$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: nCBHlqLDG3MnAmlJlSSCh2KVohjRb71da8lW6WYS7NI= Subject key identifier: 71:18:CF:57:0C:86:50:43:FC:0C:24:C0:49:42:35:16:34:BE:90:5C Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 4575321D07A2F975BC8987EF5723FDDC7DF8117A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: D7 Signing time: Tue 13 Oct 2026 06:32:48 +0000 Manifest this update: Tue 13 Oct 2026 06:27:48 +0000 Manifest next update: Fri 16 Oct 2026 16:11:48 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 2: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 3: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 4: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 5: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: uxoljWbrBNYMncGse8cNB9zwYadZoKRx/4HonvDrNQw=) 6: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 7: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:75:32:1d:07:a2:f9:75:bc:89:87:ef:57:23:fd:dc:7d:f8:11:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Oct 13 06:27:48 2026 GMT Not After : Oct 16 16:11:48 2026 GMT Subject: CN=7118CF570C865043FC0C24C04942351634BE905C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:8d:a9:68:0e:81:08:2a:62:2e:60:6b:70: de:79:e9:1e:2d:f3:ee:2b:e0:ba:09:4e:f0:66:49: 70:45:c1:ee:6c:8f:23:1d:4a:fa:82:26:7e:fb:96: 09:12:e2:a6:16:01:98:8f:5e:26:b7:a9:2e:36:f3: 06:f5:59:14:53:c9:58:37:eb:c6:0f:af:0e:f5:95: 64:e4:fe:c6:c3:f0:e7:2c:ba:bf:b7:0c:c5:ce:10: 2f:84:bd:42:06:3c:1d:ee:70:d1:3a:99:09:db:1f: b8:75:6a:b5:8f:a7:99:91:62:2f:8e:a8:d3:d6:7e: f6:4b:57:4e:5c:78:65:44:8d:71:2e:b2:84:7d:c6: 32:c6:9d:17:26:20:24:b0:3f:48:f3:5d:96:a9:80: fb:59:08:e5:d8:83:23:9e:e6:33:19:7d:9b:df:cf: da:e4:3a:ff:2b:f3:c9:0a:97:af:8b:01:b5:36:f0: 0c:d9:b4:17:69:5e:18:61:7e:f3:7e:06:82:2f:47: 96:c8:ef:e3:d2:6e:f6:c7:df:69:ba:4c:12:51:80: 86:c5:e2:d8:c1:34:0f:99:47:72:02:e0:89:b5:77: f8:85:d7:c6:a0:fa:bf:e7:99:47:36:8a:e3:e8:99: 1a:87:da:9b:ed:5f:bb:d2:c9:09:06:66:ca:e4:cf: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:18:CF:57:0C:86:50:43:FC:0C:24:C0:49:42:35:16:34:BE:90:5C X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:00:d5:d8:20:b3:d9:a5:af:37:ff:37:39:32:07:b4:94:1c: 8a:7c:7e:a2:79:ac:de:9c:30:ce:da:be:74:bd:ba:71:7c:16: 48:d3:ea:6d:3b:b1:e0:e5:cf:77:41:09:de:63:23:8d:50:08: 11:84:a4:36:f6:dd:fc:a8:35:49:e2:12:90:c7:2c:64:e6:7a: df:67:85:6c:7d:fa:ab:f7:38:3f:68:9f:f0:6f:72:db:95:df: c5:95:f4:4d:fe:33:62:79:9d:3e:24:0e:ad:5f:4f:51:d4:7b: 7c:bf:f6:0e:d6:5a:bd:d9:20:da:f8:59:09:33:fe:fa:4a:de: 02:f7:c5:8d:2b:78:77:7f:47:39:e7:e6:6a:26:d2:ef:90:52: 5b:d1:c4:d5:09:0e:05:0b:e5:54:17:a3:de:97:cb:96:0d:af: e8:54:71:7a:55:05:9b:72:44:c7:a9:f1:5e:17:32:ba:1e:93: 0e:29:19:38:cb:5a:d1:e6:73:49:42:b1:f2:00:70:93:f0:1f: 8d:83:2b:63:4d:27:d6:12:2e:ff:c6:40:7f:50:2b:f3:48:98: 8a:75:aa:53:9b:40:08:4f:0d:94:51:19:a8:4e:8c:69:7d:c3: d9:cd:88:31:e2:77:9e:ec:20:85:d3:04:1f:15:76:91:02:8b: 8c:de:5e:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURXUyHQei+XW8iYfvVyP93H34EXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjEwMTMwNjI3NDhaFw0yNjEwMTYxNjExNDhaMDMxMTAvBgNV BAMTKDcxMThDRjU3MEM4NjUwNDNGQzBDMjRDMDQ5NDIzNTE2MzRCRTkwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNo2paA6BCCpiLmBrcN556R4t 8+4r4LoJTvBmSXBFwe5sjyMdSvqCJn77lgkS4qYWAZiPXia3qS428wb1WRRTyVg3 68YPrw71lWTk/sbD8Ocsur+3DMXOEC+EvUIGPB3ucNE6mQnbH7h1arWPp5mRYi+O qNPWfvZLV05ceGVEjXEusoR9xjLGnRcmICSwP0jzXZapgPtZCOXYgyOe5jMZfZvf z9rkOv8r88kKl6+LAbU28AzZtBdpXhhhfvN+BoIvR5bI7+PSbvbH32m6TBJRgIbF 4tjBNA+ZR3IC4Im1d/iF18ag+r/nmUc2iuPomRqH2pvtX7vSyQkGZsrkzwcZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcRjPVwyGUEP8DCTASUI1FjS+kFwwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxADV2CCz2aWv N/83OTIHtJQcinx+onms3pwwztq+dL26cXwWSNPqbTux4OXPd0EJ3mMjjVAIEYSk Nvbd/Kg1SeISkMcsZOZ632eFbH36q/c4P2if8G9y25XfxZX0Tf4zYnmdPiQOrV9P UdR7fL/2DtZavdkg2vhZCTP++kreAvfFjSt4d39HOefmaibS75BSW9HE1QkOBQvl VBej3pfLlg2v6FRxelUFm3JEx6nxXhcyuh6TDikZOMta0eZzSUKx8gBwk/AfjYMr Y00n1hIu/8ZAf1Ar80iYinWqU5tACE8NlFEZqE6MaX3D2c2IMeJ3nuwghdMEHxV2 kQKLjN5e/A== -----END CERTIFICATE-----Generated at Wed Oct 14 01:41:52 2026 by rpki-client