$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: +S9bmvdHHTkUGkQngRriypA023t67bJMgOCtFlUnAUo= Subject key identifier: A2:27:A6:23:52:92:4A:AA:A4:94:13:4D:EB:FD:D2:25:61:68:69:CF Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 55C7BFD77C80311502F3031809C6BB3CA4F1D196 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: A0 Signing time: Wed 13 May 2026 11:21:04 +0000 Manifest this update: Wed 13 May 2026 11:16:04 +0000 Manifest next update: Thu 14 May 2026 12:37:04 +0000 Files and hashes: 1: AS55990.roa (hash: SklMsXXNZDtis2r9WwGu7VgGJRfedXDd9I0WEIGFd1c=) 2: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: bCOUYId7XwapzrjfUQpGum5FjCZViN3D/f3MdWtgN6c=) 3: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c7:bf:d7:7c:80:31:15:02:f3:03:18:09:c6:bb:3c:a4:f1:d1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: May 13 11:16:04 2026 GMT Not After : May 14 12:37:04 2026 GMT Subject: CN=A227A62352924AAAA494134DEBFDD225616869CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:90:dc:c8:ad:38:a2:e5:ae:70:00:46:47: 15:66:96:be:be:ee:9a:56:56:56:cd:34:6a:a6:d6: cc:2d:92:ea:9f:bf:7e:b0:d2:0b:ca:5f:18:c7:51: 0d:3f:da:67:02:4e:b3:4d:9c:c3:f5:a4:35:79:2c: 31:a9:30:8e:b7:b3:db:b2:70:12:fd:7d:56:4e:5c: 34:ca:e2:0b:62:90:09:36:c7:b5:af:a7:b6:78:53: c0:41:4f:22:aa:10:80:5d:29:b0:4f:7c:41:ec:a5: 57:33:bf:48:94:15:1a:5a:27:79:83:c7:77:0e:5d: a1:53:6e:1d:da:ba:be:2f:b2:02:80:94:08:40:b9: 46:35:75:a8:8c:dc:2c:1d:58:86:f6:0a:e0:a9:8f: b0:87:08:fc:b5:07:7b:33:43:07:11:75:3a:4a:4d: 02:7d:e2:d6:74:02:41:b9:82:b5:76:d8:b7:6e:56: ef:10:23:a1:ce:27:21:ab:b2:a7:04:34:2c:cb:1d: 42:43:8a:99:9d:cc:2b:26:81:fa:3b:0d:7d:57:85: 58:d3:d0:33:83:f9:59:d2:f0:0c:22:d0:6d:c6:c9: 10:7d:74:8d:0f:00:63:5a:be:0a:79:d9:61:0e:c1: 22:63:30:38:b0:31:52:0a:03:dc:b2:9f:3f:ff:24: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:A6:23:52:92:4A:AA:A4:94:13:4D:EB:FD:D2:25:61:68:69:CF X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:f2:43:f4:ef:e9:72:7c:51:94:fc:01:00:0a:59:b4:4c: 31:d3:2a:35:88:fb:65:73:05:55:f0:f4:cd:b5:0f:45:85:58: 60:2c:9c:73:38:22:7b:0f:f7:b9:b2:9c:66:be:29:73:fe:9a: 4b:03:5f:82:d5:a3:ac:f0:6b:ea:fd:21:55:a8:ee:ec:35:0f: 84:3f:fb:c9:5d:4f:27:76:6e:ff:0e:ad:fd:28:94:07:bf:8d: 63:a1:a4:91:46:8d:22:0e:ef:ab:6d:f9:76:e8:09:f3:10:31: eb:cf:3e:0d:2f:1c:08:58:99:de:ad:b5:b3:3d:8d:26:9a:02: 9b:80:46:47:3e:6a:80:57:f9:73:ac:7a:d4:b9:d0:74:71:94: b4:80:3a:43:2e:d9:3c:8b:da:c2:d8:b4:d7:e7:01:c4:76:d6: 24:bb:a7:de:94:16:78:97:2a:6c:f8:84:dc:a2:66:08:85:59: 06:83:76:21:c9:bc:5f:61:10:6c:d5:2e:14:63:f9:a3:b5:f9: 67:83:5f:e8:7d:c0:ec:b6:79:cc:dc:c0:c5:d6:4f:72:fe:7b: 66:41:dd:ae:f9:43:b1:31:c8:e7:c9:32:3f:01:b7:b3:56:0c: fe:ec:cc:53:49:3c:99:d8:3e:aa:34:6b:cd:c7:74:10:32:18: aa:ff:e4:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVce/13yAMRUC8wMYCca7PKTx0ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA1MTMxMTE2MDRaFw0yNjA1MTQxMjM3MDRaMDMxMTAvBgNV BAMTKEEyMjdBNjIzNTI5MjRBQUFBNDk0MTM0REVCRkREMjI1NjE2ODY5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NpDcyK04ouWucABGRxVmlr6+ 7ppWVlbNNGqm1swtkuqfv36w0gvKXxjHUQ0/2mcCTrNNnMP1pDV5LDGpMI63s9uy cBL9fVZOXDTK4gtikAk2x7Wvp7Z4U8BBTyKqEIBdKbBPfEHspVczv0iUFRpaJ3mD x3cOXaFTbh3aur4vsgKAlAhAuUY1daiM3CwdWIb2CuCpj7CHCPy1B3szQwcRdTpK TQJ94tZ0AkG5grV22LduVu8QI6HOJyGrsqcENCzLHUJDipmdzCsmgfo7DX1XhVjT 0DOD+VnS8Awi0G3GyRB9dI0PAGNavgp52WEOwSJjMDiwMVIKA9yynz//JNwhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoiemI1KSSqqklBNN6/3SJWFoac8wHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsDyQ/Tv6XJ8 UZT8AQAKWbRMMdMqNYj7ZXMFVfD0zbUPRYVYYCycczgiew/3ubKcZr4pc/6aSwNf gtWjrPBr6v0hVaju7DUPhD/7yV1PJ3Zu/w6t/SiUB7+NY6GkkUaNIg7vq235dugJ 8xAx688+DS8cCFiZ3q21sz2NJpoCm4BGRz5qgFf5c6x61LnQdHGUtIA6Qy7ZPIva wti01+cBxHbWJLun3pQWeJcqbPiE3KJmCIVZBoN2Icm8X2EQbNUuFGP5o7X5Z4Nf 6H3A7LZ5zNzAxdZPcv57ZkHdrvlDsTHI58kyPwG3s1YM/uzMU0k8mdg+qjRrzcd0 EDIYqv/kmA== -----END CERTIFICATE-----Generated at Wed May 13 14:35:38 2026 by rpki-client