJth+TLL/2 pKPnB6+hvmCnd0/VNorZGOzLwgiXgU5AbCXCAaQ7r4iniyXy940plwpClN7eV2xN gCNkkBFApDWkqzYWrzIStEXFTzqP6A+agdfcTAnYe439vXtvNYmG8zfiS8rXn4rw J7ad0w9K0XtOaU8pvc25aqu8X4KHwaMAWiEGB4nhMrmg8mzqTHj4sRlTvfWpjxmx z3tzUUk1SZLnmGAHWjsAnelr0/Sq6x9QXVdk/nNx1eYe+5h59PcNT38TYOge+0aC Hhl7hMK2xgYluiE3GglSgk/zLVK7W8gcbBqrmsOKYiGnZj2e/1qcV3pZBkQpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiocOco6daU40HTdzbstpP74jxPIwHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozbNOMwgHRkY YgXdM6/W/O3IzOEh9q5YpzWiqU4yzSYrMBZJUqACDWiETNEDsUUGSdR/IEm/Jbzt xg2vtIf8yYNSVFDvQYYh+iYLP514OxS8H7zY7mgaQpEBbxjqT+7Nbn8R2YOibaoz gcLidxoRvIkf9PfQsjpnpD6P/TT+63utHqxK7fy2SWncFIWVYLud7lBuqSjf7oZp UF8aM9tzTjo38K/5hpICOWPG4ztwFvS7pT1LOaezW8pF7Qr0hpwtkKNBZXdUEI9U 5qDd0teql+FKDAdMz0I5G+Z/YRwlqKfYzzBdU2ayyLvkHhmFbJnmUe5Ilufmk/83 FC1SxvsFxg== -----END CERTIFICATE-----Generated at Thu Oct 1 10:47:13 2026 by rpki-client