$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: 8ZjJryXpI99DHHEDEMe8AZJkqFf8cpp7CvNyMCHg/VQ= Subject key identifier: 59:68:7D:F0:D4:7E:4C:EF:90:29:56:BC:B7:48:73:78:CD:D1:9D:D4 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 0A76B55AD424D973182809EE5222321AC74E9BC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: C1 Signing time: Fri 09 Oct 2026 22:28:55 +0000 Manifest this update: Fri 09 Oct 2026 22:23:55 +0000 Manifest next update: Tue 13 Oct 2026 04:53:55 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 2: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 3: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 4: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: mgxK8LFexsLnnMmUxgdyD8F0dt/oRe3Cfddc/1Mihl8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 04:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:76:b5:5a:d4:24:d9:73:18:28:09:ee:52:22:32:1a:c7:4e:9b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Oct 9 22:23:55 2026 GMT Not After : Oct 13 04:53:55 2026 GMT Subject: CN=59687DF0D47E4CEF902956BCB7487378CDD19DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ea:a4:4e:f3:af:3f:f6:3c:ef:9b:99:23:3e: fe:0d:68:8f:1d:e6:9a:3c:a9:00:a7:85:cc:c4:df: 5e:f4:69:0f:89:4a:a1:19:68:2e:75:69:c1:79:fa: 61:d6:58:79:50:e9:13:0e:50:61:65:a9:02:ab:36: 2a:c3:4e:f6:10:35:fa:34:4e:7c:ea:f4:fc:28:2a: 2f:d0:8a:1c:ac:80:58:0e:fa:54:e9:68:53:2b:d0: ef:eb:81:47:85:21:bf:95:01:98:ea:42:86:40:da: b4:2a:77:e0:21:c6:7b:1c:74:24:39:4f:5f:3d:06: 31:70:c6:5d:d3:eb:76:ff:2f:0d:74:13:f9:14:f9: a7:c3:9b:7c:33:98:fe:43:da:4d:6b:7e:89:f7:f0: ac:6e:85:09:ae:f2:4d:45:e4:ff:8f:73:37:4e:c2: 23:1c:d1:56:a2:cf:17:b5:94:26:d3:e2:97:a2:26: 47:56:44:cc:27:f3:f0:e3:8d:d8:24:fe:65:91:6e: c4:d0:9e:bc:31:17:29:06:68:79:51:29:49:4e:64: 9c:e3:1e:52:5d:7e:84:82:fd:95:5b:6b:2a:14:3c: 74:76:8e:3a:01:bf:56:f4:2b:6d:43:2b:5b:19:f6: 1b:79:f0:26:a5:25:07:2e:10:e2:1b:a7:b9:d1:4d: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:68:7D:F0:D4:7E:4C:EF:90:29:56:BC:B7:48:73:78:CD:D1:9D:D4 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:c3:f6:89:01:e1:bf:b4:39:5d:f6:77:53:9f:8a:a7:a3:82: cf:f1:4a:82:43:25:3a:50:2c:b9:a3:99:61:46:dd:b1:66:25: 52:f3:3b:db:24:62:24:90:17:05:db:99:43:53:e8:37:a6:b2: 0b:13:54:d9:9d:4c:8d:8f:32:e9:c4:3b:14:ec:85:fe:98:aa: d8:c6:32:2e:e5:cc:fb:59:4f:d1:73:d7:95:40:b9:13:71:52: 74:41:cd:4c:a8:df:10:d5:7f:6f:2c:cd:c7:02:07:9f:a1:44: c9:f8:11:62:27:4d:4d:5e:2e:53:53:93:0e:89:86:e0:b9:b4: 7f:e3:84:84:cc:32:b2:22:ff:07:84:50:5c:28:0e:42:ca:94: 38:c1:37:76:c2:e7:ab:0f:d5:2f:42:47:d5:c8:4a:21:85:10: 80:7d:eb:b8:03:94:8b:44:17:9b:5c:7f:c9:d2:d0:a4:3c:0f: c3:76:26:ca:88:26:cc:6a:ad:01:d9:14:c6:59:95:41:2b:f4: 95:61:5f:64:09:c8:dd:74:8d:79:1b:ec:42:34:9c:fb:de:8e: 4c:dc:31:ee:d0:c1:3c:9c:5a:e6:02:64:18:3b:13:a5:09:1b: 08:5b:0e:22:ae:26:cb:f4:eb:cf:cd:74:34:dd:de:e3:3f:ac: 81:dd:5f:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCna1WtQk2XMYKAnuUiIyGsdOm8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjEwMDkyMjIzNTVaFw0yNjEwMTMwNDUzNTVaMDMxMTAvBgNV BAMTKDU5Njg3REYwRDQ3RTRDRUY5MDI5NTZCQ0I3NDg3Mzc4Q0REMTlERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ6qRO868/9jzvm5kjPv4NaI8d 5po8qQCnhczE3170aQ+JSqEZaC51acF5+mHWWHlQ6RMOUGFlqQKrNirDTvYQNfo0 Tnzq9PwoKi/QihysgFgO+lTpaFMr0O/rgUeFIb+VAZjqQoZA2rQqd+AhxnscdCQ5 T189BjFwxl3T63b/Lw10E/kU+afDm3wzmP5D2k1rfon38KxuhQmu8k1F5P+PczdO wiMc0Vaizxe1lCbT4peiJkdWRMwn8/Djjdgk/mWRbsTQnrwxFykGaHlRKUlOZJzj HlJdfoSC/ZVbayoUPHR2jjoBv1b0K21DK1sZ9ht58CalJQcuEOIbp7nRTderAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWWh98NR+TO+QKVa8t0hzeM3RndQwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMP2iQHhv7Q5 XfZ3U5+Kp6OCz/FKgkMlOlAsuaOZYUbdsWYlUvM72yRiJJAXBduZQ1PoN6ayCxNU 2Z1MjY8y6cQ7FOyF/piq2MYyLuXM+1lP0XPXlUC5E3FSdEHNTKjfENV/byzNxwIH n6FEyfgRYidNTV4uU1OTDomG4Lm0f+OEhMwysiL/B4RQXCgOQsqUOME3dsLnqw/V L0JH1chKIYUQgH3ruAOUi0QXm1x/ydLQpDwPw3YmyogmzGqtAdkUxlmVQSv0lWFf ZAnI3XSNeRvsQjSc+96OTNwx7tDBPJxa5gJkGDsTpQkbCFsOIq4my/Trz810NN3e 4z+sgd1fLQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:50:32 2026 by rpki-client