$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: OG266idbj2AwSSLESLMjWI/K47Qjs3a4cLTFQFacXW0= Subject key identifier: 1E:F4:E6:78:11:BF:2F:10:FE:0C:85:E5:0C:24:CF:83:2B:63:7D:E0 Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 7D4B0C32E524A07093B38FEF58E82C2FDFC5EA3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: DD Signing time: Sat 10 Oct 2026 22:15:02 +0000 Manifest this update: Sat 10 Oct 2026 22:10:02 +0000 Manifest next update: Wed 14 Oct 2026 03:00:02 +0000 Files and hashes: 1: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: yVs8iSttA4qvYbsag7jzb9v2lZc0uP/5iFsAG6aH/6s=) 2: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4b:0c:32:e5:24:a0:70:93:b3:8f:ef:58:e8:2c:2f:df:c5:ea:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Oct 10 22:10:02 2026 GMT Not After : Oct 14 03:00:02 2026 GMT Subject: CN=1EF4E67811BF2F10FE0C85E50C24CF832B637DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:07:e3:70:d6:e8:8f:19:d1:e9:2e:85:66: 97:d7:ba:fc:d0:5b:12:9f:ba:bb:b3:79:fc:ed:a6: 95:ee:fe:96:4b:df:a8:e7:11:17:4b:2a:60:3a:fd: e3:92:c2:3e:9f:20:06:bb:ce:cc:6c:4f:61:2e:88: e5:40:dc:51:87:80:f7:93:c3:22:01:3e:fe:b4:1a: fa:2f:03:4d:15:06:d5:bb:32:61:fd:61:e1:c1:18: 36:17:c1:04:6a:5b:b5:0c:78:1c:94:49:1c:76:14: 4d:86:0c:bc:55:2a:53:b4:be:f8:b4:ad:f6:c3:6d: 00:d5:28:8b:2e:3a:ef:4f:89:48:5d:48:51:85:0f: 51:23:ca:99:a9:31:0a:3c:d3:ea:31:ef:2d:5e:09: 30:5d:e0:ab:93:fd:13:34:81:09:83:48:eb:fd:79: 64:03:77:60:48:f6:f1:43:6c:06:7b:fd:fe:c7:70: f3:27:b2:b2:6c:39:b6:43:fc:f4:da:f6:fc:2a:11: 6e:af:70:a4:75:b0:b6:02:15:34:4a:05:bd:c7:79: 9e:8d:21:0c:5b:ff:08:e1:62:49:80:bb:75:76:63: 87:50:1c:91:c9:fa:c5:dc:52:92:e4:2a:07:96:19: 99:40:bc:6d:82:d1:2e:4c:05:26:d1:79:dd:96:ed: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:E6:78:11:BF:2F:10:FE:0C:85:E5:0C:24:CF:83:2B:63:7D:E0 X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:ba:d6:92:e8:07:f0:9c:2b:ee:e3:63:a1:9b:69:14:c9: 93:cd:0e:04:b1:ea:51:df:24:40:61:99:ee:2a:f7:de:d4:ce: 33:a3:58:43:67:4e:66:0f:e2:47:ff:ac:c4:5f:27:9e:73:80: 6d:2b:e3:2f:ce:fd:a8:92:4d:47:67:23:5c:b7:76:01:63:12: 0e:b8:01:10:68:d5:8f:0a:48:39:5c:6e:8f:1d:fb:46:9b:41: 5c:9e:36:99:47:f5:90:c5:fb:64:47:8b:c9:b2:f3:a8:40:a6: 67:ac:8a:83:92:4c:20:07:1b:48:db:87:af:04:95:27:4e:a8: 5b:7a:01:74:82:08:e2:50:40:5b:c2:a2:ad:f1:06:3f:f0:96: d0:7b:1e:7a:c4:d1:44:e2:03:87:65:b3:ea:f1:ec:04:eb:39: 0c:69:0a:37:17:02:a3:5a:cb:e0:b2:58:1f:cc:f9:41:4a:fe: 42:1f:ae:d4:e3:4b:64:f0:97:c2:5b:3c:1a:b3:ec:b5:0e:bb: f1:a9:dd:46:80:3b:aa:ee:ca:a3:a5:d0:cd:78:5c:20:ea:da: 6d:6b:84:d1:c7:a7:b4:a9:ea:4f:83:b4:94:81:96:9a:9d:b0: a9:3f:62:0b:3a:f6:f1:bc:af:19:59:a9:fc:2e:82:91:8b:24: de:3a:ca:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfUsMMuUkoHCTs4/vWOgsL9/F6j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjEwMTAyMjEwMDJaFw0yNjEwMTQwMzAwMDJaMDMxMTAvBgNV BAMTKDFFRjRFNjc4MTFCRjJGMTBGRTBDODVFNTBDMjRDRjgzMkI2MzdERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEyAfjcNbojxnR6S6FZpfXuvzQ WxKfuruzefztppXu/pZL36jnERdLKmA6/eOSwj6fIAa7zsxsT2EuiOVA3FGHgPeT wyIBPv60GvovA00VBtW7MmH9YeHBGDYXwQRqW7UMeByUSRx2FE2GDLxVKlO0vvi0 rfbDbQDVKIsuOu9PiUhdSFGFD1EjypmpMQo80+ox7y1eCTBd4KuT/RM0gQmDSOv9 eWQDd2BI9vFDbAZ7/f7HcPMnsrJsObZD/PTa9vwqEW6vcKR1sLYCFTRKBb3HeZ6N IQxb/wjhYkmAu3V2Y4dQHJHJ+sXcUpLkKgeWGZlAvG2C0S5MBSbRed2W7RIbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHvTmeBG/LxD+DIXlDCTPgytjfeAwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBa61pLoB/Cc K+7jY6GbaRTJk80OBLHqUd8kQGGZ7ir33tTOM6NYQ2dOZg/iR/+sxF8nnnOAbSvj L879qJJNR2cjXLd2AWMSDrgBEGjVjwpIOVxujx37RptBXJ42mUf1kMX7ZEeLybLz qECmZ6yKg5JMIAcbSNuHrwSVJ06oW3oBdIII4lBAW8KirfEGP/CW0HseesTRROID h2Wz6vHsBOs5DGkKNxcCo1rL4LJYH8z5QUr+Qh+u1ONLZPCXwls8GrPstQ678and RoA7qu7Ko6XQzXhcIOrabWuE0centKnqT4O0lIGWmp2wqT9iCzr28byvGVmp/C6C kYsk3jrKQw== -----END CERTIFICATE-----Generated at Mon Oct 12 20:14:34 2026 by rpki-client