$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json) Hash identifier: vxIb3VaqXy7jW4AviJneKMp/eiP+5gnimyfYZ2Kn6iw= Subject key identifier: DF:DA:3D:7C:29:6F:07:09:C2:69:BB:D8:50:86:51:8A:86:C6:BD:CA Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 1F619988BAB1E36E44445B8C473C0C7F274F7813 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft Manifest number: 9A Signing time: Sun 11 Oct 2026 21:46:09 +0000 Manifest this update: Sun 11 Oct 2026 21:41:09 +0000 Manifest next update: Thu 15 Oct 2026 04:50:09 +0000 Files and hashes: 1: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: o3s6qPPkMHkugFVOXFAw21gWNxCw7mU1RHsnLf8j/xQ=) 2: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=) 3: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=) 4: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:61:99:88:ba:b1:e3:6e:44:44:5b:8c:47:3c:0c:7f:27:4f:78:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: Oct 11 21:41:09 2026 GMT Not After : Oct 15 04:50:09 2026 GMT Subject: CN=DFDA3D7C296F0709C269BBD85086518A86C6BDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:19:27:18:56:83:25:8e:9f:de:92:b1:de: ee:15:4f:5c:58:3c:fd:dc:ae:67:fa:11:06:ae:23: 8c:3f:df:67:9b:96:fe:fc:98:3a:5e:e3:ee:17:94: 88:62:bc:fe:e5:9a:fe:bd:2d:df:4c:90:f6:15:b9: 26:8e:68:0f:b4:6c:31:bf:f9:1b:1a:85:85:63:dc: f1:a7:e3:16:7d:59:d4:7c:90:46:06:ee:ab:e1:d7: 5a:99:ed:96:f8:32:ec:70:ae:3d:2e:43:29:70:de: 38:4c:b2:a7:56:10:fd:db:45:83:9f:87:d3:d4:b4: 98:9f:5e:a9:92:2e:1e:0e:6c:99:af:19:ae:4a:35: bf:ce:9d:1b:a0:6b:69:08:65:ae:b5:b6:09:fd:50: 72:33:b8:aa:f1:e6:46:9a:f5:17:cb:fb:f3:c6:bd: bf:26:0a:ce:63:0e:53:03:6f:69:c5:12:85:0d:6f: 4e:40:aa:64:0f:ad:83:71:72:2f:93:60:8b:83:01: ce:93:a0:4d:60:a5:e3:19:00:d7:ee:87:98:13:b8: 6f:f7:17:d8:1e:d2:1b:5e:8b:10:ec:02:fa:fb:03: 43:33:a0:54:ec:22:f5:2d:18:71:aa:00:3b:61:3d: 97:7f:58:f0:c0:03:2b:67:06:8d:04:f0:8b:8c:85: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:3D:7C:29:6F:07:09:C2:69:BB:D8:50:86:51:8A:86:C6:BD:CA X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cd:94:0e:f9:e0:27:80:ae:a7:ae:8e:4e:83:d8:c5:c3:ee: 5e:69:89:2c:c3:c7:1c:48:c7:3c:ca:b9:b4:43:4f:27:60:d8: 4b:de:60:d0:c7:4c:bd:85:16:b3:95:b0:8b:95:7b:a0:db:c5: 98:3d:a3:3f:05:7b:a9:b3:f5:64:a1:a8:51:2e:6e:36:f6:66: 7f:84:41:52:82:52:88:e6:23:93:31:27:0c:7c:f1:ad:ff:2b: 4e:36:2e:22:92:09:f1:6c:c6:93:78:ac:48:d1:35:da:df:31: 26:52:16:f5:04:0c:19:b2:a1:f7:93:0a:5e:f3:29:0b:de:e5: 85:a0:ed:55:c8:98:07:67:4f:45:f2:9d:98:58:89:22:4c:d5: 1a:31:3a:84:2e:ec:a2:e3:e8:dd:56:b8:09:fc:29:cb:23:70: 26:c9:ff:c0:c6:21:45:db:b8:11:0f:b0:75:c3:4d:88:04:fd: 24:e0:c3:ca:9f:d3:eb:f3:c8:cd:9d:9f:ee:51:cc:f7:72:fb: 94:38:c0:c3:06:19:7c:40:db:5d:c2:e6:e0:e9:d8:8c:90:6e: 7a:97:95:4d:74:40:6d:43:4a:46:d9:cd:a8:1c:e8:b3:7b:3d: 66:18:41:09:2a:91:56:4f:4c:f8:f3:1b:48:3d:6a:8a:b8:c9: 19:79:08:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH2GZiLqx425ERFuMRzwMfydPeBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjEwMTEyMTQxMDlaFw0yNjEwMTUwNDUwMDlaMDMxMTAvBgNV BAMTKERGREEzRDdDMjk2RjA3MDlDMjY5QkJEODUwODY1MThBODZDNkJEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVehknGFaDJY6f3pKx3u4VT1xY PP3crmf6EQauI4w/32eblv78mDpe4+4XlIhivP7lmv69Ld9MkPYVuSaOaA+0bDG/ +RsahYVj3PGn4xZ9WdR8kEYG7qvh11qZ7Zb4Muxwrj0uQylw3jhMsqdWEP3bRYOf h9PUtJifXqmSLh4ObJmvGa5KNb/OnRuga2kIZa61tgn9UHIzuKrx5kaa9RfL+/PG vb8mCs5jDlMDb2nFEoUNb05AqmQPrYNxci+TYIuDAc6ToE1gpeMZANfuh5gTuG/3 F9ge0hteixDsAvr7A0MzoFTsIvUtGHGqADthPZd/WPDAAytnBo0E8IuMhW3nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU39o9fClvBwnCabvYUIZRiobGvcowHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwMTc2NDE4NjAzMDA4MjEvMC8wOEM3REU4OTRBNEE4 ODYyMkJBNzhCQzlFNDFERkE1Q0M2RTMwMzRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc2UDvngJ4Cu p66OToPYxcPuXmmJLMPHHEjHPMq5tENPJ2DYS95g0MdMvYUWs5Wwi5V7oNvFmD2j PwV7qbP1ZKGoUS5uNvZmf4RBUoJSiOYjkzEnDHzxrf8rTjYuIpIJ8WzGk3isSNE1 2t8xJlIW9QQMGbKh95MKXvMpC97lhaDtVciYB2dPRfKdmFiJIkzVGjE6hC7souPo 3Va4CfwpyyNwJsn/wMYhRdu4EQ+wdcNNiAT9JODDyp/T6/PIzZ2f7lHM93L7lDjA wwYZfEDbXcLm4OnYjJBuepeVTXRAbUNKRtnNqBzos3s9ZhhBCSqRVk9M+PMbSD1q irjJGXkINA== -----END CERTIFICATE-----Generated at Tue Oct 13 01:35:19 2026 by rpki-client