$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: 4nMxmAzJHDcRcFdtGkysjWi+6yvpdXfIlrFbOQZf/wI= Subject key identifier: 30:8E:C4:3C:0F:EC:32:23:1F:7A:F6:D0:4D:16:4D:1A:00:06:4F:AE Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 43C38DA38ED448924F59A09C218A69CA6B2F1828 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: CA Signing time: Sat 17 Oct 2026 08:33:38 +0000 Manifest this update: Sat 17 Oct 2026 08:28:38 +0000 Manifest next update: Tue 20 Oct 2026 11:53:38 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: ltbroiNq4K8x6gOh83bdEcatmUEGfyTXtSwt+OYp3dw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 11:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c3:8d:a3:8e:d4:48:92:4f:59:a0:9c:21:8a:69:ca:6b:2f:18:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: Oct 17 08:28:38 2026 GMT Not After : Oct 20 11:53:38 2026 GMT Subject: CN=308EC43C0FEC32231F7AF6D04D164D1A00064FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:92:f4:f9:92:d7:3f:88:cf:8d:81:5a:b5: ef:22:c9:1c:3b:0f:1e:a3:3b:4b:7e:4c:36:76:06: 46:7e:03:71:a8:a5:00:3f:a3:7b:b7:ec:89:0f:68: ac:8b:51:57:ab:ee:2e:81:d8:e9:a9:29:0d:1d:35: 88:ad:60:7a:d3:c2:b9:26:a6:16:47:31:1c:2a:78: c2:ce:ec:e3:1b:ea:78:fe:8c:71:4d:0b:25:1a:87: 3f:e5:0e:71:42:50:75:e2:b6:b5:b9:9f:88:bb:72: e7:82:98:73:12:26:69:00:91:27:47:16:5e:56:8c: 1b:27:28:41:ba:bc:41:23:68:f5:a2:84:7d:bc:71: 3a:4a:b9:2a:b0:76:1a:4e:19:e8:8f:78:31:66:f4: 1c:d0:13:b8:ae:fb:36:3b:6e:e9:db:b8:b4:0b:94: 43:2a:a0:27:5a:a2:73:fa:e2:22:f4:cc:0b:f7:8a: 1a:32:bc:a5:67:44:ee:00:f9:08:11:8b:f4:ea:f3: 39:fa:72:6d:fe:d9:fb:90:06:ad:48:19:29:d1:68: 72:ce:cf:df:b9:b6:b8:f0:4d:db:89:ed:bb:c5:fb: 35:7b:da:de:12:3f:80:6c:03:ba:fb:0d:18:e9:17: 2e:ac:3d:d8:a7:8a:b6:3e:59:f0:bd:4f:6b:51:bd: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:C4:3C:0F:EC:32:23:1F:7A:F6:D0:4D:16:4D:1A:00:06:4F:AE X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:29:57:c6:c5:e9:56:bd:b8:1d:43:07:bd:1b:96:7b:48:ee: d1:df:dc:f3:5f:95:b0:46:e7:19:c3:02:b5:40:ed:63:2e:7a: c3:3e:33:62:e7:35:a0:0c:25:f2:5f:24:5c:60:65:5f:69:3d: 2e:f3:03:57:ca:b8:3b:56:59:cd:78:c6:55:87:b5:57:50:50: 55:a1:7d:8d:c4:03:24:bc:ea:a1:e0:65:d7:ff:e5:61:97:6e: 3f:9d:1f:82:6a:6d:ea:24:74:fd:da:e4:dc:8e:2a:72:bd:e3: ae:2d:4c:1e:ae:5c:97:b7:34:f3:82:a0:9c:f3:e8:ec:18:57: 71:8a:0a:bc:8a:8c:5c:1e:59:95:49:f1:29:81:42:e3:ef:99: e5:97:55:ba:24:d3:8d:e1:14:55:c4:4a:30:0e:06:5d:2a:16: 54:2b:e6:5c:66:f0:4e:92:5a:13:e9:09:84:9f:6c:c8:96:03: 60:f1:46:c5:cd:49:91:c2:57:67:dd:a4:aa:53:42:8a:df:49: 8d:24:da:32:22:9e:3e:3c:7c:8f:f3:11:6a:dc:ba:c5:11:a5: 78:4a:c9:cd:58:fd:7d:2e:30:aa:52:22:67:61:d2:ff:01:30: 1d:00:a8:2a:1e:cd:0f:1d:26:f0:1e:18:27:3c:f3:2d:82:ad: bf:9a:99:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ8ONo47USJJPWaCcIYppymsvGCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjEwMTcwODI4MzhaFw0yNjEwMjAxMTUzMzhaMDMxMTAvBgNV BAMTKDMwOEVDNDNDMEZFQzMyMjMxRjdBRjZEMDREMTY0RDFBMDAwNjRGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiZL0+ZLXP4jPjYFate8iyRw7 Dx6jO0t+TDZ2BkZ+A3GopQA/o3u37IkPaKyLUVer7i6B2OmpKQ0dNYitYHrTwrkm phZHMRwqeMLO7OMb6nj+jHFNCyUahz/lDnFCUHXitrW5n4i7cueCmHMSJmkAkSdH Fl5WjBsnKEG6vEEjaPWihH28cTpKuSqwdhpOGeiPeDFm9BzQE7iu+zY7bunbuLQL lEMqoCdaonP64iL0zAv3ihoyvKVnRO4A+QgRi/Tq8zn6cm3+2fuQBq1IGSnRaHLO z9+5trjwTduJ7bvF+zV72t4SP4BsA7r7DRjpFy6sPdinirY+WfC9T2tRvR8xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMI7EPA/sMiMfevbQTRZNGgAGT64wHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxilXxsXpVr24 HUMHvRuWe0ju0d/c81+VsEbnGcMCtUDtYy56wz4zYuc1oAwl8l8kXGBlX2k9LvMD V8q4O1ZZzXjGVYe1V1BQVaF9jcQDJLzqoeBl1//lYZduP50fgmpt6iR0/drk3I4q cr3jri1MHq5cl7c084KgnPPo7BhXcYoKvIqMXB5ZlUnxKYFC4++Z5ZdVuiTTjeEU VcRKMA4GXSoWVCvmXGbwTpJaE+kJhJ9syJYDYPFGxc1JkcJXZ92kqlNCit9JjSTa MiKePjx8j/MRaty6xRGleErJzVj9fS4wqlIiZ2HS/wEwHQCoKh7NDx0m8B4YJzzz LYKtv5qZOg== -----END CERTIFICATE-----Generated at Mon Oct 19 04:06:47 2026 by rpki-client