$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: n4Htz0xwtQYuq25jpEdI06cH0KBSCeh1rPzh9Z7nUnc= Subject key identifier: 37:45:B8:5D:D0:F8:7A:CC:50:74:CB:5A:79:86:06:3C:E7:06:58:B8 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 76A0005102E69518306AB2A2528270E71D2E30A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 01E9 Signing time: Tue 22 Sep 2026 08:09:21 +0000 Manifest this update: Tue 22 Sep 2026 08:04:21 +0000 Manifest next update: Fri 25 Sep 2026 09:03:21 +0000 Files and hashes: 1: AS45090.roa (hash: Av2ZX7t33Xg0taWsYCm0lcTG3scBZ1h+SzWX8W5uoPk=) 2: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: M/E8gR253T1E4WA5m3kHoLBbWUUYf/+PA+SiY6/B058=) 3: AS132203.roa (hash: MGh7geS9q7/6iNL2Np6bgBq+89E2Xke7QjRB3yPNdgk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a0:00:51:02:e6:95:18:30:6a:b2:a2:52:82:70:e7:1d:2e:30:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Sep 22 08:04:21 2026 GMT Not After : Sep 25 09:03:21 2026 GMT Subject: CN=3745B85DD0F87ACC5074CB5A7986063CE70658B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:8f:32:57:07:75:fd:e7:1d:7b:89:cc:27: d9:37:42:65:0b:56:1e:8b:3d:60:a5:99:b4:48:6b: ef:16:69:29:cd:a1:ad:d5:1e:31:99:ae:d3:55:76: 27:16:a3:42:50:b5:5e:f4:7d:30:02:2d:c9:8e:79: ac:be:fb:28:af:8a:88:7c:a1:83:00:a2:94:50:89: 8b:bf:01:55:3a:fb:8b:23:4d:5d:59:d4:79:ba:c4: 43:42:65:8f:81:bb:5c:1a:59:2d:4c:24:48:02:b6: fe:e7:33:bf:b1:ef:b9:31:33:e3:2c:cb:db:3e:d1: 1e:10:46:78:c1:be:87:65:39:fa:92:dd:d6:d8:ad: d1:ac:cc:aa:3f:68:c0:24:10:e4:ff:05:04:aa:33: 5f:91:db:c7:8e:fe:40:35:a1:87:c4:de:96:82:a8: b7:2e:07:29:35:d7:94:a0:f7:a5:84:76:ca:e7:e7: 30:33:74:8a:c3:b1:fd:fe:74:4e:24:ac:4d:de:3e: 0c:e6:01:27:b7:0c:b3:2f:88:ee:57:a9:76:ea:10: 04:27:25:7e:44:3b:31:07:fe:8a:0e:96:44:4c:16: e5:8b:72:c9:0b:70:39:1c:03:cd:5b:97:7a:b1:f3: 81:ca:e9:af:ea:c4:bb:5c:a5:70:98:30:49:77:3f: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:45:B8:5D:D0:F8:7A:CC:50:74:CB:5A:79:86:06:3C:E7:06:58:B8 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:dd:15:c3:44:e8:c2:41:b6:fe:18:5b:94:8d:e5:9b:9e:f9: 84:3d:ca:ba:7f:c0:9b:cb:1f:11:5c:9c:6a:3b:df:46:c2:a8: ab:b6:16:8f:cd:68:06:37:04:ff:48:4a:13:7e:bb:f2:85:da: ae:fb:87:0e:8e:bd:dd:81:c6:61:6c:9b:92:b3:11:70:46:90: e5:9a:59:31:5e:af:05:c5:9c:8d:36:6e:a7:14:62:7c:77:9f: ef:e7:37:be:65:eb:c7:a2:9e:10:6f:22:37:ff:e8:c0:40:72: 97:d5:16:29:43:86:d0:b0:f6:b1:03:b7:e8:00:3a:bd:09:0e: 01:bc:61:2e:d8:88:6b:54:aa:3e:53:47:e1:f5:e1:63:d7:5e: 4d:98:6a:e5:e6:f7:31:a4:d6:b4:bf:1d:22:32:cb:dd:86:f7: a5:cd:fd:95:f1:85:8d:2c:a6:ca:91:f5:d6:bb:1e:1c:b8:2f: c3:dd:dc:2d:01:a1:f1:1e:fe:e6:1a:30:91:d9:a4:00:95:07: 28:4e:8b:86:da:00:16:6e:5f:94:72:9d:e8:61:b2:20:dd:0c: 19:63:be:5d:cd:67:64:83:9f:6a:62:5d:92:89:c3:a8:d0:72: 0e:14:13:1b:3c:a8:2c:15:86:a0:7d:07:9e:9d:d2:9c:db:d0: 1a:4a:95:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdqAAUQLmlRgwarKiUoJw5x0uMKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjA5MjIwODA0MjFaFw0yNjA5MjUwOTAzMjFaMDMxMTAvBgNV BAMTKDM3NDVCODVERDBGODdBQ0M1MDc0Q0I1QTc5ODYwNjNDRTcwNjU4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSno8yVwd1/ecde4nMJ9k3QmUL Vh6LPWClmbRIa+8WaSnNoa3VHjGZrtNVdicWo0JQtV70fTACLcmOeay++yivioh8 oYMAopRQiYu/AVU6+4sjTV1Z1Hm6xENCZY+Bu1waWS1MJEgCtv7nM7+x77kxM+Ms y9s+0R4QRnjBvodlOfqS3dbYrdGszKo/aMAkEOT/BQSqM1+R28eO/kA1oYfE3paC qLcuByk115Sg96WEdsrn5zAzdIrDsf3+dE4krE3ePgzmASe3DLMviO5XqXbqEAQn JX5EOzEH/ooOlkRMFuWLcskLcDkcA81bl3qx84HK6a/qxLtcpXCYMEl3P2ClAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN0W4XdD4esxQdMtaeYYGPOcGWLgwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt0Vw0TowkG2 /hhblI3lm575hD3Kun/Am8sfEVycajvfRsKoq7YWj81oBjcE/0hKE3678oXarvuH Do693YHGYWybkrMRcEaQ5ZpZMV6vBcWcjTZupxRifHef7+c3vmXrx6KeEG8iN//o wEByl9UWKUOG0LD2sQO36AA6vQkOAbxhLtiIa1SqPlNH4fXhY9deTZhq5eb3MaTW tL8dIjLL3Yb3pc39lfGFjSymypH11rseHLgvw93cLQGh8R7+5howkdmkAJUHKE6L htoAFm5flHKd6GGyIN0MGWO+Xc1nZIOfamJdkonDqNByDhQTGzyoLBWGoH0Hnp3S nNvQGkqVMQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:07:31 2026 by rpki-client