$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: UN01NenVSydJmHd7Us5IT7cDhyD3KKENcWO0dbJxe7A= Subject key identifier: 6B:E1:60:5F:F1:E3:47:A1:B2:06:60:E1:97:41:59:7E:DA:DE:23:4E Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 0AB4D0011B49F081AE802F01EF348621B2D20995 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 8D Signing time: Mon 28 Sep 2026 21:51:36 +0000 Manifest this update: Mon 28 Sep 2026 21:46:36 +0000 Manifest next update: Thu 01 Oct 2026 23:29:36 +0000 Files and hashes: 1: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: L9CfaT7YEJ60kKvArrMvABKyKdqM/bGliPpJRzmLSyU=) 2: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 3: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 4: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) 5: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b4:d0:01:1b:49:f0:81:ae:80:2f:01:ef:34:86:21:b2:d2:09:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Sep 28 21:46:36 2026 GMT Not After : Oct 1 23:29:36 2026 GMT Subject: CN=6BE1605FF1E347A1B20660E19741597EDADE234E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:2e:35:ea:2e:7c:dc:92:63:fb:e8:57:ad: a8:92:49:5f:06:d7:d5:f5:13:60:1b:4b:bc:e8:ee: 56:55:4c:fa:2b:47:de:09:15:1f:0b:4e:35:06:70: 9c:4f:e4:60:1e:06:af:88:a8:7a:16:01:e2:35:2d: ac:77:f7:e5:2b:e8:2b:4e:a6:4e:77:5a:1d:30:0a: 9a:01:aa:81:ff:33:9c:18:6d:e6:92:b3:44:5b:0e: 89:65:97:79:ce:cb:29:8c:7f:23:7f:e0:be:9c:42: 1d:e9:f9:67:5d:dd:ae:73:d4:7d:68:10:22:c7:b2: c9:95:81:c1:1e:10:87:34:68:35:40:96:48:2d:17: a2:5b:36:46:50:70:2b:38:7f:d4:91:59:ea:c8:75: 7c:fc:68:5f:96:df:2c:cf:88:b5:74:2d:b1:c5:e9: 42:fa:32:a2:48:cf:6b:04:a3:d4:ef:1f:80:6a:a8: 21:0e:7f:89:2e:99:80:b3:ae:37:a3:bc:04:ff:46: 64:bd:2f:7b:f8:2d:14:2c:00:f0:ce:8d:39:3c:87: ee:8f:89:c9:5f:8b:64:5b:d7:3b:6c:98:b7:77:84: 0b:bf:47:7c:00:a2:ea:31:35:ac:e6:94:64:6c:c8: db:2b:39:e4:ca:cc:1b:24:b4:b1:90:46:30:37:7c: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E1:60:5F:F1:E3:47:A1:B2:06:60:E1:97:41:59:7E:DA:DE:23:4E X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:ec:2e:7a:28:90:68:5a:d9:ab:1a:a0:12:55:57:51:1c: 98:ce:ab:29:aa:fe:50:e0:be:26:dd:43:0c:f6:93:0c:ea:22: a5:53:65:7a:46:40:ac:e5:da:b0:a1:48:92:49:ad:4f:05:fa: 0d:b8:9e:5c:92:43:a1:8c:13:69:76:31:f8:85:87:c2:60:cd: 5d:1c:36:5c:fd:33:5d:68:fc:7f:2c:60:4d:e7:fd:b4:34:9e: 96:b6:02:3a:73:0a:ad:a5:7d:6d:48:f7:09:bf:33:8d:69:99: 77:97:b9:e2:00:5d:f9:b9:54:cf:48:49:dc:35:16:89:44:14: 78:a2:a3:98:3e:a2:1d:69:a2:c3:16:cb:29:a0:25:2b:25:13: a7:b3:78:5c:e2:f9:ef:ac:e4:8b:01:08:76:d7:69:fb:f7:16: 64:ec:c7:26:db:0e:52:f6:fd:cd:67:19:01:e4:ab:ad:af:56: 30:f4:3f:43:d4:fa:0b:5d:93:cf:d3:3d:23:d8:93:c3:b4:6d: aa:33:13:7d:84:e0:98:95:59:95:3a:b5:e0:0f:5e:79:c4:41: 85:c2:52:21:49:28:dc:b0:25:ff:28:93:fd:0d:d7:35:c9:9e: ac:47:ae:ef:f0:57:1f:f8:f8:e2:21:e1:ba:15:a1:47:7e:d0: f7:fc:56:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCrTQARtJ8IGugC8B7zSGIbLSCZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA5MjgyMTQ2MzZaFw0yNjEwMDEyMzI5MzZaMDMxMTAvBgNV BAMTKDZCRTE2MDVGRjFFMzQ3QTFCMjA2NjBFMTk3NDE1OTdFREFERTIzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBi416i583JJj++hXraiSSV8G 19X1E2AbS7zo7lZVTPorR94JFR8LTjUGcJxP5GAeBq+IqHoWAeI1Lax39+Ur6CtO pk53Wh0wCpoBqoH/M5wYbeaSs0RbDolll3nOyymMfyN/4L6cQh3p+Wdd3a5z1H1o ECLHssmVgcEeEIc0aDVAlkgtF6JbNkZQcCs4f9SRWerIdXz8aF+W3yzPiLV0LbHF 6UL6MqJIz2sEo9TvH4BqqCEOf4kumYCzrjejvAT/RmS9L3v4LRQsAPDOjTk8h+6P iclfi2Rb1ztsmLd3hAu/R3wAouoxNazmlGRsyNsrOeTKzBsktLGQRjA3fJL9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa+FgX/HjR6GyBmDhl0FZftreI04wHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwrsLnookGha 2asaoBJVV1EcmM6rKar+UOC+Jt1DDPaTDOoipVNlekZArOXasKFIkkmtTwX6Dbie XJJDoYwTaXYx+IWHwmDNXRw2XP0zXWj8fyxgTef9tDSelrYCOnMKraV9bUj3Cb8z jWmZd5e54gBd+blUz0hJ3DUWiUQUeKKjmD6iHWmiwxbLKaAlKyUTp7N4XOL576zk iwEIdtdp+/cWZOzHJtsOUvb9zWcZAeSrra9WMPQ/Q9T6C12Tz9M9I9iTw7RtqjMT fYTgmJVZlTq14A9eecRBhcJSIUko3LAl/yiT/Q3XNcmerEeu7/BXH/j44iHhuhWh R37Q9/xWrg== -----END CERTIFICATE-----Generated at Wed Sep 30 19:39:10 2026 by rpki-client