$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json) Hash identifier: T6PCfhAqKD2zm2AX65CK77hQpfg4LrdPBWxXbMFQExM= Subject key identifier: 58:D9:23:1F:F9:AE:F0:21:7C:3F:E3:67:C7:BF:48:6F:06:1D:1E:47 Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Certificate serial: 310066F4C12DA4384AC1538A9B022B50F6D92345 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft Manifest number: 4F Signing time: Wed 14 Oct 2026 13:59:14 +0000 Manifest this update: Wed 14 Oct 2026 13:54:14 +0000 Manifest next update: Sat 17 Oct 2026 15:41:14 +0000 Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: h5WW6XRTn6Zd37hKTXuZcYE8zAXDkTNWsbtyxd1lB0Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:00:66:f4:c1:2d:a4:38:4a:c1:53:8a:9b:02:2b:50:f6:d9:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Validity Not Before: Oct 14 13:54:14 2026 GMT Not After : Oct 17 15:41:14 2026 GMT Subject: CN=58D9231FF9AEF0217C3FE367C7BF486F061D1E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:17:c3:95:dc:2b:40:6e:c1:54:61:14:fe: 41:7a:ac:11:a5:37:f7:97:e8:ee:b6:96:dc:a7:d4: 66:a7:53:bd:71:0a:47:ca:1a:d9:77:6d:0d:a9:1c: 64:34:ec:0a:f4:19:1e:c9:3a:bc:2b:2c:57:e7:47: cf:df:ff:2b:7f:70:e4:ae:e3:1c:c0:6b:b1:3c:8f: 33:ab:63:6a:9c:f7:2d:3d:11:d0:6a:bd:98:cf:c7: 1f:f8:ee:c0:40:98:92:ff:ea:24:c8:59:dd:cc:b0: 57:28:88:17:ee:7d:9d:29:37:51:a4:ea:43:a7:53: 24:ef:bb:65:0b:89:56:5c:2e:34:de:87:71:5b:13: c7:d6:4c:4d:fd:1f:69:ec:be:73:7a:18:d8:2e:52: 0c:65:25:88:d3:55:43:da:94:5a:8d:7f:63:6d:05: 70:c7:e1:49:53:e1:33:c1:0e:bb:97:95:e7:50:79: a1:ad:9e:2b:a0:22:31:17:1e:3c:e8:2f:f1:d0:39: e4:44:87:cc:5f:43:ba:dc:78:b0:3f:13:ee:e0:00: e6:db:c7:63:ed:33:d3:8e:1b:97:b2:d4:df:c1:b2: 86:b4:06:2f:64:d6:9f:22:6c:7e:62:80:68:e8:41: 43:80:25:7e:d3:55:95:ba:09:77:63:e6:50:b3:be: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:23:1F:F9:AE:F0:21:7C:3F:E3:67:C7:BF:48:6F:06:1D:1E:47 X509v3 Authority Key Identifier: keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:04:6e:1f:9e:88:35:ca:57:49:d4:10:33:f7:01:98:1d:8c: cc:2a:65:96:b5:60:d2:a3:a7:94:20:71:da:f6:91:77:19:7c: ad:c9:8b:d8:b7:3b:e9:17:4b:e7:67:93:e0:72:b3:be:53:cc: 50:8c:1a:68:c8:ff:14:20:3b:c1:6c:7f:b7:91:f5:94:a4:c4: fe:86:f7:de:23:e5:40:0d:b2:92:c9:04:cb:fb:cd:42:12:df: 48:b7:e5:13:fe:b9:be:34:08:b5:63:2c:2f:f4:be:9c:20:d0: 48:0e:20:b3:f7:24:20:c3:b4:72:e1:20:a0:dd:5d:53:5d:8c: 98:0d:c9:33:47:08:14:6b:ce:c2:b9:b3:81:ec:6d:42:5f:94: 4b:a2:c4:0d:a7:24:34:c7:b8:cf:63:58:70:70:d5:ef:86:6d: a5:d9:a6:c1:b7:68:d5:92:e1:bc:54:b1:43:3d:ad:b5:e5:ec: 3f:6a:51:d2:a9:bf:dc:39:8a:78:75:c9:48:36:58:81:61:ae: 5f:1a:52:4d:16:95:6a:0d:e0:1c:c1:f9:6c:3f:0f:c8:73:a7: 13:71:7c:f0:94:96:24:0f:4a:eb:65:24:0b:14:1b:20:9d:ec: 76:9a:ff:f4:3c:33:93:a7:9f:b9:eb:21:64:dd:a5:d5:82:36: f6:a4:e6:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMQBm9MEtpDhKwVOKmwIrUPbZI0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD RDc2RUU4QzAeFw0yNjEwMTQxMzU0MTRaFw0yNjEwMTcxNTQxMTRaMDMxMTAvBgNV BAMTKDU4RDkyMzFGRjlBRUYwMjE3QzNGRTM2N0M3QkY0ODZGMDYxRDFFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHLhfDldwrQG7BVGEU/kF6rBGl N/eX6O62ltyn1GanU71xCkfKGtl3bQ2pHGQ07Ar0GR7JOrwrLFfnR8/f/yt/cOSu 4xzAa7E8jzOrY2qc9y09EdBqvZjPxx/47sBAmJL/6iTIWd3MsFcoiBfufZ0pN1Gk 6kOnUyTvu2ULiVZcLjTeh3FbE8fWTE39H2nsvnN6GNguUgxlJYjTVUPalFqNf2Nt BXDH4UlT4TPBDruXledQeaGtniugIjEXHjzoL/HQOeREh8xfQ7rceLA/E+7gAObb x2PtM9OOG5ey1N/Bsoa0Bi9k1p8ibH5igGjoQUOAJX7TVZW6CXdj5lCzviYdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWNkjH/mu8CF8P+Nnx79IbwYdHkcwHwYDVR0j BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4 MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgARuH56INcpX SdQQM/cBmB2MzCpllrVg0qOnlCBx2vaRdxl8rcmL2Lc76RdL52eT4HKzvlPMUIwa aMj/FCA7wWx/t5H1lKTE/ob33iPlQA2ykskEy/vNQhLfSLflE/65vjQItWMsL/S+ nCDQSA4gs/ckIMO0cuEgoN1dU12MmA3JM0cIFGvOwrmzgextQl+US6LEDackNMe4 z2NYcHDV74Ztpdmmwbdo1ZLhvFSxQz2tteXsP2pR0qm/3DmKeHXJSDZYgWGuXxpS TRaVag3gHMH5bD8PyHOnE3F88JSWJA9K62UkCxQbIJ3sdpr/9Dwzk6efueshZN2l 1YI29qTmWA== -----END CERTIFICATE-----Generated at Thu Oct 15 21:36:58 2026 by rpki-client