$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: nb1qcA91iO/T7mV1AKc0P1TChOYQAMMd2782DIa/cfs= Subject key identifier: E3:81:4B:50:5D:E1:87:F7:59:D2:95:DC:03:57:3F:DE:B0:4F:AB:BE Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 2FCAD3307B26300189D5C389645DDF2F98E70BD5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: B3 Signing time: Wed 09 Sep 2026 02:05:19 +0000 Manifest this update: Wed 09 Sep 2026 02:00:19 +0000 Manifest next update: Sat 12 Sep 2026 09:13:19 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 2: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: pzWF8bLLnZewxmzr6OJ+9Qn4St0vQGFSJzG17XGtOEo=) 3: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 4: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 09:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ca:d3:30:7b:26:30:01:89:d5:c3:89:64:5d:df:2f:98:e7:0b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Sep 9 02:00:19 2026 GMT Not After : Sep 12 09:13:19 2026 GMT Subject: CN=E3814B505DE187F759D295DC03573FDEB04FABBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:aa:3f:f1:7f:c9:94:0c:78:e1:b1:81:8d: a0:f4:40:bc:4a:c3:df:66:e8:90:31:fb:55:18:ac: 36:3c:67:3a:b7:e1:cc:4d:1a:4a:cd:6c:65:ac:15: 0a:f7:db:04:07:63:f3:d6:0f:8c:13:3c:73:15:ec: 6e:89:f5:48:84:d1:6c:50:30:23:fc:64:f4:ad:39: af:60:ec:92:18:b3:e8:25:07:58:32:87:31:aa:61: 08:c6:87:6d:3d:8a:04:29:2f:19:70:a2:d8:eb:35: ca:42:0c:ea:ad:35:74:6d:69:e3:24:2e:38:a9:e4: 6f:bf:69:d4:0e:4b:e4:c7:4d:fa:75:2f:22:e9:3c: 7c:11:98:9f:75:33:37:c1:83:11:92:cf:20:18:61: 6e:99:ad:f7:40:01:f3:9e:6d:2a:8e:04:51:c9:cf: 93:2b:52:9d:51:c5:9e:93:ad:07:1d:a4:d4:00:16: 77:ef:4a:e9:8e:e0:54:6c:e2:a2:e2:3f:70:56:4c: e6:7e:ec:cc:f8:b2:d7:5c:e4:48:ae:83:bb:2d:83: c9:cb:58:cf:81:6b:91:98:19:f6:6b:77:70:fd:7b: 3e:f9:1c:68:9a:7b:9f:8a:7d:d6:6f:2b:7d:4e:25: 6c:56:3c:9e:37:d1:fb:17:5e:c1:d7:40:b1:22:a3: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:81:4B:50:5D:E1:87:F7:59:D2:95:DC:03:57:3F:DE:B0:4F:AB:BE X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:79:2c:36:ac:e0:50:6d:24:68:b0:bc:07:d8:c0:f1:50:69: 3d:fb:95:d4:f0:d2:5a:25:a4:02:bd:0b:92:11:49:33:b0:30: af:5c:1b:14:cc:55:5f:a5:5f:48:dd:02:79:fc:87:86:27:1d: 5d:fa:2b:69:c5:db:13:cd:41:71:31:df:09:82:21:16:ce:39: dd:6b:43:a2:2c:47:a6:89:7a:fa:27:7b:7e:e9:69:1e:4c:88: ca:49:f2:c1:57:f3:4a:1b:86:39:4d:ac:90:48:0b:a1:5e:dd: 8f:2b:18:66:d5:59:83:3a:ce:d9:2a:cc:1c:c9:3b:ed:d6:66: fe:4c:40:4e:87:6f:6f:a4:50:3a:a8:ec:af:b1:ad:e9:69:e4: 97:52:a8:a0:34:1a:50:df:c4:1e:f0:dc:a6:cc:9f:7a:ca:b7: 30:53:f1:be:e2:b2:05:e6:95:7f:50:9f:21:02:75:dc:03:ce: 53:6f:15:5f:c8:9d:25:89:cf:0d:92:35:84:f4:52:e7:7a:50: 7d:19:c5:98:db:48:db:c9:c2:72:67:f9:35:56:44:0d:cc:ad: 6b:0a:8d:d2:26:3b:5d:9f:91:64:de:f8:9d:9a:84:df:b2:66: 66:d8:49:c9:81:14:3f:c8:9e:0b:2c:fb:79:84:0c:d0:37:51: 21:35:3f:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL8rTMHsmMAGJ1cOJZF3fL5jnC9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA5MDkwMjAwMTlaFw0yNjA5MTIwOTEzMTlaMDMxMTAvBgNV BAMTKEUzODE0QjUwNURFMTg3Rjc1OUQyOTVEQzAzNTczRkRFQjA0RkFCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkKo/8X/JlAx44bGBjaD0QLxK w99m6JAx+1UYrDY8Zzq34cxNGkrNbGWsFQr32wQHY/PWD4wTPHMV7G6J9UiE0WxQ MCP8ZPStOa9g7JIYs+glB1gyhzGqYQjGh209igQpLxlwotjrNcpCDOqtNXRtaeMk Ljip5G+/adQOS+THTfp1LyLpPHwRmJ91MzfBgxGSzyAYYW6ZrfdAAfOebSqOBFHJ z5MrUp1RxZ6TrQcdpNQAFnfvSumO4FRs4qLiP3BWTOZ+7Mz4stdc5Eiug7stg8nL WM+Ba5GYGfZrd3D9ez75HGiae5+KfdZvK31OJWxWPJ430fsXXsHXQLEio5AlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU44FLUF3hh/dZ0pXcA1c/3rBPq74wHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3ksNqzgUG0k aLC8B9jA8VBpPfuV1PDSWiWkAr0LkhFJM7Awr1wbFMxVX6VfSN0CefyHhicdXfor acXbE81BcTHfCYIhFs453WtDoixHpol6+id7fulpHkyIyknywVfzShuGOU2skEgL oV7djysYZtVZgzrO2SrMHMk77dZm/kxATodvb6RQOqjsr7Gt6Wnkl1KooDQaUN/E HvDcpsyfesq3MFPxvuKyBeaVf1CfIQJ13APOU28VX8idJYnPDZI1hPRS53pQfRnF mNtI28nCcmf5NVZEDcytawqN0iY7XZ+RZN74nZqE37JmZthJyYEUP8ieCyz7eYQM 0DdRITU/jg== -----END CERTIFICATE-----Generated at Thu Sep 10 10:44:06 2026 by rpki-client