$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: fscoYghSadyJB/4TjQnlIU40i/XaIke6Buj7wNRW/cU= Subject key identifier: A3:BF:D5:68:64:0E:4C:85:56:91:52:12:2F:41:1F:FA:FA:74:EC:8A Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 18A9678F1ABDA1B4E85B73767880454E1828B5AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: AD Signing time: Mon 12 Oct 2026 01:36:18 +0000 Manifest this update: Mon 12 Oct 2026 01:31:18 +0000 Manifest next update: Thu 15 Oct 2026 08:07:18 +0000 Files and hashes: 1: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 2: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: UvNWOOMXpuoZZrDIBajq9zX4W2ysAKljBhOdKPaWh8U=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a9:67:8f:1a:bd:a1:b4:e8:5b:73:76:78:80:45:4e:18:28:b5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Oct 12 01:31:18 2026 GMT Not After : Oct 15 08:07:18 2026 GMT Subject: CN=A3BFD568640E4C85569152122F411FFAFA74EC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:76:79:c6:b0:80:c9:f6:13:f7:b2:c8:d7: 7e:dc:41:76:6a:1b:9b:36:1d:1f:7c:35:15:9f:52: 73:c7:34:83:83:bc:53:b6:62:c7:97:5d:bf:11:06: 64:2d:8a:e5:30:03:68:90:b4:a7:2e:3f:9f:3c:e6: fc:24:21:b2:a8:0f:43:a7:f6:5b:9f:21:37:c1:79: 7f:eb:e9:71:61:bb:2f:f3:d0:41:8d:43:2b:f3:28: 11:25:3c:7f:50:e5:6d:9a:18:61:36:9e:cb:c2:57: 80:48:c4:72:19:18:04:5f:6f:3f:52:e8:4a:c3:85: c4:62:5f:6c:8a:1f:07:4e:66:5d:ce:90:61:6f:0f: d1:57:d3:37:a4:e6:2f:ee:d0:5e:64:8d:e0:ad:0d: 6b:3e:fe:a4:01:36:50:1f:27:a2:12:71:ef:bf:e0: 43:05:ed:fa:65:b3:0e:a1:b1:8e:c1:89:18:13:2f: f6:2e:5f:ab:ff:6a:c1:ad:d4:32:b9:66:90:34:1e: 1d:16:e4:f8:2e:a4:f8:ac:6a:c9:9f:15:2d:47:4b: 19:30:a2:b2:95:72:92:a2:13:36:73:85:9e:49:c7: 17:2c:26:f4:8f:8f:75:3c:38:c0:2c:ca:6a:c5:83: 72:e4:61:e4:62:c7:bd:f2:82:ac:47:24:96:f6:4c: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:D5:68:64:0E:4C:85:56:91:52:12:2F:41:1F:FA:FA:74:EC:8A X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:7d:90:b2:27:45:e9:f2:34:86:79:1d:f0:aa:7e:d8:27: c3:d2:9b:b8:ca:ec:54:63:1a:01:e7:8f:ab:9d:1f:3f:e2:58: da:e0:b5:ea:9b:60:66:86:73:56:5c:40:27:4c:39:1c:c8:c0: 48:51:14:1f:4f:6c:f3:cf:83:78:60:c6:0c:5e:91:fa:8e:d1: a3:89:54:c2:4c:a1:fa:7a:c6:34:33:93:49:07:7b:71:c4:71: db:c9:01:37:37:cd:e2:2b:90:df:81:b8:87:3b:c5:59:33:a5: af:06:e5:44:3e:f3:bd:0f:c3:ae:58:00:2e:11:77:bd:c0:4a: c3:15:a4:b1:94:bc:4b:0f:e4:5b:a8:56:bb:75:66:13:20:cb: 73:22:ba:30:c6:5e:b2:e3:4b:22:06:9f:f0:73:40:d6:80:24: 75:c8:66:62:ec:5f:51:0a:35:6c:52:87:16:34:1b:dd:97:21: a2:c1:4a:82:4d:14:c8:4b:9c:07:46:86:be:f4:f7:80:02:ca: c5:92:e2:ac:e0:c4:be:78:b5:6d:70:94:eb:49:57:91:89:30: 23:fa:d9:5a:fe:68:1b:2a:a0:02:57:85:21:ae:93:ed:38:9f: dd:e1:b2:72:89:ee:19:27:7a:04:09:4e:f4:01:6e:a9:8c:2b: fc:61:f8:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGKlnjxq9obToW3N2eIBFThgotawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjEwMTIwMTMxMThaFw0yNjEwMTUwODA3MThaMDMxMTAvBgNV BAMTKEEzQkZENTY4NjQwRTRDODU1NjkxNTIxMjJGNDExRkZBRkE3NEVDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSnZ5xrCAyfYT97LI137cQXZq G5s2HR98NRWfUnPHNIODvFO2YseXXb8RBmQtiuUwA2iQtKcuP5885vwkIbKoD0On 9lufITfBeX/r6XFhuy/z0EGNQyvzKBElPH9Q5W2aGGE2nsvCV4BIxHIZGARfbz9S 6ErDhcRiX2yKHwdOZl3OkGFvD9FX0zek5i/u0F5kjeCtDWs+/qQBNlAfJ6ISce+/ 4EMF7fplsw6hsY7BiRgTL/YuX6v/asGt1DK5ZpA0Hh0W5PgupPisasmfFS1HSxkw orKVcpKiEzZzhZ5JxxcsJvSPj3U8OMAsymrFg3LkYeRix73ygqxHJJb2TBrJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo7/VaGQOTIVWkVISL0Ef+vp07IowHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt59kLInReny NIZ5HfCqftgnw9KbuMrsVGMaAeePq50fP+JY2uC16ptgZoZzVlxAJ0w5HMjASFEU H09s88+DeGDGDF6R+o7Ro4lUwkyh+nrGNDOTSQd7ccRx28kBNzfN4iuQ34G4hzvF WTOlrwblRD7zvQ/DrlgALhF3vcBKwxWksZS8Sw/kW6hWu3VmEyDLcyK6MMZesuNL Igaf8HNA1oAkdchmYuxfUQo1bFKHFjQb3ZchosFKgk0UyEucB0aGvvT3gALKxZLi rODEvni1bXCU60lXkYkwI/rZWv5oGyqgAleFIa6T7Tif3eGyconuGSd6BAlO9AFu qYwr/GH4Eg== -----END CERTIFICATE-----Generated at Tue Oct 13 08:17:30 2026 by rpki-client