$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft File: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft (raw, json) Hash identifier: 61c6jqxZIqQTscs/IpmyQKH2DOpcRdeK9JpucmLG5Rk= Subject key identifier: 24:45:26:24:41:35:91:A4:81:D2:84:18:1E:3F:8F:9D:23:55:D3:05 Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F Certificate issuer: /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Certificate serial: 3C3B90B61E07CE7D82CC4055ADFBA05241D24D39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft Manifest number: 66 Signing time: Thu 08 Oct 2026 06:42:20 +0000 Manifest this update: Thu 08 Oct 2026 06:37:20 +0000 Manifest next update: Sun 11 Oct 2026 09:03:20 +0000 Files and hashes: 1: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (hash: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=) 2: 3131312e3230382e3235342e302f32342d3332203d3e203435313036.roa (hash: /9/wcHPixQ3zSf0oWBQhT74E0lowSuv9Eu8B3+gZotQ=) 3: 3131312e3231302e31362e302f32342d3332203d3e203435313036.roa (hash: y6rLG5MGWhuQpG3jyn5ZyzIM4qeNCE/D+iaUlbOa8X8=) 4: 3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (hash: 8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=) 5: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl (hash: FEqwy0wiN2Yv/KmLaSYCOByO4qOTCUkjoc8xT+FDYZQ=) 6: 3131312e3230382e3132312e302f32342d3332203d3e2034383337.roa (hash: 1dEopTFRZW8mtpna1k4UYOCNYv3DaJ2ov+N+MWZqkTk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:90:b6:1e:07:ce:7d:82:cc:40:55:ad:fb:a0:52:41:d2:4d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Validity Not Before: Oct 8 06:37:20 2026 GMT Not After : Oct 11 09:03:20 2026 GMT Subject: CN=24452624413591A481D284181E3F8F9D2355D305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:8b:0d:93:e9:7b:a3:04:ba:46:a8:5d:9d: 52:8e:2f:57:7b:cf:cd:db:20:9b:4f:51:96:c4:d4: 03:4d:39:79:49:0d:a8:31:92:10:17:d3:12:47:fd: ff:71:80:2a:ed:0d:67:75:0f:26:70:ae:e3:df:e2: 6c:39:32:dd:d6:8d:af:45:4a:c9:60:0f:54:9d:e2: d4:b9:54:a7:6a:fc:21:f7:4d:c2:c8:62:72:71:d5: 85:bb:9c:70:6d:a4:15:58:57:be:35:35:30:99:d5: 7e:23:0e:63:e6:d0:b8:87:ba:0f:85:aa:b1:d5:16: 74:95:95:2f:67:be:3b:d0:a7:c9:f2:72:38:0e:0e: fb:2f:70:c8:b6:38:5c:07:c6:bb:ec:5e:00:65:98: b5:f2:40:4b:33:9c:94:d3:f7:e8:c2:f6:54:15:72: e9:16:0b:94:75:83:d4:0f:eb:63:b3:0d:b3:51:a3: df:21:a5:1d:9c:90:bd:ae:8d:5d:f1:24:49:5f:ad: cb:6e:37:2b:be:39:64:7c:f0:e2:03:d9:db:ee:c0: 8e:20:ef:6c:b0:a3:c5:48:1c:16:29:5e:6d:93:7c: f4:70:41:65:e2:64:10:f9:6e:5a:df:da:a0:fc:59: f2:6f:6c:aa:53:31:85:7c:f3:98:94:1a:d2:77:89: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:26:24:41:35:91:A4:81:D2:84:18:1E:3F:8F:9D:23:55:D3:05 X509v3 Authority Key Identifier: keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b0:a8:4e:4b:ec:db:b6:38:60:bb:61:6b:1f:74:39:b7:08: 95:a9:82:42:e8:5f:58:b3:fd:94:01:fa:db:47:6e:fb:0f:b7: ae:56:38:51:55:d7:6a:51:58:ec:0e:0f:ca:97:8b:f9:a5:25: 89:4d:da:bf:c6:a4:02:08:4e:6b:db:b0:70:94:61:64:7d:d9: e0:1e:91:6b:61:ec:78:5c:c1:ff:24:02:05:3e:7d:59:22:cb: 47:09:f6:93:88:6b:84:51:9a:06:a0:2f:fe:86:08:cc:21:99: ba:ff:a7:af:61:a2:b7:e4:9f:47:4d:11:95:67:87:4e:02:be: 77:54:65:59:fd:b2:02:82:75:0d:1c:2a:24:e3:cc:0f:be:9f: 37:e8:b3:2c:11:07:18:eb:83:74:3a:ca:1f:29:c0:90:1c:80: a2:a0:a6:ed:e0:95:6c:ab:74:53:23:ff:70:dd:0b:20:37:b2: e9:80:13:0e:56:fb:52:4d:46:f1:ed:f4:0c:b7:ea:4b:c6:5d: 4b:96:48:00:27:88:80:b4:65:63:69:eb:61:1f:6d:b1:ed:42: a1:3e:0d:cc:7d:65:dd:f4:c0:73:83:1b:bd:a5:7d:9f:28:cb: 2e:d9:de:9e:57:c0:c4:6e:28:fa:9d:25:e0:79:07:85:38:2b: 92:46:fe:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPDuQth4Hzn2CzEBVrfugUkHSTTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdB RjM1RkE4RjAeFw0yNjEwMDgwNjM3MjBaFw0yNjEwMTEwOTAzMjBaMDMxMTAvBgNV BAMTKDI0NDUyNjI0NDEzNTkxQTQ4MUQyODQxODFFM0Y4RjlEMjM1NUQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UosNk+l7owS6RqhdnVKOL1d7 z83bIJtPUZbE1ANNOXlJDagxkhAX0xJH/f9xgCrtDWd1DyZwruPf4mw5Mt3Wja9F SslgD1Sd4tS5VKdq/CH3TcLIYnJx1YW7nHBtpBVYV741NTCZ1X4jDmPm0LiHug+F qrHVFnSVlS9nvjvQp8nycjgODvsvcMi2OFwHxrvsXgBlmLXyQEsznJTT9+jC9lQV cukWC5R1g9QP62OzDbNRo98hpR2ckL2ujV3xJElfrctuNyu+OWR88OID2dvuwI4g 72ywo8VIHBYpXm2TfPRwQWXiZBD5blrf2qD8WfJvbKpTMYV885iUGtJ3ibEZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJEUmJEE1kaSB0oQYHj+PnSNV0wUwHwYDVR0j BBgwFoAUfo693OIzEvr5F1hYH7FD9681+o8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MDUyMzEzMTc4MTE1NS8wLzdFOEVCRERDRTIzMzEyRkFGOTE3NTg1ODFGQjE0 M0Y3QUYzNUZBOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdBRjM1RkE4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4ODA1MjMxMzE3ODExNTUvMC83RThFQkREQ0UyMzMx MkZBRjkxNzU4NTgxRkIxNDNGN0FGMzVGQThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbCoTkvs27Y4 YLthax90ObcIlamCQuhfWLP9lAH620du+w+3rlY4UVXXalFY7A4PypeL+aUliU3a v8akAghOa9uwcJRhZH3Z4B6Ra2HseFzB/yQCBT59WSLLRwn2k4hrhFGaBqAv/oYI zCGZuv+nr2Git+SfR00RlWeHTgK+d1RlWf2yAoJ1DRwqJOPMD76fN+izLBEHGOuD dDrKHynAkByAoqCm7eCVbKt0UyP/cN0LIDey6YATDlb7Uk1G8e30DLfqS8ZdS5ZI ACeIgLRlY2nrYR9tse1CoT4NzH1l3fTAc4MbvaV9nyjLLtnenlfAxG4o+p0l4HkH hTgrkkb+eA== -----END CERTIFICATE-----Generated at Thu Oct 8 16:36:20 2026 by rpki-client