$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: PdWUorZwVBq1nEu2pNYSj/vP7b6iOYJLdcGbFq0Lxsc= Subject key identifier: 7B:6C:C2:1E:1E:94:F0:F8:A8:26:4E:20:A4:D1:84:6B:04:50:5A:BB Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 4E08424E435C0C26A805CF1FA0BB942B21C6DF9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: 0155 Signing time: Tue 27 Oct 2026 12:59:43 +0000 Manifest this update: Tue 27 Oct 2026 12:54:43 +0000 Manifest next update: Fri 30 Oct 2026 20:58:43 +0000 Files and hashes: 1: AS131314.roa (hash: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE=) 2: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: Fxp7pzyqBc4AEwMYx5N/rNMsLYNxEsQ44qNz4q36rsg=) 3: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) 4: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 5: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) 6: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 7: AS4808.roa (hash: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I=) 8: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) 9: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 10: AS4847.roa (hash: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:08:42:4e:43:5c:0c:26:a8:05:cf:1f:a0:bb:94:2b:21:c6:df:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Oct 27 12:54:43 2026 GMT Not After : Oct 30 20:58:43 2026 GMT Subject: CN=7B6CC21E1E94F0F8A8264E20A4D1846B04505ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:68:e9:20:3e:a9:6d:15:6f:86:96:da:fa: e2:b5:9f:3f:53:e2:a5:a3:eb:2f:3f:2d:5d:98:c0: 58:c3:da:cd:cf:8b:d3:40:80:84:72:f6:2a:95:14: 97:a5:82:0c:57:be:de:3a:52:30:97:8e:a4:59:85: 45:c2:4d:b0:c7:15:f7:a1:b5:d0:04:df:6e:44:93: 1a:6c:b7:aa:4b:9e:80:a1:46:e3:b1:b1:8f:55:64: dd:b5:99:a7:1c:f6:f5:4d:23:e9:5a:e1:5e:e8:da: 87:d5:60:31:66:08:22:bb:25:1f:27:90:1d:03:00: ce:96:6f:31:f6:51:c1:e4:62:d0:7a:e7:c9:3f:0a: a2:d0:ea:ca:bd:23:b4:8b:8a:5b:2b:7e:83:09:6a: 23:90:e0:50:ea:fc:3f:f0:af:09:3d:f2:ab:86:63: 35:8a:85:22:3d:9b:19:b4:97:27:1a:14:f9:d5:13: 0a:d2:9b:af:2c:2e:64:88:4d:ca:f0:53:cb:3d:f3: db:c2:81:14:4e:de:30:17:f1:7a:8b:09:5a:ab:16: 67:71:c6:c9:3d:67:64:9a:59:f8:1e:ba:8a:b4:45: 9c:01:40:4e:59:09:61:67:ab:16:37:34:b1:c9:da: e1:d9:fb:c7:5f:44:62:76:3d:44:81:1e:3b:25:4f: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:C2:1E:1E:94:F0:F8:A8:26:4E:20:A4:D1:84:6B:04:50:5A:BB X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:37:cc:57:12:cb:b3:ac:e3:f2:26:be:5e:c4:47:cc:11:f9: 67:93:a1:09:68:36:07:2e:f9:f1:d6:d3:9f:18:9b:6b:41:03: cd:2c:c9:29:8a:53:f1:1e:40:20:15:9a:eb:62:32:2f:74:7b: 59:d2:92:2c:9a:57:9b:38:69:a0:f9:fe:f3:49:b8:6a:88:0c: 68:1e:d8:de:d7:dc:d5:96:4e:9e:d0:ec:f9:1d:10:02:2d:9b: 93:d5:9c:42:4e:4f:b3:b2:43:56:3d:21:dc:6a:2e:d1:00:cc: c0:62:e7:4b:49:59:3c:62:da:12:0b:98:60:d9:dd:f4:b1:4b: 84:a2:e5:6a:18:b0:63:ab:c2:a7:34:47:e8:57:7a:e1:49:61: 43:d8:2a:f9:25:94:8b:5f:d8:83:f6:0b:f1:55:bc:0c:79:06: 2e:35:12:53:ff:2d:4b:a3:33:34:90:43:59:3c:1f:89:12:0f: 41:0e:dc:3a:f9:ca:80:00:8d:c5:cf:a4:ab:37:60:4d:a4:80: 4b:37:95:0c:57:af:aa:08:2c:92:00:8a:55:5d:d4:7b:e0:12: d7:ce:af:e6:b4:59:d5:16:3b:42:e8:06:2d:aa:c0:54:c5:13: d3:6b:1b:a7:c5:09:ea:29:16:a9:c4:0f:32:7b:a4:02:ad:38: d4:28:3d:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTghCTkNcDCaoBc8foLuUKyHG358wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjEwMjcxMjU0NDNaFw0yNjEwMzAyMDU4NDNaMDMxMTAvBgNV BAMTKDdCNkNDMjFFMUU5NEYwRjhBODI2NEUyMEE0RDE4NDZCMDQ1MDVBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlP2jpID6pbRVvhpba+uK1nz9T 4qWj6y8/LV2YwFjD2s3Pi9NAgIRy9iqVFJelggxXvt46UjCXjqRZhUXCTbDHFfeh tdAE325Ekxpst6pLnoChRuOxsY9VZN21macc9vVNI+la4V7o2ofVYDFmCCK7JR8n kB0DAM6WbzH2UcHkYtB658k/CqLQ6sq9I7SLilsrfoMJaiOQ4FDq/D/wrwk98quG YzWKhSI9mxm0lycaFPnVEwrSm68sLmSITcrwU8s989vCgRRO3jAX8XqLCVqrFmdx xsk9Z2SaWfgeuoq0RZwBQE5ZCWFnqxY3NLHJ2uHZ+8dfRGJ2PUSBHjslT9a1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe2zCHh6U8PioJk4gpNGEawRQWrswHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzfMVxLLs6zj 8ia+XsRHzBH5Z5OhCWg2By758dbTnxiba0EDzSzJKYpT8R5AIBWa62IyL3R7WdKS LJpXmzhpoPn+80m4aogMaB7Y3tfc1ZZOntDs+R0QAi2bk9WcQk5Ps7JDVj0h3Gou 0QDMwGLnS0lZPGLaEguYYNnd9LFLhKLlahiwY6vCpzRH6Fd64UlhQ9gq+SWUi1/Y g/YL8VW8DHkGLjUSU/8tS6MzNJBDWTwfiRIPQQ7cOvnKgACNxc+kqzdgTaSASzeV DFevqggskgCKVV3Ue+AS186v5rRZ1RY7QugGLarAVMUT02sbp8UJ6ikWqcQPMnuk Aq041Cg9yg== -----END CERTIFICATE-----Generated at Tue Oct 27 23:05:24 2026 by rpki-client