$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: PrlM2vJGAYo/EiOS1ZgPfFWLbKDskWKMfqzF3DHNqaA= Subject key identifier: 2B:2B:F6:83:E5:67:FA:EE:CB:1C:9B:1F:A0:37:F0:34:2F:B4:54:9E Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 74624D0E21BA5C0ECCF478A1CC3DDD41E89FE62C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 18:17:15 +0000 Manifest this update: Mon 12 Oct 2026 18:12:15 +0000 Manifest next update: Fri 16 Oct 2026 05:30:15 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: JhxsvF2/xLH7tzJxd6GEekFAM869Yj9H5dlxDMQB4bA=) 2: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 3: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 4: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (hash: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=) 5: 3131352e3137342e302e302f31382d3138203d3e2030.roa (hash: Bs4OTtUy9z+wglOhQh5hEIPsimXC+0WIM208ZqWyuXQ=) 6: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 7: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (hash: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=) 8: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (hash: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:62:4d:0e:21:ba:5c:0e:cc:f4:78:a1:cc:3d:dd:41:e8:9f:e6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Oct 12 18:12:15 2026 GMT Not After : Oct 16 05:30:15 2026 GMT Subject: CN=2B2BF683E567FAEECB1C9B1FA037F0342FB4549E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:2c:f6:9f:dd:db:2d:7f:01:3c:91:61:6a: 4b:f6:3a:24:a7:b5:48:f6:7a:6e:f2:5a:ac:22:e4: e9:f6:16:ab:c1:16:6f:01:82:1c:af:cd:38:36:e9: 99:60:1b:d7:91:2d:55:4c:9b:07:e7:0d:69:31:db: 3f:6a:38:5a:9d:95:a7:84:a2:b0:82:6c:16:6a:eb: 14:b8:67:1a:94:9b:62:77:30:b5:05:1a:21:be:1b: af:c4:70:5b:2f:ad:48:a3:c0:99:cd:fe:6d:99:63: 57:8a:4d:40:dd:23:2a:c0:6f:e1:ee:03:9e:1a:84: d3:b2:ae:70:87:b3:d2:d7:eb:a1:ce:a3:6b:36:15: 40:4c:75:0f:e4:57:36:46:33:4a:86:67:05:69:4f: 1d:e9:88:8f:50:42:12:7e:84:3e:0a:64:4d:42:74: 7d:69:af:f1:e7:43:64:83:4b:7a:cc:85:77:9a:b9: 62:6e:32:fa:01:c7:1a:ac:de:56:8d:4c:9a:a1:45: 4c:1b:da:9c:ac:4d:56:3f:5b:f1:63:d3:6a:b3:ba: 54:1a:9e:b0:4c:4f:36:51:76:93:f4:6c:de:d4:b4: 16:41:2d:48:e2:08:9d:b8:f4:43:a9:30:e8:01:5e: 6d:fa:de:38:a3:b9:f7:ac:77:90:03:1b:6d:8c:a0: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:F6:83:E5:67:FA:EE:CB:1C:9B:1F:A0:37:F0:34:2F:B4:54:9E X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:09:e5:c8:5b:23:56:0d:46:55:58:ae:a8:4b:2d:8c:c4: 8c:c7:9d:37:cf:8d:9f:72:86:0b:11:7a:b9:74:d2:7f:08:f5: df:c7:4d:d8:e6:66:f2:1c:49:24:41:5b:79:81:c5:ac:02:09: ab:f3:7f:ce:f5:79:98:dc:c5:f8:73:f9:20:f9:9a:95:9f:2c: af:90:51:79:62:54:02:9a:ee:0d:91:3f:42:e4:57:70:70:e4: a1:d7:93:5b:04:3b:12:bd:da:a8:e5:ff:13:b2:3c:33:7c:97: c8:bd:81:5f:45:e5:56:47:37:d3:86:f3:05:1d:87:eb:0b:46: 60:8f:86:eb:ac:d3:6a:ca:3e:44:c9:fc:37:06:69:e0:e9:e9: bd:74:e1:6e:41:d2:2f:d5:a2:e1:bc:11:3a:f0:4e:bd:78:c8: 75:6e:60:27:df:92:0b:f0:a1:34:42:df:eb:4e:b5:08:21:8b: 5e:8a:df:c0:f5:cb:ac:d0:da:a1:95:0e:b8:9d:df:94:b6:c1: 68:70:6c:88:c6:6e:7e:2a:52:6f:ec:39:2e:2d:a2:8c:b8:7d: 60:db:8b:a0:0f:94:7b:4d:94:5d:6c:2d:10:57:dd:44:04:28: ba:65:5d:ad:aa:81:00:89:72:9a:f3:d6:3b:b0:6f:7e:b4:3b: 91:f9:af:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdGJNDiG6XA7M9HihzD3dQeif5iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjEwMTIxODEyMTVaFw0yNjEwMTYwNTMwMTVaMDMxMTAvBgNV BAMTKDJCMkJGNjgzRTU2N0ZBRUVDQjFDOUIxRkEwMzdGMDM0MkZCNDU0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGSz2n93bLX8BPJFhakv2OiSn tUj2em7yWqwi5On2FqvBFm8BghyvzTg26ZlgG9eRLVVMmwfnDWkx2z9qOFqdlaeE orCCbBZq6xS4ZxqUm2J3MLUFGiG+G6/EcFsvrUijwJnN/m2ZY1eKTUDdIyrAb+Hu A54ahNOyrnCHs9LX66HOo2s2FUBMdQ/kVzZGM0qGZwVpTx3piI9QQhJ+hD4KZE1C dH1pr/HnQ2SDS3rMhXeauWJuMvoBxxqs3laNTJqhRUwb2pysTVY/W/Fj02qzulQa nrBMTzZRdpP0bN7UtBZBLUjiCJ249EOpMOgBXm363jijufesd5ADG22MoEbHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKyv2g+Vn+u7LHJsfoDfwNC+0VJ4wHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej0J5chbI1YN RlVYrqhLLYzEjMedN8+Nn3KGCxF6uXTSfwj138dN2OZm8hxJJEFbeYHFrAIJq/N/ zvV5mNzF+HP5IPmalZ8sr5BReWJUApruDZE/QuRXcHDkodeTWwQ7Er3aqOX/E7I8 M3yXyL2BX0XlVkc304bzBR2H6wtGYI+G66zTaso+RMn8NwZp4OnpvXThbkHSL9Wi 4bwROvBOvXjIdW5gJ9+SC/ChNELf6061CCGLXorfwPXLrNDaoZUOuJ3flLbBaHBs iMZufipSb+w5Li2ijLh9YNuLoA+Ue02UXWwtEFfdRAQoumVdraqBAIlymvPWO7Bv frQ7kfmvHg== -----END CERTIFICATE-----Generated at Tue Oct 13 22:54:10 2026 by rpki-client