$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json) Hash identifier: JHTHqBDSDn/Vtc/MoaT71ZgKERnfJQxCUSZNLzdCiuo= Subject key identifier: 3F:84:F5:C9:37:14:64:24:18:DA:CA:3F:42:A8:2E:55:0A:FB:3A:D5 Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Certificate serial: 4CD5F6A3760A399E487B0D43485A8C153175C5B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft Manifest number: 51 Signing time: Mon 19 Oct 2026 02:50:29 +0000 Manifest this update: Mon 19 Oct 2026 02:45:28 +0000 Manifest next update: Thu 22 Oct 2026 12:23:28 +0000 Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: yLia/vpa1z09ITICS5wmIKd7DiVhvR/nXCnruJ8TFn0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 12:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d5:f6:a3:76:0a:39:9e:48:7b:0d:43:48:5a:8c:15:31:75:c5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C Validity Not Before: Oct 19 02:45:28 2026 GMT Not After : Oct 22 12:23:28 2026 GMT Subject: CN=3F84F5C93714642418DACA3F42A82E550AFB3AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:d0:71:d0:c1:63:e8:c7:3d:a4:e4:e5:80: 5e:84:52:38:9e:34:e6:e9:b3:db:d5:43:c6:4a:eb: d3:12:51:a4:c5:3c:f1:d8:b5:1a:d8:17:ff:9a:57: 7c:93:d8:ba:93:5e:58:9f:b4:5a:dd:4a:0c:f6:ef: a7:73:34:64:d3:39:02:be:9b:99:d0:e4:f3:70:17: 16:f4:4e:e1:16:46:fe:0a:8b:5c:da:6c:78:48:b6: 02:49:be:89:ad:c9:6f:25:c1:22:7d:d8:2b:84:b6: 94:1c:1c:10:ab:ad:62:50:c5:28:a1:40:c1:20:d7: 41:15:49:71:3c:23:07:fd:43:ff:ac:af:f0:ae:af: ee:d8:f8:8d:59:f0:58:4e:6a:76:46:cf:2b:74:19: 91:78:4c:68:51:01:55:09:67:af:a9:c3:a5:9a:25: b3:d0:5b:4e:4e:f7:6f:18:74:6b:ec:9f:e9:c5:a7: 84:fd:2d:71:08:dc:70:ab:27:e4:a4:9e:1c:66:cb: 5c:c6:c6:55:fa:ff:28:ad:24:6e:3f:75:3c:c0:a4: c3:d4:90:d6:f8:27:8e:12:4b:28:b0:ff:94:49:88: e7:c0:3c:81:05:d0:ac:40:da:6c:52:f5:2a:bf:3c: 84:60:25:0b:a1:50:c6:6d:e7:9c:30:51:f9:df:34: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:84:F5:C9:37:14:64:24:18:DA:CA:3F:42:A8:2E:55:0A:FB:3A:D5 X509v3 Authority Key Identifier: keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7e:3d:a5:37:c2:dd:7b:85:b6:00:f0:a9:d0:42:ce:f8:22: fc:75:c7:0a:03:8f:5e:41:e7:3d:5c:80:5c:2d:dd:e2:96:d9: 18:ef:b4:1d:0a:7a:cf:6b:12:19:d8:be:20:c4:98:ca:ff:31: 2d:d2:8d:7d:49:92:cc:38:85:46:f5:02:aa:04:d2:77:9c:53: 3a:9c:0b:33:eb:18:8e:f0:34:8a:6b:c2:0c:2c:c1:63:d9:18: 5d:9b:34:94:94:aa:7e:32:c2:7a:c7:88:a9:dd:a7:4b:21:3b: 24:ce:6c:21:53:d9:93:be:0e:b1:32:48:c0:a6:28:37:61:87: ec:7c:dc:1e:04:59:b6:c5:d6:91:6b:13:d5:2f:56:0f:6f:fd: c5:be:a6:42:7f:20:b7:27:0e:10:8f:7e:79:06:17:49:bf:be: 13:81:bf:bf:d1:78:75:3f:9e:b7:ef:04:ab:4a:8e:a8:31:a7: 34:0a:fd:0f:aa:45:27:7e:2c:6e:70:8c:62:71:ac:22:2f:14: 54:35:fa:5f:e6:52:e5:2b:a8:c3:b0:b7:b4:2b:4f:e1:c6:b7: d9:15:08:b9:be:09:bf:96:cb:6f:7a:76:86:6a:2c:8a:1c:7c: 4c:0a:b3:7d:e4:f0:fb:26:58:b8:a4:b5:c8:2d:51:4e:39:72: 20:2d:0d:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTNX2o3YKOZ5Iew1DSFqMFTF1xbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD RDc2RUU4QzAeFw0yNjEwMTkwMjQ1MjhaFw0yNjEwMjIxMjIzMjhaMDMxMTAvBgNV BAMTKDNGODRGNUM5MzcxNDY0MjQxOERBQ0EzRjQyQTgyRTU1MEFGQjNBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRdBx0MFj6Mc9pOTlgF6EUjie NObps9vVQ8ZK69MSUaTFPPHYtRrYF/+aV3yT2LqTXliftFrdSgz276dzNGTTOQK+ m5nQ5PNwFxb0TuEWRv4Ki1zabHhItgJJvomtyW8lwSJ92CuEtpQcHBCrrWJQxSih QMEg10EVSXE8Iwf9Q/+sr/Cur+7Y+I1Z8FhOanZGzyt0GZF4TGhRAVUJZ6+pw6Wa JbPQW05O928YdGvsn+nFp4T9LXEI3HCrJ+Sknhxmy1zGxlX6/yitJG4/dTzApMPU kNb4J44SSyiw/5RJiOfAPIEF0KxA2mxS9Sq/PIRgJQuhUMZt55wwUfnfNEjlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP4T1yTcUZCQY2so/QqguVQr7OtUwHwYDVR0j BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4 MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn49pTfC3XuF tgDwqdBCzvgi/HXHCgOPXkHnPVyAXC3d4pbZGO+0HQp6z2sSGdi+IMSYyv8xLdKN fUmSzDiFRvUCqgTSd5xTOpwLM+sYjvA0imvCDCzBY9kYXZs0lJSqfjLCeseIqd2n SyE7JM5sIVPZk74OsTJIwKYoN2GH7HzcHgRZtsXWkWsT1S9WD2/9xb6mQn8gtycO EI9+eQYXSb++E4G/v9F4dT+et+8Eq0qOqDGnNAr9D6pFJ34sbnCMYnGsIi8UVDX6 X+ZS5Suow7C3tCtP4ca32RUIub4Jv5bLb3p2hmosihx8TAqzfeTw+yZYuKS1yC1R TjlyIC0NdQ== -----END CERTIFICATE-----Generated at Tue Oct 20 08:22:06 2026 by rpki-client