$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json) Hash identifier: yKQ9Ep6D4nX5gtjeRhqkLDPMZE3TRnFcb6v+uvFwJM8= Subject key identifier: A0:B7:86:9B:4F:DE:D3:AE:90:53:03:B3:A4:72:7A:9A:3C:42:10:63 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 56E95AE15ABB1F08C02FFBD1F0C81072087482E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft Manifest number: 0149 Signing time: Sun 11 Oct 2026 13:35:40 +0000 Manifest this update: Sun 11 Oct 2026 13:30:40 +0000 Manifest next update: Thu 15 Oct 2026 00:21:40 +0000 Files and hashes: 1: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=) 2: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=) 3: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=) 4: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=) 5: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=) 6: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=) 7: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=) 8: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=) 9: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=) 10: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: dVP+8tW6+rAX3Ys9G768azmq6YTv6+s3uobdqeUSHG8=) 11: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e9:5a:e1:5a:bb:1f:08:c0:2f:fb:d1:f0:c8:10:72:08:74:82:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Oct 11 13:30:40 2026 GMT Not After : Oct 15 00:21:40 2026 GMT Subject: CN=A0B7869B4FDED3AE905303B3A4727A9A3C421063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:d0:20:f2:46:7b:e6:6c:89:3c:12:a8:ac: 21:f1:77:a9:ef:b0:e8:61:54:d5:d4:f4:be:6e:96: 19:fe:6a:bf:0a:23:fa:53:f1:65:77:26:a4:1a:b0: 46:7d:c3:7a:24:a5:39:c3:77:17:e5:90:c8:cb:94: cc:e9:d3:1d:fa:3c:66:22:f3:a2:88:96:32:9c:4c: a5:05:4d:85:90:ff:12:f1:60:e0:40:43:61:08:16: 6b:ff:cf:ac:c5:93:6e:d6:ee:4c:94:60:4e:3e:b7: db:00:55:b9:15:6e:f8:11:6c:e4:92:c9:a6:07:6e: 04:8b:9c:12:53:04:04:15:65:93:9c:d4:11:55:19: 05:e6:1a:4a:1b:29:7e:70:93:ff:83:ab:cf:5f:66: 69:ee:54:2f:df:fc:e4:12:95:5f:24:d7:3a:f4:f2: 11:0c:77:a2:da:6d:b6:62:11:5a:03:99:6e:ca:c7: 7f:16:b9:29:f7:ee:4f:ed:4c:0a:22:f3:73:b8:b5: 5d:b8:68:74:5e:97:fe:ed:11:5e:5f:df:ce:9e:98: fe:de:43:7f:87:9c:67:02:13:61:00:58:d6:af:86: 4a:41:a4:42:cc:2d:12:4b:7f:83:a6:41:1c:ce:56: 0b:f0:d1:2a:c4:2a:68:56:99:56:d1:42:54:72:28: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:86:9B:4F:DE:D3:AE:90:53:03:B3:A4:72:7A:9A:3C:42:10:63 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:86:ca:87:a4:49:2a:5c:c6:cf:60:27:37:4a:64:72:b7:b5: 87:f3:18:c8:00:de:8a:07:3d:bc:52:6d:f6:c2:a0:22:e7:a4: dc:fb:5b:ed:91:df:46:e9:40:bc:1e:66:83:bc:12:04:9e:26: e0:4e:db:6f:43:8d:ed:dd:61:71:13:7c:d1:26:9d:01:86:d5: 00:7b:56:68:74:34:90:ed:5b:7e:2a:e1:b3:c0:c5:84:c6:0d: 98:02:1e:bb:6f:01:24:59:b2:6d:0b:9e:60:bd:2e:3a:87:83: 92:dc:71:7c:5d:8f:c9:1d:35:09:57:6e:0f:f1:27:4a:65:bf: 4f:ae:42:65:f0:fb:11:7c:d0:2c:f1:55:75:a6:22:8c:a1:b6: 23:fb:1c:b6:3e:db:bd:bb:35:c1:9b:89:fa:9f:df:4f:44:b3: 93:b4:ef:09:25:93:2a:e6:b0:4a:ff:23:7f:8d:de:e9:11:8c: 54:43:2c:0d:17:92:7a:f8:58:dd:5e:e2:21:01:5f:d3:58:1c: 25:dd:6a:6f:bd:20:ca:9e:29:c4:c2:67:e3:3f:6b:0d:8b:e4: f0:43:87:39:8f:48:02:e2:b3:a8:f0:b1:62:e5:ec:24:56:e9: 15:7d:c4:93:d2:d8:39:4b:e5:46:c1:47:96:23:90:87:89:08: 45:f9:93:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVula4Vq7HwjAL/vR8MgQcgh0guEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjEwMTExMzMwNDBaFw0yNjEwMTUwMDIxNDBaMDMxMTAvBgNV BAMTKEEwQjc4NjlCNEZERUQzQUU5MDUzMDNCM0E0NzI3QTlBM0M0MjEwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3S9Ag8kZ75myJPBKorCHxd6nv sOhhVNXU9L5ulhn+ar8KI/pT8WV3JqQasEZ9w3okpTnDdxflkMjLlMzp0x36PGYi 86KIljKcTKUFTYWQ/xLxYOBAQ2EIFmv/z6zFk27W7kyUYE4+t9sAVbkVbvgRbOSS yaYHbgSLnBJTBAQVZZOc1BFVGQXmGkobKX5wk/+Dq89fZmnuVC/f/OQSlV8k1zr0 8hEMd6LabbZiEVoDmW7Kx38WuSn37k/tTAoi83O4tV24aHRel/7tEV5f386emP7e Q3+HnGcCE2EAWNavhkpBpELMLRJLf4OmQRzOVgvw0SrEKmhWmVbRQlRyKD5RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoLeGm0/e066QUwOzpHJ6mjxCEGMwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC85Qjg3REZFQkRDQ0RB ODEzMTE2OTg4RDQ0MjFCMDg4NDA0NTc4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4bKh6RJKlzG z2AnN0pkcre1h/MYyADeigc9vFJt9sKgIuek3Ptb7ZHfRulAvB5mg7wSBJ4m4E7b b0ON7d1hcRN80SadAYbVAHtWaHQ0kO1bfirhs8DFhMYNmAIeu28BJFmybQueYL0u OoeDktxxfF2PyR01CVduD/EnSmW/T65CZfD7EXzQLPFVdaYijKG2I/sctj7bvbs1 wZuJ+p/fT0Szk7TvCSWTKuawSv8jf43e6RGMVEMsDReSevhY3V7iIQFf01gcJd1q b70gyp4pxMJn4z9rDYvk8EOHOY9IAuKzqPCxYuXsJFbpFX3Ek9LYOUvlRsFHliOQ h4kIRfmTqA== -----END CERTIFICATE-----Generated at Tue Oct 13 09:22:35 2026 by rpki-client