$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft File: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft (raw, json) Hash identifier: beyIrPunKTKTT7gtvsWg4/SvLV1cVKr3lY1thNq+MXY= Subject key identifier: 1C:3D:F7:DC:69:94:BD:92:34:69:CD:A0:E4:E9:FC:61:13:DA:5A:AD Authority key identifier: 7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF Certificate issuer: /CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Certificate serial: 7E0EC09EEB8C85EB66EDBA064687ECFC42D20582 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft Manifest number: A8 Signing time: Sat 17 Oct 2026 09:33:43 +0000 Manifest this update: Sat 17 Oct 2026 09:28:43 +0000 Manifest next update: Tue 20 Oct 2026 16:39:43 +0000 Files and hashes: 1: 323430303a373365303a383030303a3a2f33332d3333203d3e20313436383136.roa (hash: ZWxdCtb8Xvi/p2unJ2mHQCYiEmf8lT8LOVcl0OEHQYU=) 2: 323430303a373365303a3a2f33332d3333203d3e20313436383136.roa (hash: Uu05feJs1kWzCBhqECtGwkD39rOIoNraYpyXK3xfyc0=) 3: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl (hash: Y06DDoy/yN3Hoyrj0QRVbw72TLHbf2ecCdPCAMWhRIA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0e:c0:9e:eb:8c:85:eb:66:ed:ba:06:46:87:ec:fc:42:d2:05:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Validity Not Before: Oct 17 09:28:43 2026 GMT Not After : Oct 20 16:39:43 2026 GMT Subject: CN=1C3DF7DC6994BD923469CDA0E4E9FC6113DA5AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:f9:40:77:10:9b:97:a1:05:16:b2:b8:52: 8d:fd:53:42:65:bd:ad:04:cc:ae:32:f2:0d:66:89: e7:c9:1b:f0:70:2d:5c:81:f0:a3:1f:f4:ee:ea:29: 2b:ae:ba:4d:d8:e5:9e:d2:02:c7:04:f6:49:40:f6: e7:d0:fb:20:b5:3c:70:a3:7c:c6:91:bb:02:f9:ef: 08:ca:85:48:9d:ae:43:0b:6e:8d:02:78:3e:01:d2: 44:99:be:72:6b:2e:45:a9:2f:0e:fc:09:f1:a0:51: f5:0b:42:f4:f7:c1:b2:b1:a3:ff:88:8f:55:1e:cc: a2:5f:84:cb:6e:0e:f8:0b:08:eb:b3:06:6b:ee:22: ac:37:59:65:8e:27:6b:b0:39:e0:1f:8d:3a:8a:d0: 8e:af:15:11:d4:3f:15:4a:be:65:a7:55:6a:52:34: 3f:5f:be:03:2c:f7:8d:76:2a:08:5d:94:05:ac:dd: 61:a3:08:73:7a:78:27:3a:c0:5a:fa:4e:3c:aa:11: b8:d9:ad:a4:63:be:af:fd:4c:da:79:e4:4e:8e:7a: 0a:c5:78:15:d2:5b:f6:1b:48:79:6b:a8:14:44:a8: d1:6b:e6:5c:a9:19:62:6e:18:0c:e1:6a:72:dc:7a: 7a:5d:6b:54:23:91:ec:9c:ff:71:65:5c:47:07:4a: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:F7:DC:69:94:BD:92:34:69:CD:A0:E4:E9:FC:61:13:DA:5A:AD X509v3 Authority Key Identifier: keyid:7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:17:f0:e2:82:f1:4f:ac:6d:35:c9:75:7a:5a:de:ef:17: ef:85:58:e6:db:ed:53:1a:f0:e4:00:93:af:01:90:9d:51:44: 55:67:87:28:bd:e8:a2:bf:3f:d4:dc:fe:67:a9:41:4c:7b:7f: 93:ac:c2:93:28:3e:b0:a0:7d:98:36:d0:3e:51:df:74:39:0f: 38:af:8b:24:db:05:d6:ad:cb:03:df:99:83:8a:32:b1:fe:c5: 91:a0:57:de:8f:f4:fb:38:e4:c8:79:47:4f:21:6f:d2:a1:fa: fa:b7:c7:2e:5c:61:93:7d:c5:32:71:15:79:1f:8a:9f:ca:95: 98:15:e2:76:b9:5e:14:48:73:be:0b:62:ac:08:68:94:26:54: c2:98:c8:39:f0:2a:2d:aa:c5:37:3b:67:49:5a:68:9e:1b:59: 8c:5b:e6:7e:35:90:7d:a2:3d:b4:45:45:fa:01:60:93:3e:e3: 00:e3:71:4b:c3:8c:3c:fb:78:d4:ad:65:ad:71:38:86:cc:21: 21:3a:03:5e:90:d9:3b:28:7d:7e:34:33:94:06:84:3d:e6:f3: 21:87:56:6f:47:f6:c5:97:cb:13:f7:30:0a:d1:ef:7d:78:63: a2:57:88:01:f8:09:f2:94:ce:68:88:46:c7:5a:dc:a8:1f:91: 34:fb:bc:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfg7AnuuMhetm7boGRofs/ELSBYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhC NjhDMjNBRjAeFw0yNjEwMTcwOTI4NDNaFw0yNjEwMjAxNjM5NDNaMDMxMTAvBgNV BAMTKDFDM0RGN0RDNjk5NEJEOTIzNDY5Q0RBMEU0RTlGQzYxMTNEQTVBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiPlAdxCbl6EFFrK4Uo39U0Jl va0EzK4y8g1miefJG/BwLVyB8KMf9O7qKSuuuk3Y5Z7SAscE9klA9ufQ+yC1PHCj fMaRuwL57wjKhUidrkMLbo0CeD4B0kSZvnJrLkWpLw78CfGgUfULQvT3wbKxo/+I j1UezKJfhMtuDvgLCOuzBmvuIqw3WWWOJ2uwOeAfjTqK0I6vFRHUPxVKvmWnVWpS ND9fvgMs9412KghdlAWs3WGjCHN6eCc6wFr6TjyqEbjZraRjvq/9TNp55E6OegrF eBXSW/YbSHlrqBREqNFr5lypGWJuGAzhanLcenpda1Qjkeyc/3FlXEcHShS7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHD333GmUvZI0ac2g5On8YRPaWq0wHwYDVR0j BBgwFoAUfXYFnb4KnAd73/uHOu+OyLaMI68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwNTc4Mzg5OTU4NjU3Ny8wLzdENzYwNTlEQkUwQTlDMDc3QkRGRkI4NzNBRUY4 RUM4QjY4QzIzQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhCNjhDMjNBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MDU3ODM4OTk1ODY1NzcvMC83RDc2MDU5REJFMEE5 QzA3N0JERkZCODczQUVGOEVDOEI2OEMyM0FGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZEX8OKC8U+s bTXJdXpa3u8X74VY5tvtUxrw5ACTrwGQnVFEVWeHKL3oor8/1Nz+Z6lBTHt/k6zC kyg+sKB9mDbQPlHfdDkPOK+LJNsF1q3LA9+Zg4oysf7FkaBX3o/0+zjkyHlHTyFv 0qH6+rfHLlxhk33FMnEVeR+Kn8qVmBXidrleFEhzvgtirAholCZUwpjIOfAqLarF NztnSVponhtZjFvmfjWQfaI9tEVF+gFgkz7jAONxS8OMPPt41K1lrXE4hswhIToD XpDZOyh9fjQzlAaEPebzIYdWb0f2xZfLE/cwCtHvfXhjoleIAfgJ8pTOaIhGx1rc qB+RNPu8Tg== -----END CERTIFICATE-----Generated at Sat Oct 17 22:57:38 2026 by rpki-client