$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: QAOUimC5wPVqwrKSz9yjTFkVksCDvg3rA4TFt1inl8U= Subject key identifier: 67:FF:8A:A2:22:A5:0C:B9:61:DF:80:5C:60:DC:E3:87:3F:7E:60:2F Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 4D619040DC4CF7BA9E31F6523411178C443649C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 93 Signing time: Mon 12 Oct 2026 05:46:39 +0000 Manifest this update: Mon 12 Oct 2026 05:41:39 +0000 Manifest next update: Thu 15 Oct 2026 07:15:39 +0000 Files and hashes: 1: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) 2: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: K3jpNHs0yB9xcAjsFj9N7pJXA9Tx9W6SsDYC5MM99T0=) 3: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 4: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 5: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:90:40:dc:4c:f7:ba:9e:31:f6:52:34:11:17:8c:44:36:49:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Oct 12 05:41:39 2026 GMT Not After : Oct 15 07:15:39 2026 GMT Subject: CN=67FF8AA222A50CB961DF805C60DCE3873F7E602F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:55:88:e8:ec:54:62:eb:4e:94:b0:8e:8d: 55:75:be:00:98:b1:ea:3f:c6:f6:45:5a:f0:e4:c2: 83:e4:8a:2a:ee:29:ff:a7:54:5f:7f:5f:53:36:21: 65:39:e8:bd:99:1e:4f:cc:9a:91:fb:04:9b:a7:bd: 63:36:76:bb:0d:93:14:87:66:72:bb:1f:2b:e1:7c: a0:07:9d:1a:ba:69:02:b3:6e:13:28:04:2f:79:a6: 3c:d0:5e:fe:5f:58:e9:35:2b:29:8c:dd:d4:6d:d6: 88:fa:c4:ff:7f:7b:89:d2:02:8f:a3:61:43:20:b4: 1f:ae:17:cc:a7:37:9c:4d:37:53:f3:58:a0:b1:0e: 6c:cb:ef:3f:94:36:bb:58:60:43:2d:cf:92:47:74: 16:a6:63:c5:18:8b:f9:13:28:aa:36:1d:86:58:64: 9e:00:da:10:4d:7d:39:fc:e9:2c:64:f9:44:25:4b: d9:0f:d6:48:50:02:88:f5:d2:99:e1:9e:f8:75:b4: 21:77:71:de:71:99:09:3c:84:a8:17:ab:7b:4b:ea: 91:06:2d:b3:b9:51:ed:29:ca:24:bc:c9:9a:bc:a5: 56:d1:ec:9e:4c:57:a1:ac:99:14:77:27:ef:90:a0: 89:6b:f3:6d:bc:9f:8c:6c:60:29:4f:73:3f:48:28: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:8A:A2:22:A5:0C:B9:61:DF:80:5C:60:DC:E3:87:3F:7E:60:2F X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e0:a9:e5:6a:95:bf:df:a3:a7:c0:d5:67:7b:85:5f:d0:f1: d3:64:49:3d:b9:84:52:62:f5:30:bc:6a:e0:f0:f2:6d:86:61: d3:98:82:94:a5:f3:32:86:dd:0b:f6:98:0c:b8:47:ea:c4:7f: 80:d6:a8:aa:1c:42:52:99:d3:74:93:4e:6f:c5:3e:0b:8a:28: 49:7b:c9:06:ff:82:54:7a:f0:83:01:5d:63:9e:c6:f9:2f:39: f1:92:f5:c3:7c:d0:38:f7:11:32:91:87:57:26:71:62:64:ff: 7e:31:f2:b3:9e:ac:aa:1e:bb:83:5a:45:ac:e9:42:d6:5d:bf: e9:70:37:35:d3:cf:7f:b1:7d:08:42:64:0d:99:6d:45:b5:b3: 52:39:ba:1b:ff:38:52:7f:90:e1:9b:23:56:06:4c:b8:94:c7: d7:95:51:80:71:b6:18:4f:b7:aa:e7:d5:75:67:94:95:41:9a: 74:85:de:f0:42:a4:78:cf:63:04:7a:28:fa:fb:77:24:1f:12: f6:30:ce:dc:f2:bf:92:ce:03:32:99:49:d9:86:1d:68:27:63: 85:a3:76:ed:9f:ec:97:f3:96:d7:4c:8f:ce:fe:76:c7:44:33: f9:67:ab:6d:a0:4d:9b:b9:0c:5b:5f:6d:0e:3e:b6:09:45:ce: 06:07:5a:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTWGQQNxM97qeMfZSNBEXjEQ2ScYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjEwMTIwNTQxMzlaFw0yNjEwMTUwNzE1MzlaMDMxMTAvBgNV BAMTKDY3RkY4QUEyMjJBNTBDQjk2MURGODA1QzYwRENFMzg3M0Y3RTYwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIX1WI6OxUYutOlLCOjVV1vgCY seo/xvZFWvDkwoPkiiruKf+nVF9/X1M2IWU56L2ZHk/MmpH7BJunvWM2drsNkxSH ZnK7HyvhfKAHnRq6aQKzbhMoBC95pjzQXv5fWOk1KymM3dRt1oj6xP9/e4nSAo+j YUMgtB+uF8ynN5xNN1PzWKCxDmzL7z+UNrtYYEMtz5JHdBamY8UYi/kTKKo2HYZY ZJ4A2hBNfTn86Sxk+UQlS9kP1khQAoj10pnhnvh1tCF3cd5xmQk8hKgXq3tL6pEG LbO5Ue0pyiS8yZq8pVbR7J5MV6GsmRR3J++QoIlr8228n4xsYClPcz9IKKpfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ/+KoiKlDLlh34BcYNzjhz9+YC8wHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOCp5WqVv9+j p8DVZ3uFX9Dx02RJPbmEUmL1MLxq4PDybYZh05iClKXzMobdC/aYDLhH6sR/gNao qhxCUpnTdJNOb8U+C4ooSXvJBv+CVHrwgwFdY57G+S858ZL1w3zQOPcRMpGHVyZx YmT/fjHys56sqh67g1pFrOlC1l2/6XA3NdPPf7F9CEJkDZltRbWzUjm6G/84Un+Q 4ZsjVgZMuJTH15VRgHG2GE+3qufVdWeUlUGadIXe8EKkeM9jBHoo+vt3JB8S9jDO 3PK/ks4DMplJ2YYdaCdjhaN27Z/sl/OW10yPzv52x0Qz+WerbaBNm7kMW19tDj62 CUXOBgdaUA== -----END CERTIFICATE-----Generated at Mon Oct 12 23:33:50 2026 by rpki-client