$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: Wd8XUlvSP6br0jvEFbhf6jJa0jtrthuO+sUWkIw1L6M= Subject key identifier: 6D:F4:27:66:77:04:4E:27:19:79:FC:BE:F6:CE:7E:B1:47:C5:8F:09 Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 081DBAB47C4227594AABA0DC8C5012F277E4B15B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: 9C Signing time: Fri 24 Jul 2026 16:26:36 +0000 Manifest this update: Fri 24 Jul 2026 16:21:36 +0000 Manifest next update: Sat 25 Jul 2026 17:38:36 +0000 Files and hashes: 1: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: kPPnhkqXvo2dLJBHkAth6q5VQRA6alWDqqPXwhsuWDg=) 2: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1d:ba:b4:7c:42:27:59:4a:ab:a0:dc:8c:50:12:f2:77:e4:b1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Jul 24 16:21:36 2026 GMT Not After : Jul 25 17:38:36 2026 GMT Subject: CN=6DF4276677044E271979FCBEF6CE7EB147C58F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:5a:02:66:41:8a:53:f4:6a:cc:ac:ed:8c: ee:e1:8c:f0:bf:51:28:0c:45:54:03:58:58:cd:99: 45:48:11:fc:1d:93:d1:d8:65:e5:13:9f:7b:bb:22: 0f:ad:f2:a3:0e:85:fc:9a:e3:77:1d:4b:45:84:96: 48:c8:c5:8c:85:00:43:a2:04:7e:b4:44:f9:23:18: 1f:66:ef:13:81:4a:ea:9d:b9:bc:ec:87:e7:b7:7a: 43:7c:49:d6:01:76:b6:1a:36:3a:bf:dd:30:b7:a3: f2:f7:2c:73:16:e3:94:0a:4d:d6:9a:5d:77:f3:40: 16:1a:24:58:8d:d9:71:69:72:3c:61:58:fb:07:1a: f0:bb:ef:33:5d:93:44:42:6d:3a:db:e3:1a:81:5c: 2f:5b:9a:05:b6:3d:20:46:dd:83:e2:8b:48:52:e6: 05:38:36:c7:0f:31:21:82:b5:f2:e1:ef:c5:29:5c: e1:cc:ca:17:eb:ac:8d:c8:c8:d9:1e:72:9e:08:6b: 6d:47:6d:79:78:1b:09:af:6e:b9:4a:2b:cb:8f:0d: 04:78:84:89:2e:29:04:ee:ce:4a:92:13:24:39:67: d4:8d:bd:1e:47:9e:3c:36:36:49:97:12:33:d4:63: 50:fc:70:f4:f5:bd:d5:fa:c2:9c:72:2d:84:4f:24: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:27:66:77:04:4E:27:19:79:FC:BE:F6:CE:7E:B1:47:C5:8F:09 X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bb:3d:ac:c5:a4:b4:7d:9a:7d:de:5f:87:13:1b:58:e8:9a: 45:f5:a7:35:7d:57:a9:36:39:27:57:54:0e:c3:59:6e:ca:5a: ae:51:c8:dc:f9:67:b7:b4:5d:1a:4b:a8:97:ea:42:b9:ca:86: 7e:6b:d9:ed:18:57:5f:d2:21:12:d8:47:a4:7f:e7:45:cf:28: df:33:3d:41:ae:6a:71:22:99:9f:c6:32:b5:4a:ea:20:d0:59: a4:1a:0a:8c:43:17:aa:be:41:2a:74:c2:91:54:cc:c0:d9:7d: db:03:e5:17:2f:67:9a:8e:77:75:9c:e1:5b:eb:81:79:56:e5: d4:eb:92:9e:43:07:5a:3e:81:78:77:fc:05:c4:77:39:df:73: a0:3a:46:c8:c6:fc:6c:ed:b3:c2:b3:a4:08:8e:dc:77:25:e5: 0d:3c:87:03:01:8d:52:28:e1:be:8c:b2:be:4f:a7:92:89:ab: 9e:b1:8f:b1:81:fa:75:f4:b6:8e:1c:96:04:03:0d:a0:9f:32: 28:6e:ee:25:42:d5:3e:20:e6:3b:c7:a5:35:1e:e7:e7:e5:3c: 92:e2:48:ab:e2:65:e9:b6:e2:7d:ad:0e:f8:08:2e:77:d7:f8: 7c:f0:3c:33:77:4a:92:80:00:85:34:ef:14:56:24:db:2b:ba: ed:9b:71:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCB26tHxCJ1lKq6DcjFAS8nfksVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA3MjQxNjIxMzZaFw0yNjA3MjUxNzM4MzZaMDMxMTAvBgNV BAMTKDZERjQyNzY2NzcwNDRFMjcxOTc5RkNCRUY2Q0U3RUIxNDdDNThGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHc1oCZkGKU/RqzKztjO7hjPC/ USgMRVQDWFjNmUVIEfwdk9HYZeUTn3u7Ig+t8qMOhfya43cdS0WElkjIxYyFAEOi BH60RPkjGB9m7xOBSuqdubzsh+e3ekN8SdYBdrYaNjq/3TC3o/L3LHMW45QKTdaa XXfzQBYaJFiN2XFpcjxhWPsHGvC77zNdk0RCbTrb4xqBXC9bmgW2PSBG3YPii0hS 5gU4NscPMSGCtfLh78UpXOHMyhfrrI3IyNkecp4Ia21HbXl4GwmvbrlKK8uPDQR4 hIkuKQTuzkqSEyQ5Z9SNvR5Hnjw2NkmXEjPUY1D8cPT1vdX6wpxyLYRPJOYZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbfQnZncETicZefy+9s5+sUfFjwkwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrs9rMWktH2a fd5fhxMbWOiaRfWnNX1XqTY5J1dUDsNZbsparlHI3Plnt7RdGkuol+pCucqGfmvZ 7RhXX9IhEthHpH/nRc8o3zM9Qa5qcSKZn8YytUrqINBZpBoKjEMXqr5BKnTCkVTM wNl92wPlFy9nmo53dZzhW+uBeVbl1OuSnkMHWj6BeHf8BcR3Od9zoDpGyMb8bO2z wrOkCI7cdyXlDTyHAwGNUijhvoyyvk+nkomrnrGPsYH6dfS2jhyWBAMNoJ8yKG7u JULVPiDmO8elNR7n5+U8kuJIq+Jl6bbifa0O+Agud9f4fPA8M3dKkoAAhTTvFFYk 2yu67ZtxZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:47 2026 by rpki-client