$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft File: D9EB5C6DC17682949F5243587DA38740C3EEA953.mft (raw, json) Hash identifier: Si0oelwclyNwi9W/n6HxTEP9pozE7pwGoEaQmCVYbLc= Subject key identifier: 18:3A:6E:89:EB:7E:D2:0E:FE:2B:F2:F1:98:D7:F7:0D:AE:44:18:46 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 530E0CC6DC527ED578172E2BCF5748D52724A1DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft Manifest number: 0141 Signing time: Mon 21 Sep 2026 16:38:18 +0000 Manifest this update: Mon 21 Sep 2026 16:33:18 +0000 Manifest next update: Thu 24 Sep 2026 23:06:18 +0000 Files and hashes: 1: 3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (hash: mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=) 2: D9EB5C6DC17682949F5243587DA38740C3EEA953.crl (hash: 4EgNsnBrOI/yGAoeJkXIpqoHtOI0uKYOqDvrYqlpO6U=) 3: 3131392e3136312e3135302e302f32342d3234203d3e203633363331.roa (hash: okNrHQWlAZcM0ybXfs5gjhn4SzMvRZc5F26x1wSUssw=) 4: 3130332e37372e38382e302f32322d3232203d3e2030.roa (hash: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY=) 5: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (hash: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg=) 6: 3130332e37372e37322e302f32322d3232203d3e203633363331.roa (hash: NpW6AlD0eVdPdmCTOskky2wwQE64FmrJNHWbldBZcxc=) 7: 3131392e3136312e3133382e302f32342d3234203d3e203633363331.roa (hash: lHQp/Div7ulKm97od1SQswQ3yI5J9U71XxLou9kga38=) 8: 3131392e3136312e3133392e302f32342d3234203d3e203633363331.roa (hash: nydKiRyHm3PHN6iWfg7icv7RBMzkwjFy+ct03JbKQdw=) 9: 3130332e37372e37352e302f32342d3234203d3e203633363331.roa (hash: a7l7+V4+dpfaquk22MoeFRXSKe1Gx6rGVmWsi2/A0CA=) 10: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (hash: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=) 11: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (hash: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs=) 12: 3131392e3136312e3135332e302f32342d3234203d3e203633363331.roa (hash: /bES/Bm3e3I6uwLynFP1nPItfsrn7ti5dzc/15vqHrg=) 13: 3130332e37372e37342e302f32342d3234203d3e203633363331.roa (hash: +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=) 14: 3131392e3136312e3134332e302f32342d3234203d3e203633363331.roa (hash: q5UvvsX5qH7j9+5pZLRPJUdgPc2NxY5OKXVZ0NSCJAo=) 15: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (hash: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8=) 16: 323430373a386238303a3a2f33322d3634203d3e203633363331.roa (hash: WdIf6CkgwHhBtmwW9wC8z2X2aD7F1CPhNusCG6l7zvk=) 17: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (hash: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=) 18: 3131302e3137322e3232342e302f32322d3232203d3e2030.roa (hash: vfSoXvfxdoOO8Tcwj9aUwTPHooLMqelVtrGaoAhknTQ=) 19: 3131392e3136312e3135372e302f32342d3234203d3e203633363331.roa (hash: tUiIUTqcTNvN/U4B9L5lCpdQw6TwFJaaWBbk34dQlvI=) 20: 3131392e3136312e3135392e302f32342d3234203d3e203633363331.roa (hash: +SiM0cwCxJkpIIpaeYtLkv/nxt4GytCuAhasO+bG19M=) 21: 3131392e3136312e3134362e302f32342d3234203d3e203633363331.roa (hash: OABa4cNuqzmJY4gHN33EpjQDWN7uNzrp8aMvvXUl78s=) 22: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (hash: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk=) 23: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (hash: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug=) 24: 3131392e3136312e3133372e302f32342d3234203d3e203633363331.roa (hash: uYXy1ZNlr/DDnhA91fdp96VTjAGbBGrKxJ/nJwBFE4c=) 25: 3131392e3136312e3135382e302f32342d3234203d3e203633363331.roa (hash: LQZaiQ/Qd/M/fCrq9bHgdqWNP7ugk6V735y0mDkj9fA=) 26: 3131392e3136312e3134372e302f32342d3234203d3e203633363331.roa (hash: nG5OMbfJfXjqu0EBfh5ujK0tpWUhR/z7nnDCbIOL/P0=) 27: 3131392e3136312e3134322e302f32342d3234203d3e203633363331.roa (hash: GCzj2v7L5bU/5xAICc7Mo0IWDU6IPyXLJDYDlG2dtII=) 28: 3131392e3136312e3134312e302f32342d3234203d3e203633363331.roa (hash: f4vNZ08uUNtuyklw4goVqXSaWbpQ5fYDLqZ5SHP2/5g=) 29: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (hash: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY=) 30: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (hash: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8=) 31: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (hash: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=) 32: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (hash: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=) 33: 3131392e3136312e3134302e302f32342d3234203d3e203633363331.roa (hash: eing/mIPhXhe93XLvq3RC5YRPf8OivgAJSu54LJSd48=) 34: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (hash: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=) 35: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (hash: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=) 36: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (hash: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0e:0c:c6:dc:52:7e:d5:78:17:2e:2b:cf:57:48:d5:27:24:a1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Sep 21 16:33:18 2026 GMT Not After : Sep 24 23:06:18 2026 GMT Subject: CN=183A6E89EB7ED20EFE2BF2F198D7F70DAE441846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:2e:ef:2c:3e:48:dd:f1:e1:74:14:7e:bd: 6a:9e:0a:1c:d4:cc:e3:eb:94:a1:67:aa:cd:ef:2f: 27:f4:00:28:f5:7b:b1:a8:d5:53:a6:ed:a3:15:76: 12:7c:74:79:f7:76:4f:fe:bc:96:b9:ad:46:fa:82: 86:77:b2:fe:b3:7d:d9:3d:0e:d9:1c:8e:d0:ea:67: 1f:69:2a:e6:f1:aa:1e:8b:0f:48:82:1c:c2:85:57: 3f:c3:59:f7:c6:59:95:d0:f6:2e:18:0c:89:46:2b: 42:58:8c:0f:b6:c5:2d:01:b5:c3:1e:ab:4d:b8:bc: 7d:fe:4f:7c:90:69:5c:d9:e4:44:16:bc:b8:b4:6f: 79:a9:66:50:6f:05:90:63:30:c4:cd:a3:88:09:97: 67:64:c5:a4:a0:eb:af:b6:91:1d:57:9c:0a:ad:8d: 9e:fe:0f:34:df:d9:12:08:05:5e:f4:6f:3d:ee:d7: ca:fc:db:15:fc:c3:63:07:82:29:88:18:2d:e7:20: 74:6b:a1:47:6c:d3:94:1d:5d:9a:96:86:ed:48:bf: fb:8a:86:25:1f:f8:3b:f4:b8:63:74:f5:34:75:55: 65:4a:81:db:5a:60:6e:2c:f4:32:5f:a7:bc:42:c1: 30:00:5e:db:ee:88:4c:13:3c:14:e0:59:21:80:67: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3A:6E:89:EB:7E:D2:0E:FE:2B:F2:F1:98:D7:F7:0D:AE:44:18:46 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d1:40:1b:a5:ff:77:90:e1:25:fc:70:ae:6e:23:0f:a7:af: 03:45:21:8a:16:72:63:10:82:bb:a7:be:69:91:ab:a5:af:80: e7:b5:f4:1e:56:2a:e8:d0:d3:81:6a:3d:e6:24:fa:6e:39:e5: f3:82:2c:c6:30:fd:8b:96:6f:bb:30:f6:76:07:88:69:92:95: b4:17:98:53:c8:a7:87:49:ac:5c:b2:8c:56:52:f6:8b:1e:93: 10:a8:a1:81:df:7e:e4:1a:42:4f:ff:4c:7d:00:58:49:2d:0f: 19:72:cb:d6:f9:a4:f5:78:55:11:b3:49:c5:ca:5e:27:e8:dc: ee:4c:45:bc:0b:95:74:3c:95:06:21:bf:ec:c9:9d:d9:ab:4f: 81:32:52:cc:8a:99:1f:f9:00:7d:a5:c3:8c:d3:00:c6:dd:b3: db:f6:5b:f6:31:81:06:3c:1f:f6:12:10:03:a4:3a:18:ce:6c: 0e:53:6b:c9:06:80:1c:3b:b7:b2:a2:bd:52:fa:fd:c8:53:ed: b4:10:9a:39:d0:67:52:5d:4a:3e:d1:31:3f:a2:07:f2:b1:4a: 20:05:ec:73:0a:c2:3c:b5:cd:f7:d5:69:90:b1:5a:af:ae:03: 10:92:c7:01:22:95:7c:74:cc:3e:56:18:15:db:3b:9e:14:c8: 05:bb:b0:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUw4MxtxSftV4Fy4rz1dI1Sckod4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA5MjExNjMzMThaFw0yNjA5MjQyMzA2MThaMDMxMTAvBgNV BAMTKDE4M0E2RTg5RUI3RUQyMEVGRTJCRjJGMTk4RDdGNzBEQUU0NDE4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVy7vLD5I3fHhdBR+vWqeChzU zOPrlKFnqs3vLyf0ACj1e7Go1VOm7aMVdhJ8dHn3dk/+vJa5rUb6goZ3sv6zfdk9 DtkcjtDqZx9pKubxqh6LD0iCHMKFVz/DWffGWZXQ9i4YDIlGK0JYjA+2xS0BtcMe q024vH3+T3yQaVzZ5EQWvLi0b3mpZlBvBZBjMMTNo4gJl2dkxaSg66+2kR1XnAqt jZ7+DzTf2RIIBV70bz3u18r82xX8w2MHgimIGC3nIHRroUds05QdXZqWhu1Iv/uK hiUf+Dv0uGN09TR1VWVKgdtaYG4s9DJfp7xCwTAAXtvuiEwTPBTgWSGAZ9H/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGDpuiet+0g7+K/LxmNf3Da5EGEYwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC9EOUVCNUM2REMxNzY4 Mjk0OUY1MjQzNTg3REEzODc0MEMzRUVBOTUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldFAG6X/d5Dh Jfxwrm4jD6evA0UhihZyYxCCu6e+aZGrpa+A57X0HlYq6NDTgWo95iT6bjnl84Is xjD9i5ZvuzD2dgeIaZKVtBeYU8inh0msXLKMVlL2ix6TEKihgd9+5BpCT/9MfQBY SS0PGXLL1vmk9XhVEbNJxcpeJ+jc7kxFvAuVdDyVBiG/7Mmd2atPgTJSzIqZH/kA faXDjNMAxt2z2/Zb9jGBBjwf9hIQA6Q6GM5sDlNryQaAHDu3sqK9Uvr9yFPttBCa OdBnUl1KPtExP6IH8rFKIAXscwrCPLXN99VpkLFar64DEJLHASKVfHTMPlYYFds7 nhTIBbuw2w== -----END CERTIFICATE-----Generated at Tue Sep 22 13:38:39 2026 by rpki-client