$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: KIy3NcxkJMh5Tk+8fzclWyDFceYd8+CjAk2gwUDkk1s= Subject key identifier: 3E:DD:C5:E9:D0:94:87:B1:2E:3B:B8:AC:21:89:B7:AE:CF:64:8A:0F Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 2B8B46524D10CED6A2E730A966D058813D15553D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: D2 Signing time: Wed 28 Oct 2026 14:05:58 +0000 Manifest this update: Wed 28 Oct 2026 14:00:58 +0000 Manifest next update: Sat 31 Oct 2026 16:38:58 +0000 Files and hashes: 1: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: nGk+kTJaj8Ouid/ZEetF74y7fgFEtrd/2i2a1qtbynw=) 2: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 3: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 4: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 16:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8b:46:52:4d:10:ce:d6:a2:e7:30:a9:66:d0:58:81:3d:15:55:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Oct 28 14:00:58 2026 GMT Not After : Oct 31 16:38:58 2026 GMT Subject: CN=3EDDC5E9D09487B12E3BB8AC2189B7AECF648A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:18:c3:70:2d:a9:5c:73:2e:05:94:4d:18: 6b:91:66:ba:a2:f6:b7:02:bb:11:f4:dd:5c:9e:60: 69:7f:04:46:9e:72:b4:ee:a1:5c:4b:a0:a3:d3:4b: 95:76:d4:31:16:09:34:c0:27:b6:42:88:d9:a7:72: 3d:4d:7c:c2:a5:10:b0:6d:23:3a:59:c4:1f:bc:68: 26:83:76:90:7b:f8:d8:49:3e:bb:ec:43:f4:b8:f3: 06:04:ef:e6:69:ff:5e:48:cb:b1:89:be:5d:b9:58: ee:ee:06:90:b1:75:64:99:7c:5c:37:cb:28:d3:73: ad:e1:33:63:5b:2d:2b:45:78:ee:db:8b:30:3d:0e: 73:c8:cd:35:84:16:35:64:93:16:ff:60:33:18:51: 06:ca:19:c7:24:90:7d:70:ef:ab:0e:4e:e6:5f:e2: 4a:78:b9:68:96:21:c8:b1:8d:85:2b:fd:fb:f2:51: e1:c4:0d:47:04:08:4a:ae:38:9f:c2:73:a4:45:8f: 18:7f:09:0d:53:68:2c:21:13:0a:0a:f1:80:b9:a5: f1:80:75:46:4f:88:37:5b:4e:cd:ba:d7:32:dc:9a: 0f:54:9c:7a:6c:1d:c8:88:ed:6d:20:6e:f6:f3:ac: a9:f3:d9:82:fd:22:35:27:0c:35:86:59:55:8b:a8: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:C5:E9:D0:94:87:B1:2E:3B:B8:AC:21:89:B7:AE:CF:64:8A:0F X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bb:78:32:23:60:82:80:93:ac:76:bf:c2:b4:6a:53:f8:c8: 60:bf:f1:51:93:a0:fc:fa:34:58:e4:57:68:da:21:17:5b:47: e2:a6:e8:40:a3:f0:42:fe:19:7e:8d:19:67:02:eb:f0:d2:9c: ef:19:b9:2d:19:f6:97:fa:76:2d:9a:10:ca:f4:94:7d:74:ff: 5e:dd:7b:3f:77:a6:85:69:08:57:34:ea:91:9f:24:e0:43:2c: 29:e7:f3:98:30:a8:e3:f7:bb:22:59:0e:b8:af:2f:42:d1:53: 33:da:37:b5:27:5b:87:5b:13:38:5a:f2:37:f5:ad:df:ca:2f: 5d:e6:8c:4d:9b:5b:c4:c9:4a:8f:32:03:bc:9a:ba:f3:7a:eb: 5b:a1:a4:49:57:53:36:8b:18:eb:a2:9e:ad:ad:03:1e:55:7b: 7a:54:86:21:80:70:71:2d:e6:ad:d0:33:2d:cf:e0:64:06:1f: cd:6c:39:b0:47:ed:1f:d7:ce:3f:66:35:2f:1e:a5:a2:6d:55: 40:99:4c:a7:ee:01:c0:22:46:27:04:b2:ad:dd:35:d3:c0:b8: 5d:8d:97:fb:bc:2f:bf:f2:19:de:84:3f:3d:0f:7c:c1:44:e8: 1a:ab:1d:b6:8f:bb:40:10:f6:c5:2b:c2:56:41:f3:95:4b:bf: bf:bf:6b:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK4tGUk0Qztai5zCpZtBYgT0VVT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjEwMjgxNDAwNThaFw0yNjEwMzExNjM4NThaMDMxMTAvBgNV BAMTKDNFRERDNUU5RDA5NDg3QjEyRTNCQjhBQzIxODlCN0FFQ0Y2NDhBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ9RjDcC2pXHMuBZRNGGuRZrqi 9rcCuxH03VyeYGl/BEaecrTuoVxLoKPTS5V21DEWCTTAJ7ZCiNmncj1NfMKlELBt IzpZxB+8aCaDdpB7+NhJPrvsQ/S48wYE7+Zp/15Iy7GJvl25WO7uBpCxdWSZfFw3 yyjTc63hM2NbLStFeO7bizA9DnPIzTWEFjVkkxb/YDMYUQbKGcckkH1w76sOTuZf 4kp4uWiWIcixjYUr/fvyUeHEDUcECEquOJ/Cc6RFjxh/CQ1TaCwhEwoK8YC5pfGA dUZPiDdbTs261zLcmg9UnHpsHciI7W0gbvbzrKnz2YL9IjUnDDWGWVWLqOX7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPt3F6dCUh7EuO7isIYm3rs9kig8wHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbt4MiNggoCT rHa/wrRqU/jIYL/xUZOg/Po0WORXaNohF1tH4qboQKPwQv4Zfo0ZZwLr8NKc7xm5 LRn2l/p2LZoQyvSUfXT/Xt17P3emhWkIVzTqkZ8k4EMsKefzmDCo4/e7IlkOuK8v QtFTM9o3tSdbh1sTOFryN/Wt38ovXeaMTZtbxMlKjzIDvJq683rrW6GkSVdTNosY 66Kera0DHlV7elSGIYBwcS3mrdAzLc/gZAYfzWw5sEftH9fOP2Y1Lx6lom1VQJlM p+4BwCJGJwSyrd0108C4XY2X+7wvv/IZ3oQ/PQ98wUToGqsdto+7QBD2xSvCVkHz lUu/v79rCQ== -----END CERTIFICATE-----Generated at Thu Oct 29 15:58:45 2026 by rpki-client