$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: xoMlOgEcE3KxGL+a3OSIsjyU94lx4qoewipUyCOsJKc= Subject key identifier: 40:5D:95:52:C1:08:F8:5D:CE:D3:4E:FC:6D:5C:64:9F:57:C5:3F:46 Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 3099CE5198965A88F0951300A955029081179AF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: 013E Signing time: Tue 13 Oct 2026 14:58:08 +0000 Manifest this update: Tue 13 Oct 2026 14:53:08 +0000 Manifest next update: Fri 16 Oct 2026 22:10:08 +0000 Files and hashes: 1: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: ipj8yJpC7KS8AhcY+wrcZ6b1OStBnRtHctszZVfcIg0=) 2: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) 3: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 22:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:99:ce:51:98:96:5a:88:f0:95:13:00:a9:55:02:90:81:17:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Oct 13 14:53:08 2026 GMT Not After : Oct 16 22:10:08 2026 GMT Subject: CN=405D9552C108F85DCED34EFC6D5C649F57C53F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:38:5f:fd:ad:07:02:30:fa:cd:f5:12:1f: 75:43:79:9a:83:28:d4:cb:15:ac:47:88:60:d7:26: 21:bc:e6:46:39:90:7e:2a:52:1c:08:30:d5:ae:81: fd:61:49:0e:37:54:59:56:b4:96:93:a1:44:9b:d6: c2:78:ab:17:4c:60:f9:07:59:71:44:fb:c3:a0:c7: 0d:b2:c4:46:91:e6:4d:24:ee:c8:62:4f:7c:ec:93: 16:09:88:17:fa:3a:ab:bc:67:c1:30:83:f6:03:df: 1e:67:88:7c:79:61:a8:3f:48:aa:4f:7d:b5:e6:b3: 45:76:42:d8:a3:31:2e:1a:04:dc:11:d0:f3:03:0d: 7d:b2:a4:c4:4b:1b:fc:fe:dc:2f:9e:56:53:de:1e: 47:c1:92:f1:b9:bd:c4:09:7b:e5:f2:29:36:e6:84: 94:f9:9d:f2:54:3d:0b:cd:8b:4d:8b:1e:6a:28:92: 67:39:73:c3:a7:98:bb:5d:71:25:0e:76:99:48:0d: d5:99:38:72:7b:2e:26:8a:5c:47:00:e2:99:fc:82: b5:97:c6:09:b0:5c:dd:5a:0c:06:a7:74:11:6d:ab: ae:81:f5:3f:3b:43:aa:75:1d:b3:2b:db:60:e6:27: 0f:e3:c1:3d:70:63:d2:98:ad:b2:0e:98:11:75:f5: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5D:95:52:C1:08:F8:5D:CE:D3:4E:FC:6D:5C:64:9F:57:C5:3F:46 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1c:6d:f8:51:4f:64:ae:89:ea:47:36:b1:48:7b:a6:8f:de: dc:f1:df:f2:5d:8b:bb:91:c8:a4:38:f9:99:5a:eb:57:85:14: 20:a1:74:ff:f9:0e:ec:db:05:aa:16:9b:8f:4f:1f:4b:5b:f3: f7:bb:d2:0b:1e:2a:42:19:b2:44:38:a3:34:66:ee:1e:1d:dd: 47:67:3f:a6:f1:c4:b3:f7:78:08:6c:3b:e4:3c:d1:40:9b:1f: 90:3f:32:b4:17:65:c8:41:db:58:b6:a0:ed:dd:99:d2:2a:1f: d7:4d:44:88:be:d0:56:39:f3:59:cd:ab:4f:73:0d:6f:bb:e4: 48:89:50:8a:70:48:be:20:86:ed:eb:a6:f7:63:a9:ec:a7:6e: 35:4f:01:51:7f:a7:30:49:ec:6d:a5:97:31:73:45:ff:26:0d: 53:fa:7b:98:48:55:27:ad:b0:cb:62:f7:36:4e:d4:17:19:25: 40:ab:17:53:12:8d:90:54:8a:e9:f2:a9:da:fb:87:5f:4d:83: 2e:ce:26:c6:61:36:2a:8d:04:22:7e:c7:38:15:f7:7d:2c:4b: dc:4a:ce:9a:74:f0:12:e1:fe:8b:3b:e5:4a:ea:de:de:6b:4d: 83:1f:cc:02:76:c2:3b:32:34:2a:06:ca:dc:d7:f2:11:46:21: 7f:80:a5:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMJnOUZiWWojwlRMAqVUCkIEXmvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjEwMTMxNDUzMDhaFw0yNjEwMTYyMjEwMDhaMDMxMTAvBgNV BAMTKDQwNUQ5NTUyQzEwOEY4NURDRUQzNEVGQzZENUM2NDlGNTdDNTNGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNjhf/a0HAjD6zfUSH3VDeZqD KNTLFaxHiGDXJiG85kY5kH4qUhwIMNWugf1hSQ43VFlWtJaToUSb1sJ4qxdMYPkH WXFE+8Ogxw2yxEaR5k0k7shiT3zskxYJiBf6Oqu8Z8Ewg/YD3x5niHx5Yag/SKpP fbXms0V2QtijMS4aBNwR0PMDDX2ypMRLG/z+3C+eVlPeHkfBkvG5vcQJe+XyKTbm hJT5nfJUPQvNi02LHmookmc5c8OnmLtdcSUOdplIDdWZOHJ7LiaKXEcA4pn8grWX xgmwXN1aDAandBFtq66B9T87Q6p1HbMr22DmJw/jwT1wY9KYrbIOmBF19ZqbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQF2VUsEI+F3O0078bVxkn1fFP0YwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRxt+FFPZK6J 6kc2sUh7po/e3PHf8l2Lu5HIpDj5mVrrV4UUIKF0//kO7NsFqhabj08fS1vz97vS Cx4qQhmyRDijNGbuHh3dR2c/pvHEs/d4CGw75DzRQJsfkD8ytBdlyEHbWLag7d2Z 0iof101EiL7QVjnzWc2rT3MNb7vkSIlQinBIviCG7eum92Op7KduNU8BUX+nMEns baWXMXNF/yYNU/p7mEhVJ62wy2L3Nk7UFxklQKsXUxKNkFSK6fKp2vuHX02DLs4m xmE2Ko0EIn7HOBX3fSxL3ErOmnTwEuH+izvlSure3mtNgx/MAnbCOzI0KgbK3Nfy EUYhf4Cl5A== -----END CERTIFICATE-----Generated at Wed Oct 14 11:53:15 2026 by rpki-client