$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: p47HPfQRCrWvzGxciTeySSYThTSDY3nfrWF6aV2KKyQ= Subject key identifier: 8A:03:E7:F1:28:AB:64:28:E7:D8:BE:C3:D0:1F:FB:CC:87:5C:E6:F7 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 7A45EA4294226DA9F36F44241307BC929D786ED9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:47:45 +0000 Manifest this update: Fri 28 Aug 2026 06:42:45 +0000 Manifest next update: Mon 31 Aug 2026 11:42:45 +0000 Files and hashes: 1: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 2: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: IQRhBGL44qCqDbwpp2CjRtqJksofMCrt1nRaGYrL448=) 3: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 4: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 5: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 6: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 7: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:ea:42:94:22:6d:a9:f3:6f:44:24:13:07:bc:92:9d:78:6e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Aug 28 06:42:45 2026 GMT Not After : Aug 31 11:42:45 2026 GMT Subject: CN=8A03E7F128AB6428E7D8BEC3D01FFBCC875CE6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:f1:14:85:3f:b5:51:04:b5:a4:78:0f:08: 10:d1:8a:2a:4f:e7:39:ca:4f:6a:03:e5:b0:10:21: b4:50:4f:03:46:31:2c:2a:9e:a6:6b:26:1f:bb:9e: 9d:d2:0f:4a:3a:9c:9c:0c:a1:59:97:2b:c7:10:e3: 2c:fa:ba:af:ff:fa:c8:89:e1:34:6f:8f:58:15:67: 9d:15:ca:e3:e4:cd:2d:bd:49:fa:85:66:80:fb:b5: f5:d3:8c:d6:13:3e:9f:3d:25:7b:d1:c5:ae:1e:5e: b5:fb:91:48:75:6a:95:8c:1c:92:3a:9a:33:db:36: 0d:84:4d:d4:f1:03:16:0e:a2:1a:b0:de:15:47:1f: 2b:b6:c5:2b:da:94:ff:41:5e:72:e2:12:f7:b3:d0: 87:5c:ab:b0:00:0e:85:1d:d2:19:14:57:d5:65:16: b3:e1:c7:24:d9:0b:68:28:37:6b:19:da:f2:08:31: f0:04:d8:32:90:55:08:38:2f:fd:fe:ec:2e:3f:c1: 1d:ac:c4:63:44:fd:f7:54:5e:a4:0a:91:05:74:1b: 6c:2f:4b:36:4e:3a:4f:d4:c0:d2:cb:c4:28:90:25: 94:77:d1:19:91:b8:07:5b:42:2d:ae:8e:7b:26:c8: d8:4e:2a:ca:d1:dc:24:ea:b7:cb:80:80:b9:41:6d: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:E7:F1:28:AB:64:28:E7:D8:BE:C3:D0:1F:FB:CC:87:5C:E6:F7 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:2f:b2:e5:de:ea:98:9e:56:32:5d:97:3c:79:4b:3a:a6:c8: 9b:2b:00:dc:f4:e9:06:f2:72:e2:86:58:82:46:9e:8e:6f:81: 2d:0c:8f:93:bf:79:d4:8b:ec:1b:fd:55:bf:9e:f4:c2:f4:46: 4e:a8:d3:ec:51:32:a9:c7:82:57:34:d1:f0:98:18:d5:df:e3: 45:91:dd:4a:9f:c3:ce:a7:76:0c:50:d9:af:fe:66:32:2b:78: 5a:6f:22:f6:87:9f:fc:f4:ce:ac:09:75:44:73:35:5b:01:21: 0f:73:2a:e8:53:87:24:dc:bb:32:ab:ef:d1:29:ba:44:58:12: fb:42:ec:0c:30:2b:08:f7:dc:a7:c2:55:93:a7:6c:e2:50:14: 8d:d9:67:d6:eb:b3:db:a5:a4:63:28:36:9f:9d:aa:0a:9a:39: 95:d3:69:a2:79:9f:50:25:df:93:48:c2:57:40:5d:6f:49:a8: 6d:b1:32:92:d4:41:1b:6e:25:20:29:3e:d0:b3:79:20:7a:67: 7b:d6:85:ce:7a:74:b7:ff:fb:dd:4c:6b:a5:52:27:28:c1:92: 1d:0a:32:fe:71:aa:cf:a5:c0:88:7a:15:3b:79:26:f2:2b:0e: b6:99:8d:65:05:e2:ab:11:26:14:ab:ab:af:eb:27:ee:d8:45: 68:43:eb:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUekXqQpQibanzb0QkEwe8kp14btkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjA4MjgwNjQyNDVaFw0yNjA4MzExMTQyNDVaMDMxMTAvBgNV BAMTKDhBMDNFN0YxMjhBQjY0MjhFN0Q4QkVDM0QwMUZGQkNDODc1Q0U2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbPEUhT+1UQS1pHgPCBDRiipP 5znKT2oD5bAQIbRQTwNGMSwqnqZrJh+7np3SD0o6nJwMoVmXK8cQ4yz6uq//+siJ 4TRvj1gVZ50VyuPkzS29SfqFZoD7tfXTjNYTPp89JXvRxa4eXrX7kUh1apWMHJI6 mjPbNg2ETdTxAxYOohqw3hVHHyu2xSvalP9BXnLiEvez0Idcq7AADoUd0hkUV9Vl FrPhxyTZC2goN2sZ2vIIMfAE2DKQVQg4L/3+7C4/wR2sxGNE/fdUXqQKkQV0G2wv SzZOOk/UwNLLxCiQJZR30RmRuAdbQi2ujnsmyNhOKsrR3CTqt8uAgLlBbbLHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUigPn8SirZCjn2L7D0B/7zIdc5vcwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy+y5d7qmJ5W Ml2XPHlLOqbImysA3PTpBvJy4oZYgkaejm+BLQyPk7951IvsG/1Vv570wvRGTqjT 7FEyqceCVzTR8JgY1d/jRZHdSp/Dzqd2DFDZr/5mMit4Wm8i9oef/PTOrAl1RHM1 WwEhD3Mq6FOHJNy7Mqvv0Sm6RFgS+0LsDDArCPfcp8JVk6ds4lAUjdln1uuz26Wk Yyg2n52qCpo5ldNponmfUCXfk0jCV0Bdb0mobbEyktRBG24lICk+0LN5IHpne9aF znp0t//73UxrpVInKMGSHQoy/nGqz6XAiHoVO3km8isOtpmNZQXiqxEmFKurr+sn 7thFaEPrfA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:25 2026 by rpki-client