$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft File: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft (raw, json) Hash identifier: wZc/cWEV4sKZeWw3iCKLOnlQ+GMEPlGfeWn1sNWXoS0= Subject key identifier: F6:19:9A:1E:BC:9F:46:52:FD:26:D7:8E:43:23:EF:38:A6:41:AD:BA Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 Certificate issuer: /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Certificate serial: 698B880641D498D57C3F73CB7DFF0E3C7E1F25DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft Manifest number: 41 Signing time: Sat 17 Oct 2026 10:43:48 +0000 Manifest this update: Sat 17 Oct 2026 10:38:48 +0000 Manifest next update: Tue 20 Oct 2026 14:28:48 +0000 Files and hashes: 1: 3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (hash: CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=) 2: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl (hash: 39jf0ncTifEK39ntta+Laq1I/3LLKn/P+uW7Q/rw3Hs=) 3: 3130312e34392e3230372e302f32342d3234203d3e203539303638.roa (hash: mJK27tVfbdIF1xBAouziK7x1YNs7RUiymoSR83PrbWw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 14:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8b:88:06:41:d4:98:d5:7c:3f:73:cb:7d:ff:0e:3c:7e:1f:25:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559 Validity Not Before: Oct 17 10:38:48 2026 GMT Not After : Oct 20 14:28:48 2026 GMT Subject: CN=F6199A1EBC9F4652FD26D78E4323EF38A641ADBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:57:38:f8:52:98:18:bc:a8:2e:e4:77:b5: 70:44:03:98:0b:62:a5:6b:02:b7:9a:36:23:31:84: c7:9e:f9:6f:c7:4c:9c:73:f2:b2:6e:f2:1e:46:01: 68:0a:aa:a8:83:2b:57:a3:c6:c7:22:f4:92:64:1c: e4:ba:e2:40:de:03:44:fe:96:a4:bc:a7:96:44:79: 24:c0:7c:4d:d9:26:5e:81:ca:f3:8b:3b:a4:b3:98: 14:99:bc:a5:dc:cd:1c:57:29:bf:8d:fa:ec:8b:b4: cc:fd:b1:05:25:99:e3:2d:8e:82:44:da:e0:0f:68: b1:40:c1:73:a1:40:07:b6:35:af:67:f9:d9:84:37: 7d:eb:88:1a:fa:a9:9e:43:75:18:00:fd:ed:66:4a: 38:02:2e:00:91:d1:5a:6d:42:2c:71:c4:bd:e7:fe: d1:58:58:5f:bd:7b:07:25:8a:3b:3d:e2:80:2f:c5: 33:46:38:fa:bf:78:b5:64:7d:2f:bc:a8:06:0c:64: 0c:f1:46:f5:5a:b1:77:08:76:ff:b2:90:28:26:d2: 8b:25:31:b9:71:d9:a5:4c:88:fc:99:66:59:53:e9: 5c:41:50:3e:29:a6:fd:e3:12:ef:87:87:aa:da:01: 0f:9b:e8:ea:94:cc:ab:84:7b:0b:59:ba:0f:9d:47: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:9A:1E:BC:9F:46:52:FD:26:D7:8E:43:23:EF:38:A6:41:AD:BA X509v3 Authority Key Identifier: keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5d:9e:94:f9:2c:36:76:0d:bf:19:2b:20:2e:cb:a9:50:2d: b6:87:7a:cf:39:4a:49:91:69:5f:2f:38:a2:28:0a:bf:b7:3f: 77:5a:ff:2c:86:53:b6:b0:6c:db:fb:50:91:1f:53:09:f4:6f: 42:0e:90:ab:ce:a5:d5:b3:b7:de:9a:ad:f9:c6:5f:69:a9:d6: 08:97:9d:cd:a2:64:24:ad:40:76:5b:9c:29:d3:0c:28:9a:0c: 59:3f:5f:9a:a4:d6:e1:63:a3:23:ee:10:52:4c:07:69:5e:d5: c4:2a:c0:04:6e:52:3d:64:ae:6b:ec:b9:e5:5a:8b:2f:b5:8f: c8:48:05:48:23:71:17:b6:ff:9e:3e:36:c3:d8:7c:a4:c5:f8: b7:6f:eb:e3:86:96:17:e8:6a:5b:2c:e8:77:91:c4:4a:21:5a: 34:bb:f6:f7:fc:ee:b6:ef:93:9f:1c:d9:75:f7:c9:b6:c8:f8: db:d5:bc:cb:cb:56:26:8b:01:1f:76:ca:6f:5c:24:88:a5:83: 8c:34:53:70:d0:3a:a2:91:15:7b:7b:7f:ea:e7:87:a3:92:b5: bd:0d:68:5d:b6:cd:43:90:08:81:d0:b3:fd:a5:56:d1:02:89: be:22:d0:13:e5:ed:ab:ef:02:5e:7c:2e:06:08:39:d3:08:24: 32:08:34:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaYuIBkHUmNV8P3PLff8OPH4fJd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5 MzE5RTU1OTAeFw0yNjEwMTcxMDM4NDhaFw0yNjEwMjAxNDI4NDhaMDMxMTAvBgNV BAMTKEY2MTk5QTFFQkM5RjQ2NTJGRDI2RDc4RTQzMjNFRjM4QTY0MUFEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMVc4+FKYGLyoLuR3tXBEA5gL YqVrAreaNiMxhMee+W/HTJxz8rJu8h5GAWgKqqiDK1ejxsci9JJkHOS64kDeA0T+ lqS8p5ZEeSTAfE3ZJl6ByvOLO6SzmBSZvKXczRxXKb+N+uyLtMz9sQUlmeMtjoJE 2uAPaLFAwXOhQAe2Na9n+dmEN33riBr6qZ5DdRgA/e1mSjgCLgCR0VptQixxxL3n /tFYWF+9ewclijs94oAvxTNGOPq/eLVkfS+8qAYMZAzxRvVasXcIdv+ykCgm0osl Mblx2aVMiPyZZllT6VxBUD4ppv3jEu+Hh6raAQ+b6OqUzKuEewtZug+dRwZjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9hmaHryfRlL9JteOQyPvOKZBrbowHwYDVR0j BBgwFoAUuK+2lsFavE/++z6x6hDv1JMZ5VkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NDY5MjY2MjUwNzQ3MDg5My8wL0I4QUZCNjk2QzE1QUJDNEZGRUZCM0VCMUVBMTBF RkQ0OTMxOUU1NTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhBRkI2OTZDMTVBQkM0RkZFRkIzRUIxRUExMEVGRDQ5MzE5RTU1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzQ2OTI2NjI1MDc0NzA4OTMvMC9COEFGQjY5NkMxNUFC QzRGRkVGQjNFQjFFQTEwRUZENDkzMTlFNTU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqV2elPksNnYN vxkrIC7LqVAttod6zzlKSZFpXy84oigKv7c/d1r/LIZTtrBs2/tQkR9TCfRvQg6Q q86l1bO33pqt+cZfaanWCJedzaJkJK1AdlucKdMMKJoMWT9fmqTW4WOjI+4QUkwH aV7VxCrABG5SPWSua+y55VqLL7WPyEgFSCNxF7b/nj42w9h8pMX4t2/r44aWF+hq Wyzod5HESiFaNLv29/zutu+TnxzZdffJtsj429W8y8tWJosBH3bKb1wkiKWDjDRT cNA6opEVe3t/6ueHo5K1vQ1oXbbNQ5AIgdCz/aVW0QKJviLQE+Xtq+8CXnwuBgg5 0wgkMgg0zg== -----END CERTIFICATE-----Generated at Mon Oct 19 06:42:16 2026 by rpki-client