$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: sZdJ/ykq4R9/gurODxu2/Clz7ydvp5mE8sznDP28o6Y= Subject key identifier: 8F:CC:CA:41:A9:8B:56:17:32:04:DF:9B:9E:75:41:80:00:BA:8C:3C Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 404D1E16F4A821C4B6A3CFA4438C26096085393A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 0144 Signing time: Tue 27 Oct 2026 12:49:42 +0000 Manifest this update: Tue 27 Oct 2026 12:44:42 +0000 Manifest next update: Fri 30 Oct 2026 18:51:42 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: Limy1K2RVWLTnTdcd6dwt1uAylmQhpq5QW2iO+o/gBg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 18:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4d:1e:16:f4:a8:21:c4:b6:a3:cf:a4:43:8c:26:09:60:85:39:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Oct 27 12:44:42 2026 GMT Not After : Oct 30 18:51:42 2026 GMT Subject: CN=8FCCCA41A98B56173204DF9B9E75418000BA8C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:87:6d:57:7d:6b:d9:f9:66:88:11:8c:88: 56:03:88:70:f2:8f:cb:42:cd:f6:02:00:20:03:50: 05:20:cd:65:28:e1:f4:5d:e7:a3:32:f8:46:14:27: 6e:f1:97:c2:24:f1:3f:c6:b8:85:14:9d:38:f7:94: f7:78:25:fe:f4:e3:7e:9b:4f:c5:49:be:07:33:84: 8a:76:ad:37:8a:da:95:48:d8:74:22:1c:12:9e:ba: ed:42:7d:fb:3e:0a:fb:be:cc:a2:ac:eb:de:41:a6: ff:9c:a0:c1:2e:41:b0:fe:06:bd:60:7d:7b:59:48: 60:7b:2e:59:01:25:6a:79:e6:08:02:e2:95:db:ce: dc:2e:d9:90:87:a8:9a:b0:37:44:3b:bf:ff:62:f8: f7:bf:9e:89:f3:69:77:09:e8:4b:1a:84:33:6f:c1: 35:5f:af:d0:a3:9c:e1:b8:f9:89:3f:52:10:70:23: 24:13:8e:70:68:de:5e:af:d8:7d:15:0c:bf:00:5c: aa:67:9e:73:6a:56:97:4f:64:e9:db:02:9c:34:f7: 82:fb:44:f2:a0:82:99:f6:eb:a5:2b:99:45:af:1e: cd:db:f5:ce:18:4a:80:ac:a6:63:fb:ef:9d:1f:e6: 9d:a0:d2:89:0c:7d:f7:63:23:98:9f:b0:b1:ec:c5: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CC:CA:41:A9:8B:56:17:32:04:DF:9B:9E:75:41:80:00:BA:8C:3C X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:83:e7:b0:ed:ec:7e:79:74:2e:8e:2e:5a:3c:58:50:bc:08: 72:61:67:63:7e:a9:56:ed:b5:54:96:96:9d:aa:34:6b:2f:ca: 8c:27:0d:3f:e9:64:f2:70:8c:58:6a:77:15:7b:36:2b:15:9f: c7:9f:e6:10:16:a5:5e:60:55:e2:16:27:b9:ec:9f:cb:59:f2: b5:78:91:53:ff:f4:ce:5a:f4:8b:cd:fb:c1:34:79:97:fe:44: 90:cf:d6:56:59:ac:92:77:86:bc:0c:e3:b8:6d:95:03:1c:b3: b0:20:4a:d2:67:02:ec:ee:a9:bc:89:1d:81:52:10:6a:93:3e: ea:75:81:14:d8:18:35:8a:2d:79:c0:76:27:03:be:db:34:29: 44:c2:bc:77:57:dd:13:af:92:0a:12:30:33:8a:7e:65:82:89: 28:b5:a3:ab:5b:0d:1d:0e:ae:f6:89:09:88:34:05:f7:6c:df: f2:7d:96:e2:1e:3d:b8:1f:07:0f:85:e1:26:f3:1c:fb:12:b0: 34:a9:cb:2d:b3:f5:5c:cb:66:c6:d8:4a:d2:94:d0:55:45:a0: 17:38:15:47:c6:7c:17:dc:93:12:f0:8c:b6:05:7d:65:cb:7f: 1f:d5:23:2e:e6:42:bf:7d:10:0a:c3:8c:19:a2:72:9c:1b:92: 75:ea:3e:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQE0eFvSoIcS2o8+kQ4wmCWCFOTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjEwMjcxMjQ0NDJaFw0yNjEwMzAxODUxNDJaMDMxMTAvBgNV BAMTKDhGQ0NDQTQxQTk4QjU2MTczMjA0REY5QjlFNzU0MTgwMDBCQThDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZIdtV31r2flmiBGMiFYDiHDy j8tCzfYCACADUAUgzWUo4fRd56My+EYUJ27xl8Ik8T/GuIUUnTj3lPd4Jf70436b T8VJvgczhIp2rTeK2pVI2HQiHBKeuu1Cffs+Cvu+zKKs695Bpv+coMEuQbD+Br1g fXtZSGB7LlkBJWp55ggC4pXbztwu2ZCHqJqwN0Q7v/9i+Pe/nonzaXcJ6EsahDNv wTVfr9CjnOG4+Yk/UhBwIyQTjnBo3l6v2H0VDL8AXKpnnnNqVpdPZOnbApw094L7 RPKggpn266UrmUWvHs3b9c4YSoCspmP7750f5p2g0okMffdjI5ifsLHsxYMJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj8zKQamLVhcyBN+bnnVBgAC6jDwwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoPnsO3sfnl0 Lo4uWjxYULwIcmFnY36pVu21VJaWnao0ay/KjCcNP+lk8nCMWGp3FXs2KxWfx5/m EBalXmBV4hYnueyfy1nytXiRU//0zlr0i837wTR5l/5EkM/WVlmskneGvAzjuG2V AxyzsCBK0mcC7O6pvIkdgVIQapM+6nWBFNgYNYotecB2JwO+2zQpRMK8d1fdE6+S ChIwM4p+ZYKJKLWjq1sNHQ6u9okJiDQF92zf8n2W4h49uB8HD4XhJvMc+xKwNKnL LbP1XMtmxthK0pTQVUWgFzgVR8Z8F9yTEvCMtgV9Zct/H9UjLuZCv30QCsOMGaJy nBuSdeo+LA== -----END CERTIFICATE-----Generated at Thu Oct 29 17:09:47 2026 by rpki-client