$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: 8hPum73BbA6gQy6DyC4XeXR+Au4nCv2ddzQQWBHPtpk= Subject key identifier: E8:C1:CC:B6:FC:1E:59:7B:74:BA:D8:58:EA:96:1B:24:6B:66:94:39 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 019E49B00F04DFC6362E446CB35FE8A87E01F626 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 0199 Signing time: Fri 09 Oct 2026 18:58:41 +0000 Manifest this update: Fri 09 Oct 2026 18:53:41 +0000 Manifest next update: Tue 13 Oct 2026 05:20:41 +0000 Files and hashes: 1: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=) 2: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=) 3: AS55990.roa (hash: nkM515uXV5KxhmAI7tmB49q5A4TfSDQHkogbTjBP35k=) 4: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) 5: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=) 6: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=) 7: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=) 8: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=) 9: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=) 10: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=) 11: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: fz7Gj/AnNh8e1EtZGHzTN7cy6thuXQx6n95p+pPASx4=) 12: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=) 13: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=) 14: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 05:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:49:b0:0f:04:df:c6:36:2e:44:6c:b3:5f:e8:a8:7e:01:f6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Oct 9 18:53:41 2026 GMT Not After : Oct 13 05:20:41 2026 GMT Subject: CN=E8C1CCB6FC1E597B74BAD858EA961B246B669439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:5f:d6:5a:a0:71:69:f7:2f:5d:49:26:ea: 39:ec:f6:a1:dc:3b:06:4d:70:23:3d:d1:dd:b6:33: 2b:81:7b:90:7a:73:42:8d:2d:1d:f9:cd:da:f0:87: 07:7a:10:fe:4a:13:b2:f7:1c:e4:5a:8d:b1:ba:35: 1f:28:51:39:44:22:a5:fd:2d:8e:81:ab:fb:ff:62: 93:72:25:d0:ca:bb:86:1e:98:38:87:06:39:e2:c4: 56:9d:bf:cf:de:11:83:2c:e4:2c:06:e2:f1:04:dc: 5a:54:25:fd:e6:3e:be:f9:97:8d:6b:8f:89:dd:10: 82:91:8e:52:5e:06:f4:e0:54:1e:4b:13:2d:ca:91: 4e:37:c4:ea:43:ca:52:39:94:f8:0e:68:cc:a7:a3: df:62:8f:ee:40:97:a1:e4:a3:b2:7b:b2:1c:a8:b5: 14:f4:b2:b4:f7:92:d2:a3:ac:0c:ed:e7:30:87:87: e3:83:3c:49:7a:8d:05:17:a1:b7:85:76:9f:d9:c7: fb:51:5e:48:3b:48:62:55:34:94:24:a2:eb:0a:87: 26:cc:d7:db:51:d5:a2:25:d2:c3:91:5a:3d:25:c7: fe:ad:40:c7:8f:cd:5b:e1:c8:cc:9a:5c:58:31:28: 15:54:97:5c:84:ee:b7:72:7b:dc:08:f9:0b:b7:32: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:CC:B6:FC:1E:59:7B:74:BA:D8:58:EA:96:1B:24:6B:66:94:39 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:45:9f:bd:43:93:6f:54:58:94:37:51:a2:c9:bb:ec:96:62: ae:76:c5:d5:10:c9:f5:78:bc:df:4e:3b:fc:12:5e:75:52:83: 38:88:36:be:75:1d:ba:b0:83:ac:70:e3:01:4e:8a:ed:4e:63: f3:bc:c7:44:cf:84:a0:91:2e:68:e5:e8:6e:e4:9b:24:c9:d0: d7:86:39:98:0c:f5:cf:5c:77:43:a1:83:99:c8:04:a0:22:c6: 6a:f4:fe:20:ef:ba:ba:dd:b4:05:ac:e0:84:0f:96:31:15:6e: 6f:57:74:0b:7f:5b:cb:f3:23:9b:ba:f5:5f:8b:22:23:96:0c: 01:13:87:b3:8d:96:3c:06:5e:e0:73:01:40:e6:8b:f5:c4:14: 67:d5:6d:d2:6c:fa:65:36:77:bf:c6:e8:cc:6b:54:1f:e4:d0: 9a:4b:6b:5f:2a:c8:8a:ed:38:f8:c9:a0:8a:19:50:2f:37:74: 72:9d:80:8a:c6:29:b9:4f:de:e0:90:d3:99:01:e7:3b:e4:d3: 47:6b:a2:55:2a:12:b3:2c:45:c9:71:49:36:4a:d7:42:b6:24: 4d:99:d1:4d:0c:a3:b0:02:fb:33:f7:ad:3b:65:a6:22:3d:26: 44:2f:15:17:96:d0:1c:75:ae:40:60:ff:24:cf:96:a4:08:1c: 9e:c6:2d:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAZ5JsA8E38Y2LkRss1/oqH4B9iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjEwMDkxODUzNDFaFw0yNjEwMTMwNTIwNDFaMDMxMTAvBgNV BAMTKEU4QzFDQ0I2RkMxRTU5N0I3NEJBRDg1OEVBOTYxQjI0NkI2Njk0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVV/WWqBxafcvXUkm6jns9qHc OwZNcCM90d22MyuBe5B6c0KNLR35zdrwhwd6EP5KE7L3HORajbG6NR8oUTlEIqX9 LY6Bq/v/YpNyJdDKu4YemDiHBjnixFadv8/eEYMs5CwG4vEE3FpUJf3mPr75l41r j4ndEIKRjlJeBvTgVB5LEy3KkU43xOpDylI5lPgOaMyno99ij+5Al6Hko7J7shyo tRT0srT3ktKjrAzt5zCHh+ODPEl6jQUXobeFdp/Zx/tRXkg7SGJVNJQkousKhybM 19tR1aIl0sORWj0lx/6tQMePzVvhyMyaXFgxKBVUl1yE7rdye9wI+Qu3MqqhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6MHMtvweWXt0uthY6pYbJGtmlDkwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUWfvUOTb1RY lDdRosm77JZirnbF1RDJ9Xi83047/BJedVKDOIg2vnUdurCDrHDjAU6K7U5j87zH RM+EoJEuaOXobuSbJMnQ14Y5mAz1z1x3Q6GDmcgEoCLGavT+IO+6ut20BazghA+W MRVub1d0C39by/Mjm7r1X4siI5YMAROHs42WPAZe4HMBQOaL9cQUZ9Vt0mz6ZTZ3 v8bozGtUH+TQmktrXyrIiu04+MmgihlQLzd0cp2AisYpuU/e4JDTmQHnO+TTR2ui VSoSsyxFyXFJNkrXQrYkTZnRTQyjsAL7M/etO2WmIj0mRC8VF5bQHHWuQGD/JM+W pAgcnsYt1A== -----END CERTIFICATE-----Generated at Sun Oct 11 15:05:44 2026 by rpki-client