$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: Q0Yri+pfOt/1sdJ6yVF8KnKQIhidDA8C43x63Y5Wt+E= Subject key identifier: A8:1B:48:0E:DC:0C:BC:E0:66:48:61:BD:67:4A:01:B7:1D:C8:27:D7 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 5934923D13CC95E5A9DC95535CA6FE4CC822488C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 01:33:16 +0000 Manifest this update: Mon 02 Mar 2026 01:28:16 +0000 Manifest next update: Tue 03 Mar 2026 01:34:16 +0000 Files and hashes: 1: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: xpK/k2cYJb2ILPE48/JAxLPQRTYudoOyhZ/l4YMz2pw=) 2: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:34:92:3d:13:cc:95:e5:a9:dc:95:53:5c:a6:fe:4c:c8:22:48:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Mar 2 01:28:16 2026 GMT Not After : Mar 3 01:34:16 2026 GMT Subject: CN=A81B480EDC0CBCE0664861BD674A01B71DC827D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:63:2c:4f:2e:89:9f:a9:b0:a3:df:e1:9f: e7:66:28:87:ee:01:fa:3f:d4:40:ab:70:42:e1:c2: 7c:16:81:78:1e:c2:63:09:0a:34:17:71:7b:1b:22: 83:43:f8:f7:f6:a4:98:2d:79:83:8b:2c:5c:f6:e2: 1f:f1:85:89:47:45:97:d8:ee:57:e8:55:aa:81:f3: 31:ea:52:00:56:e8:33:22:0d:2a:2c:04:45:8d:ec: 0f:21:f6:9f:89:11:64:d0:70:1f:7c:8e:c6:39:1a: 67:b4:a7:c7:83:15:4c:7a:0e:d0:76:8e:6d:bc:25: a1:71:a4:50:a0:d4:e9:90:e6:9e:8e:38:e3:bc:89: 01:fe:1a:7d:93:3b:d6:06:fd:a5:fe:18:fb:ff:e5: cd:f9:df:c6:db:89:5a:0d:d8:cc:39:03:1a:29:db: 93:d0:bd:da:0f:52:ca:e3:92:29:30:96:4f:ae:cb: 64:9e:81:0e:a8:99:21:e3:bf:ae:4f:25:3b:6b:22: b7:42:f9:99:8c:74:9c:e1:3b:5a:25:55:17:df:08: cb:b9:49:2b:15:88:2f:7d:8c:f9:65:7f:70:31:9a: 4f:2c:8e:93:fa:f9:aa:d3:27:80:04:ac:36:f2:e8: 32:8b:06:36:89:67:8a:f3:a5:3b:16:81:ff:b1:aa: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:48:0E:DC:0C:BC:E0:66:48:61:BD:67:4A:01:B7:1D:C8:27:D7 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:00:4b:15:f2:b2:b7:2d:8d:a2:24:9f:37:82:7c:21:d3:66: 5a:0c:de:a1:3b:46:13:b9:bd:a0:77:87:b0:c8:c2:b2:e0:05: 7f:6b:19:60:83:31:b9:d6:b1:55:43:d7:f9:6e:a7:6d:0a:3f: 39:cc:de:73:0d:98:3d:d4:94:1e:ec:b2:73:f8:3d:8a:21:20: 53:d6:b3:09:05:b8:4e:eb:6a:47:39:7d:e7:4f:44:db:86:dd: 0b:22:39:c1:20:17:7e:7a:f3:bb:0d:c6:f6:ac:c1:d3:59:2d: 06:18:35:d0:cd:14:27:b9:13:a8:f9:5f:f3:2c:03:72:8a:ad: 7e:67:2a:7f:2e:df:e0:37:26:93:5a:94:a6:d3:00:2b:3c:5a: 83:35:8c:a6:ee:2b:de:59:12:5b:93:e0:0a:ea:22:e2:c1:16: 9a:fa:73:86:9c:41:30:88:17:97:ce:6d:f9:a3:f6:d6:1f:3a: e4:7d:96:ab:52:5f:99:62:c9:73:d8:0f:5b:ef:35:94:df:56: 1d:3b:e8:f3:f2:af:52:a4:f7:a0:3a:92:5e:c9:7c:93:82:9d: b0:e7:f6:51:4a:26:ce:bd:b7:03:80:ab:8d:af:fc:75:23:0f: 9c:a6:27:d9:b3:7c:f2:29:83:c7:11:69:f1:f8:41:ec:3a:2d: 05:c3:2b:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWTSSPRPMleWp3JVTXKb+TMgiSIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjAzMDIwMTI4MTZaFw0yNjAzMDMwMTM0MTZaMDMxMTAvBgNV BAMTKEE4MUI0ODBFREMwQ0JDRTA2NjQ4NjFCRDY3NEEwMUI3MURDODI3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLD2MsTy6Jn6mwo9/hn+dmKIfu Afo/1ECrcELhwnwWgXgewmMJCjQXcXsbIoND+Pf2pJgteYOLLFz24h/xhYlHRZfY 7lfoVaqB8zHqUgBW6DMiDSosBEWN7A8h9p+JEWTQcB98jsY5Gme0p8eDFUx6DtB2 jm28JaFxpFCg1OmQ5p6OOOO8iQH+Gn2TO9YG/aX+GPv/5c3538bbiVoN2Mw5Axop 25PQvdoPUsrjkikwlk+uy2SegQ6omSHjv65PJTtrIrdC+ZmMdJzhO1olVRffCMu5 SSsViC99jPllf3Axmk8sjpP6+arTJ4AErDby6DKLBjaJZ4rzpTsWgf+xqgz/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqBtIDtwMvOBmSGG9Z0oBtx3IJ9cwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwBLFfKyty2N oiSfN4J8IdNmWgzeoTtGE7m9oHeHsMjCsuAFf2sZYIMxudaxVUPX+W6nbQo/Ocze cw2YPdSUHuyyc/g9iiEgU9azCQW4TutqRzl9509E24bdCyI5wSAXfnrzuw3G9qzB 01ktBhg10M0UJ7kTqPlf8ywDcoqtfmcqfy7f4Dcmk1qUptMAKzxagzWMpu4r3lkS W5PgCuoi4sEWmvpzhpxBMIgXl85t+aP21h865H2Wq1JfmWLJc9gPW+81lN9WHTvo 8/KvUqT3oDqSXsl8k4KdsOf2UUomzr23A4Crja/8dSMPnKYn2bN88imDxxFp8fhB 7DotBcMrYA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:46:11 2026 by rpki-client