$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: ER2QErc3zNlwQh72Nc8Pu83aZk/sIBuEXfLvcs0CQrM= Subject key identifier: 65:23:F4:58:C1:B5:7D:89:C2:4E:BB:86:CB:6C:8A:A1:CD:4D:4F:BA Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 1DEDB0011926CA885CACC3428736A23A1263934E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: D9 Signing time: Thu 01 Oct 2026 15:24:47 +0000 Manifest this update: Thu 01 Oct 2026 15:19:47 +0000 Manifest next update: Sun 04 Oct 2026 20:29:47 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: ohNOnPrwZ3xN+/B9B61gxFV8cxjEYFPdf3D9Zm7IL2c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ed:b0:01:19:26:ca:88:5c:ac:c3:42:87:36:a2:3a:12:63:93:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Oct 1 15:19:47 2026 GMT Not After : Oct 4 20:29:47 2026 GMT Subject: CN=6523F458C1B57D89C24EBB86CB6C8AA1CD4D4FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:d7:07:77:6a:e6:01:d4:de:32:8e:6a:a6: 81:a1:07:26:bf:ba:44:27:a9:23:d7:0b:c9:be:77: b0:64:c9:a3:cc:b6:9d:40:7c:58:88:cc:7a:74:ca: a7:91:86:bf:4f:b5:a4:bf:22:6d:4a:5e:c7:3f:58: 43:82:4c:7b:ad:eb:8a:04:0b:bc:8c:78:7b:17:ea: 05:15:db:da:47:23:6b:03:c6:27:5a:d9:ad:e3:46: 1b:81:cf:e7:e3:ff:dd:c4:3b:1e:ab:41:3f:5a:d6: 76:e9:c0:73:6f:be:ff:76:93:2d:59:5c:a7:2f:28: 39:d0:59:e1:51:a7:61:94:52:db:a6:84:5a:6b:7e: 29:50:39:ca:66:18:66:af:d2:5b:b4:20:27:89:12: 82:d0:3e:a2:76:55:3e:8f:17:f2:26:d4:10:11:4f: 19:44:e0:ca:5d:22:44:0e:85:49:74:b5:d6:a7:d8: 17:5d:77:a5:fd:48:04:af:9d:1b:29:d3:9b:64:b2: ca:7c:e0:09:ac:6d:59:65:b9:8f:39:6e:1e:ae:ce: 02:dd:e8:f4:e6:08:3a:64:7f:56:31:e2:29:0d:cd: 98:17:2d:17:0c:4b:83:01:71:aa:32:4d:ed:5d:89: 1b:b5:05:be:88:1b:d6:58:86:42:8a:9d:4e:4e:c8: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:F4:58:C1:B5:7D:89:C2:4E:BB:86:CB:6C:8A:A1:CD:4D:4F:BA X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bc:b3:8a:66:5a:c0:bf:94:6b:78:ca:48:8b:d9:c8:df:4e: ad:09:8d:97:9e:78:aa:61:69:99:00:bd:eb:03:f6:03:06:a0: 23:a2:a2:d3:5e:dd:27:87:b3:43:ca:ed:68:b2:0f:5f:35:a9: 27:6b:0c:61:4a:96:64:92:ef:77:8a:28:24:01:3d:c7:77:1b: 79:e7:9e:63:44:b3:e8:f8:b9:74:18:8d:f5:51:be:40:dc:8d: 4b:f4:7a:90:9d:ee:ee:52:19:71:cf:29:b0:a7:c8:20:43:0d: 4f:9b:7f:fd:4f:47:b7:50:f4:3b:9a:dd:9f:38:83:7a:ed:e3: 4b:ee:ae:b7:1a:57:d4:12:2a:02:7e:9c:76:16:d6:db:c3:cd: 55:f6:a8:a3:89:b9:7c:51:80:a6:25:12:c3:70:44:70:e7:09: 69:ce:8b:78:45:03:ad:a0:19:88:5c:1b:7c:05:e0:e3:64:1b: 1e:db:0c:db:6c:47:03:69:c4:6b:d1:b6:05:ec:87:b8:d4:0c: fa:9a:53:d2:19:26:cf:7b:f3:70:b3:2c:3d:80:1c:02:0d:93: 72:35:fd:b6:77:a9:5a:68:46:5b:3b:24:b3:37:77:e9:3a:17: 06:52:ec:dc:da:09:ea:00:60:87:b4:61:b5:1e:c6:24:d2:f1: 67:38:75:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHe2wARkmyohcrMNChzaiOhJjk04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjEwMDExNTE5NDdaFw0yNjEwMDQyMDI5NDdaMDMxMTAvBgNV BAMTKDY1MjNGNDU4QzFCNTdEODlDMjRFQkI4NkNCNkM4QUExQ0Q0RDRGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC749cHd2rmAdTeMo5qpoGhBya/ ukQnqSPXC8m+d7BkyaPMtp1AfFiIzHp0yqeRhr9PtaS/Im1KXsc/WEOCTHut64oE C7yMeHsX6gUV29pHI2sDxida2a3jRhuBz+fj/93EOx6rQT9a1nbpwHNvvv92ky1Z XKcvKDnQWeFRp2GUUtumhFprfilQOcpmGGav0lu0ICeJEoLQPqJ2VT6PF/Im1BAR TxlE4MpdIkQOhUl0tdan2Bddd6X9SASvnRsp05tkssp84AmsbVlluY85bh6uzgLd 6PTmCDpkf1Yx4ikNzZgXLRcMS4MBcaoyTe1diRu1Bb6IG9ZYhkKKnU5OyAAbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZSP0WMG1fYnCTruGy2yKoc1NT7owHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLyzimZawL+U a3jKSIvZyN9OrQmNl554qmFpmQC96wP2AwagI6Ki017dJ4ezQ8rtaLIPXzWpJ2sM YUqWZJLvd4ooJAE9x3cbeeeeY0Sz6Pi5dBiN9VG+QNyNS/R6kJ3u7lIZcc8psKfI IEMNT5t//U9Ht1D0O5rdnziDeu3jS+6utxpX1BIqAn6cdhbW28PNVfaoo4m5fFGA piUSw3BEcOcJac6LeEUDraAZiFwbfAXg42QbHtsM22xHA2nEa9G2BeyHuNQM+ppT 0hkmz3vzcLMsPYAcAg2TcjX9tnepWmhGWzskszd36ToXBlLs3NoJ6gBgh7RhtR7G JNLxZzh1Zg== -----END CERTIFICATE-----Generated at Sat Oct 3 12:58:02 2026 by rpki-client