$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: oMnkm2aWybJ/91Fdsk4effnW9sP7q83LGpJpPzz7Oi0= Subject key identifier: E2:85:E6:84:5C:A6:CD:4C:1C:A7:85:79:43:C1:73:DA:63:C9:88:7E Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 48753F1D30D589B425A3BFB85ED4F9F73527A70C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: A3 Signing time: Tue 13 Oct 2026 01:07:36 +0000 Manifest this update: Tue 13 Oct 2026 01:02:36 +0000 Manifest next update: Fri 16 Oct 2026 10:18:36 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: dRLbxbAKBUQy7yIEmWuCzoSphGCsxQYJsOFGsLMsGTA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:75:3f:1d:30:d5:89:b4:25:a3:bf:b8:5e:d4:f9:f7:35:27:a7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: Oct 13 01:02:36 2026 GMT Not After : Oct 16 10:18:36 2026 GMT Subject: CN=E285E6845CA6CD4C1CA7857943C173DA63C9887E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:8d:2d:2d:15:ca:c7:db:1c:41:87:49:51: e2:fc:ce:84:13:5a:80:85:03:c6:ff:ea:46:8d:a0: 9c:cc:ef:0a:d1:a6:47:80:b5:51:67:3b:b0:a6:ba: ed:c5:65:7f:90:75:95:a5:68:1f:d0:06:71:ae:cd: 3e:7c:f3:be:9f:b9:8c:98:b1:f3:f3:62:13:9e:c0: af:58:6e:4b:9b:30:79:2a:c0:52:fe:37:b5:73:a6: a5:4a:09:a4:f1:1c:9a:d5:01:78:d6:d6:c4:fb:d1: 4f:e8:c7:8b:7f:72:c1:e3:89:4e:15:20:b5:b3:d6: 80:db:94:9d:03:6f:4f:60:15:2e:57:c1:fe:9f:2b: cc:23:ad:2f:7b:28:48:b7:ec:9c:08:50:e3:41:ad: 41:42:5e:1c:18:29:ae:7b:9e:93:b4:ba:e7:5e:85: 14:90:41:33:44:ed:11:be:6e:52:e2:e8:35:9a:0a: 20:c4:86:c6:b9:5d:da:b6:6c:25:ad:64:4f:f3:a3: c6:93:e6:72:58:5f:bd:83:5f:f8:84:45:4b:f6:96: a5:4c:9b:e3:28:1a:af:ba:7c:76:85:de:7d:d7:77: ff:9f:73:30:03:7d:cc:48:cc:e8:11:9d:16:c0:73: ac:b1:18:5e:a1:c8:9f:f9:f2:51:88:6f:f7:1f:b7: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:E6:84:5C:A6:CD:4C:1C:A7:85:79:43:C1:73:DA:63:C9:88:7E X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:9c:0a:79:39:00:ac:b5:96:4e:93:f4:92:2c:aa:21:ce: 24:7d:41:32:3a:d3:ed:18:b1:10:13:6f:e9:34:2a:a0:ab:c6: fa:28:fa:8d:ec:c2:2e:3c:a7:b8:18:15:8b:c0:eb:fb:58:48: be:53:93:8a:0e:00:d2:a7:45:4c:39:49:6e:34:7c:77:05:7b: a1:32:82:a2:b2:53:58:c3:2c:84:20:8b:a0:ec:e3:7f:76:70: 71:55:26:52:e8:81:02:4a:5a:43:b0:03:30:80:3f:a8:11:72: 93:5e:8c:37:b0:ab:c0:ef:b6:3d:31:80:3e:c5:65:b4:61:ef: fb:9a:81:70:e4:b4:7d:1e:b0:0c:10:e8:8d:1d:02:e4:59:e0: 4d:91:43:b3:ae:d6:56:e2:38:af:8a:2e:95:bc:18:92:05:2d: 3b:20:3d:fb:3a:77:2a:0b:ed:5a:88:fb:28:55:c9:22:48:58: 06:d9:f9:e2:2c:57:80:f0:5d:e4:44:23:c1:c9:81:60:ed:5c: 56:63:09:87:93:22:11:d1:ed:43:25:43:bc:e7:a5:13:a8:9d: 1e:b4:96:04:93:be:b2:c3:19:62:89:28:1f:5e:01:ae:76:ff: af:6f:86:d7:c3:a6:f4:01:e5:84:45:18:ef:94:ec:2f:b9:d4: 32:fb:10:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSHU/HTDVibQlo7+4XtT59zUnpwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjEwMTMwMTAyMzZaFw0yNjEwMTYxMDE4MzZaMDMxMTAvBgNV BAMTKEUyODVFNjg0NUNBNkNENEMxQ0E3ODU3OTQzQzE3M0RBNjNDOTg4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVo0tLRXKx9scQYdJUeL8zoQT WoCFA8b/6kaNoJzM7wrRpkeAtVFnO7Cmuu3FZX+QdZWlaB/QBnGuzT58876fuYyY sfPzYhOewK9YbkubMHkqwFL+N7VzpqVKCaTxHJrVAXjW1sT70U/ox4t/csHjiU4V ILWz1oDblJ0Db09gFS5Xwf6fK8wjrS97KEi37JwIUONBrUFCXhwYKa57npO0uude hRSQQTNE7RG+blLi6DWaCiDEhsa5Xdq2bCWtZE/zo8aT5nJYX72DX/iERUv2lqVM m+MoGq+6fHaF3n3Xd/+fczADfcxIzOgRnRbAc6yxGF6hyJ/58lGIb/cftydfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4oXmhFymzUwcp4V5Q8Fz2mPJiH4wHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH12cCnk5AKy1 lk6T9JIsqiHOJH1BMjrT7RixEBNv6TQqoKvG+ij6jezCLjynuBgVi8Dr+1hIvlOT ig4A0qdFTDlJbjR8dwV7oTKCorJTWMMshCCLoOzjf3ZwcVUmUuiBAkpaQ7ADMIA/ qBFyk16MN7CrwO+2PTGAPsVltGHv+5qBcOS0fR6wDBDojR0C5FngTZFDs67WVuI4 r4oulbwYkgUtOyA9+zp3KgvtWoj7KFXJIkhYBtn54ixXgPBd5EQjwcmBYO1cVmMJ h5MiEdHtQyVDvOelE6idHrSWBJO+ssMZYokoH14Brnb/r2+G18Om9AHlhEUY75Ts L7nUMvsQUA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:48:41 2026 by rpki-client