$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: SCeNxFwxVOL5xy40PHCpE83TKLc85a04CHvWlM5TNFQ= Subject key identifier: 15:F9:57:14:D4:34:C5:8E:97:99:D4:D1:10:C3:A7:05:23:FD:D1:DE Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 3038D1798BFA9866FF35E4A462C6501D50217A6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 94 Signing time: Wed 14 Oct 2026 07:18:41 +0000 Manifest this update: Wed 14 Oct 2026 07:13:41 +0000 Manifest next update: Sat 17 Oct 2026 14:39:41 +0000 Files and hashes: 1: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) 2: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 3: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: EFhB0SfV6dXRvZPbhb9672LxM5fDNvQZOicarAiGDpQ=) 4: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 5: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:d1:79:8b:fa:98:66:ff:35:e4:a4:62:c6:50:1d:50:21:7a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Oct 14 07:13:41 2026 GMT Not After : Oct 17 14:39:41 2026 GMT Subject: CN=15F95714D434C58E9799D4D110C3A70523FDD1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:36:b4:a2:39:5a:4a:f9:98:69:d5:2f:2a:24: e2:df:99:e9:4a:d3:3e:7e:de:86:70:4c:f1:62:27: 48:40:cb:9f:4f:ee:33:c7:21:7d:8c:71:b2:5d:1a: 77:61:1d:9b:60:ad:00:ca:41:45:49:e1:b0:23:b8: a5:e7:fe:b4:7b:66:58:20:b0:d4:55:bb:77:70:be: aa:08:31:8d:30:1c:e9:20:56:e4:91:38:06:85:3c: 57:84:cd:4d:a9:19:d6:13:4c:93:91:5e:19:d0:df: ae:fc:21:4a:de:d3:60:77:78:c5:ee:63:23:1c:27: 46:f3:b1:55:79:e1:ab:3f:6b:2c:65:90:37:46:c9: 59:34:09:f3:8b:a3:69:7f:59:86:7d:15:71:2a:b8: 89:ee:32:87:3a:8d:aa:af:64:c6:a8:6c:bc:17:80: 1d:33:a5:55:93:23:44:c7:3c:a4:7a:9c:ad:e1:3c: 3b:57:14:80:86:4c:eb:ef:ce:ae:a9:83:ee:cf:f3: 77:50:88:38:82:af:cf:ad:04:b0:a4:b8:30:a1:f5: 80:17:8b:8d:f9:d1:77:2a:a2:c2:e3:71:18:82:ca: fb:f8:a1:f2:22:fa:a3:74:81:aa:26:c5:1a:c1:53: 98:a9:dc:ee:ff:e8:97:33:7d:ca:df:6c:98:21:8a: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F9:57:14:D4:34:C5:8E:97:99:D4:D1:10:C3:A7:05:23:FD:D1:DE X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3e:90:b5:82:93:a6:5f:1a:e5:d4:57:bf:7b:1d:6d:3c:da: 40:87:c9:96:5a:ee:c9:28:dc:40:69:37:30:d5:68:a6:6d:46: 69:95:bc:68:82:ab:d0:1d:51:60:24:21:34:9c:76:a9:3f:7b: 84:e8:55:5c:33:25:be:c4:1b:34:86:45:78:a5:e5:b8:83:4e: a8:fe:58:4a:db:d4:13:77:1d:43:c4:ff:23:f0:fe:65:4b:94: 4e:1d:7f:a4:2b:76:6a:61:d0:4b:4d:39:ce:67:de:5a:f7:98: 4a:d2:72:e8:d2:25:82:54:b4:a4:e5:ad:4d:01:d6:a5:9e:23: 24:bf:92:8e:6f:a0:cf:7f:b1:bb:ff:eb:dd:21:b1:b1:d3:00: 9d:d2:14:a8:35:41:df:fc:73:04:75:a4:57:0f:0f:d6:ad:ac: 66:d2:15:06:c0:4f:57:99:08:93:46:8f:31:94:55:a4:63:64: 98:84:b9:91:ce:65:ea:8f:5e:42:21:b7:fa:35:87:80:a8:ac: b3:c1:13:61:04:22:d4:e8:89:b1:e5:5d:44:0a:f3:a5:79:3f: 7a:be:92:e3:90:b1:d1:76:5f:9a:fc:08:75:e9:24:40:ea:b5: ef:06:d6:f1:0e:88:20:7f:bb:03:a4:53:16:c2:1d:ce:7d:27: 42:83:6a:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMDjReYv6mGb/NeSkYsZQHVAhem0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjEwMTQwNzEzNDFaFw0yNjEwMTcxNDM5NDFaMDMxMTAvBgNV BAMTKDE1Rjk1NzE0RDQzNEM1OEU5Nzk5RDREMTEwQzNBNzA1MjNGREQxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7NrSiOVpK+Zhp1S8qJOLfmelK 0z5+3oZwTPFiJ0hAy59P7jPHIX2McbJdGndhHZtgrQDKQUVJ4bAjuKXn/rR7Zlgg sNRVu3dwvqoIMY0wHOkgVuSROAaFPFeEzU2pGdYTTJORXhnQ3678IUre02B3eMXu YyMcJ0bzsVV54as/ayxlkDdGyVk0CfOLo2l/WYZ9FXEquInuMoc6jaqvZMaobLwX gB0zpVWTI0THPKR6nK3hPDtXFICGTOvvzq6pg+7P83dQiDiCr8+tBLCkuDCh9YAX i4350XcqosLjcRiCyvv4ofIi+qN0gaomxRrBU5ip3O7/6JczfcrfbJghiuR3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFflXFNQ0xY6XmdTREMOnBSP90d4wHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj6QtYKTpl8a 5dRXv3sdbTzaQIfJllruySjcQGk3MNVopm1GaZW8aIKr0B1RYCQhNJx2qT97hOhV XDMlvsQbNIZFeKXluINOqP5YStvUE3cdQ8T/I/D+ZUuUTh1/pCt2amHQS005zmfe WveYStJy6NIlglS0pOWtTQHWpZ4jJL+Sjm+gz3+xu//r3SGxsdMAndIUqDVB3/xz BHWkVw8P1q2sZtIVBsBPV5kIk0aPMZRVpGNkmIS5kc5l6o9eQiG3+jWHgKiss8ET YQQi1OiJseVdRArzpXk/er6S45Cx0XZfmvwIdekkQOq17wbW8Q6IIH+7A6RTFsId zn0nQoNqXQ== -----END CERTIFICATE-----Generated at Thu Oct 15 03:09:38 2026 by rpki-client