$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: PI0C/A+ZtIR/JxG3AHBhqJa0dVWKkiGOCjYjBJPijeg= Subject key identifier: FB:A2:79:46:32:E3:E9:9F:66:F8:F4:74:96:6D:68:31:D8:09:3C:DD Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 23023BE016048A44754C195AECBB4CFBEF04318C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 90 Signing time: Tue 13 Oct 2026 05:47:45 +0000 Manifest this update: Tue 13 Oct 2026 05:42:45 +0000 Manifest next update: Fri 16 Oct 2026 07:16:45 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: dP3xkAQVtgi0h9ekpQlUXqspOeHpjBZzo057OJ2+z0Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:02:3b:e0:16:04:8a:44:75:4c:19:5a:ec:bb:4c:fb:ef:04:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: Oct 13 05:42:45 2026 GMT Not After : Oct 16 07:16:45 2026 GMT Subject: CN=FBA2794632E3E99F66F8F474966D6831D8093CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:cb:2a:38:00:be:78:89:31:2b:40:aa:b4: 57:3d:fe:3e:45:cd:6d:70:85:b9:49:24:80:31:d2: 0f:48:d2:88:1a:c4:81:b0:b2:13:d9:f5:6e:34:8d: da:df:6f:67:05:6a:4d:8d:66:5c:57:12:4e:30:dc: 3d:44:89:97:c3:71:e7:51:32:40:56:82:a5:97:6b: 45:e7:8a:37:dc:91:64:d9:6c:a9:ab:69:80:c7:e7: d2:67:b7:a7:1f:14:57:5e:f0:c0:ae:27:98:7a:14: 88:d0:22:06:39:0c:84:fa:b4:8e:4a:65:e4:83:f1: 6f:db:cb:26:3d:f4:85:33:c0:03:07:bc:55:af:35: e9:e8:8c:86:1c:4d:d6:64:f6:ad:54:b3:e1:c7:6d: 0d:21:07:53:a0:c7:27:c7:65:0f:cd:10:9a:45:10: 2b:3f:71:15:45:57:8a:15:77:26:0e:91:1f:04:d6: e6:d8:44:9f:f9:84:30:b1:13:09:b2:7c:43:2e:ef: 64:2d:7e:2d:a1:cb:d9:e3:fb:e4:2f:58:7b:3e:fe: 18:d1:5d:ee:ad:cf:bc:8b:43:a3:0e:c7:2e:dc:28: 19:64:e0:96:ee:89:94:c6:17:3d:f5:4b:27:1a:2a: b7:2c:11:e6:d7:a4:ac:53:29:2b:84:fb:c3:09:29: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:79:46:32:E3:E9:9F:66:F8:F4:74:96:6D:68:31:D8:09:3C:DD X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8b:a5:90:84:88:77:16:76:7c:b6:3c:39:cb:75:82:1e:dd: f0:d5:d6:af:60:2d:05:61:4a:51:23:4f:98:f5:fb:22:d3:5a: dd:27:67:77:86:4e:a2:ff:3b:53:26:8d:f6:e4:e2:38:ee:cb: 32:5d:3e:13:06:84:b5:a9:d3:18:ad:c0:01:7b:9e:6f:b1:a7: a4:1d:bf:52:dd:c8:2f:1a:f3:6a:2a:c5:d9:cf:bc:13:9b:80: eb:4f:44:32:02:9b:6d:15:05:5d:e9:f7:fd:7f:5d:c8:b2:0a: 13:7d:af:cd:65:d6:38:fc:1e:93:53:89:d4:0f:34:10:80:27: 42:a0:9f:1f:e4:11:41:cc:b6:d6:71:a6:89:e8:8a:d6:58:51: c2:3c:35:71:77:f4:88:67:78:e1:90:e4:b5:2e:e9:13:c9:48: e7:e2:37:7f:26:e0:b5:a5:d0:76:06:15:84:34:97:0b:80:dc: 51:ba:9e:f1:e9:35:30:a2:22:4f:a2:2c:d0:fb:52:c1:a8:18: 5c:e9:d0:5c:0b:22:99:7f:9e:0b:4b:16:dc:e8:16:b7:53:53: 40:f4:8b:8b:a3:33:70:2a:07:c6:e8:98:6f:7c:6e:1c:92:2a: da:8e:87:8b:61:e4:3d:b5:9d:ce:9e:9a:bb:ae:01:3a:07:f2: 12:42:4b:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIwI74BYEikR1TBla7LtM++8EMYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjEwMTMwNTQyNDVaFw0yNjEwMTYwNzE2NDVaMDMxMTAvBgNV BAMTKEZCQTI3OTQ2MzJFM0U5OUY2NkY4RjQ3NDk2NkQ2ODMxRDgwOTNDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBMsqOAC+eIkxK0CqtFc9/j5F zW1whblJJIAx0g9I0ogaxIGwshPZ9W40jdrfb2cFak2NZlxXEk4w3D1EiZfDcedR MkBWgqWXa0XnijfckWTZbKmraYDH59Jnt6cfFFde8MCuJ5h6FIjQIgY5DIT6tI5K ZeSD8W/byyY99IUzwAMHvFWvNenojIYcTdZk9q1Us+HHbQ0hB1OgxyfHZQ/NEJpF ECs/cRVFV4oVdyYOkR8E1ubYRJ/5hDCxEwmyfEMu72Qtfi2hy9nj++QvWHs+/hjR Xe6tz7yLQ6MOxy7cKBlk4JbuiZTGFz31SycaKrcsEebXpKxTKSuE+8MJKV4XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+6J5RjLj6Z9m+PR0lm1oMdgJPN0wHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoulkISIdxZ2 fLY8Oct1gh7d8NXWr2AtBWFKUSNPmPX7ItNa3Sdnd4ZOov87UyaN9uTiOO7LMl0+ EwaEtanTGK3AAXueb7GnpB2/Ut3ILxrzairF2c+8E5uA609EMgKbbRUFXen3/X9d yLIKE32vzWXWOPwek1OJ1A80EIAnQqCfH+QRQcy21nGmieiK1lhRwjw1cXf0iGd4 4ZDktS7pE8lI5+I3fybgtaXQdgYVhDSXC4DcUbqe8ek1MKIiT6Is0PtSwagYXOnQ XAsimX+eC0sW3OgWt1NTQPSLi6MzcCoHxuiYb3xuHJIq2o6Hi2HkPbWdzp6au64B OgfyEkJLwQ== -----END CERTIFICATE-----Generated at Wed Oct 14 04:10:47 2026 by rpki-client