$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: uYJAE/BALaTvFo6p/uC78IX7aBUaL0vvNmZSIbEyIGQ= Subject key identifier: 8F:85:0E:B3:23:C2:42:E8:A3:3B:C2:45:58:85:1A:16:BF:96:0D:29 Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 160AD5F61CC9B9A5FA4B4244FD2DCAC00D19C39B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: D5 Signing time: Wed 14 Oct 2026 06:58:40 +0000 Manifest this update: Wed 14 Oct 2026 06:53:40 +0000 Manifest next update: Sat 17 Oct 2026 12:54:40 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: G/MAjeWX/BN1H3kcQecWmr+U2/FEEurVA+kY9DrGi+o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0a:d5:f6:1c:c9:b9:a5:fa:4b:42:44:fd:2d:ca:c0:0d:19:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Oct 14 06:53:40 2026 GMT Not After : Oct 17 12:54:40 2026 GMT Subject: CN=8F850EB323C242E8A33BC24558851A16BF960D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:f4:ac:ee:a8:8f:93:f1:78:ba:8f:b2:11: c2:b7:ef:c9:0d:8d:e5:6f:95:cd:4b:0e:23:2c:b0: 88:8e:1e:0b:1f:84:a9:1a:d8:07:ec:52:ff:b2:d3: b7:c0:5a:6d:f1:2b:9d:38:ea:88:3b:89:1a:2b:9e: 34:58:32:a7:84:13:26:f1:80:2d:b1:4d:0e:c6:15: a6:75:a9:3f:30:30:d9:73:88:5f:e4:27:7f:fa:bf: 29:7f:55:a2:c3:08:0f:e7:40:d5:f6:4b:93:50:56: b3:ad:90:1a:0f:81:57:ed:69:4d:d2:f6:19:e2:bd: 6c:ae:65:1a:8d:01:5c:ba:3d:8a:98:ef:39:68:65: 57:5b:34:9c:e0:44:b1:73:92:db:6c:d8:08:64:60: 3f:84:67:4a:91:18:27:1b:36:83:b3:ce:44:0d:5c: aa:d5:46:80:b2:2f:21:6e:e3:e2:e5:9a:76:cc:80: 6e:d7:1c:7f:f5:27:ea:22:e6:07:61:1b:57:eb:16: c4:89:2a:22:f8:8e:f1:ff:f3:17:0f:86:27:57:47: 83:65:39:d0:34:ab:6a:35:64:4f:e6:cb:03:90:1a: de:26:17:af:72:b3:f8:32:1a:31:6c:cb:3d:21:c7: 67:e4:d2:15:bf:4e:39:a0:ff:7d:12:e1:00:d7:b3: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:85:0E:B3:23:C2:42:E8:A3:3B:C2:45:58:85:1A:16:BF:96:0D:29 X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:72:01:20:2f:ca:69:8d:70:2c:ed:d8:e1:ff:bd:b3:1e: de:e1:83:d2:c6:53:fe:d5:93:88:61:c1:b5:70:f8:92:56:97: 68:ba:f9:1b:a2:a9:e4:6e:bd:23:d3:2c:57:4e:06:33:0a:37: ef:9d:94:bc:f0:f3:e7:e9:fb:66:2b:7e:59:a9:a6:e2:22:a8: 76:c5:71:f8:83:cb:fa:77:49:c6:77:dc:88:17:78:1b:98:62: 77:75:6b:7e:58:97:e2:a9:9c:69:75:d9:d1:10:a6:d5:81:e7: 35:72:17:f8:66:35:f2:7b:4c:ea:d3:df:45:75:69:cc:04:59: 63:d2:6f:e9:5e:20:fc:0b:96:ff:1e:7f:c1:e0:84:68:ea:d0: 96:ff:72:0c:12:87:18:11:35:54:7a:54:7e:f1:72:9d:15:75: 25:19:3b:e5:b1:91:0c:70:a9:3f:7d:7f:4f:5d:7c:0b:59:c3: 01:4b:4f:dc:49:2b:7e:a7:5a:88:33:38:ff:45:95:ae:22:9e: 33:1a:2f:e0:dc:8d:e6:43:f2:91:7c:4a:be:14:a6:2c:9c:c0: 1d:63:0f:39:82:2e:2c:e2:13:0b:b1:4e:e7:c7:17:18:72:81: 34:0c:b8:14:2c:21:e3:83:30:7c:09:fe:83:b5:40:b8:88:53: 75:04:b7:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFgrV9hzJuaX6S0JE/S3KwA0Zw5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjEwMTQwNjUzNDBaFw0yNjEwMTcxMjU0NDBaMDMxMTAvBgNV BAMTKDhGODUwRUIzMjNDMjQyRThBMzNCQzI0NTU4ODUxQTE2QkY5NjBEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mfSs7qiPk/F4uo+yEcK378kN jeVvlc1LDiMssIiOHgsfhKka2AfsUv+y07fAWm3xK5046og7iRornjRYMqeEEybx gC2xTQ7GFaZ1qT8wMNlziF/kJ3/6vyl/VaLDCA/nQNX2S5NQVrOtkBoPgVftaU3S 9hnivWyuZRqNAVy6PYqY7zloZVdbNJzgRLFzktts2AhkYD+EZ0qRGCcbNoOzzkQN XKrVRoCyLyFu4+LlmnbMgG7XHH/1J+oi5gdhG1frFsSJKiL4jvH/8xcPhidXR4Nl OdA0q2o1ZE/mywOQGt4mF69ys/gyGjFsyz0hx2fk0hW/Tjmg/30S4QDXs/ATAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj4UOsyPCQuijO8JFWIUaFr+WDSkwHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuByASAvymmN cCzt2OH/vbMe3uGD0sZT/tWTiGHBtXD4klaXaLr5G6Kp5G69I9MsV04GMwo3752U vPDz5+n7Zit+Wamm4iKodsVx+IPL+ndJxnfciBd4G5hid3VrfliX4qmcaXXZ0RCm 1YHnNXIX+GY18ntM6tPfRXVpzARZY9Jv6V4g/AuW/x5/weCEaOrQlv9yDBKHGBE1 VHpUfvFynRV1JRk75bGRDHCpP31/T118C1nDAUtP3EkrfqdaiDM4/0WVriKeMxov 4NyN5kPykXxKvhSmLJzAHWMPOYIuLOITC7FO58cXGHKBNAy4FCwh44MwfAn+g7VA uIhTdQS3EQ== -----END CERTIFICATE-----Generated at Thu Oct 15 16:31:19 2026 by rpki-client