$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: rp/8jTWeCTM7ORV39RSWsrWNeXLVZCGUJQHWpnQwGno= Subject key identifier: 98:6A:04:75:EF:3A:03:E8:2E:99:7F:98:5F:5D:5E:D7:1A:DB:B2:47 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 09B8094FB5884CB40A86C3DC5502CAEB065E6150 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: C8 Signing time: Mon 12 Oct 2026 18:12:15 +0000 Manifest this update: Mon 12 Oct 2026 18:07:15 +0000 Manifest next update: Thu 15 Oct 2026 23:27:15 +0000 Files and hashes: 1: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 2: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: AwY2Iri7TdPt7ljvvgUK1CfRXsBtWLe8jq9IKkJDxUg=) 3: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b8:09:4f:b5:88:4c:b4:0a:86:c3:dc:55:02:ca:eb:06:5e:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Oct 12 18:07:15 2026 GMT Not After : Oct 15 23:27:15 2026 GMT Subject: CN=986A0475EF3A03E82E997F985F5D5ED71ADBB247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:2b:d9:5b:40:fc:09:43:93:e6:8b:00:f9: d5:f7:0d:b2:5f:ad:04:47:e2:c0:30:76:21:98:b9: 90:81:d7:5a:fb:6e:30:07:06:82:93:3e:41:8c:38: 51:77:13:23:8e:18:12:01:f6:89:db:d5:e8:fe:24: 07:b4:b7:06:81:90:0f:bd:7a:22:db:d6:2c:52:14: b6:a0:9c:66:c3:5d:83:b5:4e:c0:5d:09:c6:20:d4: 86:9a:2d:5e:d1:f4:36:b5:9d:9a:28:e2:5d:6c:ed: f5:4a:8b:15:0e:82:48:b0:4b:99:3f:47:1e:d3:72: 27:01:7b:61:18:9d:ac:c0:fe:da:ae:f7:33:ec:f2: 9b:52:27:5b:b8:4f:5f:8c:fb:94:04:9d:f3:67:cc: c0:52:7d:4c:ab:7b:35:f0:7a:da:a6:0c:33:46:5d: 0d:28:dc:0f:eb:c7:97:23:45:58:60:34:45:19:fe: 49:3b:84:b5:ec:10:0e:d5:b2:1e:11:a1:bb:63:4b: c9:5f:62:bb:55:bd:6d:8f:45:2d:10:9d:00:8e:2d: 3c:cf:09:29:cb:f6:34:0c:f2:51:4d:90:91:8e:c6: f6:6e:62:7f:21:f8:80:e4:76:c7:8c:01:4b:20:48: b8:c0:6e:37:f6:a2:ca:b8:dc:8c:18:0e:6d:26:fc: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:04:75:EF:3A:03:E8:2E:99:7F:98:5F:5D:5E:D7:1A:DB:B2:47 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:36:d4:04:dc:f9:09:bc:69:2e:2f:91:a3:42:0f:c3:72:fa: a1:35:ea:6e:3f:42:89:d1:e6:8f:8b:b5:43:75:15:f1:2e:f2: 79:e4:09:21:78:7f:db:4c:fd:d6:61:3a:4a:a1:6f:82:ef:c8: 5e:9c:16:c8:a1:3c:9b:9f:0a:ff:ab:b6:ba:07:18:66:31:c4: 39:31:12:a5:b1:a8:39:bf:95:b7:cd:76:03:4d:87:2c:de:40: 18:fa:cf:85:e6:04:c7:b4:bb:47:00:1a:e7:8d:92:64:64:1f: f8:13:e0:17:34:85:c2:9b:13:9c:3b:42:93:09:a3:fa:3d:8e: 2a:2a:35:55:37:68:d4:b2:eb:98:98:71:6a:e5:90:89:8d:a5: 24:96:08:ef:6f:e0:18:0f:a3:17:ee:df:c9:ce:65:aa:35:08: 90:71:4f:70:15:18:5d:3b:53:86:3b:87:ee:30:38:a9:e7:9e: c7:eb:4e:f6:80:eb:4e:a4:35:59:51:66:32:b8:63:60:87:de: 7a:be:17:6d:bd:9d:11:ce:c6:33:99:9d:cf:cf:20:f8:e8:a6: 2c:7c:96:d5:e6:60:1e:2e:99:c5:cc:ce:15:7b:f9:17:df:1a: e8:ef:07:38:f8:b0:5d:35:b6:1f:68:2b:ff:e1:d9:48:aa:f3: fa:c4:f3:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCbgJT7WITLQKhsPcVQLK6wZeYVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjEwMTIxODA3MTVaFw0yNjEwMTUyMzI3MTVaMDMxMTAvBgNV BAMTKDk4NkEwNDc1RUYzQTAzRTgyRTk5N0Y5ODVGNUQ1RUQ3MUFEQkIyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEivZW0D8CUOT5osA+dX3DbJf rQRH4sAwdiGYuZCB11r7bjAHBoKTPkGMOFF3EyOOGBIB9onb1ej+JAe0twaBkA+9 eiLb1ixSFLagnGbDXYO1TsBdCcYg1IaaLV7R9Da1nZoo4l1s7fVKixUOgkiwS5k/ Rx7TcicBe2EYnazA/tqu9zPs8ptSJ1u4T1+M+5QEnfNnzMBSfUyrezXwetqmDDNG XQ0o3A/rx5cjRVhgNEUZ/kk7hLXsEA7Vsh4RobtjS8lfYrtVvW2PRS0QnQCOLTzP CSnL9jQM8lFNkJGOxvZuYn8h+IDkdseMAUsgSLjAbjf2osq43IwYDm0m/Lj/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmGoEde86A+gumX+YX11e1xrbskcwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDbUBNz5Cbxp Li+Ro0IPw3L6oTXqbj9CidHmj4u1Q3UV8S7yeeQJIXh/20z91mE6SqFvgu/IXpwW yKE8m58K/6u2ugcYZjHEOTESpbGoOb+Vt812A02HLN5AGPrPheYEx7S7RwAa542S ZGQf+BPgFzSFwpsTnDtCkwmj+j2OKio1VTdo1LLrmJhxauWQiY2lJJYI72/gGA+j F+7fyc5lqjUIkHFPcBUYXTtThjuH7jA4qeeex+tO9oDrTqQ1WVFmMrhjYIfeer4X bb2dEc7GM5mdz88g+OimLHyW1eZgHi6ZxczOFXv5F98a6O8HOPiwXTW2H2gr/+HZ SKrz+sTz7w== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:58 2026 by rpki-client