$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: 1cYG+dQEsWdykW7Ei/EqfbOHLxifOrQdo+5qkXPz/Go= Subject key identifier: 9E:3D:AC:E6:46:1B:F3:04:B0:5F:E6:4F:E7:51:15:49:DE:EF:FB:D5 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 567AD0024E704F8BCEDB4CF745D0C23571757B14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: C7 Signing time: Fri 25 Sep 2026 16:32:42 +0000 Manifest this update: Fri 25 Sep 2026 16:27:42 +0000 Manifest next update: Mon 28 Sep 2026 17:23:42 +0000 Files and hashes: 1: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 2: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: Hc0YZODj7SOovtWTPKi6t0nI2jnNx5zHrEKhSynh38o=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 17:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7a:d0:02:4e:70:4f:8b:ce:db:4c:f7:45:d0:c2:35:71:75:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Sep 25 16:27:42 2026 GMT Not After : Sep 28 17:23:42 2026 GMT Subject: CN=9E3DACE6461BF304B05FE64FE7511549DEEFFBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:ea:fd:c3:72:c2:2a:2c:81:0c:f7:0e:74: 98:c3:0e:3f:fe:03:3f:b7:04:e8:28:17:72:3c:cf: 5b:6c:ed:23:96:be:80:80:00:87:96:78:ac:45:d0: e4:a4:e0:1b:0f:a8:18:82:f9:27:3c:39:7b:b9:8e: cf:cd:a2:4c:7e:9c:0a:4c:1b:12:c5:01:0b:aa:3c: e6:3e:82:47:80:fd:91:3b:0d:1a:57:e5:9a:7e:55: 3c:cd:59:f8:65:db:3a:26:ff:ec:e4:10:04:ed:8d: 4c:b8:15:ff:1d:c6:91:df:48:f4:fe:8c:cf:e5:c6: 8f:a1:61:b7:7c:15:4e:c7:ce:e0:73:f0:fe:99:f2: d5:e2:05:48:ae:42:f3:a2:2c:eb:94:32:4b:58:d4: 93:2b:66:f9:53:04:e8:02:cf:78:97:49:a5:65:4d: 0b:05:0c:64:84:00:4a:c3:ed:0f:e8:38:6f:00:77: ff:bd:6e:a6:15:c8:96:27:48:0f:1e:d5:94:96:69: c3:05:a3:84:b8:f8:40:79:31:9f:12:d0:32:61:c3: 20:7e:2a:73:47:b5:7c:f0:83:7c:a7:66:39:a7:ed: b2:e7:d9:c7:e5:74:07:b9:3d:a9:65:06:35:d7:65: c4:3a:2a:b6:4f:7c:9b:a7:ed:b6:8d:42:b4:8e:f5: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:AC:E6:46:1B:F3:04:B0:5F:E6:4F:E7:51:15:49:DE:EF:FB:D5 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fa:49:0b:8e:f1:0e:ed:3c:7d:69:fc:9b:4d:8a:9e:ae:2f: 0b:3f:51:07:57:2a:5a:51:15:e7:9d:58:51:1b:db:c0:2d:bd: c2:fc:71:b4:cb:c3:2d:00:ba:3c:0d:eb:aa:68:ab:e4:35:2f: 78:f3:e2:b3:fb:38:d7:08:c5:34:f2:9e:f6:db:02:99:b1:3f: ac:c2:b4:6b:0b:93:9b:cb:50:59:1e:5e:7f:1d:c2:2c:ac:c0: 1a:ec:2e:36:77:46:5a:cb:45:5c:8f:5c:d2:e7:57:d2:8b:ae: 24:18:de:a8:40:b3:a0:8b:96:d5:44:86:f0:2c:10:47:d1:3e: 42:7b:80:59:55:d3:ed:82:76:69:f5:4a:6f:ad:bf:cc:e6:6e: f6:84:81:da:c5:7e:80:6c:7b:42:8b:b6:3b:de:1a:18:9a:96: 06:f9:55:00:76:37:8f:a5:a0:9f:eb:61:c4:cd:96:3b:2f:9a: f5:f0:5d:00:43:df:20:62:f1:da:40:f1:1b:64:66:44:a2:9f: 95:e4:79:dc:2f:a8:db:46:ea:dc:f8:62:c7:d6:e1:04:48:f3: 60:8a:0a:e2:44:e7:38:36:5b:45:92:76:86:36:08:88:31:cd: a4:09:44:34:75:cf:c9:28:c7:40:1c:24:12:09:31:b4:5a:8c: 56:35:66:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVnrQAk5wT4vO20z3RdDCNXF1exQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA5MjUxNjI3NDJaFw0yNjA5MjgxNzIzNDJaMDMxMTAvBgNV BAMTKDlFM0RBQ0U2NDYxQkYzMDRCMDVGRTY0RkU3NTExNTQ5REVFRkZCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxer9w3LCKiyBDPcOdJjDDj/+ Az+3BOgoF3I8z1ts7SOWvoCAAIeWeKxF0OSk4BsPqBiC+Sc8OXu5js/Nokx+nApM GxLFAQuqPOY+gkeA/ZE7DRpX5Zp+VTzNWfhl2zom/+zkEATtjUy4Ff8dxpHfSPT+ jM/lxo+hYbd8FU7HzuBz8P6Z8tXiBUiuQvOiLOuUMktY1JMrZvlTBOgCz3iXSaVl TQsFDGSEAErD7Q/oOG8Ad/+9bqYVyJYnSA8e1ZSWacMFo4S4+EB5MZ8S0DJhwyB+ KnNHtXzwg3ynZjmn7bLn2cfldAe5PallBjXXZcQ6KrZPfJun7baNQrSO9fZfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnj2s5kYb8wSwX+ZP51EVSd7v+9UwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfpJC47xDu08 fWn8m02Knq4vCz9RB1cqWlEV551YURvbwC29wvxxtMvDLQC6PA3rqmir5DUvePPi s/s41wjFNPKe9tsCmbE/rMK0awuTm8tQWR5efx3CLKzAGuwuNndGWstFXI9c0udX 0ouuJBjeqECzoIuW1USG8CwQR9E+QnuAWVXT7YJ2afVKb62/zOZu9oSB2sV+gGx7 Qou2O94aGJqWBvlVAHY3j6Wgn+thxM2WOy+a9fBdAEPfIGLx2kDxG2RmRKKfleR5 3C+o20bq3Phix9bhBEjzYIoK4kTnODZbRZJ2hjYIiDHNpAlENHXPySjHQBwkEgkx tFqMVjVmAw== -----END CERTIFICATE-----Generated at Sun Sep 27 10:56:22 2026 by rpki-client