$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: 7B8uK5yzkYp5hr/fZrvThVnB1idyrq5naDgJmFs9c9E= Subject key identifier: F2:8A:3D:AD:43:39:54:33:4E:1C:97:E3:EE:76:BC:FA:E7:B3:05:27 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 2AC14B0F05BF2B5381C57AE7584ED5656535D677 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 9A Signing time: Wed 07 Oct 2026 22:06:52 +0000 Manifest this update: Wed 07 Oct 2026 22:01:52 +0000 Manifest next update: Sun 11 Oct 2026 04:51:52 +0000 Files and hashes: 1: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: YPoHU2vSQjK12XWdjz9Rtsj2VPtUe5Xv9knKcSTtosU=) 2: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) 3: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c1:4b:0f:05:bf:2b:53:81:c5:7a:e7:58:4e:d5:65:65:35:d6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Oct 7 22:01:52 2026 GMT Not After : Oct 11 04:51:52 2026 GMT Subject: CN=F28A3DAD433954334E1C97E3EE76BCFAE7B30527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:ff:2c:12:3a:4b:29:18:87:e5:35:fa:49: 24:11:d3:b9:1b:05:9b:ee:78:ef:48:19:11:df:3e: 4e:d8:a4:b0:2d:55:af:fc:bb:69:8e:4d:40:d3:e7: eb:0c:d1:ad:c3:78:07:b2:29:d2:0f:28:ea:6c:83: a8:9e:5d:4f:61:55:04:5c:a0:47:0c:c1:ca:23:42: 60:f1:9b:ed:02:52:20:11:99:92:ac:d9:90:b5:1a: 24:8e:33:0a:71:b6:2b:9d:c1:3d:8d:94:37:ed:6f: 5f:c6:4b:0c:2a:1c:cc:0b:29:66:25:5a:6f:fb:42: 41:4a:9a:1c:0a:74:32:64:c3:04:3d:65:74:b2:ab: a3:d1:b6:4a:7e:d1:ed:57:70:ba:cb:23:78:37:14: a4:fb:54:31:09:e0:4c:32:e6:c0:51:3e:32:72:5d: c5:0f:ce:88:54:f1:18:fc:e4:52:14:61:3a:40:e0: 31:ab:27:63:3a:33:06:ef:56:e7:3a:49:05:89:9c: 31:26:09:57:11:fa:2b:eb:e9:17:a7:e5:e5:98:46: 1c:29:87:4b:69:11:36:ce:11:e6:47:a5:57:34:c2: 42:0d:90:95:67:5a:cf:b2:4f:da:47:5b:8b:2e:94: 9d:33:fb:cc:ad:81:0e:7f:24:f4:a7:60:0f:ce:c6: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8A:3D:AD:43:39:54:33:4E:1C:97:E3:EE:76:BC:FA:E7:B3:05:27 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:09:30:de:c8:8d:58:e3:8c:cb:50:8e:a9:ec:ff:0b:1e:fc: 78:d5:96:de:5d:e7:ec:aa:21:eb:68:9a:ce:8e:54:b9:b9:d7: da:22:ca:78:2f:30:bf:6f:af:0d:a2:40:9a:b7:41:3a:cd:df: fb:f2:8b:14:0f:f6:25:86:8c:13:f2:51:19:fc:b7:ef:f8:cc: c5:b5:ff:35:07:f0:15:7b:4d:af:13:01:34:84:51:d7:ad:ba: a4:72:43:b5:c0:33:72:9a:5e:d9:6f:74:2c:ce:85:9b:09:98: 1f:68:ed:15:e7:fd:fd:5d:6d:30:3e:72:b7:d8:9a:3a:17:d8: 07:8f:9d:f7:ad:53:28:69:44:09:a6:ce:67:49:54:04:e3:02: be:72:85:51:22:45:b5:e2:c0:a8:6e:2c:68:b2:29:a5:f9:23: 8a:06:20:14:19:cf:47:3a:27:02:57:ab:38:24:b2:07:04:e1: 6d:1e:37:5f:44:82:d7:b2:e5:43:df:0a:20:7c:01:13:6f:38: cf:90:74:f0:70:74:8c:75:1f:05:9a:60:14:cb:13:74:04:d6: 05:a2:f6:0a:35:b5:de:dc:2d:9f:51:64:c8:c0:ab:fe:ab:59: 23:f5:d8:43:a4:0e:82:b1:7d:04:b5:68:25:9c:c7:23:16:e1: 01:61:b3:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKsFLDwW/K1OBxXrnWE7VZWU11ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjEwMDcyMjAxNTJaFw0yNjEwMTEwNDUxNTJaMDMxMTAvBgNV BAMTKEYyOEEzREFENDMzOTU0MzM0RTFDOTdFM0VFNzZCQ0ZBRTdCMzA1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKP8sEjpLKRiH5TX6SSQR07kb BZvueO9IGRHfPk7YpLAtVa/8u2mOTUDT5+sM0a3DeAeyKdIPKOpsg6ieXU9hVQRc oEcMwcojQmDxm+0CUiARmZKs2ZC1GiSOMwpxtiudwT2NlDftb1/GSwwqHMwLKWYl Wm/7QkFKmhwKdDJkwwQ9ZXSyq6PRtkp+0e1XcLrLI3g3FKT7VDEJ4Ewy5sBRPjJy XcUPzohU8Rj85FIUYTpA4DGrJ2M6MwbvVuc6SQWJnDEmCVcR+ivr6Ren5eWYRhwp h0tpETbOEeZHpVc0wkINkJVnWs+yT9pHW4sulJ0z+8ytgQ5/JPSnYA/OxsdhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8oo9rUM5VDNOHJfj7na8+uezBScwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwkw3siNWOOM y1COqez/Cx78eNWW3l3n7Koh62iazo5UubnX2iLKeC8wv2+vDaJAmrdBOs3f+/KL FA/2JYaME/JRGfy37/jMxbX/NQfwFXtNrxMBNIRR1626pHJDtcAzcppe2W90LM6F mwmYH2jtFef9/V1tMD5yt9iaOhfYB4+d961TKGlECabOZ0lUBOMCvnKFUSJFteLA qG4saLIppfkjigYgFBnPRzonAlerOCSyBwThbR43X0SC17LlQ98KIHwBE284z5B0 8HB0jHUfBZpgFMsTdATWBaL2CjW13twtn1FkyMCr/qtZI/XYQ6QOgrF9BLVoJZzH IxbhAWGzkQ== -----END CERTIFICATE-----Generated at Thu Oct 8 13:46:05 2026 by rpki-client