$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json) Hash identifier: fRabFtNhVGZg27mQHJFFwP+On3KH/bVA27AkmHCNDKI= Subject key identifier: DC:A3:4B:AC:A6:27:76:33:B0:27:0B:A9:6B:18:B7:46:81:01:DA:EC Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F Certificate serial: 092EA3E5B4CFCD871038E0F8D37DFA9C5BB02FE6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft Manifest number: CC Signing time: Thu 24 Sep 2026 10:56:47 +0000 Manifest this update: Thu 24 Sep 2026 10:51:47 +0000 Manifest next update: Sun 27 Sep 2026 20:29:47 +0000 Files and hashes: 1: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=) 2: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: 2Av4G2AdfSe57hqWEzGm16DEKFvU80pwt1DmG6nsGZI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 11:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2e:a3:e5:b4:cf:cd:87:10:38:e0:f8:d3:7d:fa:9c:5b:b0:2f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F Validity Not Before: Sep 24 10:51:47 2026 GMT Not After : Sep 27 20:29:47 2026 GMT Subject: CN=DCA34BACA6277633B0270BA96B18B7468101DAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:f0:d6:49:12:85:ea:d4:ad:11:92:1b:4c: c4:10:40:9a:ee:6c:ed:60:fb:44:d3:bc:f1:3f:c0: 6e:b1:60:66:64:a7:88:2d:50:f5:8d:c1:31:5a:53: b0:81:99:67:95:d6:2d:46:21:bb:85:ed:43:d4:88: 81:12:10:f4:f3:8e:21:cc:34:25:af:6d:ee:ed:f9: 99:10:3e:74:4d:4f:f2:7b:6e:62:b4:b5:ac:47:85: f6:21:b4:cd:19:45:2e:fe:36:3e:74:00:ab:86:21: 12:97:85:14:cc:a7:cb:40:5f:13:cf:c6:1a:fb:17: bb:cc:89:d9:c0:1d:20:fc:0a:3b:00:74:9f:fc:39: ac:32:c2:05:30:56:5f:b2:81:f8:5f:ce:7a:c3:be: ae:b0:59:3b:66:ff:14:22:4e:9d:c0:7a:ce:86:f0: 5b:81:51:b6:9a:15:48:57:d1:75:d8:b8:5c:cc:25: 95:7b:04:e0:2d:42:de:57:d6:c4:72:95:b2:d9:de: f6:cb:fb:d5:52:24:2b:05:bc:fb:a5:5d:6c:42:67: a5:eb:6f:ff:58:f8:2b:05:3f:9c:66:eb:27:57:5d: 1d:57:0d:e2:7e:d7:c6:c2:09:71:4d:5e:52:81:3d: 3e:c5:69:68:28:6c:8f:1e:54:52:01:78:23:fb:94: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:4B:AC:A6:27:76:33:B0:27:0B:A9:6B:18:B7:46:81:01:DA:EC X509v3 Authority Key Identifier: keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7d:4d:26:81:99:77:01:21:bf:71:89:96:44:9c:4a:a0:bb: 60:d8:df:87:89:c2:89:1e:60:70:26:db:bd:ef:02:34:4f:32: cc:cf:b0:d4:fc:d6:87:76:67:c9:8d:47:f8:72:e0:89:c9:60: c6:e4:35:49:e0:41:eb:51:41:1b:87:70:8a:e1:3d:14:c3:f8: f8:d7:2f:9b:0a:aa:a6:7b:21:30:1d:bd:a2:14:58:dc:a1:35: 2e:16:28:f6:85:26:e3:cd:a2:da:d3:b7:8a:f7:59:af:50:a5: c3:b2:e2:03:36:5d:6a:3d:53:6e:7d:71:d5:c9:3d:ea:cc:a3: ae:30:cc:81:5c:c3:47:55:7d:74:47:21:b8:b0:2a:ba:cc:37: 2c:97:e6:55:cd:a2:aa:45:0c:d5:ad:9f:d3:a3:15:c6:f6:7d: 84:f8:88:9d:64:bf:c7:42:da:91:53:f5:bf:09:67:25:df:5d: 40:b1:40:7c:01:18:42:8d:67:30:1e:92:e8:6b:f4:51:ef:7c: 32:18:e9:02:60:cf:6c:0d:a4:72:d8:bd:80:ae:4e:d3:93:e0: 96:b1:6d:69:53:1f:fb:1f:03:55:82:6b:7c:a7:20:13:46:58: 41:b8:cb:b4:92:62:9d:5e:34:22:22:a6:cc:ea:dc:15:dc:a1: c9:3f:37:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCS6j5bTPzYcQOOD40336nFuwL+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQz ODQ3QkMyRjAeFw0yNjA5MjQxMDUxNDdaFw0yNjA5MjcyMDI5NDdaMDMxMTAvBgNV BAMTKERDQTM0QkFDQTYyNzc2MzNCMDI3MEJBOTZCMThCNzQ2ODEwMURBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKvDWSRKF6tStEZIbTMQQQJru bO1g+0TTvPE/wG6xYGZkp4gtUPWNwTFaU7CBmWeV1i1GIbuF7UPUiIESEPTzjiHM NCWvbe7t+ZkQPnRNT/J7bmK0taxHhfYhtM0ZRS7+Nj50AKuGIRKXhRTMp8tAXxPP xhr7F7vMidnAHSD8CjsAdJ/8OawywgUwVl+ygfhfznrDvq6wWTtm/xQiTp3Aes6G 8FuBUbaaFUhX0XXYuFzMJZV7BOAtQt5X1sRylbLZ3vbL+9VSJCsFvPulXWxCZ6Xr b/9Y+CsFP5xm6ydXXR1XDeJ+18bCCXFNXlKBPT7FaWgobI8eVFIBeCP7lFn/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3KNLrKYndjOwJwupaxi3RoEB2uwwHwYDVR0j BBgwFoAU6e2Km+hFMSi82j/aKi+YhDhHvC8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODg3NDk4NzU1Mjc2OS8wL0U5RUQ4QTlCRTg0NTMxMjhCQ0RBM0ZEQTJBMkY5 ODg0Mzg0N0JDMkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4NzQ5ODc1NTI3NjkvMC9FOUVEOEE5QkU4NDUz MTI4QkNEQTNGREEyQTJGOTg4NDM4NDdCQzJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH1NJoGZdwEh v3GJlkScSqC7YNjfh4nCiR5gcCbbve8CNE8yzM+w1PzWh3ZnyY1H+HLgiclgxuQ1 SeBB61FBG4dwiuE9FMP4+NcvmwqqpnshMB29ohRY3KE1LhYo9oUm482i2tO3ivdZ r1Clw7LiAzZdaj1Tbn1x1ck96syjrjDMgVzDR1V9dEchuLAqusw3LJfmVc2iqkUM 1a2f06MVxvZ9hPiInWS/x0LakVP1vwlnJd9dQLFAfAEYQo1nMB6S6Gv0Ue98Mhjp AmDPbA2kcti9gK5O05PglrFtaVMf+x8DVYJrfKcgE0ZYQbjLtJJinV40IiKmzOrc FdyhyT83lA== -----END CERTIFICATE-----Generated at Sat Sep 26 13:51:11 2026 by rpki-client