$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: Inbp1W1+Tc7H4eShPuywECy0DdngkSZkijv3P2mk2CY= Subject key identifier: 09:3A:78:98:A1:6D:7E:1B:95:6C:4A:5B:71:26:B7:41:C0:76:34:3F Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 213ACD07DA6F79F448B490883FB5188C93909258 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 3F Signing time: Mon 02 Mar 2026 10:23:17 +0000 Manifest this update: Mon 02 Mar 2026 10:18:17 +0000 Manifest next update: Tue 03 Mar 2026 13:44:17 +0000 Files and hashes: 1: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: 8w3shhE+BfT+TfcNffFnD4KA0Klgzx/DbQELJxugC3A=) 2: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=) 3: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3a:cd:07:da:6f:79:f4:48:b4:90:88:3f:b5:18:8c:93:90:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Mar 2 10:18:17 2026 GMT Not After : Mar 3 13:44:17 2026 GMT Subject: CN=093A7898A16D7E1B956C4A5B7126B741C076343F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:a5:95:3b:58:9c:9d:9a:9c:38:c1:a0:d5: 93:d4:f5:bb:76:54:8d:96:3a:60:bd:b9:b7:d3:01: 02:e4:4c:64:c7:19:9d:e7:e7:a3:1e:c2:25:24:b5: a2:1d:54:7a:1c:80:60:83:1d:ff:a6:79:26:4d:cb: fa:8c:37:f3:ea:7e:51:ab:c5:6c:30:51:8c:bd:12: 11:90:0a:b3:f3:57:98:c8:d1:f3:e9:b8:32:af:16: 85:09:3f:11:02:d0:4f:ca:0b:2d:d8:02:94:6d:cb: fa:fa:87:ef:1b:82:0f:94:05:80:72:31:b5:d4:7b: be:7f:bc:a5:9b:88:86:d4:56:36:29:36:de:50:73: 37:a8:1f:aa:69:8d:d9:40:ba:a3:2b:78:9f:3d:32: 42:83:97:46:6a:73:8e:22:cd:f0:e4:cc:cc:80:c0: e7:f7:ad:b1:d4:bc:7b:0e:83:9a:f4:f7:2d:7d:ed: 90:1a:80:a4:c5:fc:29:a0:0f:1d:85:b0:52:31:e6: 98:36:21:89:63:f4:54:79:7e:13:fc:aa:3f:57:6d: 6f:bf:30:88:60:0c:e6:03:df:da:fd:a0:c3:ac:32: 5f:bf:c0:19:ed:a1:40:a2:e0:35:2e:49:40:9d:20: 6c:1a:00:8a:a2:24:a7:26:16:96:58:0c:ca:60:76: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:78:98:A1:6D:7E:1B:95:6C:4A:5B:71:26:B7:41:C0:76:34:3F X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5a:4e:f5:60:ee:24:7d:45:5d:e5:1e:ec:4a:fd:c9:20:c3: 95:fd:b3:1f:3c:22:65:0b:fa:d2:41:07:ea:9f:3d:4b:d7:42: ed:fb:c3:db:52:5e:4e:24:e7:b5:b4:3d:61:a1:28:a3:26:06: 4b:ab:2f:f5:d0:0d:55:31:c6:4e:77:47:26:5d:68:1b:9a:4b: 0d:cf:3f:67:61:5e:dc:aa:a2:86:fa:22:24:e7:bb:f9:bd:84: 96:8a:40:26:1e:45:76:6a:60:23:e4:85:1c:2e:f2:77:3b:21: e2:82:19:ce:2b:70:c4:4e:ae:8e:e6:52:ba:96:a6:c8:9a:40: 2f:1d:e5:9e:ad:dc:39:b1:93:5c:d3:47:53:49:16:08:01:06: 12:60:49:f8:40:13:e5:f4:e7:3c:c9:0c:2e:0f:4d:c7:2d:6b: 9b:bf:e4:9f:47:2c:52:1b:4b:16:98:0f:42:f1:b0:23:44:db: 4c:67:54:9c:08:2d:8a:2c:6e:ee:22:3a:86:2b:f6:d6:21:c7: 03:a0:d9:e9:84:77:85:1f:23:16:d1:15:79:c9:c0:84:c0:86: 97:c2:1a:95:7e:fa:1f:bb:87:5a:f8:e8:9c:a4:9f:6c:68:11: 92:29:28:d8:58:a5:ae:df:bb:cc:38:56:92:11:81:c1:75:4f: a9:3f:7e:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUITrNB9pvefRItJCIP7UYjJOQklgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjAzMDIxMDE4MTdaFw0yNjAzMDMxMzQ0MTdaMDMxMTAvBgNV BAMTKDA5M0E3ODk4QTE2RDdFMUI5NTZDNEE1QjcxMjZCNzQxQzA3NjM0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B6WVO1icnZqcOMGg1ZPU9bt2 VI2WOmC9ubfTAQLkTGTHGZ3n56MewiUktaIdVHocgGCDHf+meSZNy/qMN/PqflGr xWwwUYy9EhGQCrPzV5jI0fPpuDKvFoUJPxEC0E/KCy3YApRty/r6h+8bgg+UBYBy MbXUe75/vKWbiIbUVjYpNt5QczeoH6ppjdlAuqMreJ89MkKDl0Zqc44izfDkzMyA wOf3rbHUvHsOg5r09y197ZAagKTF/CmgDx2FsFIx5pg2IYlj9FR5fhP8qj9XbW+/ MIhgDOYD39r9oMOsMl+/wBntoUCi4DUuSUCdIGwaAIqiJKcmFpZYDMpgdovrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCTp4mKFtfhuVbEpbcSa3QcB2ND8wHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1pO9WDuJH1F XeUe7Er9ySDDlf2zHzwiZQv60kEH6p89S9dC7fvD21JeTiTntbQ9YaEooyYGS6sv 9dANVTHGTndHJl1oG5pLDc8/Z2Fe3KqihvoiJOe7+b2ElopAJh5FdmpgI+SFHC7y dzsh4oIZzitwxE6ujuZSupamyJpALx3lnq3cObGTXNNHU0kWCAEGEmBJ+EAT5fTn PMkMLg9Nxy1rm7/kn0csUhtLFpgPQvGwI0TbTGdUnAgtiixu7iI6hiv21iHHA6DZ 6YR3hR8jFtEVecnAhMCGl8IalX76H7uHWvjonKSfbGgRkiko2Filrt+7zDhWkhGB wXVPqT9+BA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:01:39 2026 by rpki-client