$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: LN5aCXcsxczjZ07j869jFux2MRF8CCT68OC7RJ6Svp8= Subject key identifier: D7:FD:8E:EA:7A:B5:2F:8C:7C:FB:04:FD:CE:0E:CC:EF:C7:59:34:31 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 7B1B80886154B95296246CF77B1D401C2B82EB07 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: A6 Signing time: Sat 03 Oct 2026 08:16:41 +0000 Manifest this update: Sat 03 Oct 2026 08:11:41 +0000 Manifest next update: Tue 06 Oct 2026 19:24:41 +0000 Files and hashes: 1: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: 9CcsO+ox7I9bInJ09rtGOetW00sAv9WHebHo+0/oRIg=) 2: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 3: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) 4: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 5: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 6: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1b:80:88:61:54:b9:52:96:24:6c:f7:7b:1d:40:1c:2b:82:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Oct 3 08:11:41 2026 GMT Not After : Oct 6 19:24:41 2026 GMT Subject: CN=D7FD8EEA7AB52F8C7CFB04FDCE0ECCEFC7593431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:97:aa:90:a6:51:13:c8:59:81:68:d7:73: c5:3b:b3:6f:40:93:14:c8:27:a3:fa:56:f6:e7:cd: 3f:58:53:04:34:42:f2:a7:bb:2a:6c:11:ca:3d:2a: 0d:ff:61:75:9a:01:3b:10:18:ed:bb:85:51:3f:40: c3:e0:fa:c9:d1:b6:39:a8:26:50:5b:17:27:df:4a: 35:d7:56:1e:f8:c6:0d:e2:a8:df:d3:4b:42:fe:37: 46:45:e9:8d:34:48:cc:5e:6f:a4:38:5d:27:4c:4b: 84:20:49:9f:15:cb:50:9c:24:92:d1:67:6d:23:7f: 26:51:51:c7:d5:84:59:21:62:3e:97:9f:fa:bb:17: a9:c5:e8:e6:6e:ab:8b:85:6f:c1:6d:2f:1f:9f:fc: c8:cf:ea:78:62:7c:36:f2:e6:83:b4:62:37:ca:4e: 68:e4:65:a2:9b:13:6e:a4:e3:6e:29:75:9f:70:2d: 79:1e:07:45:e5:84:ff:e0:d8:1d:a2:6c:6b:83:fe: 77:d0:2a:e5:5d:df:c9:de:5d:62:5b:fb:f3:a7:7d: 57:f4:95:b7:cb:c6:92:e4:27:96:f4:38:7e:3d:51: 1c:26:de:25:bb:96:ec:0a:ed:44:0f:0c:7f:8a:09: c1:4f:40:38:2f:8e:13:b6:e3:c8:a2:47:28:cb:4b: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:8E:EA:7A:B5:2F:8C:7C:FB:04:FD:CE:0E:CC:EF:C7:59:34:31 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:56:4e:dc:c3:32:4f:73:b8:84:00:f8:ee:13:1b:69:11: a5:2e:e3:8d:55:52:d0:86:16:a7:10:e7:2c:45:5d:93:e0:b4: 57:32:4e:4a:fe:65:9d:3f:a5:ce:cd:1d:e7:e0:21:77:a3:94: 44:d0:58:8b:6a:99:17:27:4e:c9:d7:e9:f7:92:24:8a:a1:38: 9d:f4:18:f5:a7:12:6c:5e:85:dc:8a:d5:93:b5:7e:7f:5b:de: cf:70:03:30:78:01:9c:d4:94:c4:4d:ab:e0:d8:38:a0:6d:c1: ab:59:ab:70:19:89:6c:b0:8f:3d:9b:c2:00:28:aa:e6:d5:ee: c9:85:62:94:01:66:b0:25:e7:aa:c6:93:22:ce:0e:32:d3:9b: 7f:11:32:c8:be:72:fa:32:d5:44:e1:07:ee:b2:0e:be:7a:e3: a5:3f:53:9a:7b:1a:13:af:ad:7a:41:db:b5:2a:7b:8a:11:72: 32:83:61:4f:01:ca:2e:6d:03:d2:5a:38:a4:2f:bc:4b:70:bf: a1:ce:5b:a6:d6:4b:e9:07:b7:bf:c7:ed:c6:67:80:79:b9:a8: ea:cb:72:44:49:85:3a:d9:55:34:e0:25:65:37:ce:71:e8:11: 30:c5:76:20:83:a5:d9:b4:78:f4:6d:a2:5d:c2:80:2f:36:6f: 02:a7:c5:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUexuAiGFUuVKWJGz3ex1AHCuC6wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjEwMDMwODExNDFaFw0yNjEwMDYxOTI0NDFaMDMxMTAvBgNV BAMTKEQ3RkQ4RUVBN0FCNTJGOEM3Q0ZCMDRGRENFMEVDQ0VGQzc1OTM0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3QJeqkKZRE8hZgWjXc8U7s29A kxTIJ6P6VvbnzT9YUwQ0QvKnuypsEco9Kg3/YXWaATsQGO27hVE/QMPg+snRtjmo JlBbFyffSjXXVh74xg3iqN/TS0L+N0ZF6Y00SMxeb6Q4XSdMS4QgSZ8Vy1CcJJLR Z20jfyZRUcfVhFkhYj6Xn/q7F6nF6OZuq4uFb8FtLx+f/MjP6nhifDby5oO0YjfK TmjkZaKbE26k424pdZ9wLXkeB0XlhP/g2B2ibGuD/nfQKuVd38neXWJb+/OnfVf0 lbfLxpLkJ5b0OH49URwm3iW7luwK7UQPDH+KCcFPQDgvjhO248iiRyjLS7wnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1/2O6nq1L4x8+wT9zg7M78dZNDEwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ1WTtzDMk9z uIQA+O4TG2kRpS7jjVVS0IYWpxDnLEVdk+C0VzJOSv5lnT+lzs0d5+Ahd6OURNBY i2qZFydOydfp95IkiqE4nfQY9acSbF6F3IrVk7V+f1vez3ADMHgBnNSUxE2r4Ng4 oG3Bq1mrcBmJbLCPPZvCACiq5tXuyYVilAFmsCXnqsaTIs4OMtObfxEyyL5y+jLV ROEH7rIOvnrjpT9TmnsaE6+tekHbtSp7ihFyMoNhTwHKLm0D0lo4pC+8S3C/oc5b ptZL6Qe3v8ftxmeAebmo6styREmFOtlVNOAlZTfOcegRMMV2IIOl2bR49G2iXcKA LzZvAqfFTw== -----END CERTIFICATE-----Generated at Sun Oct 4 08:34:55 2026 by rpki-client