$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: XdCZXk5epcTI1CmFGv55VSMPTlWbMkcpPkIXF8nh/AQ= Subject key identifier: A2:E8:89:A5:94:1A:13:E4:0F:87:18:34:9A:B0:CD:BA:E2:B5:F1:F1 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 261461419F854E308C7154B40A0A8C74378A49F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 0141 Signing time: Sun 25 Oct 2026 04:27:14 +0000 Manifest this update: Sun 25 Oct 2026 04:22:14 +0000 Manifest next update: Wed 28 Oct 2026 09:33:14 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 2: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 3: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 4: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 5: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: EdaPoUrGK8up3Myun74TmMIn3Z+Eb2uOa7NHTAAd7bc=) 6: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 7: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 8: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 09:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:14:61:41:9f:85:4e:30:8c:71:54:b4:0a:0a:8c:74:37:8a:49:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Oct 25 04:22:14 2026 GMT Not After : Oct 28 09:33:14 2026 GMT Subject: CN=A2E889A5941A13E40F8718349AB0CDBAE2B5F1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:32:f8:7f:3c:e9:48:e1:fa:2c:93:6c:52: 5b:85:db:53:cc:96:51:a4:41:82:c7:79:ce:29:7b: ea:a3:f5:c7:82:45:97:c9:16:c4:6b:63:01:01:b9: e6:a3:66:11:77:75:54:69:e3:ee:03:2b:d4:77:fe: 51:17:20:0c:9c:a4:7a:03:db:9a:ad:61:9e:2b:15: 38:48:8f:44:f5:21:fb:e9:7c:33:e5:d3:a2:aa:2b: 5f:d7:70:3c:79:20:59:13:c5:25:63:7a:ad:f1:32: 21:d3:df:84:37:fd:8f:a7:ad:9c:f0:1b:7a:7f:8c: a4:4f:15:d0:23:75:d5:ed:3b:be:5f:57:a5:41:93: 47:e2:ad:73:6e:75:e0:28:0b:82:cb:50:0f:a0:31: 95:7a:31:a0:8d:a4:e1:3b:a9:a5:5e:2d:93:82:8b: ed:91:f4:41:8f:aa:c1:7b:ad:de:f3:ca:c0:19:e1: 9d:a5:a2:ab:1f:3a:ee:5e:50:aa:83:48:30:41:7d: 0f:18:72:2f:78:2e:36:f5:25:24:5c:86:a1:c8:ee: 0f:f4:af:8a:0a:e9:da:01:ef:73:cf:0f:08:33:47: 37:7f:b1:0c:a7:70:de:76:e0:91:ad:25:06:38:2c: 22:ed:d3:34:d7:fd:e9:7c:74:62:6c:73:60:d9:a1: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E8:89:A5:94:1A:13:E4:0F:87:18:34:9A:B0:CD:BA:E2:B5:F1:F1 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:55:41:a7:90:76:ac:d3:33:85:8e:1a:8c:12:9a:c3:49:76: 67:12:1a:59:29:3e:ce:a2:41:ab:ec:9c:15:28:9e:79:f1:06: 8d:53:c2:53:7a:3c:9c:af:ab:a1:b8:4a:38:cb:6f:35:fa:d1: b1:c0:35:63:f2:d3:9e:58:e4:e5:c5:1c:36:05:8b:32:6c:dd: 53:67:87:4d:c0:14:35:2d:a9:bc:0c:e6:8b:85:a6:7e:d7:e9: 51:19:e7:3a:2d:eb:d5:ab:06:ee:f6:3f:8e:e5:73:ea:d6:5d: f6:d9:27:3b:dc:22:52:01:4b:72:46:2d:e4:ff:23:71:fe:db: 0d:73:9b:13:5d:02:70:14:9c:16:3e:4a:0f:4a:a1:d5:7d:4f: 48:54:63:61:52:7e:02:e0:d2:26:3b:86:41:61:04:7c:eb:50: 07:d7:00:c1:8b:42:a0:00:11:ef:da:25:23:1b:88:15:53:33: 36:e0:8d:dd:19:af:49:49:38:c8:32:d8:ff:66:b6:89:80:e5: 9c:9c:fc:8d:b1:df:59:8f:ac:cb:28:48:93:90:22:ba:89:dd: e3:56:66:35:49:11:a9:44:85:d1:0a:f5:bf:d2:89:89:6f:74: 6e:ce:51:94:2a:3b:5f:60:6e:5a:58:07:21:f0:38:a2:a7:ec: 97:bb:04:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJhRhQZ+FTjCMcVS0CgqMdDeKSfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjEwMjUwNDIyMTRaFw0yNjEwMjgwOTMzMTRaMDMxMTAvBgNV BAMTKEEyRTg4OUE1OTQxQTEzRTQwRjg3MTgzNDlBQjBDREJBRTJCNUYxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvDL4fzzpSOH6LJNsUluF21PM llGkQYLHec4pe+qj9ceCRZfJFsRrYwEBueajZhF3dVRp4+4DK9R3/lEXIAycpHoD 25qtYZ4rFThIj0T1IfvpfDPl06KqK1/XcDx5IFkTxSVjeq3xMiHT34Q3/Y+nrZzw G3p/jKRPFdAjddXtO75fV6VBk0firXNudeAoC4LLUA+gMZV6MaCNpOE7qaVeLZOC i+2R9EGPqsF7rd7zysAZ4Z2loqsfOu5eUKqDSDBBfQ8Yci94Ljb1JSRchqHI7g/0 r4oK6doB73PPDwgzRzd/sQyncN524JGtJQY4LCLt0zTX/el8dGJsc2DZofYbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUouiJpZQaE+QPhxg0mrDNuuK18fEwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1VBp5B2rNMz hY4ajBKaw0l2ZxIaWSk+zqJBq+ycFSieefEGjVPCU3o8nK+robhKOMtvNfrRscA1 Y/LTnljk5cUcNgWLMmzdU2eHTcAUNS2pvAzmi4WmftfpURnnOi3r1asG7vY/juVz 6tZd9tknO9wiUgFLckYt5P8jcf7bDXObE10CcBScFj5KD0qh1X1PSFRjYVJ+AuDS JjuGQWEEfOtQB9cAwYtCoAAR79olIxuIFVMzNuCN3RmvSUk4yDLY/2a2iYDlnJz8 jbHfWY+syyhIk5Aiuond41ZmNUkRqUSF0Qr1v9KJiW90bs5RlCo7X2BuWlgHIfA4 oqfsl7sE0Q== -----END CERTIFICATE-----Generated at Tue Oct 27 07:25:02 2026 by rpki-client