$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: xkK+DLBK0TXDTQyiyjScxLzXv3gsnas7OFUqbYmTjDs= Subject key identifier: 18:EC:2D:B2:3C:1F:F2:7C:8C:61:27:7A:AD:85:B6:F7:BC:91:82:93 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 47BCC4F88128970214ACA09F84DFDF84D8B0C85B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 0143 Signing time: Sun 25 Oct 2026 08:17:21 +0000 Manifest this update: Sun 25 Oct 2026 08:12:21 +0000 Manifest next update: Wed 28 Oct 2026 12:45:21 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: wkLHKjy7aGd4JmgyE2lscCKZgLle4peln5dC0aHVEBY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 12:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bc:c4:f8:81:28:97:02:14:ac:a0:9f:84:df:df:84:d8:b0:c8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Oct 25 08:12:21 2026 GMT Not After : Oct 28 12:45:21 2026 GMT Subject: CN=18EC2DB23C1FF27C8C61277AAD85B6F7BC918293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:d4:3a:6e:92:1b:76:e6:b7:b6:32:20:37: b5:12:d1:c2:f8:a9:ad:bf:bd:b6:a0:ac:54:d4:50: 98:8d:f8:63:0b:bd:47:45:15:76:a7:3d:2e:e5:1c: 36:07:52:64:37:26:eb:43:ad:b7:85:ce:24:cf:98: 45:15:f8:21:d6:3f:ba:33:28:22:ee:e0:eb:78:73: 01:9b:63:37:c6:52:f6:b2:10:ff:34:61:cc:43:d8: a6:db:25:03:d3:bb:c6:19:e0:9c:2e:64:2b:1c:7e: ef:50:4b:ee:66:23:2f:90:6d:d0:74:06:24:7a:1a: ac:52:8a:91:b6:a7:27:58:48:5d:73:5f:aa:a7:a7: a9:9b:65:72:b4:3f:0b:36:f3:7c:b9:3e:de:36:3c: 6a:56:cd:3b:91:4e:66:62:cd:38:4c:54:5d:ed:9e: 14:d1:ce:30:8e:17:c2:93:f7:46:0e:51:47:c7:82: 88:83:80:c7:7e:0f:c7:81:fa:ca:f1:5e:11:eb:a5: 21:52:6b:88:53:6e:2a:80:fc:20:40:ea:da:2a:cf: b9:27:33:37:38:07:3f:b3:a1:7b:71:ba:2c:8d:83: 0f:b4:b8:6f:33:15:00:a6:bc:a4:cf:f6:6c:53:d6: 2a:d9:fa:dd:6d:ab:c5:de:0f:79:b2:7f:c4:5e:41: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:2D:B2:3C:1F:F2:7C:8C:61:27:7A:AD:85:B6:F7:BC:91:82:93 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:29:c7:f6:a4:a6:33:b3:a1:34:78:3d:69:b6:e0:4e:27:e8: 2f:03:ba:6f:e9:62:87:a5:3a:f2:25:29:bb:3b:70:f2:67:48: db:36:eb:69:ad:85:bc:52:af:7d:2e:1e:cd:43:72:c8:4e:63: bc:9b:de:de:b9:9a:aa:1b:1f:52:a0:2e:8b:ea:55:da:86:22: 98:7f:3b:ec:3a:5d:3f:88:b7:bf:98:51:20:75:44:b8:9f:bc: e5:8d:a0:cf:6d:42:81:7c:ff:99:d7:42:b7:1d:bd:f9:f6:b0: c9:3a:e5:fd:0d:5b:a3:d5:e1:b7:9c:ba:c0:e1:a1:94:52:3e: 68:96:cb:87:81:bf:8f:6d:96:1d:f9:ab:18:57:d7:4d:e4:68: 1f:90:57:59:ee:18:24:a9:99:96:74:bb:c7:0e:7e:5e:68:4f: d9:ef:fb:61:10:02:0a:fe:8c:13:ab:59:1c:5c:90:0e:46:ec: ab:98:a0:c4:b4:02:68:3c:e8:f5:aa:51:02:fc:ba:29:bc:7f: 3f:00:a9:5a:e9:82:7c:78:02:21:63:ca:94:6d:53:60:eb:8d: 00:9c:9e:3a:5d:36:94:a4:d8:eb:45:2f:64:d1:4c:4c:81:a8: a6:24:ff:87:d2:f1:d0:0e:a1:38:14:e2:0a:9f:da:3f:29:1f: e0:7f:97:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR7zE+IEolwIUrKCfhN/fhNiwyFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjEwMjUwODEyMjFaFw0yNjEwMjgxMjQ1MjFaMDMxMTAvBgNV BAMTKDE4RUMyREIyM0MxRkYyN0M4QzYxMjc3QUFEODVCNkY3QkM5MTgyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jNQ6bpIbdua3tjIgN7US0cL4 qa2/vbagrFTUUJiN+GMLvUdFFXanPS7lHDYHUmQ3JutDrbeFziTPmEUV+CHWP7oz KCLu4Ot4cwGbYzfGUvayEP80YcxD2KbbJQPTu8YZ4JwuZCscfu9QS+5mIy+QbdB0 BiR6GqxSipG2pydYSF1zX6qnp6mbZXK0Pws283y5Pt42PGpWzTuRTmZizThMVF3t nhTRzjCOF8KT90YOUUfHgoiDgMd+D8eB+srxXhHrpSFSa4hTbiqA/CBA6toqz7kn Mzc4Bz+zoXtxuiyNgw+0uG8zFQCmvKTP9mxT1irZ+t1tq8XeD3myf8ReQeIfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGOwtsjwf8nyMYSd6rYW297yRgpMwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSnH9qSmM7Oh NHg9abbgTifoLwO6b+lih6U68iUpuztw8mdI2zbraa2FvFKvfS4ezUNyyE5jvJve 3rmaqhsfUqAui+pV2oYimH877DpdP4i3v5hRIHVEuJ+85Y2gz21CgXz/mddCtx29 +fawyTrl/Q1bo9Xht5y6wOGhlFI+aJbLh4G/j22WHfmrGFfXTeRoH5BXWe4YJKmZ lnS7xw5+XmhP2e/7YRACCv6ME6tZHFyQDkbsq5igxLQCaDzo9apRAvy6Kbx/PwCp WumCfHgCIWPKlG1TYOuNAJyeOl02lKTY60UvZNFMTIGopiT/h9Lx0A6hOBTiCp/a Pykf4H+Xkg== -----END CERTIFICATE-----Generated at Mon Oct 26 11:46:09 2026 by rpki-client