$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: AQqT/BRaQYVsPdzxUxJvYjxbNwaawzGJjg1uivL7tus= Subject key identifier: D7:13:71:99:94:91:05:BC:4D:73:75:DB:76:5E:E9:C4:69:F7:80:0A Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 59D28D08E96719652328E32ED86CE4BAD90927CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: CC Signing time: Mon 28 Sep 2026 11:40:42 +0000 Manifest this update: Mon 28 Sep 2026 11:35:42 +0000 Manifest next update: Thu 01 Oct 2026 20:44:42 +0000 Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=) 2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: ZSIftmL208yqC+GqKBde4kJcZSMD/KlU8+8h2AqZMh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d2:8d:08:e9:67:19:65:23:28:e3:2e:d8:6c:e4:ba:d9:09:27:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Sep 28 11:35:42 2026 GMT Not After : Oct 1 20:44:42 2026 GMT Subject: CN=D7137199949105BC4D7375DB765EE9C469F7800A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:bf:40:18:d1:0e:1a:ef:e6:f2:83:de:b1: 4a:25:a9:3b:ad:07:41:bf:56:ad:04:87:15:55:0e: 1e:ad:6b:02:a5:49:63:85:ea:15:d2:3e:b9:4b:9c: 42:eb:ef:72:c1:b5:2d:a1:09:c3:61:13:c8:32:55: 3b:fd:01:92:1a:31:19:ec:e5:77:05:a0:07:04:3c: e0:59:83:d7:a3:12:24:b3:26:0b:84:27:a0:e5:01: 36:b8:4a:28:79:cd:1d:3c:24:84:2d:dd:63:1e:61: 16:98:5b:29:9e:bb:8f:47:22:a6:c2:ea:9a:f8:5b: 23:89:ac:66:cd:1c:6a:65:5d:1c:0f:f2:ba:7a:31: 90:62:75:0d:5b:a7:4a:c9:48:fc:59:d6:e3:9b:a0: 3e:16:e6:50:b8:d1:9a:39:71:ae:41:f6:39:74:cb: c7:68:22:10:19:1f:3b:61:7a:3a:e2:9a:0f:e3:7a: 89:6f:a7:9e:9e:fe:ff:ba:c8:d9:ab:ba:34:8c:c9: 8e:90:ff:c4:64:77:5c:b0:9e:a5:e9:10:0b:52:b3: 0d:7c:d9:f2:86:41:c8:00:46:f6:d3:54:f2:cf:dd: 7f:7f:13:d3:20:0b:80:9f:70:12:71:db:d2:59:33: f8:c9:c2:1d:65:5a:e6:3c:c3:c3:cb:11:a8:3f:10: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:13:71:99:94:91:05:BC:4D:73:75:DB:76:5E:E9:C4:69:F7:80:0A X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:87:4b:a1:77:14:52:59:76:88:b0:54:73:c6:07:d0:c1:ef: 93:61:1e:ee:66:03:5a:ff:3c:9c:12:9a:8a:c5:25:4f:65:50: cf:56:b8:a7:fd:b0:6a:22:c8:ee:9c:9a:23:6b:10:ba:52:12: 7c:5d:24:e0:d6:cd:26:d5:0c:eb:ab:90:1a:5a:8e:65:15:b5: e9:6e:9b:59:65:74:a9:34:61:ce:22:ff:54:26:d4:72:03:f4: ca:4c:ab:55:9a:9a:5e:ad:91:0f:47:c1:c5:a3:62:1e:15:21: 65:a0:3d:45:5e:a9:ec:5c:60:bd:18:62:56:5b:59:c1:7e:72: 4c:28:52:f5:74:6b:ee:be:91:fa:23:d7:42:7b:0c:f7:be:d6: 04:d6:a2:18:65:e7:28:d1:ba:7d:ae:53:f6:cb:93:80:ca:d8: 5f:99:39:0e:a6:b7:2d:57:8c:24:22:d3:75:b0:09:b8:2a:e5: 84:57:a0:7f:77:87:06:42:52:9c:77:82:47:fd:24:7a:0d:19: 7b:4b:34:48:19:9f:f8:fa:91:e8:d3:6c:c6:59:37:a9:e3:8d: b7:7b:7e:29:e0:af:a6:07:a1:e5:1b:0b:8a:71:1b:01:80:d6: 72:fb:0d:20:e2:95:c7:6f:61:c8:17:30:96:4f:3e:8a:de:1f: 19:35:7a:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWdKNCOlnGWUjKOMu2GzkutkJJ8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA5MjgxMTM1NDJaFw0yNjEwMDEyMDQ0NDJaMDMxMTAvBgNV BAMTKEQ3MTM3MTk5OTQ5MTA1QkM0RDczNzVEQjc2NUVFOUM0NjlGNzgwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbO79AGNEOGu/m8oPesUolqTut B0G/Vq0EhxVVDh6tawKlSWOF6hXSPrlLnELr73LBtS2hCcNhE8gyVTv9AZIaMRns 5XcFoAcEPOBZg9ejEiSzJguEJ6DlATa4Sih5zR08JIQt3WMeYRaYWymeu49HIqbC 6pr4WyOJrGbNHGplXRwP8rp6MZBidQ1bp0rJSPxZ1uOboD4W5lC40Zo5ca5B9jl0 y8doIhAZHzthejrimg/jeolvp56e/v+6yNmrujSMyY6Q/8Rkd1ywnqXpEAtSsw18 2fKGQcgARvbTVPLP3X9/E9MgC4CfcBJx29JZM/jJwh1lWuY8w8PLEag/EKXjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1xNxmZSRBbxNc3Xbdl7pxGn3gAowHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiodLoXcUUll2 iLBUc8YH0MHvk2Ee7mYDWv88nBKaisUlT2VQz1a4p/2waiLI7pyaI2sQulISfF0k 4NbNJtUM66uQGlqOZRW16W6bWWV0qTRhziL/VCbUcgP0ykyrVZqaXq2RD0fBxaNi HhUhZaA9RV6p7FxgvRhiVltZwX5yTChS9XRr7r6R+iPXQnsM977WBNaiGGXnKNG6 fa5T9suTgMrYX5k5Dqa3LVeMJCLTdbAJuCrlhFegf3eHBkJSnHeCR/0keg0Ze0s0 SBmf+PqR6NNsxlk3qeONt3t+KeCvpgeh5RsLinEbAYDWcvsNIOKVx29hyBcwlk8+ it4fGTV6aw== -----END CERTIFICATE-----Generated at Tue Sep 29 02:12:10 2026 by rpki-client