$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: KW6uTi3ga9cZNjikawKMRHvHiq4N0l3Bqni8Z0dYdVY= Subject key identifier: 0E:81:DC:3A:EF:52:03:DE:63:4C:0B:75:31:24:14:F8:07:99:9B:87 Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 79AA1858326CCFE9E6A58C66C319AFAC449E1497 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 0145 Signing time: Sun 25 Oct 2026 01:47:07 +0000 Manifest this update: Sun 25 Oct 2026 01:42:07 +0000 Manifest next update: Wed 28 Oct 2026 10:04:07 +0000 Files and hashes: 1: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=) 2: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=) 3: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: 2VlB9WyfnREc9VTx6zHssObl/R3wKVnAa6zz3DG2+ms=) 4: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=) 5: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) 6: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 7: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=) 8: 3131392e33382e3232342e302f32342d3234203d3e2034383337.roa (hash: qp/xe4dbx92bg7b1OJL31k1LFy6tICSbK/7RkEnbYz4=) 9: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=) 10: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=) 11: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 12: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=) 13: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=) 14: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 15: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 10:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:aa:18:58:32:6c:cf:e9:e6:a5:8c:66:c3:19:af:ac:44:9e:14:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Oct 25 01:42:07 2026 GMT Not After : Oct 28 10:04:07 2026 GMT Subject: CN=0E81DC3AEF5203DE634C0B75312414F807999B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:82:10:c5:28:55:db:eb:fb:8b:3b:c5:a9:00: ce:db:53:4d:73:c3:1c:60:c2:ef:37:5f:9e:8c:c9: b4:07:a5:e4:dd:1f:3e:28:16:b5:15:8e:1f:57:26: 1b:2f:6e:bc:ab:96:f4:08:8c:27:61:35:5c:07:4f: 84:5f:01:60:2a:42:37:05:18:b1:23:d1:03:e6:f2: 43:f9:bf:55:bb:1b:b8:bb:65:cc:31:49:4c:4c:bf: 96:8c:c8:36:5e:d7:1f:cd:f5:78:b6:0b:70:30:72: b9:40:6d:42:32:77:0f:13:58:94:44:f2:43:3b:9a: 6c:c9:00:de:dc:6a:7d:10:fd:53:67:6d:0e:a4:1d: e9:f3:77:4f:34:75:76:c5:6f:49:35:c2:a2:bf:d6: 09:61:73:56:c7:bf:45:dd:46:a3:99:27:a7:ee:fd: e8:59:ee:32:e9:ae:c0:e0:af:c4:3f:78:49:a0:43: cd:c9:69:f5:db:dd:c9:13:10:6c:be:56:e4:5d:ae: a2:13:65:8f:87:65:90:80:c7:5c:67:e6:c8:82:84: 4a:b6:f4:6c:c8:ce:db:a3:3c:06:43:46:60:3e:ca: a8:64:e5:61:bb:47:e3:96:6f:11:58:5d:55:96:f3: 55:67:90:30:de:b3:31:b7:7d:cb:41:04:a6:9a:f7: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:DC:3A:EF:52:03:DE:63:4C:0B:75:31:24:14:F8:07:99:9B:87 X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:43:d9:ea:8b:d5:38:5f:49:55:98:a7:26:2f:4f:49:18:a8: 6e:ff:bd:02:34:e4:d0:5b:cd:ef:75:58:02:78:5b:3f:29:ba: 31:02:9e:b2:79:0b:ab:68:eb:c8:c6:cc:6d:52:1d:fb:6a:97: f1:3d:d5:c1:33:af:fd:91:d4:6f:e3:2d:56:5b:a0:ca:3d:f4: cd:69:bc:c6:83:87:6a:72:bf:5a:78:67:1b:9d:5d:33:1f:b8: 15:7c:e0:37:d8:fe:f8:34:6f:c4:26:fb:f0:66:30:3b:cd:4b: 96:d8:eb:3e:bf:49:43:8b:ca:a7:27:c3:11:3c:82:f6:46:d9: 15:07:38:80:1e:f4:08:d8:75:29:cc:f2:7e:b5:08:ec:a5:eb: 07:d6:a6:08:d2:16:0e:a1:e2:08:47:64:7f:fd:37:61:e6:a1: 43:27:a5:23:75:97:43:10:e3:8b:01:5b:b6:ab:f6:72:7b:83: b7:c1:79:91:ed:ab:15:69:2e:ec:f9:24:e3:c6:4e:57:7a:da: e6:6c:58:2c:ba:ce:df:59:96:1e:8a:fa:5a:36:ec:f3:8d:df: 63:1f:71:10:1a:b2:45:d2:b8:3b:75:47:06:77:76:9d:e5:fe: 3d:53:46:4b:e6:b0:37:52:e0:41:7f:4d:c6:d6:e7:3a:75:df: b9:5d:50:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeaoYWDJsz+nmpYxmwxmvrESeFJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjEwMjUwMTQyMDdaFw0yNjEwMjgxMDA0MDdaMDMxMTAvBgNV BAMTKDBFODFEQzNBRUY1MjAzREU2MzRDMEI3NTMxMjQxNEY4MDc5OTlCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnghDFKFXb6/uLO8WpAM7bU01z wxxgwu83X56MybQHpeTdHz4oFrUVjh9XJhsvbryrlvQIjCdhNVwHT4RfAWAqQjcF GLEj0QPm8kP5v1W7G7i7ZcwxSUxMv5aMyDZe1x/N9Xi2C3AwcrlAbUIydw8TWJRE 8kM7mmzJAN7can0Q/VNnbQ6kHenzd080dXbFb0k1wqK/1glhc1bHv0XdRqOZJ6fu /ehZ7jLprsDgr8Q/eEmgQ83JafXb3ckTEGy+VuRdrqITZY+HZZCAx1xn5siChEq2 9GzIztujPAZDRmA+yqhk5WG7R+OWbxFYXVWW81VnkDDeszG3fctBBKaa92SfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDoHcOu9SA95jTAt1MSQU+AeZm4cwHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkPZ6ovVOF9J VZinJi9PSRiobv+9AjTk0FvN73VYAnhbPym6MQKesnkLq2jryMbMbVId+2qX8T3V wTOv/ZHUb+MtVlugyj30zWm8xoOHanK/WnhnG51dMx+4FXzgN9j++DRvxCb78GYw O81LltjrPr9JQ4vKpyfDETyC9kbZFQc4gB70CNh1KczyfrUI7KXrB9amCNIWDqHi CEdkf/03YeahQyelI3WXQxDjiwFbtqv2cnuDt8F5ke2rFWku7Pkk48ZOV3ra5mxY LLrO31mWHor6Wjbs843fYx9xEBqyRdK4O3VHBnd2neX+PVNGS+awN1LgQX9Nxtbn OnXfuV1Q7Q== -----END CERTIFICATE-----Generated at Mon Oct 26 21:18:55 2026 by rpki-client