$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: 9o2hU2ZHH4WBPt4S70cn2DN2EMC+YBxbnzVILUcBFFo= Subject key identifier: 6F:3E:E5:E8:4D:19:57:ED:99:7D:E7:FC:1E:9D:9F:63:01:04:42:0A Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 33066C8F8A775F98320FB2E3AF64AAEF994D5761 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 012D Signing time: Thu 10 Sep 2026 07:15:57 +0000 Manifest this update: Thu 10 Sep 2026 07:10:57 +0000 Manifest next update: Sun 13 Sep 2026 17:41:57 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 2: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 3: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: S4mnEbzLv5iS3Su2wN9BxzCiC2n6eGFHaVOtHYLBEyY=) 4: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 5: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 6: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 7: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 8: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 03:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:06:6c:8f:8a:77:5f:98:32:0f:b2:e3:af:64:aa:ef:99:4d:57:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Sep 10 07:10:57 2026 GMT Not After : Sep 13 17:41:57 2026 GMT Subject: CN=6F3EE5E84D1957ED997DE7FC1E9D9F630104420A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:58:0c:60:42:b5:c6:5f:52:c1:45:6a:0e: 83:07:48:40:e8:2b:4d:16:e8:34:ad:ba:49:35:79: 86:97:2f:a5:9f:17:98:80:d5:b2:29:40:8c:4b:65: cc:fc:18:8b:7f:09:de:48:5a:28:06:4b:c7:ee:dd: 82:90:01:dc:8b:96:ee:1f:74:a5:c2:08:8f:87:97: 99:6d:67:bd:52:b5:61:76:1b:d1:e2:04:36:ab:87: 44:67:4e:0f:17:3f:3c:70:ef:62:f3:5d:28:49:98: da:a7:f3:4c:ac:e6:c4:9d:ea:dd:55:12:f9:b0:33: 99:1d:5a:06:d6:72:e4:fe:c2:ac:90:4d:62:49:db: 4a:c6:72:40:22:72:6a:05:8e:cc:59:3e:52:03:20: 5e:1d:78:55:ac:7a:f6:f5:7b:64:40:7a:70:e1:0f: 8a:4e:9d:34:72:4e:b2:4b:e2:df:d1:c8:e8:6d:6a: ce:0b:42:73:f5:d7:85:b5:3e:7a:d8:c8:15:e9:ed: 4c:0d:de:44:95:63:2f:ed:3d:87:12:02:10:22:93: 07:ae:bb:ca:30:62:28:0b:5d:a3:41:2e:1a:6e:5a: 74:18:99:aa:21:e1:6a:3f:5c:93:fe:f0:f5:2e:95: 5a:91:85:28:73:be:87:05:cb:d3:5e:5a:39:d0:e2: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3E:E5:E8:4D:19:57:ED:99:7D:E7:FC:1E:9D:9F:63:01:04:42:0A X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5d:f3:84:bf:45:15:c0:15:bd:ac:a2:a1:fc:b2:b2:e0:53: 60:ba:c7:75:6e:a9:9c:17:99:ba:ff:78:34:27:6a:52:f3:0a: 0c:32:22:78:47:b9:9f:f9:6b:97:c4:36:e1:62:25:81:69:59: 4d:7a:ff:75:b2:8b:6b:56:b1:55:34:94:7c:ab:cc:4f:af:56: 59:90:08:ef:9c:7d:58:ac:4f:7d:ba:08:b9:36:34:ce:cc:7f: 3a:9f:78:e7:7a:4c:a7:65:c2:51:eb:e4:dc:d1:71:3d:78:bc: e7:9c:33:84:ea:6f:33:6a:cd:f0:f2:55:08:e6:b1:23:c7:13: b1:af:b6:07:fb:6a:4a:51:20:38:a0:c8:03:a8:57:ac:0a:8b: 39:13:99:11:6a:7f:f4:f1:8d:d0:5d:6f:d7:df:e2:3a:6b:bb: 4a:5a:d4:f8:1f:e4:82:86:1e:92:5c:82:14:a9:82:11:6b:76: 2d:e2:6c:7c:47:b0:a3:a7:e3:fc:69:82:cc:fd:36:7b:ba:ab: ae:d2:63:68:33:b0:c6:4f:ff:e1:0b:7e:16:b3:50:ce:c4:79: 6e:9d:2b:5b:c2:9e:3f:59:5f:06:eb:fc:2a:33:3d:e2:2b:ee: be:e8:c1:3c:c9:e6:f7:06:3c:08:27:00:76:96:1d:ad:cd:38: cc:3e:99:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMwZsj4p3X5gyD7Ljr2Sq75lNV2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA5MTAwNzEwNTdaFw0yNjA5MTMxNzQxNTdaMDMxMTAvBgNV BAMTKDZGM0VFNUU4NEQxOTU3RUQ5OTdERTdGQzFFOUQ5RjYzMDEwNDQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeI1gMYEK1xl9SwUVqDoMHSEDo K00W6DStukk1eYaXL6WfF5iA1bIpQIxLZcz8GIt/Cd5IWigGS8fu3YKQAdyLlu4f dKXCCI+Hl5ltZ71StWF2G9HiBDarh0RnTg8XPzxw72LzXShJmNqn80ys5sSd6t1V EvmwM5kdWgbWcuT+wqyQTWJJ20rGckAicmoFjsxZPlIDIF4deFWsevb1e2RAenDh D4pOnTRyTrJL4t/RyOhtas4LQnP114W1PnrYyBXp7UwN3kSVYy/tPYcSAhAikweu u8owYigLXaNBLhpuWnQYmaoh4Wo/XJP+8PUulVqRhShzvocFy9NeWjnQ4kNfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbz7l6E0ZV+2Zfef8Hp2fYwEEQgowHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV3zhL9FFcAV vayiofyysuBTYLrHdW6pnBeZuv94NCdqUvMKDDIieEe5n/lrl8Q24WIlgWlZTXr/ dbKLa1axVTSUfKvMT69WWZAI75x9WKxPfboIuTY0zsx/Op9453pMp2XCUevk3NFx PXi855wzhOpvM2rN8PJVCOaxI8cTsa+2B/tqSlEgOKDIA6hXrAqLOROZEWp/9PGN 0F1v19/iOmu7SlrU+B/kgoYeklyCFKmCEWt2LeJsfEewo6fj/GmCzP02e7qrrtJj aDOwxk//4Qt+FrNQzsR5bp0rW8KeP1lfBuv8KjM94ivuvujBPMnm9wY8CCcAdpYd rc04zD6ZLg== -----END CERTIFICATE-----Generated at Thu Sep 10 19:18:55 2026 by rpki-client