$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: W7PKtAvaeTbAKa6XONPvnbTQfVSxsUlcY83UNUUqtO8= Subject key identifier: AA:4B:37:43:08:D5:29:E3:F1:73:C9:90:86:7A:23:4D:E1:D0:DC:9C Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 5B3488C9B1BD530BD86FEB251C61403DFD657A77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 0146 Signing time: Tue 27 Oct 2026 10:04:35 +0000 Manifest this update: Tue 27 Oct 2026 09:59:35 +0000 Manifest next update: Fri 30 Oct 2026 13:50:35 +0000 Files and hashes: 1: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=) 2: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=) 3: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=) 4: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: vo1x2SQFHff7e08Xp3ZaNeyKMch8LDEGH3DuVY+ZKHE=) 5: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=) 6: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=) 7: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=) 8: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=) 9: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=) 10: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 11: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=) 12: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 13: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 14: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) 15: 3131392e33382e3232342e302f32342d3234203d3e2034383337.roa (hash: qp/xe4dbx92bg7b1OJL31k1LFy6tICSbK/7RkEnbYz4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:34:88:c9:b1:bd:53:0b:d8:6f:eb:25:1c:61:40:3d:fd:65:7a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Oct 27 09:59:35 2026 GMT Not After : Oct 30 13:50:35 2026 GMT Subject: CN=AA4B374308D529E3F173C990867A234DE1D0DC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:a8:49:c8:1e:dc:1f:cb:54:df:63:c2:21: a3:79:72:15:6b:da:05:ae:32:e1:92:a6:80:16:9c: f1:39:6a:b4:29:32:94:74:a2:c7:e6:d6:81:63:16: 33:a0:5b:22:e8:5d:27:5a:0e:e5:20:81:59:63:7f: db:65:46:d3:08:eb:44:dd:32:0d:33:53:83:0c:45: c9:19:79:ee:02:7d:99:f9:2c:f4:f6:ce:73:87:79: e2:72:5f:3e:1c:63:27:34:4f:a4:ce:96:b0:82:0d: 13:bc:7a:7f:e8:a5:3b:21:eb:93:78:ae:60:fc:80: 7a:ef:ce:fc:50:0d:12:7d:38:84:a1:ac:fd:f9:a6: 77:c3:a0:32:c2:dd:d7:bc:36:09:59:74:b9:77:a6: 30:e0:73:53:0b:13:ba:73:51:bc:42:1c:22:c6:e4: 6d:d8:69:be:cd:ea:bb:ce:1f:6b:bf:d5:b7:21:03: 9b:7e:cd:1a:b2:21:6e:c5:e8:d4:40:91:d4:5a:c8: 8d:c3:2a:e8:f7:1a:18:09:19:68:b0:56:34:35:c0: 71:db:ca:d5:14:8d:9f:2d:fb:2f:f1:4b:18:02:cd: 7e:aa:5e:3b:86:b0:b7:62:3e:e6:ed:d8:28:21:14: b8:66:e1:41:92:a4:5d:69:fb:a9:93:2c:20:af:78: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4B:37:43:08:D5:29:E3:F1:73:C9:90:86:7A:23:4D:E1:D0:DC:9C X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a1:02:5f:46:96:be:3d:99:26:d0:43:7d:40:71:c9:f2:18: c4:2e:19:ca:4a:92:0f:3b:f4:40:ce:a8:2e:d0:1b:a2:9e:4a: e5:57:8b:bc:64:c2:42:93:db:9a:6f:02:22:91:fe:56:54:c9: 10:7d:2b:3f:00:1e:b6:df:8e:c7:94:52:c2:47:f2:f7:2c:88: d7:00:21:6c:21:ee:5a:03:79:a6:45:2f:2a:49:49:35:1e:52: 94:a2:e1:d5:44:96:23:05:fc:69:78:98:63:b6:1c:ef:69:60: 02:d6:b6:51:4f:f8:64:96:07:9c:b5:cd:9a:3f:43:9b:d6:1d: d3:5c:ba:77:fa:0c:79:67:39:0f:15:12:db:35:95:16:91:83: 2e:34:20:5c:a7:96:81:c6:75:9a:cd:34:c1:98:9c:ed:56:a0: 5e:ce:ad:67:f1:a6:63:16:d7:93:6c:57:3a:f7:31:28:24:d3: 82:96:31:d0:c8:88:65:f5:54:f4:5c:d7:b3:dc:88:6b:27:1a: 6a:25:41:d9:20:56:35:80:9e:8a:64:d8:df:a6:17:61:19:cd: 92:41:d6:96:0f:50:c9:a1:7b:d8:42:a7:d9:7b:36:93:e8:6d: 78:bc:a8:e2:29:2d:46:33:83:a1:e4:96:59:3e:ab:9b:3b:45: 9a:f0:64:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWzSIybG9UwvYb+slHGFAPf1lencwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjEwMjcwOTU5MzVaFw0yNjEwMzAxMzUwMzVaMDMxMTAvBgNV BAMTKEFBNEIzNzQzMDhENTI5RTNGMTczQzk5MDg2N0EyMzRERTFEMERDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHahJyB7cH8tU32PCIaN5chVr 2gWuMuGSpoAWnPE5arQpMpR0osfm1oFjFjOgWyLoXSdaDuUggVljf9tlRtMI60Td Mg0zU4MMRckZee4CfZn5LPT2znOHeeJyXz4cYyc0T6TOlrCCDRO8en/opTsh65N4 rmD8gHrvzvxQDRJ9OIShrP35pnfDoDLC3de8NglZdLl3pjDgc1MLE7pzUbxCHCLG 5G3Yab7N6rvOH2u/1bchA5t+zRqyIW7F6NRAkdRayI3DKuj3GhgJGWiwVjQ1wHHb ytUUjZ8t+y/xSxgCzX6qXjuGsLdiPubt2CghFLhm4UGSpF1p+6mTLCCveGVdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqks3QwjVKePxc8mQhnojTeHQ3JwwHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaECX0aWvj2Z JtBDfUBxyfIYxC4ZykqSDzv0QM6oLtAbop5K5VeLvGTCQpPbmm8CIpH+VlTJEH0r PwAett+Ox5RSwkfy9yyI1wAhbCHuWgN5pkUvKklJNR5SlKLh1USWIwX8aXiYY7Yc 72lgAta2UU/4ZJYHnLXNmj9Dm9Yd01y6d/oMeWc5DxUS2zWVFpGDLjQgXKeWgcZ1 ms00wZic7VagXs6tZ/GmYxbXk2xXOvcxKCTTgpYx0MiIZfVU9FzXs9yIaycaaiVB 2SBWNYCeimTY36YXYRnNkkHWlg9QyaF72EKn2Xs2k+hteLyo4iktRjODoeSWWT6r mztFmvBkcw== -----END CERTIFICATE-----Generated at Tue Oct 27 20:36:44 2026 by rpki-client