$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: w6uOsPOTOw4DWrCFWNZ6GZ81bxN0EYWcBUsf28cwjxs= Subject key identifier: E0:9A:43:65:AD:3A:3C:87:7F:94:D2:CC:18:A0:37:EC:83:0D:5D:35 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 1A9CB9477CE33AC041F90C8E491E144C0D35AD59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 0169 Signing time: Sat 10 Oct 2026 07:31:57 +0000 Manifest this update: Sat 10 Oct 2026 07:26:57 +0000 Manifest next update: Tue 13 Oct 2026 19:08:57 +0000 Files and hashes: 1: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 3: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: EysxOXiFkd2C926yzEXNbxUuAX9LceeseDcH4X5NbXQ=) 4: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9c:b9:47:7c:e3:3a:c0:41:f9:0c:8e:49:1e:14:4c:0d:35:ad:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Oct 10 07:26:57 2026 GMT Not After : Oct 13 19:08:57 2026 GMT Subject: CN=E09A4365AD3A3C877F94D2CC18A037EC830D5D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:39:7d:b0:5e:75:7a:dc:7d:a4:a3:76:6f: da:7a:02:4e:d4:a0:bf:3e:43:b9:36:82:24:62:9c: 56:0b:1d:60:e1:1f:84:6c:e6:63:41:80:e8:cf:02: 52:e6:4f:4d:72:5e:d0:45:d5:17:5b:6d:6a:cc:5c: 5d:07:c3:6f:b4:3c:f9:09:fd:6c:67:bf:51:c8:75: 6f:6a:ea:e4:26:e9:f1:ee:ec:c7:f4:ce:42:9c:b9: 0c:64:f2:8a:fe:96:f6:9e:37:b4:fa:02:40:82:0f: c5:dc:8c:70:3c:ad:39:64:1d:18:c6:5a:48:94:53: 72:10:1f:8e:f0:43:b5:8e:96:62:d3:a4:bb:1b:9d: 8c:71:59:ea:68:3e:1c:53:dd:cc:13:b1:37:ba:f1: 3e:16:77:d9:c9:41:3b:32:74:df:fd:47:69:01:02: c5:26:cb:be:d0:52:ac:3b:be:74:24:b2:0c:49:fd: 4b:73:30:1d:b0:9f:69:be:8f:2a:a2:57:eb:d0:08: 04:95:00:cb:3f:5d:f3:eb:65:f1:10:c3:86:8a:4b: 02:5e:48:1d:fe:a6:c9:02:10:3a:41:6a:f2:e4:b6: ff:8f:af:72:4d:21:75:df:46:2c:d3:f9:6d:fb:e8: 20:6c:01:58:c6:d3:ec:26:ae:b9:a9:ac:fe:2e:99: fc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:43:65:AD:3A:3C:87:7F:94:D2:CC:18:A0:37:EC:83:0D:5D:35 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a3:91:93:f3:b3:50:9a:1c:01:93:33:1a:03:15:6d:4c:7c: 01:a6:7c:d1:d9:4a:78:f3:18:79:98:ef:c9:81:9c:a0:61:ab: a1:a6:a6:16:78:d4:b4:c2:8a:76:3d:66:8d:6f:a8:ad:03:87: 15:3b:51:a1:a7:13:55:bb:44:78:38:b3:c9:bd:ab:62:49:75: e9:dc:03:e2:c6:f7:b2:3d:8c:2e:39:f5:6d:82:85:c1:a9:b9: a1:2d:74:1d:03:de:04:74:9d:3c:38:ec:92:77:e7:4a:d3:6c: c4:d0:41:f9:d8:97:6e:ad:f9:06:52:83:ad:85:02:9a:20:02: 9c:0a:66:7b:da:23:3c:68:8a:25:37:22:98:b4:75:d0:78:b5: c7:b0:fe:22:ad:97:65:93:57:eb:a9:a3:8c:72:ce:48:5d:90: 37:49:f6:ff:52:d1:29:74:eb:3c:ac:43:89:9e:9e:00:1c:a2: 98:e4:84:6e:1b:80:6e:c0:34:9b:15:88:4e:49:79:cc:0f:50: ca:e1:1f:cf:17:fa:b0:f4:08:13:d5:bf:d7:0e:38:c5:84:3a: a4:8c:9d:e2:b7:4a:28:14:c8:4e:b5:30:d2:e7:ee:b4:12:b1: 29:7e:e9:58:40:3d:16:97:2b:80:f3:19:52:e0:ac:05:2e:bd: b8:c7:83:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGpy5R3zjOsBB+QyOSR4UTA01rVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjEwMTAwNzI2NTdaFw0yNjEwMTMxOTA4NTdaMDMxMTAvBgNV BAMTKEUwOUE0MzY1QUQzQTNDODc3Rjk0RDJDQzE4QTAzN0VDODMwRDVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhyjl9sF51etx9pKN2b9p6Ak7U oL8+Q7k2giRinFYLHWDhH4Rs5mNBgOjPAlLmT01yXtBF1RdbbWrMXF0Hw2+0PPkJ /Wxnv1HIdW9q6uQm6fHu7Mf0zkKcuQxk8or+lvaeN7T6AkCCD8XcjHA8rTlkHRjG WkiUU3IQH47wQ7WOlmLTpLsbnYxxWepoPhxT3cwTsTe68T4Wd9nJQTsydN/9R2kB AsUmy77QUqw7vnQksgxJ/UtzMB2wn2m+jyqiV+vQCASVAMs/XfPrZfEQw4aKSwJe SB3+pskCEDpBavLktv+Pr3JNIXXfRizT+W376CBsAVjG0+wmrrmprP4umfyPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4JpDZa06PId/lNLMGKA37IMNXTUwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqORk/OzUJoc AZMzGgMVbUx8AaZ80dlKePMYeZjvyYGcoGGroaamFnjUtMKKdj1mjW+orQOHFTtR oacTVbtEeDizyb2rYkl16dwD4sb3sj2MLjn1bYKFwam5oS10HQPeBHSdPDjsknfn StNsxNBB+diXbq35BlKDrYUCmiACnApme9ojPGiKJTcimLR10Hi1x7D+Iq2XZZNX 66mjjHLOSF2QN0n2/1LRKXTrPKxDiZ6eAByimOSEbhuAbsA0mxWITkl5zA9QyuEf zxf6sPQIE9W/1w44xYQ6pIyd4rdKKBTITrUw0ufutBKxKX7pWEA9FpcrgPMZUuCs BS69uMeDCA== -----END CERTIFICATE-----Generated at Mon Oct 12 03:29:36 2026 by rpki-client