$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json) Hash identifier: RoKRm0/zc2Ey+ZQj8RDMyyD1OxkMZVdavuGwG9IdU7A= Subject key identifier: 35:B4:3F:52:DF:DE:34:06:F1:53:3B:1F:61:F8:C4:8B:9A:44:4D:D3 Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 5A70BF3E2FFC470FDD45B86C88678F47A6107AAB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft Manifest number: 012D Signing time: Thu 10 Sep 2026 14:51:45 +0000 Manifest this update: Thu 10 Sep 2026 14:46:45 +0000 Manifest next update: Sun 13 Sep 2026 21:10:45 +0000 Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=) 2: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=) 3: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=) 4: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: d0ek0v446bPchaM4skhUqRB26poZG6vQH57f4zL7PmA=) 5: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=) 6: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=) 7: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=) 8: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=) 9: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=) 10: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=) 11: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=) 12: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:70:bf:3e:2f:fc:47:0f:dd:45:b8:6c:88:67:8f:47:a6:10:7a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Sep 10 14:46:45 2026 GMT Not After : Sep 13 21:10:45 2026 GMT Subject: CN=35B43F52DFDE3406F1533B1F61F8C48B9A444DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:40:df:8b:13:b2:5b:5b:fa:d2:9c:7d:7e: 59:7d:2c:47:b6:52:61:38:3a:fd:fe:4f:44:72:8b: ee:79:0c:c7:22:5a:03:84:eb:a9:a4:20:1d:61:6b: 44:44:1f:0b:b1:26:e0:c8:df:6c:27:39:21:dd:4b: 96:15:b8:80:45:4e:7e:4b:72:70:18:1e:29:79:95: 63:e4:7b:52:6a:29:b6:66:73:cf:1c:7e:eb:8b:4c: ba:2b:15:f4:e6:48:30:ad:e5:93:84:ba:b1:0c:ac: 77:1f:11:51:59:79:ee:5e:aa:1d:00:7c:3d:94:58: f7:0a:0b:46:d7:16:f6:0b:49:35:eb:d5:b3:37:51: 32:41:ec:16:6e:85:9a:60:18:fe:86:22:4d:61:6f: d5:fa:31:e4:59:14:ec:18:45:c4:43:cb:9e:75:13: 44:c8:ce:67:0f:a0:e4:fc:8d:77:b4:7c:b7:13:3c: 34:e0:6f:48:15:18:fe:eb:8f:b6:e7:53:13:99:05: 3c:c4:18:4e:19:8d:15:38:a5:46:28:12:f3:45:64: 54:ec:9c:57:52:b9:99:68:60:95:ca:f1:8a:1d:d7: e1:df:4d:2b:dc:70:20:e8:e0:41:ce:53:84:79:7a: 86:30:89:99:cb:ae:c0:d9:96:40:80:2b:40:c0:bc: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B4:3F:52:DF:DE:34:06:F1:53:3B:1F:61:F8:C4:8B:9A:44:4D:D3 X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:98:a9:85:6d:5b:d6:49:53:a9:ab:79:5e:63:52:aa:90:5d: 5e:3a:6d:c8:e6:99:4c:fc:b7:91:9e:90:93:54:65:28:82:a0: b4:e8:70:54:d8:d1:cb:27:4f:85:48:c4:7b:09:ae:27:9a:92: db:d8:23:bf:0b:8d:69:00:87:6b:44:68:dc:2d:df:04:2b:c7: cd:e6:53:55:36:33:76:d6:aa:b1:ea:15:4f:11:7f:08:a4:a8: 04:82:3e:32:c2:68:b9:9a:21:c0:c7:e3:f1:47:d1:aa:27:5f: a7:07:d3:2e:38:b0:0b:e2:eb:54:bf:d7:9a:af:cc:00:85:50: b5:e0:47:e9:15:72:a3:53:41:8a:d3:9f:d2:44:ab:b7:2e:76: a2:bf:86:e0:f8:6a:de:42:1a:ac:41:21:3e:10:37:6e:8d:f1: 75:52:53:0b:07:4f:cb:9a:68:89:73:64:10:90:e5:73:bb:60: 1b:eb:dc:65:97:92:55:49:7a:2a:61:94:7e:6c:e8:cd:d8:ea: 92:ed:cd:e5:7f:26:35:d8:37:af:cc:cb:5a:ac:65:94:c9:35: a4:a2:70:88:c3:2a:5b:49:65:c1:7d:49:fa:4a:7d:dc:71:60: a2:07:f3:12:94:3d:15:37:e7:bb:1a:2f:5e:76:00:97:45:0f: a7:01:6b:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWnC/Pi/8Rw/dRbhsiGePR6YQeqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjA5MTAxNDQ2NDVaFw0yNjA5MTMyMTEwNDVaMDMxMTAvBgNV BAMTKDM1QjQzRjUyREZERTM0MDZGMTUzM0IxRjYxRjhDNDhCOUE0NDRERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRkDfixOyW1v60px9fll9LEe2 UmE4Ov3+T0Ryi+55DMciWgOE66mkIB1ha0REHwuxJuDI32wnOSHdS5YVuIBFTn5L cnAYHil5lWPke1JqKbZmc88cfuuLTLorFfTmSDCt5ZOEurEMrHcfEVFZee5eqh0A fD2UWPcKC0bXFvYLSTXr1bM3UTJB7BZuhZpgGP6GIk1hb9X6MeRZFOwYRcRDy551 E0TIzmcPoOT8jXe0fLcTPDTgb0gVGP7rj7bnUxOZBTzEGE4ZjRU4pUYoEvNFZFTs nFdSuZloYJXK8Yod1+HfTSvccCDo4EHOU4R5eoYwiZnLrsDZlkCAK0DAvIszAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNbQ/Ut/eNAbxUzsfYfjEi5pETdMwHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpiphW1b1klT qat5XmNSqpBdXjptyOaZTPy3kZ6Qk1RlKIKgtOhwVNjRyydPhUjEewmuJ5qS29gj vwuNaQCHa0Ro3C3fBCvHzeZTVTYzdtaqseoVTxF/CKSoBII+MsJouZohwMfj8UfR qidfpwfTLjiwC+LrVL/Xmq/MAIVQteBH6RVyo1NBitOf0kSrty52or+G4Phq3kIa rEEhPhA3bo3xdVJTCwdPy5poiXNkEJDlc7tgG+vcZZeSVUl6KmGUfmzozdjqku3N 5X8mNdg3r8zLWqxllMk1pKJwiMMqW0llwX1J+kp93HFgogfzEpQ9FTfnuxovXnYA l0UPpwFr8Q== -----END CERTIFICATE-----Generated at Fri Sep 11 03:33:28 2026 by rpki-client