$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: TXDNqsp4rrszBhNXSh5+qSjvITUzrQAa7oBiiy1XE5g= Subject key identifier: 9F:08:8B:AC:D5:0D:64:41:04:EA:5F:62:FB:DF:7E:60:43:30:44:29 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 307297460909B8B8300CF29D1CD51DC48875BF04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: AD Signing time: Wed 13 May 2026 15:56:05 +0000 Manifest this update: Wed 13 May 2026 15:51:05 +0000 Manifest next update: Thu 14 May 2026 17:27:05 +0000 Files and hashes: 1: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 8DMom/Auu0a4moDlq+5Z2r1nhRNYr9D1cCP7GK5s/WE=) 2: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 3: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:72:97:46:09:09:b8:b8:30:0c:f2:9d:1c:d5:1d:c4:88:75:bf:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: May 13 15:51:05 2026 GMT Not After : May 14 17:27:05 2026 GMT Subject: CN=9F088BACD50D644104EA5F62FBDF7E6043304429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:58:d0:2c:c5:7a:5d:c0:fa:79:4c:f9:80: 23:50:f8:d4:da:56:0d:92:8f:74:ba:2c:46:3b:5f: f3:ba:8d:14:02:6c:ce:b0:70:f9:1b:6c:b4:df:69: a6:2c:b1:4e:06:0e:ae:b1:01:d7:5c:ea:e2:83:73: be:28:b1:e5:da:78:e1:c2:ff:0f:40:68:dc:3c:7d: 7d:01:54:b3:79:78:6a:58:59:89:15:b3:0d:d2:df: fa:3e:fc:11:71:a9:46:b4:08:e0:40:88:a6:3a:02: 1e:8f:cc:05:75:90:83:cf:dc:c3:8a:8f:fb:b1:f1: 2f:1a:3e:32:d7:d1:c2:95:9e:63:7a:24:2d:52:f1: 62:4e:41:39:1f:a2:9c:e9:36:e9:fa:f6:ea:8e:03: 28:ae:af:9e:7c:d9:53:bd:51:34:5a:0b:d4:5c:4a: 02:12:70:d4:bd:f4:eb:55:6e:17:55:06:ec:05:48: 36:d5:97:6f:95:9c:4d:cd:8c:77:e0:ce:cd:56:57: 16:17:c5:e8:75:01:04:43:e7:d4:10:b3:eb:e2:29: b7:cb:cf:a6:a3:d9:ed:00:e6:91:37:86:d7:00:9e: d1:ae:e0:1a:8b:63:65:76:7c:11:77:ae:c5:02:d2: c3:c4:f5:2c:1d:77:87:49:eb:ca:0c:1f:80:5c:52: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:8B:AC:D5:0D:64:41:04:EA:5F:62:FB:DF:7E:60:43:30:44:29 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4f:11:c8:d6:6a:cf:4d:65:5b:03:ea:6b:88:0e:2e:d2:06: fe:12:28:12:f6:0c:fe:e4:ab:f2:55:f1:68:be:52:87:66:5f: 04:b6:d7:28:36:a6:d3:d3:59:84:f9:77:74:f4:88:31:88:55: aa:b1:9d:eb:d6:c2:94:5e:4d:4e:13:83:19:71:f7:34:92:58: 78:43:b5:55:58:26:dc:3b:19:20:de:8a:26:ce:aa:0c:e4:ac: 5e:27:28:30:ed:3b:89:3c:8c:1a:27:8c:be:8b:73:d5:58:c2: 3c:d6:6c:60:88:0f:4c:07:f0:aa:d3:05:92:82:ba:d6:ef:69: 38:4d:a7:de:f0:0b:98:4d:0e:37:74:e1:19:7b:94:6e:97:b3: 32:b2:d5:13:ee:3d:99:f5:93:f0:61:e5:ea:47:be:31:1b:c7: 02:78:63:a8:78:a6:c8:8b:f0:04:c4:e5:56:13:9c:63:5f:9f: 3c:73:62:93:55:58:5a:64:0c:1b:85:94:53:b1:71:7b:3c:eb: 40:34:f3:5b:bd:80:c8:1f:62:94:28:47:55:b9:af:21:85:ca: 93:ac:73:e3:69:4c:a8:37:c9:92:a0:a0:eb:16:4c:a5:e5:1c: ff:79:ac:39:34:1a:6c:77:33:5c:c6:95:12:c9:d8:23:01:34: 3a:56:99:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMHKXRgkJuLgwDPKdHNUdxIh1vwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA1MTMxNTUxMDVaFw0yNjA1MTQxNzI3MDVaMDMxMTAvBgNV BAMTKDlGMDg4QkFDRDUwRDY0NDEwNEVBNUY2MkZCREY3RTYwNDMzMDQ0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSFjQLMV6XcD6eUz5gCNQ+NTa Vg2Sj3S6LEY7X/O6jRQCbM6wcPkbbLTfaaYssU4GDq6xAddc6uKDc74oseXaeOHC /w9AaNw8fX0BVLN5eGpYWYkVsw3S3/o+/BFxqUa0COBAiKY6Ah6PzAV1kIPP3MOK j/ux8S8aPjLX0cKVnmN6JC1S8WJOQTkfopzpNun69uqOAyiur5582VO9UTRaC9Rc SgIScNS99OtVbhdVBuwFSDbVl2+VnE3NjHfgzs1WVxYXxeh1AQRD59QQs+viKbfL z6aj2e0A5pE3htcAntGu4BqLY2V2fBF3rsUC0sPE9Swdd4dJ68oMH4BcUh+JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnwiLrNUNZEEE6l9i+99+YEMwRCkwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa08RyNZqz01l WwPqa4gOLtIG/hIoEvYM/uSr8lXxaL5Sh2ZfBLbXKDam09NZhPl3dPSIMYhVqrGd 69bClF5NThODGXH3NJJYeEO1VVgm3DsZIN6KJs6qDOSsXicoMO07iTyMGieMvotz 1VjCPNZsYIgPTAfwqtMFkoK61u9pOE2n3vALmE0ON3ThGXuUbpezMrLVE+49mfWT 8GHl6ke+MRvHAnhjqHimyIvwBMTlVhOcY1+fPHNik1VYWmQMG4WUU7FxezzrQDTz W72AyB9ilChHVbmvIYXKk6xz42lMqDfJkqCg6xZMpeUc/3msOTQabHczXMaVEsnY IwE0OlaZLA== -----END CERTIFICATE-----Generated at Wed May 13 20:21:04 2026 by rpki-client