$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: ByAULuUQKV3QNIrwxpN+mrmJIL0WQYVv9Zph9xnu1Mo= Subject key identifier: 82:D3:0C:97:EB:C4:24:A9:54:03:D5:84:63:B2:06:04:E5:06:B1:78 Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 574F01018DFAB3CA5BBDC541BF65C11A8A35F99A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: AE Signing time: Wed 14 Oct 2026 08:08:50 +0000 Manifest this update: Wed 14 Oct 2026 08:03:50 +0000 Manifest next update: Sat 17 Oct 2026 11:22:50 +0000 Files and hashes: 1: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: b2k02/qgJr/Fei1CwAxmVQ5nThG7HZ7Z0KLxhP+KHkQ=) 2: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 11:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4f:01:01:8d:fa:b3:ca:5b:bd:c5:41:bf:65:c1:1a:8a:35:f9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Oct 14 08:03:50 2026 GMT Not After : Oct 17 11:22:50 2026 GMT Subject: CN=82D30C97EBC424A95403D58463B20604E506B178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:9f:ab:61:55:c6:5d:9b:5c:24:bc:1e:bc: 31:4c:be:4d:ad:ed:a7:47:17:ef:45:f1:14:df:2e: 4a:55:2e:6d:c4:81:1e:4d:17:4e:da:76:7d:52:a5: 4e:63:4a:23:05:00:49:f9:c4:2f:46:70:cf:ec:7c: 8b:da:e2:ea:01:57:4c:2e:cc:5d:55:67:3d:80:ee: 74:05:dd:95:a7:c7:a3:83:d7:14:a7:be:0f:4e:c0: 52:69:39:33:f4:3e:04:24:58:32:bd:0c:b4:fe:04: 91:fc:a6:7b:f9:49:82:41:f8:e4:c9:33:d1:fa:8d: 73:41:ca:18:72:d2:46:9a:5a:12:d0:01:f5:41:13: 25:df:be:06:f7:6d:96:6b:fe:ca:dc:97:9f:3c:e3: 65:4d:26:0e:5c:d8:aa:af:f7:2c:b0:0d:7b:4d:3f: 59:b4:a2:80:f4:98:ab:c1:7d:a3:8e:8b:9f:b2:2a: e5:69:18:86:2a:39:aa:33:9e:46:8a:53:40:e0:32: 24:70:c9:9d:00:ae:eb:6d:7d:11:3f:1b:d8:1d:1a: 1e:b0:3c:2d:55:4b:7a:5b:d2:29:c6:f8:c2:42:7e: 51:a7:eb:02:fd:67:78:9f:ce:78:03:41:58:b3:a0: 08:cf:33:bc:d3:e2:c5:e5:25:b0:a8:0d:c0:54:a2: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D3:0C:97:EB:C4:24:A9:54:03:D5:84:63:B2:06:04:E5:06:B1:78 X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:bb:5f:a8:2d:9a:e3:6e:af:e1:b8:9d:a9:5f:4a:9e:2c: 9b:cf:50:aa:0d:6d:c7:bf:c6:87:ac:71:6d:a0:61:d7:7f:7b: ab:b4:6a:1a:ec:8a:59:1e:a8:06:59:34:b9:52:4d:35:6b:3e: cb:2b:78:1a:97:75:a7:c6:47:a6:15:ef:8a:a9:95:ca:78:0e: 95:46:9b:80:86:4d:39:36:c2:70:19:9e:88:7d:64:31:4f:67: cb:9b:ac:15:50:38:e5:49:4d:84:c1:0f:7d:0b:7f:2a:3f:9c: b2:42:3a:80:6c:5b:d3:41:a0:fc:4d:d3:55:4e:1d:bb:e8:50: 37:4d:64:48:7c:4c:ed:c7:19:67:02:e3:a4:8a:ec:b9:f1:7a: 9e:c7:06:3d:4e:20:2c:fb:f4:68:a8:dd:ad:c0:4d:42:16:80: f6:ed:52:be:ed:c9:de:b6:cf:4f:42:33:2d:21:94:e1:11:ee: 69:1f:8d:ec:bf:70:bb:32:cf:9a:cc:12:88:e5:20:b2:59:24: 5f:fa:58:00:58:b1:a2:7f:d7:30:3a:51:6d:f6:97:0c:ce:28: 59:e1:cb:5b:f7:7e:67:10:bd:91:68:6f:de:fe:91:ec:bd:a6: 44:70:69:fc:f2:2a:b4:71:86:08:e6:ce:38:10:cf:45:9b:d4: 2d:d8:aa:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV08BAY36s8pbvcVBv2XBGoo1+ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjEwMTQwODAzNTBaFw0yNjEwMTcxMTIyNTBaMDMxMTAvBgNV BAMTKDgyRDMwQzk3RUJDNDI0QTk1NDAzRDU4NDYzQjIwNjA0RTUwNkIxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrp+rYVXGXZtcJLwevDFMvk2t 7adHF+9F8RTfLkpVLm3EgR5NF07adn1SpU5jSiMFAEn5xC9GcM/sfIva4uoBV0wu zF1VZz2A7nQF3ZWnx6OD1xSnvg9OwFJpOTP0PgQkWDK9DLT+BJH8pnv5SYJB+OTJ M9H6jXNByhhy0kaaWhLQAfVBEyXfvgb3bZZr/srcl58842VNJg5c2Kqv9yywDXtN P1m0ooD0mKvBfaOOi5+yKuVpGIYqOaoznkaKU0DgMiRwyZ0AruttfRE/G9gdGh6w PC1VS3pb0inG+MJCflGn6wL9Z3ifzngDQVizoAjPM7zT4sXlJbCoDcBUoprdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgtMMl+vEJKlUA9WEY7IGBOUGsXgwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5q7X6gtmuNu r+G4nalfSp4sm89Qqg1tx7/Gh6xxbaBh1397q7RqGuyKWR6oBlk0uVJNNWs+yyt4 Gpd1p8ZHphXviqmVyngOlUabgIZNOTbCcBmeiH1kMU9ny5usFVA45UlNhMEPfQt/ Kj+cskI6gGxb00Gg/E3TVU4du+hQN01kSHxM7ccZZwLjpIrsufF6nscGPU4gLPv0 aKjdrcBNQhaA9u1Svu3J3rbPT0IzLSGU4RHuaR+N7L9wuzLPmswSiOUgslkkX/pY AFixon/XMDpRbfaXDM4oWeHLW/d+ZxC9kWhv3v6R7L2mRHBp/PIqtHGGCObOOBDP RZvULdiq4w== -----END CERTIFICATE-----Generated at Wed Oct 14 20:44:44 2026 by rpki-client