$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: g8Xs8366dnGmW3cSBgpp8n8VdS8YfG+qYwcJzpRu0SE= Subject key identifier: E5:4E:11:9F:C2:3B:81:69:8F:EE:7E:7E:6D:45:34:DD:28:81:03:67 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 5619B92854E24AAD52B651C9444EE84C02694735 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: 014F Signing time: Tue 13 Oct 2026 17:33:11 +0000 Manifest this update: Tue 13 Oct 2026 17:28:11 +0000 Manifest next update: Sat 17 Oct 2026 01:42:11 +0000 Files and hashes: 1: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) 2: AS4808.roa (hash: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I=) 3: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: 2iielmWxMcXtO5IpIIpRYjE9p+aX5w0MRlxfqmIyNjE=) 4: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) 5: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 6: AS4847.roa (hash: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY=) 7: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 8: AS131314.roa (hash: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE=) 9: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 10: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 01:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:19:b9:28:54:e2:4a:ad:52:b6:51:c9:44:4e:e8:4c:02:69:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Oct 13 17:28:11 2026 GMT Not After : Oct 17 01:42:11 2026 GMT Subject: CN=E54E119FC23B81698FEE7E7E6D4534DD28810367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:6f:c9:0c:3c:25:91:55:90:2b:e9:a5:eb: 5f:6e:ae:f3:32:bd:f0:06:76:10:4c:9e:a8:13:15: ed:46:bb:b3:14:6a:ba:a7:04:01:66:c4:aa:48:db: 10:b5:13:b3:9f:ee:5d:99:8e:ed:ce:89:d5:35:77: c1:8a:c0:b7:cf:db:66:2b:3b:3d:cd:63:02:8d:b4: cc:bd:6e:76:a5:ca:a4:aa:c3:a7:98:1d:c6:7d:b9: ad:c2:59:22:19:e3:da:3d:9c:ce:82:bf:92:cc:fb: db:07:34:b8:4e:08:12:74:dd:95:5b:da:f2:5f:9c: 81:16:a5:4c:cc:a5:d0:a8:46:d7:93:d4:1c:16:95: 72:6d:e6:fb:53:1f:51:01:88:b0:4d:31:57:25:8a: c9:11:a1:6d:9a:91:7e:da:0a:b3:6b:01:b4:54:e4: 7f:31:08:07:ed:0a:db:c2:47:ce:e7:ae:cf:ac:e6: 8f:1d:28:d2:a0:89:86:5e:b4:2a:9a:bf:3c:87:d1: 35:be:9e:a0:44:1d:ee:0f:30:3f:9b:c3:a8:9c:e6: 9d:da:49:19:d2:dd:b6:40:f7:6d:a9:11:b1:f2:f4: 32:99:f9:8c:e9:52:89:c3:f0:14:8a:37:de:ff:74: 88:35:9d:e9:30:bb:ca:4d:2d:2d:4b:ee:cc:c9:6d: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:11:9F:C2:3B:81:69:8F:EE:7E:7E:6D:45:34:DD:28:81:03:67 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c5:98:22:f7:a9:52:77:e9:a6:1a:25:4f:d0:ee:1d:c1:d6: 39:2d:42:11:f2:12:09:36:46:80:ab:fa:2c:d2:7c:bd:0d:8c: 6f:3f:ce:16:47:71:bc:24:2a:54:9b:33:d4:20:a3:44:07:f1: 4f:5e:b3:38:47:74:ab:0b:f5:34:56:bc:8c:fa:59:30:b4:69: 43:e4:c2:44:1d:d4:3a:00:f7:0a:3a:ba:a4:79:4d:39:5e:0e: 72:4d:cb:62:fe:8d:27:4a:9f:b6:4c:36:fd:fb:d2:0c:d2:08: 9a:d5:ba:bf:9c:6e:7c:b3:01:e9:e3:f4:39:42:7f:e8:b6:9b: 51:ea:11:20:9f:ff:65:16:90:57:bc:ac:ca:de:c2:77:c1:0e: 7a:49:ae:d9:07:d1:b4:05:e7:1e:ca:13:87:81:53:61:2b:f4: e5:c6:84:f2:d5:05:6b:a0:f3:eb:93:82:87:ce:e1:14:1d:3d: bd:5b:3a:f9:af:eb:9a:fd:0b:47:34:7a:98:54:0b:36:29:ef: 10:cd:da:e9:e7:10:c8:95:b2:90:49:9b:82:32:dc:8a:1a:ff: 10:ac:13:0c:d5:6d:e3:4d:ae:85:f0:fc:ee:7f:9c:f9:83:d2: 92:e9:98:15:64:7f:4d:70:34:e9:7f:92:07:99:e9:91:b4:96: f7:d6:4a:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVhm5KFTiSq1StlHJRE7oTAJpRzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjEwMTMxNzI4MTFaFw0yNjEwMTcwMTQyMTFaMDMxMTAvBgNV BAMTKEU1NEUxMTlGQzIzQjgxNjk4RkVFN0U3RTZENDUzNEREMjg4MTAzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtx2/JDDwlkVWQK+ml619urvMy vfAGdhBMnqgTFe1Gu7MUarqnBAFmxKpI2xC1E7Of7l2Zju3OidU1d8GKwLfP22Yr Oz3NYwKNtMy9bnalyqSqw6eYHcZ9ua3CWSIZ49o9nM6Cv5LM+9sHNLhOCBJ03ZVb 2vJfnIEWpUzMpdCoRteT1BwWlXJt5vtTH1EBiLBNMVcliskRoW2akX7aCrNrAbRU 5H8xCAftCtvCR87nrs+s5o8dKNKgiYZetCqavzyH0TW+nqBEHe4PMD+bw6ic5p3a SRnS3bZA922pEbHy9DKZ+YzpUonD8BSKN97/dIg1nekwu8pNLS1L7szJbY1RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5U4Rn8I7gWmP7n5+bUU03SiBA2cwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8WYIvepUnfp pholT9DuHcHWOS1CEfISCTZGgKv6LNJ8vQ2Mbz/OFkdxvCQqVJsz1CCjRAfxT16z OEd0qwv1NFa8jPpZMLRpQ+TCRB3UOgD3Cjq6pHlNOV4Ock3LYv6NJ0qftkw2/fvS DNIImtW6v5xufLMB6eP0OUJ/6LabUeoRIJ//ZRaQV7ysyt7Cd8EOekmu2QfRtAXn HsoTh4FTYSv05caE8tUFa6Dz65OCh87hFB09vVs6+a/rmv0LRzR6mFQLNinvEM3a 6ecQyJWykEmbgjLcihr/EKwTDNVt402uhfD87n+c+YPSkumYFWR/TXA06X+SB5np kbSW99ZK8Q== -----END CERTIFICATE-----Generated at Thu Oct 15 12:23:32 2026 by rpki-client