$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft File: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft (raw, json) Hash identifier: nXSQ5WGQaM4+RfbIB37M8UfqWTGjyYT57iGy3xwhb6Q= Subject key identifier: 88:FF:27:CD:FD:76:2D:EC:7F:4B:EB:EB:7D:4F:C4:6D:C1:E1:18:31 Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F Certificate issuer: /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Certificate serial: 74FA69B1A5FDDBDC8BBAF804EC7B60D3374068E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft Manifest number: 68 Signing time: Mon 12 Oct 2026 19:57:20 +0000 Manifest this update: Mon 12 Oct 2026 19:52:20 +0000 Manifest next update: Fri 16 Oct 2026 04:55:20 +0000 Files and hashes: 1: 3131312e3230382e3235342e302f32342d3332203d3e203435313036.roa (hash: /9/wcHPixQ3zSf0oWBQhT74E0lowSuv9Eu8B3+gZotQ=) 2: 3131312e3230382e3132312e302f32342d3332203d3e2034383337.roa (hash: 1dEopTFRZW8mtpna1k4UYOCNYv3DaJ2ov+N+MWZqkTk=) 3: 3131312e3231302e31362e302f32342d3332203d3e203435313036.roa (hash: y6rLG5MGWhuQpG3jyn5ZyzIM4qeNCE/D+iaUlbOa8X8=) 4: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (hash: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=) 5: 3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (hash: 8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=) 6: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl (hash: FlU7E1altVVWbiL2VCwjLpjD1pgGmRZYIs6KzvtGT/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fa:69:b1:a5:fd:db:dc:8b:ba:f8:04:ec:7b:60:d3:37:40:68:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Validity Not Before: Oct 12 19:52:20 2026 GMT Not After : Oct 16 04:55:20 2026 GMT Subject: CN=88FF27CDFD762DEC7F4BEBEB7D4FC46DC1E11831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:72:9b:c9:1c:ec:dc:b3:c7:0c:aa:2c:a8: 09:84:4e:ef:f7:a2:5a:f9:a7:97:6d:13:90:da:dc: 99:eb:f7:2d:85:fa:5d:aa:e6:19:cd:12:45:4a:cf: 4c:6a:da:fc:0e:a1:96:e7:a6:34:90:a4:6d:c4:da: bc:56:bf:4f:a8:4d:cc:5d:5a:6b:96:48:5a:98:a6: 7c:d4:f1:ad:1a:ed:e2:9b:5a:c5:0b:87:4e:f2:89: 86:a6:f7:64:d2:da:38:b6:27:e0:46:75:bc:b5:ff: 20:d9:87:15:8b:51:6c:47:eb:43:e2:05:d4:0a:f4: 75:d4:ad:1a:15:fd:14:33:75:1a:0d:1f:e9:c2:f4: e2:fc:a1:e3:3a:7b:2a:e4:e3:9a:66:59:8a:d5:3c: 14:b7:41:6c:55:4c:fd:1c:04:63:81:4d:53:af:9c: 68:e7:ea:91:62:0a:e6:5c:cc:5c:2a:6d:74:96:f5: 9e:c8:53:f1:2b:78:a2:d7:fd:d1:43:1d:61:83:00: 72:9e:94:8b:8f:58:da:97:3d:54:ec:b2:e9:a3:84: 17:72:07:53:0d:45:15:ae:53:ee:58:7d:cb:1d:6f: 0b:7b:68:19:e7:50:ad:59:b5:54:fb:40:b3:73:13: 67:c9:86:91:8e:bc:25:14:85:35:d4:40:24:56:73: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:27:CD:FD:76:2D:EC:7F:4B:EB:EB:7D:4F:C4:6D:C1:E1:18:31 X509v3 Authority Key Identifier: keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:68:5f:2e:0f:1d:1c:aa:e1:10:df:aa:77:e0:b2:98:1c:d3: 5f:62:d6:73:cf:dd:3f:9b:d3:83:ae:54:8b:34:d8:78:7c:08: cb:61:75:f1:8d:bc:89:2b:2b:05:b6:07:48:84:ed:6b:99:e7: 41:63:20:27:60:4a:ad:97:4c:ea:17:6a:07:87:c7:bb:cb:ec: f7:c4:29:19:22:ba:dd:d4:69:e3:fd:57:99:2b:1f:01:f7:8f: c0:37:6a:78:a6:80:10:74:88:8f:59:1e:1b:50:99:91:c1:26: 9b:5c:10:3f:1f:bc:2c:62:ae:f7:80:bb:1c:3e:cb:0d:64:d2: 16:c1:d1:69:28:c7:4a:77:f2:da:c4:88:78:a2:b2:d5:5b:26: b3:72:31:2e:78:d5:82:4c:60:f7:d6:91:74:fb:03:3f:6b:4e: fc:cb:79:59:c1:e0:a3:ef:76:11:65:85:84:92:4d:86:19:17: 16:35:7c:fa:bb:25:6e:55:e8:3f:3d:ad:71:4c:3d:6a:1c:2b: 4a:2a:7b:68:78:12:83:44:f7:8b:83:81:9b:49:0a:05:3b:3a: 8a:13:15:8d:f6:b2:12:4d:a9:4b:30:af:13:cb:b0:9a:2b:39: 04:d8:03:29:a4:88:a9:17:5a:cc:f3:61:bc:6f:dc:8f:e1:17: 9f:5b:39:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdPppsaX929yLuvgE7Htg0zdAaOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdB RjM1RkE4RjAeFw0yNjEwMTIxOTUyMjBaFw0yNjEwMTYwNDU1MjBaMDMxMTAvBgNV BAMTKDg4RkYyN0NERkQ3NjJERUM3RjRCRUJFQjdENEZDNDZEQzFFMTE4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIXKbyRzs3LPHDKosqAmETu/3 olr5p5dtE5Da3Jnr9y2F+l2q5hnNEkVKz0xq2vwOoZbnpjSQpG3E2rxWv0+oTcxd WmuWSFqYpnzU8a0a7eKbWsULh07yiYam92TS2ji2J+BGdby1/yDZhxWLUWxH60Pi BdQK9HXUrRoV/RQzdRoNH+nC9OL8oeM6eyrk45pmWYrVPBS3QWxVTP0cBGOBTVOv nGjn6pFiCuZczFwqbXSW9Z7IU/EreKLX/dFDHWGDAHKelIuPWNqXPVTssumjhBdy B1MNRRWuU+5Yfcsdbwt7aBnnUK1ZtVT7QLNzE2fJhpGOvCUUhTXUQCRWc31rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiP8nzf12Lex/S+vrfU/EbcHhGDEwHwYDVR0j BBgwFoAUfo693OIzEvr5F1hYH7FD9681+o8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MDUyMzEzMTc4MTE1NS8wLzdFOEVCRERDRTIzMzEyRkFGOTE3NTg1ODFGQjE0 M0Y3QUYzNUZBOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdBRjM1RkE4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4ODA1MjMxMzE3ODExNTUvMC83RThFQkREQ0UyMzMx MkZBRjkxNzU4NTgxRkIxNDNGN0FGMzVGQThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWhfLg8dHKrh EN+qd+CymBzTX2LWc8/dP5vTg65UizTYeHwIy2F18Y28iSsrBbYHSITta5nnQWMg J2BKrZdM6hdqB4fHu8vs98QpGSK63dRp4/1XmSsfAfePwDdqeKaAEHSIj1keG1CZ kcEmm1wQPx+8LGKu94C7HD7LDWTSFsHRaSjHSnfy2sSIeKKy1Vsms3IxLnjVgkxg 99aRdPsDP2tO/Mt5WcHgo+92EWWFhJJNhhkXFjV8+rslblXoPz2tcUw9ahwrSip7 aHgSg0T3i4OBm0kKBTs6ihMVjfayEk2pSzCvE8uwmis5BNgDKaSIqRdazPNhvG/c j+EXn1s5GQ== -----END CERTIFICATE-----Generated at Wed Oct 14 15:58:30 2026 by rpki-client