$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: 9J2qAnysbwNjcLGBoimn8bBZkCYGH/jepEnqskEYKmc= Subject key identifier: 4D:72:B1:42:C0:B6:F0:74:CD:CA:58:00:27:D5:14:C9:FB:2B:4F:EC Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 41839F016A24D835C89ACFE2CCA393291FA907F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: F0 Signing time: Sat 10 Oct 2026 03:39:11 +0000 Manifest this update: Sat 10 Oct 2026 03:34:11 +0000 Manifest next update: Tue 13 Oct 2026 04:23:11 +0000 Files and hashes: 1: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=) 2: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: 6nllpcR2763HkM5Y5sDpSKrRyP7TPfhBowFSeKZ10Oo=) 3: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=) 4: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=) 5: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=) 6: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=) 7: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=) 8: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 9: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=) 10: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 11: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 04:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:83:9f:01:6a:24:d8:35:c8:9a:cf:e2:cc:a3:93:29:1f:a9:07:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: Oct 10 03:34:11 2026 GMT Not After : Oct 13 04:23:11 2026 GMT Subject: CN=4D72B142C0B6F074CDCA580027D514C9FB2B4FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4d:99:33:cf:86:c6:27:5e:4d:b3:33:90:ac: 73:e4:30:8d:d6:98:30:6b:0e:f8:0f:59:8b:cf:6f: c1:6e:63:9e:76:7c:e0:bd:e6:c0:33:2e:02:ee:e6: 6b:44:6e:6b:8d:6e:d6:69:ab:55:85:de:18:4c:c7: 2b:34:e2:51:81:0b:74:e3:1b:1d:16:01:3d:6e:52: 80:c9:af:66:e9:6e:82:1d:8d:c5:d0:2b:88:29:57: b4:e8:5f:e4:6d:98:c7:a7:b7:4d:1e:a4:bd:20:9e: 1b:8b:72:67:bd:e8:67:04:2a:7d:d2:fe:da:b7:68: 62:64:37:eb:cc:7b:67:7b:84:59:47:c2:0e:18:49: 0d:57:ad:5d:e9:e4:c3:ee:22:13:ea:c0:fc:f4:8c: d3:a7:33:3b:45:a4:3c:e0:46:70:55:c4:9b:7c:f9: dd:fa:40:75:c1:7a:3d:86:6b:c6:60:13:db:9d:fe: 12:10:cc:a2:87:b0:2e:55:1b:97:11:4f:6e:7a:ab: c9:0c:45:b2:be:e1:30:a2:d8:19:dc:bd:35:bb:e9: 6d:9d:03:d3:69:fe:12:39:cd:96:22:40:3a:fa:54: da:97:65:99:47:59:5a:48:73:50:e2:e0:4f:3e:7f: 9a:ae:9e:2e:46:78:7b:ae:01:c2:01:71:e4:e1:a5: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:B1:42:C0:B6:F0:74:CD:CA:58:00:27:D5:14:C9:FB:2B:4F:EC X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:53:e0:9d:cc:aa:e1:1b:c5:1c:f1:31:57:cb:78:7f:72:98: 81:50:ce:02:a3:73:ab:b6:91:80:4e:05:75:03:05:1d:de:76: 0a:4f:11:fb:90:ad:1a:c5:bc:62:e3:01:6e:23:72:f9:24:d2: f3:bf:16:26:af:c9:bd:34:ea:79:85:fe:b2:8f:0d:b7:e4:3f: 96:56:ee:a4:5f:85:e8:36:c4:24:ca:99:39:df:7b:eb:f5:1f: b8:13:0e:24:b0:6b:49:af:6c:f8:4f:49:d7:94:47:58:5a:a0: 72:bc:b4:f3:57:dd:1c:58:a4:c1:b9:19:6d:aa:a3:9d:e2:53: f4:6e:f2:2a:f5:79:59:63:06:bf:7f:39:cf:d1:2a:fe:91:51: ce:c4:bd:4c:a8:68:c0:e0:ce:52:49:70:8a:72:ee:f8:b9:59: c0:1c:b3:38:53:d4:48:f1:0a:1a:0c:13:41:bc:ba:20:2d:53: 7a:3a:d0:f2:2b:82:28:68:f7:57:27:d6:ab:43:71:ab:f7:db: b0:cb:3d:ca:f3:8a:a4:be:30:44:68:3c:2e:d7:12:38:4c:80: e4:e1:50:3c:de:08:3c:8a:de:84:64:40:73:24:e7:1a:cf:01: dc:2e:76:c9:9c:b8:2e:23:c4:fc:6f:0d:40:0a:0f:5a:1d:02: ab:ae:36:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQYOfAWok2DXIms/izKOTKR+pB/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjEwMTAwMzM0MTFaFw0yNjEwMTMwNDIzMTFaMDMxMTAvBgNV BAMTKDRENzJCMTQyQzBCNkYwNzRDRENBNTgwMDI3RDUxNEM5RkIyQjRGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1TZkzz4bGJ15NszOQrHPkMI3W mDBrDvgPWYvPb8FuY552fOC95sAzLgLu5mtEbmuNbtZpq1WF3hhMxys04lGBC3Tj Gx0WAT1uUoDJr2bpboIdjcXQK4gpV7ToX+RtmMent00epL0gnhuLcme96GcEKn3S /tq3aGJkN+vMe2d7hFlHwg4YSQ1XrV3p5MPuIhPqwPz0jNOnMztFpDzgRnBVxJt8 +d36QHXBej2Ga8ZgE9ud/hIQzKKHsC5VG5cRT256q8kMRbK+4TCi2BncvTW76W2d A9Np/hI5zZYiQDr6VNqXZZlHWVpIc1Di4E8+f5quni5GeHuuAcIBceThpbwxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTXKxQsC28HTNylgAJ9UUyfsrT+wwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1Pgncyq4RvF HPExV8t4f3KYgVDOAqNzq7aRgE4FdQMFHd52Ck8R+5CtGsW8YuMBbiNy+STS878W Jq/JvTTqeYX+so8Nt+Q/llbupF+F6DbEJMqZOd976/UfuBMOJLBrSa9s+E9J15RH WFqgcry081fdHFikwbkZbaqjneJT9G7yKvV5WWMGv385z9Eq/pFRzsS9TKhowODO UklwinLu+LlZwByzOFPUSPEKGgwTQby6IC1TejrQ8iuCKGj3VyfWq0Nxq/fbsMs9 yvOKpL4wRGg8LtcSOEyA5OFQPN4IPIrehGRAcyTnGs8B3C52yZy4LiPE/G8NQAoP Wh0Cq642kw== -----END CERTIFICATE-----Generated at Sat Oct 10 16:58:14 2026 by rpki-client