$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: 5VBXVAwBsUcwBxLpcycwOS2EmLEInocgw1HAsyiKJE4= Subject key identifier: 5E:D5:F2:5D:B7:01:EF:CF:1D:26:32:B5:CC:22:7E:AF:F5:B3:B7:F9 Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 733EDDCAE13FB177EC118C0FF507745E95B56A6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: CE Signing time: Fri 16 Oct 2026 23:43:12 +0000 Manifest this update: Fri 16 Oct 2026 23:38:12 +0000 Manifest next update: Tue 20 Oct 2026 01:30:12 +0000 Files and hashes: 1: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) 2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: oTxtD3tZWA0fndYPmfsLRg0LDvHKB51TF8LcJO4HjVs=) 3: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3e:dd:ca:e1:3f:b1:77:ec:11:8c:0f:f5:07:74:5e:95:b5:6a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: Oct 16 23:38:12 2026 GMT Not After : Oct 20 01:30:12 2026 GMT Subject: CN=5ED5F25DB701EFCF1D2632B5CC227EAFF5B3B7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:da:e4:2a:f7:4a:8e:2f:a7:0a:ca:3f:8d: f1:30:72:25:e9:67:33:58:cf:5f:b0:07:b8:72:d5: b5:91:6e:30:79:c2:02:7f:e3:81:d1:2f:80:98:c5: e4:67:3b:bc:40:5e:fa:18:01:88:b7:3b:fe:63:dd: b7:7f:f5:d6:de:b6:0b:b2:c0:28:05:06:fa:ed:80: c9:fe:47:a9:51:61:f9:b9:55:74:1a:c1:aa:2e:80: da:4f:13:3d:18:1e:dc:12:d5:6d:ca:fd:b2:6c:c4: 8d:73:6d:79:94:f2:ed:04:b0:c9:fc:af:fe:3e:e3: 89:48:01:38:e0:57:48:2e:aa:a2:29:c6:7b:95:d9: 18:e9:f8:bf:eb:51:64:f9:ea:a0:3c:71:17:70:f9: b8:cf:94:86:0a:73:6d:f9:6b:fa:0f:f3:da:fa:0b: 4c:c4:69:b6:44:ef:bb:71:70:85:b5:4f:26:4e:01: 22:e7:ee:8c:bf:9b:92:06:b4:0c:b7:ea:10:75:58: 6c:50:1f:00:0b:dd:07:80:81:f3:47:41:c6:40:c7: 3a:c5:0a:19:df:c2:24:cf:5b:45:12:37:3e:12:f4: 85:f3:5f:35:c2:c4:de:dd:bb:59:8b:dc:6f:11:42: de:17:9e:22:88:30:db:f1:6b:6f:1f:37:9f:14:8c: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:F2:5D:B7:01:EF:CF:1D:26:32:B5:CC:22:7E:AF:F5:B3:B7:F9 X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1e:e6:ef:a0:56:ae:be:5f:d9:4f:ac:80:a0:97:20:c5:0c: 74:41:d3:17:d1:ba:12:3d:98:c7:68:8b:9a:73:97:93:52:40: d9:24:57:97:56:d6:2c:af:f2:00:13:21:dc:5c:f4:9a:65:87: 6c:d8:dc:b0:cf:35:ae:1d:38:6f:10:41:17:5c:ce:41:a9:7c: 23:04:05:dd:b5:4c:b1:c0:94:3b:03:33:af:1b:47:c3:0d:e2: f6:ef:9e:56:c6:10:2d:15:ba:cf:41:c2:8c:09:16:c0:65:7c: 52:9c:43:68:90:c0:a3:ca:34:ed:4a:93:dc:95:7d:55:89:ea: 97:82:1a:3c:43:20:34:fa:b5:25:7e:7c:b7:f7:c0:10:4b:a3: ae:aa:f1:c3:29:8a:ec:eb:06:37:57:3d:74:3d:58:55:02:b6: 8c:94:21:06:2a:cb:e5:57:8e:17:2f:ea:a2:e5:69:bd:d6:aa: a1:32:04:a8:a2:4f:f0:98:57:76:c5:b6:2a:50:a9:7f:cb:07: fa:3d:44:d2:0f:b4:e7:85:54:a4:f6:08:9a:50:d0:4a:3d:b9: bf:e1:4d:12:f0:8d:b5:84:50:8c:41:2e:8e:f3:cc:ac:2b:4c: b2:65:4d:e2:01:44:28:62:8a:ab:dd:c2:aa:0b:97:e6:92:84: 7e:48:38:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcz7dyuE/sXfsEYwP9Qd0XpW1am8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjEwMTYyMzM4MTJaFw0yNjEwMjAwMTMwMTJaMDMxMTAvBgNV BAMTKDVFRDVGMjVEQjcwMUVGQ0YxRDI2MzJCNUNDMjI3RUFGRjVCM0I3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx9rkKvdKji+nCso/jfEwciXp ZzNYz1+wB7hy1bWRbjB5wgJ/44HRL4CYxeRnO7xAXvoYAYi3O/5j3bd/9dbetguy wCgFBvrtgMn+R6lRYfm5VXQawaougNpPEz0YHtwS1W3K/bJsxI1zbXmU8u0EsMn8 r/4+44lIATjgV0guqqIpxnuV2Rjp+L/rUWT56qA8cRdw+bjPlIYKc235a/oP89r6 C0zEabZE77txcIW1TyZOASLn7oy/m5IGtAy36hB1WGxQHwAL3QeAgfNHQcZAxzrF ChnfwiTPW0USNz4S9IXzXzXCxN7du1mL3G8RQt4XniKIMNvxa28fN58UjKJhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXtXyXbcB788dJjK1zCJ+r/Wzt/kwHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB7m76BWrr5f 2U+sgKCXIMUMdEHTF9G6Ej2Yx2iLmnOXk1JA2SRXl1bWLK/yABMh3Fz0mmWHbNjc sM81rh04bxBBF1zOQal8IwQF3bVMscCUOwMzrxtHww3i9u+eVsYQLRW6z0HCjAkW wGV8UpxDaJDAo8o07UqT3JV9VYnql4IaPEMgNPq1JX58t/fAEEujrqrxwymK7OsG N1c9dD1YVQK2jJQhBirL5VeOFy/qouVpvdaqoTIEqKJP8JhXdsW2KlCpf8sH+j1E 0g+054VUpPYImlDQSj25v+FNEvCNtYRQjEEujvPMrCtMsmVN4gFEKGKKq93CqguX 5pKEfkg4Ew== -----END CERTIFICATE-----Generated at Sun Oct 18 11:43:09 2026 by rpki-client