$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.mft (raw, json) Hash identifier: curaRuFcF/yy/4f6KWS9suopomAmNZJYJuMGCSO1Ngg= Subject key identifier: FD:0D:E3:01:74:EF:5A:7B:89:02:9A:26:12:CC:E2:01:CD:E5:BA:9E Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 4BD7EA6FAF462D4EBD73045955934C4A49C2150D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft Manifest number: BE Signing time: Sun 11 Oct 2026 06:25:20 +0000 Manifest this update: Sun 11 Oct 2026 06:20:20 +0000 Manifest next update: Wed 14 Oct 2026 08:46:20 +0000 Files and hashes: 1: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (hash: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA=) 2: 3138302e3233352e36342e302f32312d3231203d3e2030.roa (hash: cMBPUCq8Td7R/BqK16OR4ezGPHcLtpaW8zDbr66rEq8=) 3: 8B215666577E10BF852C3AC9A7EB59536DFF468B.crl (hash: 0LvL8BQLqH3OXjTdCPhNLeEU1mxm9IdjIerNtZs9iXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d7:ea:6f:af:46:2d:4e:bd:73:04:59:55:93:4c:4a:49:c2:15:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Oct 11 06:20:20 2026 GMT Not After : Oct 14 08:46:20 2026 GMT Subject: CN=FD0DE30174EF5A7B89029A2612CCE201CDE5BA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:cb:d7:cc:be:41:b5:1d:a0:66:63:57:d5: d2:d0:4b:de:c7:87:66:93:7f:58:cb:9e:12:fb:9a: e0:80:11:11:d8:78:b9:9c:e8:f7:3f:08:72:2b:90: ae:cd:ed:7e:21:61:85:35:27:84:a3:a2:b9:a3:90: 91:67:a9:18:48:c1:90:05:2a:7a:b4:9c:de:4e:12: 1b:3a:26:8f:e0:05:23:f5:ae:e4:1c:60:68:f0:4f: 83:5f:42:62:39:82:d9:1a:fb:0a:c3:97:c0:87:1a: f2:32:ad:5a:f8:97:8b:8f:57:e3:35:0e:9e:48:9d: 21:0e:05:0d:c0:59:49:2a:92:07:67:87:53:b3:21: 57:89:8c:79:99:93:8c:1d:9f:3b:47:a0:af:68:dd: b0:33:3d:00:e7:00:82:9f:70:1e:63:12:e4:52:78: 51:d0:6f:a6:ad:35:2e:ef:67:1c:05:68:18:b9:ad: ab:6e:cc:f2:7f:2e:37:c0:bf:96:71:15:ef:34:2b: a1:ac:e3:21:b6:e0:f1:f7:90:8f:00:f3:4d:f0:e0: 52:54:c5:cf:f3:ce:30:b1:a0:86:9b:e0:8f:c6:32: a6:8f:b6:b5:4d:0c:ea:16:04:cf:8b:0a:9e:f7:89: af:d0:18:73:71:9f:a8:7b:f5:83:a2:15:36:da:ed: d0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:E3:01:74:EF:5A:7B:89:02:9A:26:12:CC:E2:01:CD:E5:BA:9E X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:d1:27:33:ab:72:7d:a0:2f:bd:11:c5:28:66:e4:9a:3e: b2:81:d9:a0:3a:9f:c6:9e:49:b7:07:ec:40:99:27:e3:e7:80: 2e:d5:b3:8a:e2:24:4f:14:43:c7:8d:bc:6d:03:64:49:c2:da: d2:57:b9:58:6d:62:14:8b:55:c4:81:06:cb:81:d9:76:95:95: a4:14:8b:aa:a7:e9:cf:1e:f6:49:65:20:81:b2:3b:42:d1:27: 6a:e4:49:b5:1c:3a:44:09:ed:dd:99:cf:da:f3:c1:31:79:07: d8:df:b4:29:8c:67:04:39:ff:09:43:d7:cf:f7:30:d9:60:1e: ba:a2:98:75:c9:32:27:d6:09:9f:32:dd:ed:fd:c7:62:2a:06: f2:0c:8b:ee:1d:05:ea:6b:22:e2:11:3e:e2:22:e9:16:94:96: af:ef:80:ad:23:01:c2:31:d7:66:01:22:a0:0b:6c:cd:ab:52: d2:16:63:27:02:44:d5:18:a3:38:5d:81:ff:d3:a3:a5:cb:ff: fb:54:b0:1b:83:85:53:e0:1f:69:64:35:b8:11:08:cc:92:54: 5f:eb:a2:f6:8d:75:26:3f:34:6e:2b:07:69:f3:b9:20:8a:ff: 0d:f1:b5:82:7c:f2:49:53:66:ae:c4:00:4a:c1:80:bf:84:1e: b9:6a:5c:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS9fqb69GLU69cwRZVZNMSknCFQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjEwMTEwNjIwMjBaFw0yNjEwMTQwODQ2MjBaMDMxMTAvBgNV BAMTKEZEMERFMzAxNzRFRjVBN0I4OTAyOUEyNjEyQ0NFMjAxQ0RFNUJBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHs8vXzL5BtR2gZmNX1dLQS97H h2aTf1jLnhL7muCAERHYeLmc6Pc/CHIrkK7N7X4hYYU1J4SjormjkJFnqRhIwZAF Knq0nN5OEhs6Jo/gBSP1ruQcYGjwT4NfQmI5gtka+wrDl8CHGvIyrVr4l4uPV+M1 Dp5InSEOBQ3AWUkqkgdnh1OzIVeJjHmZk4wdnztHoK9o3bAzPQDnAIKfcB5jEuRS eFHQb6atNS7vZxwFaBi5ratuzPJ/LjfAv5ZxFe80K6Gs4yG24PH3kI8A803w4FJU xc/zzjCxoIab4I/GMqaPtrVNDOoWBM+LCp73ia/QGHNxn6h79YOiFTba7dCrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/Q3jAXTvWnuJApomEsziAc3lup4wHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk1ODM5NjM3NzQ1ODI3ODcvMC84QjIxNTY2NjU3N0Ux MEJGODUyQzNBQzlBN0VCNTk1MzZERkY0NjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSTRJzOrcn2g L70RxShm5Jo+soHZoDqfxp5JtwfsQJkn4+eALtWziuIkTxRDx428bQNkScLa0le5 WG1iFItVxIEGy4HZdpWVpBSLqqfpzx72SWUggbI7QtEnauRJtRw6RAnt3ZnP2vPB MXkH2N+0KYxnBDn/CUPXz/cw2WAeuqKYdckyJ9YJnzLd7f3HYioG8gyL7h0F6msi 4hE+4iLpFpSWr++ArSMBwjHXZgEioAtszatS0hZjJwJE1RijOF2B/9Ojpcv/+1Sw G4OFU+AfaWQ1uBEIzJJUX+ui9o11Jj80bisHafO5IIr/DfG1gnzySVNmrsQASsGA v4QeuWpcCQ== -----END CERTIFICATE-----Generated at Mon Oct 12 23:08:13 2026 by rpki-client