$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: q8NOtAVpEkGPkdx0vXS8RdtKjEMfe91xwFEAFkyx8sQ= Subject key identifier: 6B:AB:79:96:6F:B0:0C:C3:09:29:2F:C7:77:A5:26:D6:05:F8:86:6A Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 21C39F02AF18D5A4B0E6394F9FA2783313043BC0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 014E Signing time: Sun 11 Oct 2026 22:06:09 +0000 Manifest this update: Sun 11 Oct 2026 22:01:09 +0000 Manifest next update: Thu 15 Oct 2026 07:00:09 +0000 Files and hashes: 1: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: zXOTsUopNearR0OrJompm7IntGkYsCk836x5qC2fppU=) 2: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 3: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) 4: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:9f:02:af:18:d5:a4:b0:e6:39:4f:9f:a2:78:33:13:04:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Oct 11 22:01:09 2026 GMT Not After : Oct 15 07:00:09 2026 GMT Subject: CN=6BAB79966FB00CC309292FC777A526D605F8866A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:b1:d1:7e:8e:f5:d9:ed:e6:72:53:b8:99: 9f:d5:4d:ff:e3:6f:fb:de:0e:bd:93:51:ff:c7:61: 8b:f3:28:09:11:65:6c:0f:01:58:7e:e7:fa:47:0b: 19:19:a9:07:9c:10:d5:10:e8:62:01:f6:2f:90:58: e4:f7:c9:8f:3a:22:f3:62:1d:56:a1:3b:46:c1:46: 3f:72:2e:1f:22:8f:d3:e9:64:27:0e:07:46:d8:f7: 8b:e2:d2:15:29:3d:88:28:b7:f5:6e:d6:22:03:1a: 25:02:39:9b:c4:55:be:68:69:52:8d:34:32:98:34: bf:6f:79:23:54:55:dd:ad:8c:9c:4a:67:31:19:b9: be:ad:db:e6:2f:79:6b:5c:ea:cf:ee:68:78:e6:f3: 14:a2:dd:e3:9f:14:16:2c:fb:ac:13:86:b9:3e:f0: 19:7d:3f:b9:3b:a7:41:2c:ad:b3:91:91:49:0a:c3: 19:d1:4e:f6:2a:08:58:c4:54:bc:e1:72:df:27:e7: cd:80:1e:ed:df:e6:03:ef:29:4c:3a:3b:58:f3:1e: 77:e3:af:4f:82:c5:0c:76:4d:2c:3d:45:60:f9:4e: de:0f:3e:1c:42:f3:95:d9:97:57:6a:e6:81:1d:25: da:da:01:87:10:fe:76:2c:6d:a9:c7:ed:2b:91:af: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:79:96:6F:B0:0C:C3:09:29:2F:C7:77:A5:26:D6:05:F8:86:6A X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7a:bd:a2:26:3e:36:64:ee:17:30:02:dd:44:60:15:25:65: 83:07:13:7f:25:b3:68:11:03:be:fa:64:fa:df:0e:d0:cc:21: c8:62:d1:28:f8:83:2c:cf:92:f3:b6:18:d2:e3:34:bd:b1:8c: ba:b1:ed:d7:45:e5:58:c6:7b:a8:2c:62:1d:a5:c1:d9:17:a8: 85:90:4f:c2:62:03:0e:57:30:a4:6b:17:e6:09:d6:82:21:27: cc:d1:9e:d7:16:66:1e:f1:20:bf:76:91:a5:5a:94:e2:aa:e6: 90:1e:66:b5:15:35:c9:85:d4:90:b2:17:52:fa:3d:e8:c2:27: 1e:66:cf:68:2d:05:ef:87:d1:1c:2e:9f:32:e9:9a:c9:96:9f: ec:26:0f:49:ac:10:ab:08:d8:e0:92:fa:7c:24:ab:a4:12:f6: 0e:eb:d2:06:78:71:47:b4:e0:4c:95:d8:91:e9:dd:d7:9e:13: 73:09:4a:02:ae:6e:95:23:0b:0d:b2:9e:13:1d:7d:cf:ee:7e: 81:6b:97:5f:2f:7d:85:6b:33:fb:b8:26:9c:50:0b:c4:5b:4e: 8b:82:dc:f7:6d:62:84:eb:04:85:88:b5:51:be:21:3c:b5:b0: ed:df:8c:ba:42:08:bb:c6:92:67:28:91:97:8c:e1:f7:5b:c3: 8a:4e:a6:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIcOfAq8Y1aSw5jlPn6J4MxMEO8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjEwMTEyMjAxMDlaFw0yNjEwMTUwNzAwMDlaMDMxMTAvBgNV BAMTKDZCQUI3OTk2NkZCMDBDQzMwOTI5MkZDNzc3QTUyNkQ2MDVGODg2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3bHRfo712e3mclO4mZ/VTf/j b/veDr2TUf/HYYvzKAkRZWwPAVh+5/pHCxkZqQecENUQ6GIB9i+QWOT3yY86IvNi HVahO0bBRj9yLh8ij9PpZCcOB0bY94vi0hUpPYgot/Vu1iIDGiUCOZvEVb5oaVKN NDKYNL9veSNUVd2tjJxKZzEZub6t2+YveWtc6s/uaHjm8xSi3eOfFBYs+6wThrk+ 8Bl9P7k7p0EsrbORkUkKwxnRTvYqCFjEVLzhct8n582AHu3f5gPvKUw6O1jzHnfj r0+CxQx2TSw9RWD5Tt4PPhxC85XZl1dq5oEdJdraAYcQ/nYsbanH7SuRr7MpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa6t5lm+wDMMJKS/Hd6Um1gX4hmowHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXq9oiY+NmTu FzAC3URgFSVlgwcTfyWzaBEDvvpk+t8O0MwhyGLRKPiDLM+S87YY0uM0vbGMurHt 10XlWMZ7qCxiHaXB2ReohZBPwmIDDlcwpGsX5gnWgiEnzNGe1xZmHvEgv3aRpVqU 4qrmkB5mtRU1yYXUkLIXUvo96MInHmbPaC0F74fRHC6fMumayZaf7CYPSawQqwjY 4JL6fCSrpBL2DuvSBnhxR7TgTJXYkend154TcwlKAq5ulSMLDbKeEx19z+5+gWuX Xy99hWsz+7gmnFALxFtOi4Lc921ihOsEhYi1Ub4hPLWw7d+MukIIu8aSZyiRl4zh 91vDik6mJw== -----END CERTIFICATE-----Generated at Mon Oct 12 21:04:07 2026 by rpki-client