$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft File: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json) Hash identifier: XXQKExezfb5MgXPV0pubSgw5pkQMr1yKx8VdLKS+smg= Subject key identifier: B5:51:43:FF:FC:5C:6F:17:D1:66:2F:3C:DF:3A:C4:93:54:1E:11:11 Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 Certificate issuer: /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Certificate serial: 4543A5FE2B17369418AAE698045DAD3E47D7832A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft Manifest number: D6 Signing time: Mon 12 Oct 2026 09:45:22 +0000 Manifest this update: Mon 12 Oct 2026 09:40:22 +0000 Manifest next update: Thu 15 Oct 2026 19:52:22 +0000 Files and hashes: 1: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=) 2: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: crR8k8vMXaV7zTymibHMk6BYMuI9qvDWICSPksFuSVM=) 3: AS7497.roa (hash: 5tlDYEjmuvKl0t4PcP2hayLmGnOHd1kU3+suYfEsKfs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:43:a5:fe:2b:17:36:94:18:aa:e6:98:04:5d:ad:3e:47:d7:83:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Validity Not Before: Oct 12 09:40:22 2026 GMT Not After : Oct 15 19:52:22 2026 GMT Subject: CN=B55143FFFC5C6F17D1662F3CDF3AC493541E1111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:1c:a8:7b:4d:4f:6f:45:c6:ea:f6:70:36: 1b:93:25:49:06:6e:c5:58:07:b9:e5:af:66:6c:b2: 76:86:ea:79:f7:b2:17:cc:bb:4b:07:36:91:2d:cb: 09:0c:30:e4:71:ed:96:47:d6:ad:79:56:ec:2e:03: 88:0e:f1:31:b7:ec:44:ae:70:f8:54:19:03:10:20: 98:aa:89:93:8b:e2:5d:d3:80:af:c7:78:71:00:b5: 3d:20:2b:de:7b:3e:9e:db:7a:c3:0a:ee:40:b8:1f: ba:3b:4d:c9:c3:d2:9c:ba:58:29:77:67:d6:4c:be: 96:4d:1b:37:22:d7:c2:21:0e:dc:49:61:4f:4f:b9: 6b:d3:4e:00:bb:16:79:7f:de:21:76:82:99:6f:a0: ee:cf:31:ca:e3:0d:63:30:eb:13:94:d0:2f:45:83: 7e:b0:1b:6d:79:82:6b:e6:03:17:06:1d:e6:d4:ed: f0:5e:cc:8a:6a:bf:6b:f5:7e:bc:d7:e5:5e:10:f7: 37:de:01:5f:64:7f:ea:e3:25:e7:e5:a2:9c:60:7c: cc:7c:3b:a1:84:f1:06:fa:10:ee:bb:e3:5f:a9:2f: 14:25:2d:b4:71:4d:31:d6:38:cf:03:a6:1e:8a:c9: 19:c9:f5:6a:76:76:13:d2:24:df:35:9c:3a:64:ce: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:51:43:FF:FC:5C:6F:17:D1:66:2F:3C:DF:3A:C4:93:54:1E:11:11 X509v3 Authority Key Identifier: keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4c:f6:7b:06:13:aa:48:08:bb:a1:ea:74:1c:37:b8:59:08: 21:a7:cf:8a:8e:c6:dd:47:6d:a3:ab:cf:d3:8f:58:08:d2:4d: 9e:19:ed:1b:8b:50:d9:ea:d5:29:b8:47:43:61:02:7b:46:74: 02:16:8c:96:4b:7d:aa:f5:2f:16:81:1d:42:62:69:a5:79:2e: 6c:50:5f:11:2b:8d:62:84:2d:76:68:14:49:96:eb:31:0c:0c: 6e:31:5a:ca:40:e8:c5:12:be:7f:35:d0:f2:2f:12:aa:93:26: bb:d1:e6:36:e5:de:20:c2:75:2b:2a:22:31:00:f0:44:8d:eb: f4:60:3f:6c:26:43:2b:7a:81:35:72:7e:31:e1:7e:77:5b:6f: e9:c9:4c:9e:f6:42:b4:a8:5a:6e:63:54:23:04:be:5e:7a:32: 69:8e:18:63:35:8f:2d:2e:3b:1a:70:08:16:df:de:fe:6c:11: 66:bf:09:49:d1:76:ac:41:4b:bd:b0:c4:c0:a7:07:63:db:bc: 9d:f3:cb:53:08:e0:e9:56:67:71:4d:8f:cf:06:92:70:86:a8: 8a:04:a6:2c:38:04:c4:5d:77:24:46:4c:66:86:86:b8:13:cf: 70:95:6a:dc:e6:22:ad:89:29:c7:c0:20:6d:ea:fd:f7:e8:a3: 49:77:e3:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURUOl/isXNpQYquaYBF2tPkfXgyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyg4QzA5NjVCNjJF MDhBOUZEMTZGQjdGOUExODVGQUQ0NDM4NTQ3MTYyMB4XDTI2MTAxMjA5NDAyMloX DTI2MTAxNTE5NTIyMlowMzExMC8GA1UEAxMoQjU1MTQzRkZGQzVDNkYxN0QxNjYy RjNDREYzQUM0OTM1NDFFMTExMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSdHKh7TU9vRcbq9nA2G5MlSQZuxVgHueWvZmyydobqefeyF8y7Swc2kS3L CQww5HHtlkfWrXlW7C4DiA7xMbfsRK5w+FQZAxAgmKqJk4viXdOAr8d4cQC1PSAr 3ns+ntt6wwruQLgfujtNycPSnLpYKXdn1ky+lk0bNyLXwiEO3ElhT0+5a9NOALsW eX/eIXaCmW+g7s8xyuMNYzDrE5TQL0WDfrAbbXmCa+YDFwYd5tTt8F7Mimq/a/V+ vNflXhD3N94BX2R/6uMl5+WinGB8zHw7oYTxBvoQ7rvjX6kvFCUttHFNMdY4zwOm HorJGcn1anZ2E9Ik3zWcOmTO8tECAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS1UUP/ /FxvF9FmLzzfOsSTVB4RETAfBgNVHSMEGDAWgBSMCWW2Lgip/Rb7f5oYX61EOFRx YjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzEvOEMwOTY1 QjYyRTA4QTlGRDE2RkI3RjlBMTg1RkFENDQzODU0NzE2Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvakFsbHRpNElx ZjBXLTMtYUdGLXRSRGhVY1dJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8xLzhDMDk2NUI2MkUwOEE5RkQxNkZCN0Y5QTE4NUZBRDQ0Mzg1NDcx NjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAgTPZ7BhOqSAi7oep0HDe4WQghp8+KjsbdR22jq8/Tj1gI 0k2eGe0bi1DZ6tUpuEdDYQJ7RnQCFoyWS32q9S8WgR1CYmmleS5sUF8RK41ihC12 aBRJlusxDAxuMVrKQOjFEr5/NdDyLxKqkya70eY25d4gwnUrKiIxAPBEjev0YD9s JkMreoE1cn4x4X53W2/pyUye9kK0qFpuY1QjBL5eejJpjhhjNY8tLjsacAgW397+ bBFmvwlJ0XasQUu9sMTApwdj27yd88tTCODpVmdxTY/PBpJwhqiKBKYsOATEXXck Rkxmhoa4E89wlWrc5iKtiSnHwCBt6v336KNJd+N2 -----END CERTIFICATE-----Generated at Tue Oct 13 19:29:27 2026 by rpki-client