$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft File: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft (raw, json) Hash identifier: tl3QZfPRlf+MdaKZ4tkhLK7dNZMdn0hxuzsxJYuzqSw= Subject key identifier: 7C:11:B6:A6:A8:63:B7:90:12:DB:D7:A5:8A:DD:BA:E3:40:F5:06:AD Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 Certificate issuer: /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Certificate serial: 70949AFAB0610B45C38D32F4717060753345AF26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft Manifest number: 3E Signing time: Sat 10 Oct 2026 19:34:53 +0000 Manifest this update: Sat 10 Oct 2026 19:29:53 +0000 Manifest next update: Tue 13 Oct 2026 22:56:53 +0000 Files and hashes: 1: 3130312e34392e3230372e302f32342d3234203d3e203539303638.roa (hash: mJK27tVfbdIF1xBAouziK7x1YNs7RUiymoSR83PrbWw=) 2: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl (hash: 9lfSobC9NJghmr9u7pY3KX68vP9Pq+x2WmI3g6ZCFC0=) 3: 3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (hash: CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:9a:fa:b0:61:0b:45:c3:8d:32:f4:71:70:60:75:33:45:af:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Validity Not Before: Oct 10 19:29:53 2026 GMT Not After : Oct 13 22:56:53 2026 GMT Subject: CN=7C11B6A6A863B79012DBD7A58ADDBAE340F506AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:5e:f0:fd:29:f8:2b:1c:22:73:6f:b0:88: 7e:fe:32:56:f8:f5:e3:73:8a:13:ca:61:e2:ab:c7: 56:4e:33:1d:8c:be:80:74:a7:98:4d:1c:89:53:b1: f9:e3:36:eb:3e:45:4b:11:46:92:a9:b1:ff:0b:a3: 2f:4f:23:98:6b:8d:36:73:4a:fa:96:52:84:ce:d9: 55:8f:e4:92:44:55:fb:73:5e:a5:b5:f3:43:70:9b: 71:9d:cc:e3:1e:9d:a1:81:2a:17:7f:a2:be:42:d4: bd:0e:ac:e7:e0:0a:05:cd:4b:a9:3c:c3:e2:8d:e6: 22:d1:76:de:cf:7e:9a:13:d4:01:84:63:f3:3d:53: f8:36:0c:b3:a3:cb:bd:8f:31:c5:9b:1f:21:c2:f3: 5f:ef:68:14:1a:a0:b3:6c:49:0e:87:5e:21:c8:64: 37:df:f5:0b:5c:ca:62:60:80:f2:49:05:7f:77:53: fe:df:7e:b0:3e:45:bf:4d:58:37:fd:14:bb:d1:d3: 18:89:e3:ce:5c:32:88:6d:22:b4:8b:83:11:e3:63: 88:64:40:fd:53:e2:9c:75:38:7f:99:df:d2:cc:4d: 2e:89:18:59:d7:a5:53:c2:04:96:02:74:44:79:b9: e5:4e:ba:0e:3d:cf:88:3a:d7:87:91:41:71:bc:1c: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:B6:A6:A8:63:B7:90:12:DB:D7:A5:8A:DD:BA:E3:40:F5:06:AD X509v3 Authority Key Identifier: keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:15:f3:49:ee:ad:5a:5f:b3:b0:f8:f3:a5:0f:df:ec:9e:59: 56:d4:f5:81:18:f4:b7:9a:05:a5:cc:b7:84:d6:e8:d8:28:d1: 48:6c:68:b9:fc:9e:e7:9f:55:0c:07:39:ff:c4:e5:34:30:dc: 8b:d4:43:87:fa:19:2e:d3:df:e7:cc:04:ac:e1:46:d7:6c:bb: 27:22:90:a2:eb:f4:c6:c2:be:44:e1:06:f1:9d:69:51:58:d4: 5e:08:69:a9:08:55:16:12:0c:98:ea:d6:26:94:47:1a:4e:c2: 5a:a2:21:db:94:32:7c:e8:7f:26:4a:fc:8d:46:4a:8a:84:c6: 85:23:80:c9:77:84:20:c1:2b:3d:07:a0:a1:b4:23:85:7a:51: c2:9f:9c:81:29:34:e8:15:69:8d:d8:a0:a7:94:67:88:8b:44: ef:3b:f6:18:7a:bf:35:37:44:2c:47:dd:d8:04:b0:3d:ac:cd: 34:43:a0:38:66:ba:bf:2d:96:b5:f9:57:d9:dc:2c:04:e9:9c: e9:b9:d5:ee:60:5f:ea:89:e4:28:e0:0b:8d:1a:dc:fb:b5:fc: be:8a:dc:01:2e:d4:0e:f6:89:0e:d0:4a:4b:63:94:f9:e3:35: ac:8a:5d:3d:1d:9c:dd:c4:bb:6b:04:83:6d:eb:d3:5e:b8:7c: e6:e9:ce:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJSa+rBhC0XDjTL0cXBgdTNFryYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5 MzE5RTU1OTAeFw0yNjEwMTAxOTI5NTNaFw0yNjEwMTMyMjU2NTNaMDMxMTAvBgNV BAMTKDdDMTFCNkE2QTg2M0I3OTAxMkRCRDdBNThBRERCQUUzNDBGNTA2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz17w/Sn4Kxwic2+wiH7+Mlb4 9eNzihPKYeKrx1ZOMx2MvoB0p5hNHIlTsfnjNus+RUsRRpKpsf8Loy9PI5hrjTZz SvqWUoTO2VWP5JJEVftzXqW180Nwm3GdzOMenaGBKhd/or5C1L0OrOfgCgXNS6k8 w+KN5iLRdt7PfpoT1AGEY/M9U/g2DLOjy72PMcWbHyHC81/vaBQaoLNsSQ6HXiHI ZDff9QtcymJggPJJBX93U/7ffrA+Rb9NWDf9FLvR0xiJ485cMohtIrSLgxHjY4hk QP1T4px1OH+Z39LMTS6JGFnXpVPCBJYCdER5ueVOug49z4g614eRQXG8HC3XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfBG2pqhjt5AS29elit2640D1Bq0wHwYDVR0j BBgwFoAUuK+2lsFavE/++z6x6hDv1JMZ5VkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NDY5MjY2MjUwNzQ3MDg5My8wL0I4QUZCNjk2QzE1QUJDNEZGRUZCM0VCMUVBMTBF RkQ0OTMxOUU1NTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5MzE5RTU1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzQ2OTI2NjI1MDc0NzA4OTMvMC9COEFGQjY5NkMxNUFC QzRGRkVGQjNFQjFFQTEwRUZENDkzMTlFNTU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRXzSe6tWl+z sPjzpQ/f7J5ZVtT1gRj0t5oFpcy3hNbo2CjRSGxoufye559VDAc5/8TlNDDci9RD h/oZLtPf58wErOFG12y7JyKQouv0xsK+ROEG8Z1pUVjUXghpqQhVFhIMmOrWJpRH Gk7CWqIh25QyfOh/Jkr8jUZKioTGhSOAyXeEIMErPQegobQjhXpRwp+cgSk06BVp jdigp5RniItE7zv2GHq/NTdELEfd2ASwPazNNEOgOGa6vy2WtflX2dwsBOmc6bnV 7mBf6onkKOALjRrc+7X8vorcAS7UDvaJDtBKS2OU+eM1rIpdPR2c3cS7awSDbevT Xrh85unOKA== -----END CERTIFICATE-----Generated at Mon Oct 12 22:30:00 2026 by rpki-client