$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json) Hash identifier: 5T21Ea8a3iGELumkVC2AT3iczfpsGuuv1QSOrIgTh0A= Subject key identifier: 28:76:56:E5:70:26:2B:BB:BE:53:F7:3C:DC:3B:68:A0:CF:54:F2:FA Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 587D940EF995F6FAA42BE945C3BEF43523F483E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft Manifest number: 0150 Signing time: Fri 09 Oct 2026 17:08:35 +0000 Manifest this update: Fri 09 Oct 2026 17:03:35 +0000 Manifest next update: Mon 12 Oct 2026 23:58:35 +0000 Files and hashes: 1: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: wCk6/xVCH/P04zpPXG+ZnzMNQk2gynKyJh9se6yP9cY=) 2: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=) 3: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=) 4: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=) 5: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=) 6: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=) 7: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=) 8: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=) 9: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=) 10: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=) 11: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 23:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7d:94:0e:f9:95:f6:fa:a4:2b:e9:45:c3:be:f4:35:23:f4:83:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Oct 9 17:03:35 2026 GMT Not After : Oct 12 23:58:35 2026 GMT Subject: CN=287656E570262BBBBE53F73CDC3B68A0CF54F2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:58:7e:37:cd:8a:41:11:2e:01:15:4b:24: d9:a7:63:9d:24:7e:1f:4f:34:b6:b6:7a:50:cc:1a: d8:fa:33:22:cc:be:0e:0e:6e:a3:68:84:bd:a2:ae: dc:7b:e3:dc:2d:d8:74:b9:e7:5b:e1:c1:55:fd:fe: 24:ab:05:96:c8:db:1d:83:db:1e:f4:bd:5b:9e:7c: e7:b2:f5:1d:47:ab:2c:18:a6:0f:f2:cc:e1:a2:87: 1e:b9:f3:3a:88:f4:1b:ea:a1:26:22:31:54:2b:c5: d1:dd:41:45:bd:56:ff:e8:94:f1:80:d9:b0:a4:26: 84:a3:77:c1:51:38:e1:db:a9:d3:c3:5c:19:bc:0a: fe:69:43:3c:05:b0:c7:cb:47:48:ef:11:28:af:87: 23:98:e1:43:8f:94:4b:e9:b7:a2:fa:8f:a3:ee:fe: ce:cd:22:08:99:9f:f1:14:e7:9e:c7:71:d9:a7:e1: b8:ee:91:cd:bd:6b:34:e0:91:ff:26:dc:92:e2:8e: 5f:0f:68:a5:b1:56:8f:07:98:11:1d:f4:1f:68:66: 1f:e8:bb:1e:84:54:fd:6b:26:74:4c:87:19:2e:96: 66:14:a3:19:d8:b6:23:08:ce:a4:59:0e:52:20:55: 57:a6:45:55:78:10:72:9d:f1:4a:62:88:d3:ab:14: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:56:E5:70:26:2B:BB:BE:53:F7:3C:DC:3B:68:A0:CF:54:F2:FA X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:07:77:7d:f2:f9:cd:0b:82:7f:08:0f:07:b0:b8:f5:58:78: ee:5d:11:95:06:eb:48:13:b6:45:3e:c1:9d:18:ef:f5:2a:f5: a2:41:70:fb:89:40:64:1e:3b:63:e9:9c:de:2f:89:8c:03:14: b9:18:54:9b:e1:9f:da:21:62:69:fd:84:1f:a7:57:72:50:74: 49:3b:39:57:70:24:2a:d3:5a:0f:55:11:2b:9d:3f:f4:ac:6b: 62:72:84:0a:17:c0:a4:e3:b2:72:13:f2:87:5f:cf:1a:a2:10: 02:00:ae:3c:1d:74:cd:20:ab:e6:6e:e1:76:fa:e4:72:62:5d: be:cc:66:59:c3:29:4e:a7:1d:04:52:d2:ae:4c:10:9c:33:8d: 82:f6:ce:c1:fe:6b:6a:ee:e4:c9:86:cd:cd:79:97:b8:9d:fc: 79:c7:a9:e1:74:74:f1:a9:09:d7:1c:19:cc:e2:bb:01:21:cc: 63:62:63:8e:c9:b5:ed:3d:a6:d7:40:dd:17:74:1c:2a:91:3c: 9f:e6:cb:90:29:16:64:c7:d9:75:39:e4:7e:b5:0b:b5:32:21: 24:18:a9:cc:fa:69:66:b1:a5:5e:2c:55:1c:57:8f:8d:49:1e: cd:ba:1f:4c:b7:14:0d:a4:96:66:81:5a:af:76:e2:45:cb:98: 7a:72:6b:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWH2UDvmV9vqkK+lFw770NSP0g+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjEwMDkxNzAzMzVaFw0yNjEwMTIyMzU4MzVaMDMxMTAvBgNV BAMTKDI4NzY1NkU1NzAyNjJCQkJCRTUzRjczQ0RDM0I2OEEwQ0Y1NEYyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXAFh+N82KQREuARVLJNmnY50k fh9PNLa2elDMGtj6MyLMvg4ObqNohL2irtx749wt2HS551vhwVX9/iSrBZbI2x2D 2x70vVuefOey9R1HqywYpg/yzOGihx658zqI9BvqoSYiMVQrxdHdQUW9Vv/olPGA 2bCkJoSjd8FROOHbqdPDXBm8Cv5pQzwFsMfLR0jvESivhyOY4UOPlEvpt6L6j6Pu /s7NIgiZn/EU557Hcdmn4bjukc29azTgkf8m3JLijl8PaKWxVo8HmBEd9B9oZh/o ux6EVP1rJnRMhxkulmYUoxnYtiMIzqRZDlIgVVemRVV4EHKd8UpiiNOrFEYtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKHZW5XAmK7u+U/c83DtooM9U8vowHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3MjE4NTkvMC85QjIyQzE5RDg0MkU0 NUFBODQ0MzkzNjY2OTRFNEM4MjhDMzA5Q0VFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAd3ffL5zQuC fwgPB7C49Vh47l0RlQbrSBO2RT7BnRjv9Sr1okFw+4lAZB47Y+mc3i+JjAMUuRhU m+Gf2iFiaf2EH6dXclB0STs5V3AkKtNaD1URK50/9KxrYnKEChfApOOychPyh1/P GqIQAgCuPB10zSCr5m7hdvrkcmJdvsxmWcMpTqcdBFLSrkwQnDONgvbOwf5rau7k yYbNzXmXuJ38ecep4XR08akJ1xwZzOK7ASHMY2Jjjsm17T2m10DdF3QcKpE8n+bL kCkWZMfZdTnkfrULtTIhJBipzPppZrGlXixVHFePjUkezbofTLcUDaSWZoFar3bi RcuYenJryA== -----END CERTIFICATE-----Generated at Sun Oct 11 21:16:36 2026 by rpki-client