$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: NYxcBH5DQFvkpueR1soktrmA5R5W6iaa35mQiMAzwgc= Subject key identifier: 29:1A:87:5F:79:F0:7B:7F:AA:65:F7:EB:1F:4A:D0:2E:73:FB:A7:C9 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 5DBB0F5448006164951FB70CA23B0DC62CA3D77C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: C8 Signing time: Sun 25 Oct 2026 20:22:57 +0000 Manifest this update: Sun 25 Oct 2026 20:17:57 +0000 Manifest next update: Thu 29 Oct 2026 03:55:57 +0000 Files and hashes: 1: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: PO9vrBuA3ITbUaIFrMsu4J5DSLSzl95d/o5k1fNTmwE=) 2: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 3: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 4: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:0f:54:48:00:61:64:95:1f:b7:0c:a2:3b:0d:c6:2c:a3:d7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Oct 25 20:17:57 2026 GMT Not After : Oct 29 03:55:57 2026 GMT Subject: CN=291A875F79F07B7FAA65F7EB1F4AD02E73FBA7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:d0:a8:db:4a:71:64:d4:0f:de:40:f1:c9: 0d:a5:a6:1e:7a:4c:e1:54:e4:20:26:34:26:a9:38: 56:6b:77:7a:bc:d3:4f:9e:2d:45:24:31:1d:a8:64: 6d:9d:06:58:fb:9a:24:b1:e3:ed:a8:c1:86:50:b4: 56:1c:2f:f5:65:c6:76:1b:e3:9e:89:76:e2:7c:52: d5:5f:4d:6f:83:7a:f4:c8:3e:32:7a:89:ff:a6:fa: 25:b1:57:ff:ac:ba:c0:ba:05:c4:53:80:8b:ea:4c: 4b:df:29:5f:15:b0:87:f3:ab:84:09:c8:42:08:6e: 67:9d:00:1a:73:2d:18:e1:51:4b:a4:95:2d:75:5b: bc:90:ac:cf:7d:00:60:e1:db:43:8c:1f:21:1c:2e: 33:a7:97:fa:49:bd:6b:0a:13:19:78:cd:76:ad:71: 9f:54:8c:1d:6f:90:a4:11:a5:e6:04:79:6a:5c:41: 2f:80:cd:a7:5c:b1:ef:57:96:9a:a2:ab:9f:35:be: 2a:53:ac:dd:42:76:66:02:30:a8:24:bb:28:19:5a: c7:df:ad:6d:1a:54:70:e8:a8:77:10:95:50:e8:45: 08:78:99:bd:b1:98:2e:2d:c4:a0:87:3f:9e:f7:48: 8a:af:44:d6:82:b3:1f:b8:c2:89:84:14:fc:49:f0: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:87:5F:79:F0:7B:7F:AA:65:F7:EB:1F:4A:D0:2E:73:FB:A7:C9 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8b:3c:e7:93:5d:a5:a8:b7:be:47:25:b7:6a:dd:30:52:7f: a4:73:24:46:4b:d9:a3:c2:28:18:b5:c8:21:66:e5:ca:c5:64: 2b:ae:f5:8b:3c:c8:43:6a:2f:b6:16:8b:7b:6e:81:99:c5:90: ab:83:fb:df:c1:1d:d7:49:e0:88:bd:4e:0e:71:2e:3c:79:de: 69:9d:a9:9e:da:fb:e9:fa:85:9e:33:ae:d7:f7:4f:f5:bf:44: 06:14:97:27:6e:80:5c:6c:ee:0f:33:28:09:fe:28:c0:27:99: 05:31:71:92:bb:3a:b2:cd:11:ab:62:f8:6a:49:1d:71:82:e3: 59:90:3b:0a:20:d8:14:53:cd:19:10:a6:2b:5f:57:a1:78:65: 99:93:b3:23:38:60:6c:e4:c5:15:80:9d:d9:b1:dd:1d:a4:f0: 91:41:46:eb:66:41:4d:16:cb:2e:5b:c7:5d:16:d9:63:3c:c7: b7:72:ac:7e:31:74:15:0e:12:3a:90:17:5f:d4:5e:b9:b7:4f: 76:11:7d:15:c4:ca:c8:83:1b:fc:cc:5d:a9:4b:b5:ea:20:96: a1:79:16:2c:f1:6f:1f:26:11:74:a0:87:6c:86:45:ac:d6:10: 2c:f2:27:cc:3d:77:df:66:4c:b7:01:f9:0f:04:76:f1:3d:ec: c6:f0:a7:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXbsPVEgAYWSVH7cMojsNxiyj13wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjEwMjUyMDE3NTdaFw0yNjEwMjkwMzU1NTdaMDMxMTAvBgNV BAMTKDI5MUE4NzVGNzlGMDdCN0ZBQTY1RjdFQjFGNEFEMDJFNzNGQkE3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EdCo20pxZNQP3kDxyQ2lph56 TOFU5CAmNCapOFZrd3q800+eLUUkMR2oZG2dBlj7miSx4+2owYZQtFYcL/VlxnYb 456JduJ8UtVfTW+DevTIPjJ6if+m+iWxV/+susC6BcRTgIvqTEvfKV8VsIfzq4QJ yEIIbmedABpzLRjhUUuklS11W7yQrM99AGDh20OMHyEcLjOnl/pJvWsKExl4zXat cZ9UjB1vkKQRpeYEeWpcQS+Azadcse9Xlpqiq581vipTrN1CdmYCMKgkuygZWsff rW0aVHDoqHcQlVDoRQh4mb2xmC4txKCHP573SIqvRNaCsx+4womEFPxJ8N1NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKRqHX3nwe3+qZffrH0rQLnP7p8kwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4s855Ndpai3 vkclt2rdMFJ/pHMkRkvZo8IoGLXIIWblysVkK671izzIQ2ovthaLe26BmcWQq4P7 38Ed10ngiL1ODnEuPHneaZ2pntr76fqFnjOu1/dP9b9EBhSXJ26AXGzuDzMoCf4o wCeZBTFxkrs6ss0Rq2L4akkdcYLjWZA7CiDYFFPNGRCmK19XoXhlmZOzIzhgbOTF FYCd2bHdHaTwkUFG62ZBTRbLLlvHXRbZYzzHt3KsfjF0FQ4SOpAXX9ReubdPdhF9 FcTKyIMb/MxdqUu16iCWoXkWLPFvHyYRdKCHbIZFrNYQLPInzD1332ZMtwH5DwR2 8T3sxvCnWQ== -----END CERTIFICATE-----Generated at Mon Oct 26 15:09:56 2026 by rpki-client