$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft File: 8C1BF16D482831971E03C6723A58EC7298BAC527.mft (raw, json) Hash identifier: uVynMNlTiAOQ07vZw2ZNdYWnfDNDkxfxi7Rt6A1cprI= Subject key identifier: C9:EA:D3:30:8F:B3:89:2C:13:DC:00:CC:52:6C:EF:16:50:0F:10:EB Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 Certificate issuer: /CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Certificate serial: 634407D0522FDB60DBB1AD217CC64521FBABBD8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft Manifest number: 92 Signing time: Sat 17 Oct 2026 12:58:55 +0000 Manifest this update: Sat 17 Oct 2026 12:53:55 +0000 Manifest next update: Tue 20 Oct 2026 17:21:55 +0000 Files and hashes: 1: 3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (hash: iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=) 2: 8C1BF16D482831971E03C6723A58EC7298BAC527.crl (hash: pSevB5q7mWETLjmzEr+FDNKur9TrU8UdSDrpBhRVj00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:44:07:d0:52:2f:db:60:db:b1:ad:21:7c:c6:45:21:fb:ab:bd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527 Validity Not Before: Oct 17 12:53:55 2026 GMT Not After : Oct 20 17:21:55 2026 GMT Subject: CN=C9EAD3308FB3892C13DC00CC526CEF16500F10EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:7f:ef:b8:7b:40:e0:9a:e4:44:99:2a:b3: dd:98:d8:7f:a9:c4:68:a3:8c:c7:39:7e:8e:99:ac: 45:b8:2c:65:74:3e:ba:ec:9c:aa:7e:06:c4:63:95: 42:ac:c6:1b:3a:ef:76:f3:76:6e:a1:26:b3:6a:3e: a9:2a:83:e3:98:fb:ec:ce:d4:4e:e7:30:9e:d0:44: b0:0a:59:ec:40:0f:e8:45:2a:47:f9:bc:0a:95:05: 5c:17:ed:19:9c:1c:32:3d:48:a6:c4:2f:8e:f0:82: 13:ac:67:b7:4e:f1:d6:9a:17:16:4d:5f:d4:9f:78: db:fc:77:50:b4:a9:3b:e5:0c:c4:71:59:45:b7:d3: e8:9c:bb:e2:d3:bc:b9:b6:6d:84:89:46:d2:55:0d: 01:be:b7:be:4c:26:22:1e:e4:d1:31:8d:05:76:da: 5b:d3:81:cd:ef:ab:79:30:31:df:b2:dc:5e:03:d0: 98:7b:72:b1:44:bc:04:2b:18:0a:3f:3c:3b:da:7c: 4c:4e:3f:69:3f:13:af:24:a6:47:6d:0a:94:9b:b6: 40:61:94:2f:af:2c:52:67:46:de:b5:1f:bd:e5:83: 8a:1a:74:6a:48:2f:6d:89:aa:70:e0:2b:17:ee:b0: 41:d5:79:46:36:3f:98:29:86:22:c9:8d:1a:2a:fa: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:D3:30:8F:B3:89:2C:13:DC:00:CC:52:6C:EF:16:50:0F:10:EB X509v3 Authority Key Identifier: keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:70:83:88:f2:e9:41:bd:12:43:01:21:46:11:22:e5:96:bb: 6e:bf:23:89:49:a4:02:5c:c1:4d:b8:6a:20:92:f6:c6:21:e6: 45:33:67:ba:51:b3:52:6d:b2:d9:21:75:c4:26:56:68:99:f1: ee:a1:70:b4:85:0e:f2:6b:35:32:55:de:b4:02:5e:df:99:b2: a6:29:ee:4e:4e:4f:bf:82:fb:ef:2a:be:bf:4c:81:9e:e2:90: 77:ac:fe:6f:d2:96:71:8b:20:d6:6d:41:58:53:43:29:56:bc: 22:b8:4d:69:6c:ac:92:72:a4:e1:e3:0b:22:62:db:1f:e8:df: 45:6a:e9:8c:a1:de:dd:5b:a3:78:4c:78:72:bf:22:5a:a5:51: 24:45:1e:4b:b5:b8:99:a8:c9:b4:2d:46:d1:2e:a7:68:bc:f0: 5a:0d:b4:19:f0:36:0d:ab:85:d2:d3:55:af:14:03:4e:61:b1: 4f:bc:9a:72:6a:f5:09:dc:b8:db:4c:53:f3:86:87:70:ac:0e: a9:41:8d:a6:bd:8e:08:4d:fe:85:51:cb:cd:5c:6c:5e:7f:3a: a4:25:8f:d3:88:14:7f:5c:b0:e0:13:a3:cc:50:f9:2b:bb:c5: a6:d9:33:53:24:d3:64:1b:c6:91:a0:b4:34:aa:0d:93:71:57: d1:b6:b3:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY0QH0FIv22Dbsa0hfMZFIfurvYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5 OEJBQzUyNzAeFw0yNjEwMTcxMjUzNTVaFw0yNjEwMjAxNzIxNTVaMDMxMTAvBgNV BAMTKEM5RUFEMzMwOEZCMzg5MkMxM0RDMDBDQzUyNkNFRjE2NTAwRjEwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnn/vuHtA4JrkRJkqs92Y2H+p xGijjMc5fo6ZrEW4LGV0PrrsnKp+BsRjlUKsxhs673bzdm6hJrNqPqkqg+OY++zO 1E7nMJ7QRLAKWexAD+hFKkf5vAqVBVwX7RmcHDI9SKbEL47wghOsZ7dO8daaFxZN X9SfeNv8d1C0qTvlDMRxWUW30+icu+LTvLm2bYSJRtJVDQG+t75MJiIe5NExjQV2 2lvTgc3vq3kwMd+y3F4D0Jh7crFEvAQrGAo/PDvafExOP2k/E68kpkdtCpSbtkBh lC+vLFJnRt61H73lg4oadGpIL22JqnDgKxfusEHVeUY2P5gphiLJjRoq+va1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyerTMI+ziSwT3ADMUmzvFlAPEOswHwYDVR0j BBgwFoAUjBvxbUgoMZceA8ZyOljscpi6xScwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNzM1NjczNzk5NDc3MS8wLzhDMUJGMTZENDgyODMxOTcxRTAzQzY3MjNBNThF QzcyOThCQUM1MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEMxQkYxNkQ0ODI4MzE5NzFFMDNDNjcyM0E1OEVDNzI5OEJBQzUyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjczNTY3Mzc5OTQ3NzEvMC84QzFCRjE2RDQ4Mjgz MTk3MUUwM0M2NzIzQTU4RUM3Mjk4QkFDNTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHCDiPLpQb0S QwEhRhEi5Za7br8jiUmkAlzBTbhqIJL2xiHmRTNnulGzUm2y2SF1xCZWaJnx7qFw tIUO8ms1MlXetAJe35mypinuTk5Pv4L77yq+v0yBnuKQd6z+b9KWcYsg1m1BWFND KVa8IrhNaWysknKk4eMLImLbH+jfRWrpjKHe3VujeEx4cr8iWqVRJEUeS7W4majJ tC1G0S6naLzwWg20GfA2DauF0tNVrxQDTmGxT7yacmr1Cdy420xT84aHcKwOqUGN pr2OCE3+hVHLzVxsXn86pCWP04gUf1yw4BOjzFD5K7vFptkzUyTTZBvGkaC0NKoN k3FX0bazog== -----END CERTIFICATE-----Generated at Sat Oct 17 20:25:17 2026 by rpki-client