$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: NqLcgBT/YeFj4ijNGzYu1ZSbKnKijvc7qa33OwbkLiY= Subject key identifier: 15:37:4A:11:C2:8C:C9:72:DE:84:CA:C1:69:DF:98:CF:65:06:31:28 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 49C887FDDC1B7DF317C61664CB94633930F149FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: C7 Signing time: Mon 05 Oct 2026 13:54:03 +0000 Manifest this update: Mon 05 Oct 2026 13:49:03 +0000 Manifest next update: Thu 08 Oct 2026 14:47:03 +0000 Files and hashes: 1: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: ZRjhjFWEwwTp09NbS85KvSamPZH3/OaOV8SqKLa6Byo=) 2: 3231312e3135382e302e302f31362d3136203d3e2034383337.roa (hash: i9hECE3kOB5KCZJDOyjFbCvXCgNoN/LRN4pG0/aZL80=) 3: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (hash: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=) 4: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (hash: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c8:87:fd:dc:1b:7d:f3:17:c6:16:64:cb:94:63:39:30:f1:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: Oct 5 13:49:03 2026 GMT Not After : Oct 8 14:47:03 2026 GMT Subject: CN=15374A11C28CC972DE84CAC169DF98CF65063128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:b9:96:ca:80:ef:23:f8:19:0c:7c:0f:c6: ec:79:4c:03:d6:f5:d0:f7:e0:7f:a7:e0:fd:ba:5d: e5:15:15:4e:24:bc:f1:08:fe:42:28:7b:34:2a:46: c8:bd:22:4b:dc:55:71:69:ba:35:de:98:45:41:76: e1:d9:f4:d2:b4:2d:e1:6e:0c:75:6c:d2:c7:15:ec: 17:fb:f0:f6:88:a0:15:ac:e1:ae:66:dc:93:67:b6: 7d:d0:d0:cd:dd:05:b3:75:6a:d4:09:76:5b:ad:6e: 57:46:28:b0:67:ed:82:8c:24:a6:f9:69:65:c2:d3: 63:8f:dc:51:ee:e2:35:f5:b3:3f:e6:a5:72:92:93: d5:f2:39:9b:61:32:21:51:49:9a:3f:75:25:eb:01: ce:5c:6b:18:0b:67:c1:d5:cb:39:e0:6e:c4:54:43: 5e:80:f3:aa:c3:9f:58:ef:5f:23:8d:59:12:06:4e: 78:36:15:2d:c7:a2:6e:83:12:2d:71:ab:87:de:d6: 12:37:c8:63:3b:5b:2c:2a:64:9c:eb:ac:ff:18:39: e8:c7:18:52:f3:96:f6:29:63:78:11:91:be:24:cc: b6:24:db:6d:44:fb:88:44:7b:ca:52:f3:e8:5a:a7: 0f:be:87:08:e5:3c:e0:03:36:c4:3f:30:f2:7f:50: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:37:4A:11:C2:8C:C9:72:DE:84:CA:C1:69:DF:98:CF:65:06:31:28 X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b7:12:b8:f6:06:f3:01:17:95:6c:15:0c:f3:81:bf:4e:a8: 85:3f:37:88:cf:6e:ce:8d:04:f8:33:87:18:34:83:b7:9d:f0: fc:e6:90:b4:ab:07:7a:49:91:74:b4:b3:9e:88:43:09:42:be: 11:7e:b3:2f:d3:63:77:a5:8a:65:4b:64:d1:fc:78:e9:72:28: 86:db:04:6e:fc:8f:53:c8:3c:c2:25:8a:7a:c8:f3:c0:14:31: 9a:f2:9d:94:2e:6f:18:f9:22:06:6c:68:fe:32:fa:99:5b:d8: 2f:8c:f1:1e:16:d1:fc:86:0c:2e:a2:c1:8f:a1:84:83:d8:15: 55:0b:ec:e2:ea:ed:1c:90:6b:1e:ac:7b:c4:bb:b1:01:3e:f5: f4:19:ca:7d:66:d4:6f:e8:2c:a8:f5:42:50:3c:02:c8:bb:49: 76:5c:3d:e0:c0:88:34:0f:ec:87:aa:4d:8b:18:c2:58:db:d0: 8d:24:2a:ee:b2:17:55:7d:dd:f7:21:e9:ea:99:82:b6:a0:23: 1b:56:3a:38:f2:3f:14:14:6f:b4:ef:a4:49:28:98:e7:3b:2f: 8b:45:0a:13:53:5d:e7:e7:06:30:77:b1:f5:0b:30:df:da:f7: 0c:a8:44:ae:bd:04:a8:3b:46:49:49:21:c8:64:79:ba:b2:61: 34:a0:7e:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSciH/dwbffMXxhZky5RjOTDxSf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjEwMDUxMzQ5MDNaFw0yNjEwMDgxNDQ3MDNaMDMxMTAvBgNV BAMTKDE1Mzc0QTExQzI4Q0M5NzJERTg0Q0FDMTY5REY5OENGNjUwNjMxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVprmWyoDvI/gZDHwPxux5TAPW 9dD34H+n4P26XeUVFU4kvPEI/kIoezQqRsi9IkvcVXFpujXemEVBduHZ9NK0LeFu DHVs0scV7Bf78PaIoBWs4a5m3JNntn3Q0M3dBbN1atQJdlutbldGKLBn7YKMJKb5 aWXC02OP3FHu4jX1sz/mpXKSk9XyOZthMiFRSZo/dSXrAc5caxgLZ8HVyzngbsRU Q16A86rDn1jvXyONWRIGTng2FS3Hom6DEi1xq4fe1hI3yGM7WywqZJzrrP8YOejH GFLzlvYpY3gRkb4kzLYk221E+4hEe8pS8+hapw++hwjlPOADNsQ/MPJ/UDgDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFTdKEcKMyXLehMrBad+Yz2UGMSgwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7cSuPYG8wEX lWwVDPOBv06ohT83iM9uzo0E+DOHGDSDt53w/OaQtKsHekmRdLSznohDCUK+EX6z L9Njd6WKZUtk0fx46XIohtsEbvyPU8g8wiWKesjzwBQxmvKdlC5vGPkiBmxo/jL6 mVvYL4zxHhbR/IYMLqLBj6GEg9gVVQvs4urtHJBrHqx7xLuxAT719BnKfWbUb+gs qPVCUDwCyLtJdlw94MCINA/sh6pNixjCWNvQjSQq7rIXVX3d9yHp6pmCtqAjG1Y6 OPI/FBRvtO+kSSiY5zsvi0UKE1Nd5+cGMHex9Qsw39r3DKhErr0EqDtGSUkhyGR5 urJhNKB+Kw== -----END CERTIFICATE-----Generated at Mon Oct 5 19:23:24 2026 by rpki-client