$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: XHwM7YiCxzcd7RsnmxO4NxnlBQdiXOHwr4Lx42D+ZDA= Subject key identifier: BF:79:FE:62:B6:08:97:86:E8:98:35:40:D6:F0:27:9C:2D:92:7E:8D Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 10199E2AC97F9BB5E8B52EE894CA11D658B011F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: B5 Signing time: Tue 08 Sep 2026 23:35:13 +0000 Manifest this update: Tue 08 Sep 2026 23:30:13 +0000 Manifest next update: Sat 12 Sep 2026 00:13:13 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: cb57bPhyCWYpoJGCQdq/zshvykxbsDD+/b4vRMjDsJo=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:19:9e:2a:c9:7f:9b:b5:e8:b5:2e:e8:94:ca:11:d6:58:b0:11:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Sep 8 23:30:13 2026 GMT Not After : Sep 12 00:13:13 2026 GMT Subject: CN=BF79FE62B6089786E8983540D6F0279C2D927E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:18:91:95:6a:c6:3f:52:7b:c2:cb:44:a7: a7:20:ac:a9:3c:37:5c:b1:56:3c:97:1a:68:51:e8: 28:73:62:c8:b9:5f:e1:dc:6b:2e:1d:1f:81:ed:79: 6d:95:42:10:ed:f3:02:ae:3d:1d:44:6a:17:c9:e4: 8c:63:de:1f:eb:46:94:16:0a:6b:ac:88:7f:02:80: 57:ac:4d:11:c0:04:a3:2d:40:cc:43:47:2d:a0:aa: df:bd:e6:d1:59:ce:42:5b:b8:a5:f8:16:24:43:11: 8e:55:7b:76:26:d9:bd:52:f0:42:86:ca:92:2c:b9: af:a3:d4:09:d2:5d:83:e3:82:ac:c4:53:bd:d0:f9: 1a:5b:26:fc:1b:1f:06:7b:20:53:a2:83:d2:1e:46: 28:37:1a:da:77:54:99:14:f8:76:55:d8:fc:a5:58: 61:3d:69:eb:59:ff:a1:7f:98:97:c8:e6:cd:0a:47: 26:33:7f:69:cd:6f:29:b7:c6:b5:a9:8e:46:4f:4e: 76:41:00:05:f1:df:0e:34:83:c0:eb:d5:49:f2:17: 12:18:2f:26:84:5b:60:cb:0a:b6:ed:1e:85:3e:a7: 28:38:8f:5c:ed:db:f7:f3:a1:e8:c9:76:ef:78:bd: 0d:30:fb:89:ba:c0:58:c9:20:60:be:74:76:cd:16: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:FE:62:B6:08:97:86:E8:98:35:40:D6:F0:27:9C:2D:92:7E:8D X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:96:50:b6:54:a0:8b:1c:04:25:29:64:95:c1:85:93:da:a8: 71:a1:d7:6a:ca:2f:c7:9b:9b:4b:90:2d:0b:c0:0d:3e:09:35: 3e:aa:dd:ba:54:c9:a6:29:61:dc:ac:87:af:bf:d4:d7:2b:87: d7:a5:6c:69:c6:92:37:65:03:89:ca:38:b3:fe:87:28:a8:43: 3a:c6:56:03:0f:3b:61:72:9d:1f:0f:36:39:dc:fc:4c:86:cc: 68:6c:6c:30:d0:99:60:58:8c:19:00:a7:17:88:07:a6:d2:83: 50:ad:9b:08:a5:92:b8:ce:fc:91:11:1a:9e:36:23:1b:0f:42: 73:56:0c:52:ff:40:79:de:36:61:2b:75:dd:74:0d:8c:df:51: f5:94:4c:10:f2:56:71:8c:8a:83:8d:da:21:cb:c4:f5:d1:65: 6f:b2:c4:85:0c:ee:7c:9a:b5:bc:62:e9:03:5d:21:b6:ce:5b: 82:f9:60:09:6b:a6:cf:31:5d:93:f2:4b:77:2e:69:d3:89:d0: 36:d3:9f:32:fc:b6:9b:b6:4c:ef:93:96:20:fc:3d:6f:63:3f: 43:38:1a:43:cb:1f:85:65:9f:13:29:e7:ef:6c:55:b3:47:7e: 78:4a:96:d8:db:61:2b:a0:d0:ce:99:b9:6e:09:91:b0:b5:37: a7:95:ba:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEBmeKsl/m7XotS7olMoR1liwEfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA5MDgyMzMwMTNaFw0yNjA5MTIwMDEzMTNaMDMxMTAvBgNV BAMTKEJGNzlGRTYyQjYwODk3ODZFODk4MzU0MEQ2RjAyNzlDMkQ5MjdFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/hiRlWrGP1J7wstEp6cgrKk8 N1yxVjyXGmhR6ChzYsi5X+Hcay4dH4HteW2VQhDt8wKuPR1EahfJ5Ixj3h/rRpQW CmusiH8CgFesTRHABKMtQMxDRy2gqt+95tFZzkJbuKX4FiRDEY5Ve3Ym2b1S8EKG ypIsua+j1AnSXYPjgqzEU73Q+RpbJvwbHwZ7IFOig9IeRig3Gtp3VJkU+HZV2Pyl WGE9aetZ/6F/mJfI5s0KRyYzf2nNbym3xrWpjkZPTnZBAAXx3w40g8Dr1UnyFxIY LyaEW2DLCrbtHoU+pyg4j1zt2/fzoejJdu94vQ0w+4m6wFjJIGC+dHbNFvdZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv3n+YrYIl4bomDVA1vAnnC2Sfo0wHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpZQtlSgixwE JSlklcGFk9qocaHXasovx5ubS5AtC8ANPgk1PqrdulTJpilh3KyHr7/U1yuH16Vs acaSN2UDico4s/6HKKhDOsZWAw87YXKdHw82Odz8TIbMaGxsMNCZYFiMGQCnF4gH ptKDUK2bCKWSuM78kREanjYjGw9Cc1YMUv9Aed42YSt13XQNjN9R9ZRMEPJWcYyK g43aIcvE9dFlb7LEhQzufJq1vGLpA10hts5bgvlgCWumzzFdk/JLdy5p04nQNtOf Mvy2m7ZM75OWIPw9b2M/QzgaQ8sfhWWfEynn72xVs0d+eEqW2NthK6DQzpm5bgmR sLU3p5W68A== -----END CERTIFICATE-----Generated at Thu Sep 10 18:49:08 2026 by rpki-client