$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: BX+h8He806wl9Cgdt2li8mbSuiMmja8VJOk+2nE/NLM= Subject key identifier: 19:3E:2A:C5:29:45:01:28:4B:DF:02:A4:FE:1D:16:72:2E:00:EF:9A Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 119916297AFF8530D113F58444AD77A0DF6C8275 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 016A Signing time: Mon 12 Oct 2026 19:12:18 +0000 Manifest this update: Mon 12 Oct 2026 19:07:18 +0000 Manifest next update: Fri 16 Oct 2026 03:20:18 +0000 Files and hashes: 1: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: /i7xzIDteARD8N40RaKRs4b3FaROJezRqqC2ud1nLI0=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) 3: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 4: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:99:16:29:7a:ff:85:30:d1:13:f5:84:44:ad:77:a0:df:6c:82:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Oct 12 19:07:18 2026 GMT Not After : Oct 16 03:20:18 2026 GMT Subject: CN=193E2AC5294501284BDF02A4FE1D16722E00EF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:4b:d7:66:ed:ed:2d:19:ce:eb:2f:d7:a6: 77:d2:5d:65:48:41:4d:14:3d:1a:fd:da:d3:9d:13: 9a:84:84:29:d0:93:57:d5:69:31:c8:6f:95:09:33: ff:c7:0c:b6:00:90:4d:e9:e7:ed:c5:b5:da:0f:02: 5d:10:49:04:c8:e3:5a:52:67:c0:97:eb:39:eb:cd: 91:6f:ee:70:39:01:ab:c6:42:c5:e3:8f:ff:de:c9: 6f:2f:b4:c5:f0:67:41:4e:2b:7c:6b:1b:73:80:66: 07:23:df:5d:a1:5c:f7:b2:09:f5:c9:5f:b6:df:69: 1b:d5:2c:a5:08:2d:57:48:18:ee:48:59:39:5b:cc: 11:b5:42:09:68:42:57:f4:b5:22:96:4e:cf:24:2d: be:94:b4:62:1c:c1:05:f4:03:51:1f:90:3c:7a:f0: 7c:27:99:81:6a:37:f3:d6:92:65:86:0f:c4:de:fc: 71:5f:1c:1c:95:73:12:48:36:8a:f5:ab:76:83:d9: 62:4a:bf:c6:a0:03:d7:05:e5:a3:8c:d3:f3:ae:b5: 15:ee:54:8c:23:28:76:50:a4:63:f6:ad:b4:88:cf: d5:e5:90:23:75:9e:e2:47:36:18:d4:2b:58:bf:20: 06:4c:54:f9:49:2f:a5:dc:f6:34:3c:3c:18:41:23: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3E:2A:C5:29:45:01:28:4B:DF:02:A4:FE:1D:16:72:2E:00:EF:9A X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:96:f9:d4:9e:48:7c:2d:28:c3:17:b1:a5:45:66:68:07:d6: e5:d1:d9:f7:18:4e:bf:79:61:c0:1b:a5:cb:f2:39:ea:ea:ab: 1c:96:12:64:57:11:59:41:f6:bf:2f:97:3e:10:3d:ba:40:53: bb:56:4e:47:c2:97:d4:7a:05:19:a5:5f:ce:37:26:b3:19:3a: d6:34:24:96:7f:b6:79:ac:1b:54:71:fc:7a:45:dc:62:8f:a5: 51:a5:5b:21:1d:11:c4:e8:20:0c:74:9a:c0:06:29:30:cb:4f: 81:ed:11:ef:93:fa:cb:f7:c3:5f:3e:d5:4e:01:e0:ac:cb:21: f0:71:76:2a:b5:70:ed:72:8a:2f:1c:28:48:4e:e3:91:45:c6: 79:81:6d:9b:f0:71:5f:ad:11:ec:de:9e:5b:e3:4f:55:36:82: a7:5f:cb:51:b2:7e:f8:3c:ee:99:fc:90:a9:82:5c:86:ef:b9: bd:fd:5f:9a:05:a7:f3:8b:aa:c7:9c:9e:68:96:bb:6f:5f:c6: 11:37:a4:96:0a:63:11:67:3a:a6:a7:45:7b:26:f1:5b:83:4e: b3:99:92:d8:99:3b:5e:64:f8:f8:d7:60:11:45:f9:f0:70:75: 73:1c:10:5b:1b:e1:cd:fe:d8:da:17:39:83:13:fc:7f:2f:12: 30:65:05:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEZkWKXr/hTDRE/WERK13oN9sgnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjEwMTIxOTA3MThaFw0yNjEwMTYwMzIwMThaMDMxMTAvBgNV BAMTKDE5M0UyQUM1Mjk0NTAxMjg0QkRGMDJBNEZFMUQxNjcyMkUwMEVGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNUvXZu3tLRnO6y/XpnfSXWVI QU0UPRr92tOdE5qEhCnQk1fVaTHIb5UJM//HDLYAkE3p5+3FtdoPAl0QSQTI41pS Z8CX6znrzZFv7nA5AavGQsXjj//eyW8vtMXwZ0FOK3xrG3OAZgcj312hXPeyCfXJ X7bfaRvVLKUILVdIGO5IWTlbzBG1QgloQlf0tSKWTs8kLb6UtGIcwQX0A1EfkDx6 8HwnmYFqN/PWkmWGD8Te/HFfHByVcxJINor1q3aD2WJKv8agA9cF5aOM0/OutRXu VIwjKHZQpGP2rbSIz9XlkCN1nuJHNhjUK1i/IAZMVPlJL6Xc9jQ8PBhBIyiPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGT4qxSlFAShL3wKk/h0Wci4A75owHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZb51J5IfC0o wxexpUVmaAfW5dHZ9xhOv3lhwBuly/I56uqrHJYSZFcRWUH2vy+XPhA9ukBTu1ZO R8KX1HoFGaVfzjcmsxk61jQkln+2eawbVHH8ekXcYo+lUaVbIR0RxOggDHSawAYp MMtPge0R75P6y/fDXz7VTgHgrMsh8HF2KrVw7XKKLxwoSE7jkUXGeYFtm/BxX60R 7N6eW+NPVTaCp1/LUbJ++DzumfyQqYJchu+5vf1fmgWn84uqx5yeaJa7b1/GETek lgpjEWc6pqdFeybxW4NOs5mS2Jk7XmT4+NdgEUX58HB1cxwQWxvhzf7Y2hc5gxP8 fy8SMGUFYA== -----END CERTIFICATE-----Generated at Tue Oct 13 02:22:53 2026 by rpki-client