$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: AuihZ/za6sRnvIomSs11B0Lm9ul9QbsDSNSOwdgzcys= Subject key identifier: 66:22:A4:03:3C:20:C3:D2:65:90:6B:0A:07:B8:60:73:C1:36:06:28 Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 019E0440F5E45B534A077DA678B053072EA2CFF2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: BD Signing time: Thu 08 Oct 2026 23:47:49 +0000 Manifest this update: Thu 08 Oct 2026 23:42:49 +0000 Manifest next update: Mon 12 Oct 2026 06:21:49 +0000 Files and hashes: 1: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 2: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) 3: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: dID2H5XGxRhJwBwoai9/EOckgKh9nwwR7ialZsNzJwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:04:40:f5:e4:5b:53:4a:07:7d:a6:78:b0:53:07:2e:a2:cf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Oct 8 23:42:49 2026 GMT Not After : Oct 12 06:21:49 2026 GMT Subject: CN=6622A4033C20C3D265906B0A07B86073C1360628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:b6:7d:f8:5f:9f:37:c0:6a:72:09:59:c6: 7c:4d:63:1e:ec:64:29:d1:ab:8c:cc:75:7c:07:ed: b5:5c:00:50:f2:68:3d:35:dd:4a:a6:1e:ba:79:85: 86:e6:dd:8f:63:41:33:b8:55:0a:31:7c:14:79:ef: 0f:c0:f0:5c:84:4e:51:c8:1b:40:cd:75:07:2c:3b: d0:de:26:77:3e:23:42:1c:f9:b0:3e:fd:13:9a:11: 6a:4c:60:68:da:c1:09:ae:9e:58:23:47:c0:27:c1: 28:ea:37:37:c5:22:b9:3c:cc:25:89:b7:b5:38:01: d5:d7:65:db:cf:be:fe:4b:e4:d2:42:4e:aa:fb:81: 9b:d6:ea:f9:8d:6d:92:55:8c:9d:41:d7:bc:8f:3e: 28:14:42:58:a0:09:6b:a3:22:d9:2e:b3:d3:a3:13: 11:da:50:21:e4:ef:de:14:55:2e:93:95:cc:1e:3b: 51:61:ab:43:e9:54:87:bb:ba:ce:88:67:81:73:d6: cb:d2:4a:2b:19:08:57:09:a9:95:d9:bd:35:5c:05: da:d1:ff:e5:9a:03:ac:5f:cb:28:2b:d9:3f:39:eb: a3:82:6c:68:b2:71:d7:02:9c:8d:09:eb:24:3d:db: c2:5a:e2:fa:6d:d5:8e:23:5a:3a:69:39:06:c1:1d: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:22:A4:03:3C:20:C3:D2:65:90:6B:0A:07:B8:60:73:C1:36:06:28 X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b9:b5:41:5a:84:54:78:44:91:c2:dc:e1:d1:64:c8:10:95: 8b:f0:f9:09:28:c7:78:c1:0e:6b:bf:54:37:6c:e5:ff:42:dd: ce:db:f4:87:5b:9c:5a:c2:cf:ad:3d:8a:f7:82:55:36:a7:ec: c3:68:aa:4b:82:c9:08:8c:5a:c3:0c:d5:ae:52:42:f9:69:65: ce:79:b8:0a:1a:ac:c4:9a:20:1c:3c:7e:75:99:72:4e:ae:65: 45:fa:3a:09:07:04:48:cc:88:8f:33:24:de:75:cf:36:5e:67: 4d:82:84:81:92:f0:23:f4:db:49:3b:11:f4:14:c0:57:04:ad: 69:95:50:08:52:01:78:be:d4:46:39:46:37:06:df:6b:14:fa: 48:90:33:89:71:5e:eb:2f:f5:1a:5b:70:6f:f1:2d:cf:ba:1f: 53:64:dd:c2:55:87:99:b4:a4:49:50:10:e7:25:93:27:79:cc: 0e:ae:de:f7:c7:49:2b:fb:07:83:8d:10:08:74:76:aa:85:9e: c7:8b:7f:98:86:8d:e5:ec:03:c9:22:7b:62:20:5a:08:c8:f1: 5c:d0:a8:61:c9:27:01:62:42:1f:10:c6:d6:36:13:93:40:cf: 5f:58:d9:f5:02:aa:3b:58:22:5e:cb:4c:b9:f5:6a:a3:6c:2a: dd:7f:27:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAZ4EQPXkW1NKB32meLBTBy6iz/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjEwMDgyMzQyNDlaFw0yNjEwMTIwNjIxNDlaMDMxMTAvBgNV BAMTKDY2MjJBNDAzM0MyMEMzRDI2NTkwNkIwQTA3Qjg2MDczQzEzNjA2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP47Z9+F+fN8BqcglZxnxNYx7s ZCnRq4zMdXwH7bVcAFDyaD013UqmHrp5hYbm3Y9jQTO4VQoxfBR57w/A8FyETlHI G0DNdQcsO9DeJnc+I0Ic+bA+/ROaEWpMYGjawQmunlgjR8AnwSjqNzfFIrk8zCWJ t7U4AdXXZdvPvv5L5NJCTqr7gZvW6vmNbZJVjJ1B17yPPigUQligCWujItkus9Oj ExHaUCHk794UVS6TlcweO1Fhq0PpVIe7us6IZ4Fz1svSSisZCFcJqZXZvTVcBdrR /+WaA6xfyygr2T8566OCbGiycdcCnI0J6yQ928Ja4vpt1Y4jWjppOQbBHd2jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZiKkAzwgw9JlkGsKB7hgc8E2BigwHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLm1QVqEVHhE kcLc4dFkyBCVi/D5CSjHeMEOa79UN2zl/0Ldztv0h1ucWsLPrT2K94JVNqfsw2iq S4LJCIxawwzVrlJC+Wllznm4ChqsxJogHDx+dZlyTq5lRfo6CQcESMyIjzMk3nXP Nl5nTYKEgZLwI/TbSTsR9BTAVwStaZVQCFIBeL7URjlGNwbfaxT6SJAziXFe6y/1 Gltwb/Etz7ofU2TdwlWHmbSkSVAQ5yWTJ3nMDq7e98dJK/sHg40QCHR2qoWex4t/ mIaN5ewDySJ7YiBaCMjxXNCoYcknAWJCHxDG1jYTk0DPX1jZ9QKqO1giXstMufVq o2wq3X8n3Q== -----END CERTIFICATE-----Generated at Sat Oct 10 11:03:57 2026 by rpki-client