$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: tFpdIzCgV9MNUGGRNiaUzei0/rRExIXdhse6uTIB3To= Subject key identifier: 8E:38:7F:8D:11:97:0F:40:50:91:83:AD:A4:25:96:A0:90:1B:75:EC Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 06025D319BFA9567D74AD17093B9FCEAC83D0C1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: 0140 Signing time: Thu 10 Sep 2026 07:45:58 +0000 Manifest this update: Thu 10 Sep 2026 07:40:58 +0000 Manifest next update: Sun 13 Sep 2026 09:19:58 +0000 Files and hashes: 1: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 2: AS4847.roa (hash: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY=) 3: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: rKMZiCcoDsCyxyxfCLKkEQ2hBLpDKCvkymBrv0G+aIQ=) 4: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 5: AS131314.roa (hash: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE=) 6: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 7: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) 8: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) 9: AS4808.roa (hash: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I=) 10: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:02:5d:31:9b:fa:95:67:d7:4a:d1:70:93:b9:fc:ea:c8:3d:0c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Sep 10 07:40:58 2026 GMT Not After : Sep 13 09:19:58 2026 GMT Subject: CN=8E387F8D11970F40509183ADA42596A0901B75EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e6:9e:a4:10:c6:a4:82:1e:fd:ad:f6:2b:8e: 2c:4f:73:57:30:9c:eb:e6:0b:bb:ee:42:6c:1e:15: bb:7d:d7:4a:db:d7:0b:13:db:07:0d:75:12:41:12: f5:40:41:a5:59:bd:80:09:96:f2:db:a7:b8:5b:13: 36:df:c0:c7:59:c4:46:10:31:35:79:6b:f9:80:56: 16:83:44:09:09:6d:62:e8:b9:1d:71:ac:ca:6a:36: ef:22:3d:c4:1d:15:2c:55:b4:d2:53:9d:f2:50:a6: 06:f2:2a:b4:02:f2:29:69:b9:c2:6b:67:2b:4e:91: 58:5a:b2:84:0b:0f:66:4e:ff:09:ac:3d:af:05:96: 73:50:27:17:05:c8:da:d3:6b:42:1b:69:82:91:97: 77:6e:44:ee:c5:fb:e0:9e:c6:1b:9c:93:12:8f:ea: f7:68:a1:1f:be:95:a2:68:a9:c8:32:7b:f6:d5:bd: 12:b4:2b:45:e6:06:e6:21:57:2b:57:4e:9a:46:22: 6b:13:93:87:a3:81:eb:76:ea:66:b2:87:fa:44:70: d5:10:0e:cd:57:ee:dd:f5:54:0f:4d:62:bd:4a:2d: 1e:57:6b:6e:01:24:cb:b2:b9:c6:96:5e:52:96:0c: d1:66:67:b5:a8:a2:9c:76:07:6f:3d:d4:3a:b1:30: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:7F:8D:11:97:0F:40:50:91:83:AD:A4:25:96:A0:90:1B:75:EC X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e0:db:85:e8:53:7e:38:ce:0c:d0:b2:d5:e4:17:4a:16:54: cd:65:c7:c8:91:92:7e:4a:54:65:ae:10:bd:e1:dc:b4:6e:55: af:54:9e:f7:54:18:61:63:1d:82:d4:2a:ba:25:66:1f:2c:2e: 5e:7f:db:2f:dd:f6:1f:40:11:1d:b7:e0:30:d2:44:41:7f:bb: c4:2f:ac:10:02:dc:cc:ce:60:84:57:b5:72:dd:4d:37:5f:8c: 6e:04:4e:e5:b2:61:39:2d:36:c3:9a:e8:45:0c:b8:5a:86:3a: b2:35:46:42:8b:c8:5f:2f:69:7a:2b:af:47:f2:15:d7:1c:c3: 2e:f1:68:a1:bc:52:9c:6e:2a:66:33:3b:55:3a:58:33:c2:0c: a9:34:9e:c2:02:7b:23:6c:8b:39:3f:63:f0:fe:43:49:7a:f4: cd:2a:34:ec:66:b1:fe:f9:2a:66:f8:24:fb:ce:b9:5e:31:40: 9c:78:ad:c1:14:52:f8:c5:97:f0:90:80:2c:6e:c1:74:5b:84: 31:e7:5e:ab:30:73:66:d0:5b:c6:6c:db:cb:8f:fc:ea:9d:45: 8d:9b:9d:af:1a:35:1d:81:04:8c:63:6e:8a:ea:80:e6:a0:72: b7:e8:c4:76:a1:35:a3:96:e3:65:ab:6f:47:a5:ec:d3:8e:6f: e0:30:97:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBgJdMZv6lWfXStFwk7n86sg9DB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA5MTAwNzQwNThaFw0yNjA5MTMwOTE5NThaMDMxMTAvBgNV BAMTKDhFMzg3RjhEMTE5NzBGNDA1MDkxODNBREE0MjU5NkEwOTAxQjc1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy5p6kEMakgh79rfYrjixPc1cw nOvmC7vuQmweFbt910rb1wsT2wcNdRJBEvVAQaVZvYAJlvLbp7hbEzbfwMdZxEYQ MTV5a/mAVhaDRAkJbWLouR1xrMpqNu8iPcQdFSxVtNJTnfJQpgbyKrQC8ilpucJr ZytOkVhasoQLD2ZO/wmsPa8FlnNQJxcFyNrTa0IbaYKRl3duRO7F++CexhuckxKP 6vdooR++laJoqcgye/bVvRK0K0XmBuYhVytXTppGImsTk4ejget26mayh/pEcNUQ Ds1X7t31VA9NYr1KLR5Xa24BJMuyucaWXlKWDNFmZ7Woopx2B2891DqxMP+nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjjh/jRGXD0BQkYOtpCWWoJAbdewwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+DbhehTfjjO DNCy1eQXShZUzWXHyJGSfkpUZa4QveHctG5Vr1Se91QYYWMdgtQquiVmHywuXn/b L932H0ARHbfgMNJEQX+7xC+sEALczM5ghFe1ct1NN1+MbgRO5bJhOS02w5roRQy4 WoY6sjVGQovIXy9peiuvR/IV1xzDLvFoobxSnG4qZjM7VTpYM8IMqTSewgJ7I2yL OT9j8P5DSXr0zSo07Gax/vkqZvgk+865XjFAnHitwRRS+MWX8JCALG7BdFuEMede qzBzZtBbxmzby4/86p1FjZudrxo1HYEEjGNuiuqA5qByt+jEdqE1o5bjZatvR6Xs 045v4DCX/w== -----END CERTIFICATE-----Generated at Thu Sep 10 10:44:13 2026 by rpki-client