$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: VErHbmT/YYHQbEa79jkf2PJBWdmZqY+ix5dgyV7tgf4= Subject key identifier: 53:AF:67:D3:F0:D0:26:77:EB:46:2C:1A:3C:19:16:DA:20:D2:86:90 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 37C28F9701E0A17D5978BBC5A2F281035C1A035E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: D8 Signing time: Thu 15 Oct 2026 16:11:49 +0000 Manifest this update: Thu 15 Oct 2026 16:06:49 +0000 Manifest next update: Mon 19 Oct 2026 03:51:49 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 2: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 3: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 4: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 5: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 6: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 7: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: zJMoVC9pXPHDvv/mvcYn9JEh6Mbduorb++4DWybYjn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c2:8f:97:01:e0:a1:7d:59:78:bb:c5:a2:f2:81:03:5c:1a:03:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Oct 15 16:06:49 2026 GMT Not After : Oct 19 03:51:49 2026 GMT Subject: CN=53AF67D3F0D02677EB462C1A3C1916DA20D28690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:58:e7:59:0f:35:f4:d4:32:b9:19:f7:7a: d9:49:2c:19:40:d1:81:51:19:bf:b1:3a:cf:57:4e: e7:61:71:55:71:7f:c9:b9:ef:5f:e5:ac:a3:a0:94: 99:71:ac:b6:98:67:95:bc:ac:e2:15:06:ad:64:f9: 19:64:d8:31:24:4c:35:9b:49:ce:14:45:83:e4:61: c9:fd:73:90:19:75:b8:fc:13:78:e5:b3:eb:7b:5a: 4f:4b:ce:d8:0a:0a:1b:6e:40:89:29:4d:79:e8:fa: 1b:ce:b2:05:cf:9b:8d:4c:1b:38:38:99:3a:50:38: 0c:90:91:5a:96:14:b6:ec:eb:85:ed:f0:b0:b5:39: 93:80:75:29:6c:5a:6d:14:6b:32:63:5d:a5:b3:55: 3d:a3:1f:c5:d2:cf:73:72:7a:51:a7:f2:1c:06:d1: 74:38:ef:ff:5a:c0:be:87:cd:43:3b:6a:62:7b:5f: 27:f8:fc:c1:66:09:0e:99:0b:63:07:dd:3f:b9:cc: 7a:c7:0b:1a:a7:90:cf:70:5f:fc:64:f3:e9:14:36: b8:83:73:2f:75:e7:d4:5f:72:c1:71:ec:e0:65:b7: 31:f2:0c:57:0a:8a:0f:95:b0:6e:81:fc:d5:e9:b2: d0:b3:1a:18:fe:5b:23:7f:92:1f:41:a8:b7:6f:b4: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:67:D3:F0:D0:26:77:EB:46:2C:1A:3C:19:16:DA:20:D2:86:90 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:9f:3e:9b:36:14:2f:fc:ba:f1:5e:29:e8:a2:40:d9:b6: 3e:3c:67:28:6e:3c:ec:70:72:3b:49:a1:f1:bb:15:58:80:25: fd:16:5e:97:b5:52:12:00:a7:d2:d8:09:0d:6c:56:f5:3d:c5: 5a:cf:bf:83:fe:94:e0:5a:37:0c:41:dd:ac:4e:e1:4c:16:f3: 24:63:dc:c2:39:04:aa:c7:3c:80:b3:8b:ff:d7:d9:2c:26:cd: f7:48:c3:05:d8:f5:b5:a2:01:ff:dc:9a:d5:7f:30:ee:ce:f8: e3:85:e0:d5:62:88:a3:17:1e:90:90:55:5c:93:79:38:da:e5: 17:24:50:54:e6:f6:e9:b0:c5:ab:54:b6:a2:29:81:dc:f6:da: a9:d0:4c:a4:27:b3:50:c5:0d:3e:06:80:df:0c:07:e4:3b:6e: 60:40:05:5b:14:a1:6c:a7:7d:45:8b:95:0f:b6:b9:03:72:55: 3f:90:5c:cd:bc:d1:8b:ca:16:2a:8a:13:f8:91:4e:85:09:a2: 30:4d:da:dc:1f:03:5c:54:c3:99:a5:13:45:cb:ab:31:ee:0d: d4:de:64:8a:5c:5f:ee:2e:1d:6b:aa:77:9b:22:2d:38:8e:d2: 9f:48:2c:fb:da:ef:cb:72:8d:25:f2:90:99:02:89:6b:ee:fe: 88:69:2d:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN8KPlwHgoX1ZeLvFovKBA1waA14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjEwMTUxNjA2NDlaFw0yNjEwMTkwMzUxNDlaMDMxMTAvBgNV BAMTKDUzQUY2N0QzRjBEMDI2NzdFQjQ2MkMxQTNDMTkxNkRBMjBEMjg2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKVjnWQ819NQyuRn3etlJLBlA 0YFRGb+xOs9XTudhcVVxf8m571/lrKOglJlxrLaYZ5W8rOIVBq1k+Rlk2DEkTDWb Sc4URYPkYcn9c5AZdbj8E3jls+t7Wk9LztgKChtuQIkpTXno+hvOsgXPm41MGzg4 mTpQOAyQkVqWFLbs64Xt8LC1OZOAdSlsWm0UazJjXaWzVT2jH8XSz3NyelGn8hwG 0XQ47/9awL6HzUM7amJ7Xyf4/MFmCQ6ZC2MH3T+5zHrHCxqnkM9wX/xk8+kUNriD cy9159RfcsFx7OBltzHyDFcKig+VsG6B/NXpstCzGhj+WyN/kh9BqLdvtBmTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU69n0/DQJnfrRiwaPBkW2iDShpAwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLmfPps2FC/8 uvFeKeiiQNm2PjxnKG487HByO0mh8bsVWIAl/RZel7VSEgCn0tgJDWxW9T3FWs+/ g/6U4Fo3DEHdrE7hTBbzJGPcwjkEqsc8gLOL/9fZLCbN90jDBdj1taIB/9ya1X8w 7s7444Xg1WKIoxcekJBVXJN5ONrlFyRQVOb26bDFq1S2oimB3PbaqdBMpCezUMUN PgaA3wwH5DtuYEAFWxShbKd9RYuVD7a5A3JVP5BczbzRi8oWKooT+JFOhQmiME3a 3B8DXFTDmaUTRcurMe4N1N5kilxf7i4da6p3myItOI7Sn0gs+9rvy3KNJfKQmQKJ a+7+iGktKA== -----END CERTIFICATE-----Generated at Fri Oct 16 00:05:42 2026 by rpki-client