$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: n271eKT4P36JRMollRFD4U9c5nL9H+1FTedBZ+35QZs= Subject key identifier: 3C:AC:55:5A:5D:80:96:23:CF:80:15:8E:AD:6E:56:F4:9C:E3:E9:1D Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 4226CEFFF25F56A1F4FF40641F58F53295C1A87B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: CA Signing time: Tue 27 Oct 2026 03:39:17 +0000 Manifest this update: Tue 27 Oct 2026 03:34:17 +0000 Manifest next update: Fri 30 Oct 2026 06:17:17 +0000 Files and hashes: 1: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) 2: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: WbqTzLfGqbJn5eK6GT956hqCFGQziJwaPDwFjZErH/M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 06:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:26:ce:ff:f2:5f:56:a1:f4:ff:40:64:1f:58:f5:32:95:c1:a8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Oct 27 03:34:17 2026 GMT Not After : Oct 30 06:17:17 2026 GMT Subject: CN=3CAC555A5D809623CF80158EAD6E56F49CE3E91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:3a:6e:01:da:b4:d8:6a:44:25:1b:c9:67: 23:70:09:0e:2e:17:10:78:36:b1:56:61:69:36:f0: 31:71:72:8b:e9:4a:e9:8f:38:89:da:98:e6:4a:45: 89:db:43:a6:77:1a:e3:3b:45:29:aa:2f:5b:3b:18: 7a:d7:d4:dc:6b:dc:de:d2:03:ac:3b:7f:a8:fd:28: 2b:45:e4:a3:0f:ff:82:ac:f4:fd:66:fb:59:f3:4e: 8a:49:a3:fd:ef:b8:28:b1:8f:89:10:15:ac:04:77: b3:fe:51:4f:30:95:5d:fb:c8:e2:89:b9:85:bc:27: 60:92:43:f6:33:11:8f:64:24:18:de:17:88:6c:01: b8:43:34:04:44:41:05:bf:70:4f:e1:52:20:24:42: 59:24:96:9f:ae:1f:c3:ef:9e:56:d8:7e:4b:b7:4c: c5:fb:26:3b:c0:c7:f1:8e:84:8a:3e:dc:b8:88:1a: d2:7c:50:38:ff:c4:4c:73:02:3f:cc:9b:73:9f:5b: 15:14:00:f0:ed:5f:f2:a1:0f:57:0c:e7:fb:d3:35: 9f:04:4d:ac:cb:5a:4a:5b:fa:0b:7a:b5:be:33:17: 29:a8:ab:18:d1:e1:c9:59:b9:be:1a:4a:9a:b0:dc: a9:ef:42:bf:a3:cf:6e:f7:a8:6f:52:7b:ab:7f:f9: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:55:5A:5D:80:96:23:CF:80:15:8E:AD:6E:56:F4:9C:E3:E9:1D X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c3:e5:57:ca:4e:b6:c6:f5:dc:e5:c0:21:a8:9b:a1:6a:b2: 49:6f:37:ef:ec:e4:a8:3c:df:04:59:63:c3:7f:96:be:7f:42: a7:ac:59:0d:d8:66:33:02:75:3f:08:06:9c:15:f7:3f:74:fa: 97:01:67:06:2c:c4:2e:2e:89:7f:58:b1:ef:b0:76:22:4b:75: 54:81:fc:6d:d5:fe:2c:b3:d8:21:b9:c4:fe:21:60:d7:66:99: a6:c8:11:ea:15:6f:1f:70:22:c3:38:75:38:72:fe:38:65:c5: e4:c9:5b:7a:8a:cb:92:cb:e5:8d:6d:b9:01:28:11:e1:88:b8: d8:18:ad:66:a0:a9:c0:74:c2:fb:e7:a4:e9:ab:27:53:e5:4d: 28:e0:26:e1:f2:df:f0:6c:68:64:6b:c4:19:3c:89:51:2e:6e: 91:3f:c7:18:c0:ba:7a:b5:2b:91:40:f4:ab:5a:45:0a:8c:82: d3:75:30:19:0c:63:74:eb:e5:40:9f:bb:52:c3:0d:a8:21:bb: e9:d8:30:ca:10:3d:24:60:4e:1e:72:9c:f3:ba:55:54:4f:c4: 74:a1:4c:c3:89:77:01:3f:6d:ca:1b:23:3b:70:05:20:0d:0c: 42:08:36:d3:0d:fc:6f:9a:8f:7d:2d:da:b8:d7:6d:86:5f:a6: 92:66:76:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQibO//JfVqH0/0BkH1j1MpXBqHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjEwMjcwMzM0MTdaFw0yNjEwMzAwNjE3MTdaMDMxMTAvBgNV BAMTKDNDQUM1NTVBNUQ4MDk2MjNDRjgwMTU4RUFENkU1NkY0OUNFM0U5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI9TpuAdq02GpEJRvJZyNwCQ4u FxB4NrFWYWk28DFxcovpSumPOInamOZKRYnbQ6Z3GuM7RSmqL1s7GHrX1Nxr3N7S A6w7f6j9KCtF5KMP/4Ks9P1m+1nzTopJo/3vuCixj4kQFawEd7P+UU8wlV37yOKJ uYW8J2CSQ/YzEY9kJBjeF4hsAbhDNAREQQW/cE/hUiAkQlkklp+uH8PvnlbYfku3 TMX7JjvAx/GOhIo+3LiIGtJ8UDj/xExzAj/Mm3OfWxUUAPDtX/KhD1cM5/vTNZ8E TazLWkpb+gt6tb4zFymoqxjR4clZub4aSpqw3KnvQr+jz273qG9Se6t/+XZ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPKxVWl2AliPPgBWOrW5W9Jzj6R0wHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsPlV8pOtsb1 3OXAIaiboWqySW837+zkqDzfBFljw3+Wvn9Cp6xZDdhmMwJ1PwgGnBX3P3T6lwFn BizELi6Jf1ix77B2Ikt1VIH8bdX+LLPYIbnE/iFg12aZpsgR6hVvH3Aiwzh1OHL+ OGXF5MlbeorLksvljW25ASgR4Yi42BitZqCpwHTC++ek6asnU+VNKOAm4fLf8Gxo ZGvEGTyJUS5ukT/HGMC6erUrkUD0q1pFCoyC03UwGQxjdOvlQJ+7UsMNqCG76dgw yhA9JGBOHnKc87pVVE/EdKFMw4l3AT9tyhsjO3AFIA0MQgg20w38b5qPfS3auNdt hl+mkmZ20A== -----END CERTIFICATE-----Generated at Wed Oct 28 14:51:25 2026 by rpki-client