$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: IPalZnbLj+CeM4gOHirkItajTyFx8SbmhtpKclNmLC8= Subject key identifier: 4D:F0:26:E3:48:61:E9:C7:87:9E:8F:BD:63:D2:19:0B:AC:D0:B6:05 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 18EC7A00E3B99232E27CA64EB273EB316448B913 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: C4 Signing time: Tue 13 Oct 2026 12:07:59 +0000 Manifest this update: Tue 13 Oct 2026 12:02:59 +0000 Manifest next update: Fri 16 Oct 2026 18:51:59 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: sNPX+GHOivUYPL7vpm6d758BUNrZpXKLrl8HbVyY6bg=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ec:7a:00:e3:b9:92:32:e2:7c:a6:4e:b2:73:eb:31:64:48:b9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Oct 13 12:02:59 2026 GMT Not After : Oct 16 18:51:59 2026 GMT Subject: CN=4DF026E34861E9C7879E8FBD63D2190BACD0B605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:b8:e9:70:ee:52:7c:42:2f:61:3b:1a:58: a3:9c:91:f1:1a:34:33:52:78:21:b6:1a:a7:0b:a4: fa:a6:11:ae:43:33:11:33:16:d8:fa:c6:f2:f0:56: 8c:cf:4f:f4:d7:65:38:5c:19:dd:36:48:44:0b:db: da:f0:25:0e:77:37:7c:19:7a:ed:f2:72:8f:35:2e: 2c:ec:62:f3:f1:5f:a4:6a:8e:12:ef:81:48:0c:34: 6d:19:cd:90:66:bd:83:ed:7d:e0:ea:d7:e2:e2:30: 1d:93:a6:b8:4f:43:05:43:20:de:90:df:fc:c7:07: 80:b7:b8:07:89:31:43:cd:3a:40:74:ae:d7:d3:24: 1b:8a:b4:35:54:2e:ec:40:62:6f:43:fa:66:46:9a: e9:3d:34:70:8d:56:f8:63:af:25:9e:25:f7:c7:83: 31:7f:8a:b4:ca:4c:2d:40:e9:06:b5:39:e5:60:77: 70:34:42:f2:1b:8a:22:de:0a:bf:44:b6:25:14:94: a3:5a:32:34:d9:65:cd:99:5d:f4:d3:5b:1d:6f:03: 3e:e2:d7:7c:d4:de:af:fa:d5:42:41:83:cb:bc:c3: ce:b5:bd:51:41:fc:71:45:c5:4a:51:76:96:1b:40: c6:bf:30:a7:03:66:f8:b5:f0:dc:fb:64:75:0c:46: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:26:E3:48:61:E9:C7:87:9E:8F:BD:63:D2:19:0B:AC:D0:B6:05 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:df:4b:64:24:e6:6f:79:9c:bb:3b:83:1c:b5:c3:3a:e0:07: 5e:68:76:c6:2e:1d:d7:61:b9:db:cd:a6:8d:79:f6:84:ed:60: 63:08:e9:52:46:3d:2c:8b:22:f8:5f:48:42:ca:a5:42:65:a4: 91:e3:a5:9c:98:41:e4:ed:06:c4:61:b5:2c:ab:06:30:31:66: 7a:7c:ba:2b:04:41:0a:63:0f:8a:c8:2f:72:79:98:03:49:ee: 0c:73:fe:e9:f3:24:d7:20:e9:81:67:d2:1d:63:07:d2:fb:57: 3f:1c:69:01:2f:e4:6a:a7:6b:22:bc:33:2f:07:7b:35:45:e6: 86:63:65:42:ad:22:6d:f7:d5:8c:33:81:0d:55:6d:3f:95:fa: 89:fb:92:2b:53:03:00:38:ce:1c:63:85:2e:71:d2:01:18:61: 16:32:d5:45:9d:4c:25:dd:c9:6d:67:4e:2c:5c:d5:fb:e1:9e: 7e:50:a6:c2:67:d3:80:51:4e:26:75:1e:f1:b6:72:a2:b1:4d: 60:cf:85:f9:a6:b3:14:3b:36:bb:21:ec:53:6c:81:f2:d1:a5: 8c:bc:58:ef:63:5d:be:57:cf:c0:4d:47:ad:6e:53:d9:2d:c6: 94:d4:dd:ae:d9:b6:19:50:1c:4d:fd:7d:37:49:22:55:39:ab: 60:65:e9:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGOx6AOO5kjLifKZOsnPrMWRIuRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjEwMTMxMjAyNTlaFw0yNjEwMTYxODUxNTlaMDMxMTAvBgNV BAMTKDRERjAyNkUzNDg2MUU5Qzc4NzlFOEZCRDYzRDIxOTBCQUNEMEI2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/7jpcO5SfEIvYTsaWKOckfEa NDNSeCG2GqcLpPqmEa5DMxEzFtj6xvLwVozPT/TXZThcGd02SEQL29rwJQ53N3wZ eu3yco81LizsYvPxX6RqjhLvgUgMNG0ZzZBmvYPtfeDq1+LiMB2TprhPQwVDIN6Q 3/zHB4C3uAeJMUPNOkB0rtfTJBuKtDVULuxAYm9D+mZGmuk9NHCNVvhjryWeJffH gzF/irTKTC1A6Qa1OeVgd3A0QvIbiiLeCr9EtiUUlKNaMjTZZc2ZXfTTWx1vAz7i 13zU3q/61UJBg8u8w861vVFB/HFFxUpRdpYbQMa/MKcDZvi18Nz7ZHUMRvkTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTfAm40hh6ceHno+9Y9IZC6zQtgUwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA99LZCTmb3mc uzuDHLXDOuAHXmh2xi4d12G5282mjXn2hO1gYwjpUkY9LIsi+F9IQsqlQmWkkeOl nJhB5O0GxGG1LKsGMDFmeny6KwRBCmMPisgvcnmYA0nuDHP+6fMk1yDpgWfSHWMH 0vtXPxxpAS/kaqdrIrwzLwd7NUXmhmNlQq0ibffVjDOBDVVtP5X6ifuSK1MDADjO HGOFLnHSARhhFjLVRZ1MJd3JbWdOLFzV++GeflCmwmfTgFFOJnUe8bZyorFNYM+F +aazFDs2uyHsU2yB8tGljLxY72NdvlfPwE1HrW5T2S3GlNTdrtm2GVAcTf19N0ki VTmrYGXpYQ== -----END CERTIFICATE-----Generated at Tue Oct 13 17:24:22 2026 by rpki-client