$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: iaLB9xpVOWkjx+W5vETfxT3Dlkgn82sJ10CcO1MbdnE= Subject key identifier: 1E:C3:C8:29:F9:07:B3:AE:E2:F2:92:80:B3:7A:9F:70:06:24:C2:79 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 41BC0435052048F9C7B706FF033788F42A564455 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: CD Signing time: Fri 09 Oct 2026 08:13:16 +0000 Manifest this update: Fri 09 Oct 2026 08:08:16 +0000 Manifest next update: Mon 12 Oct 2026 16:48:16 +0000 Files and hashes: 1: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: TN5a+84XSmLhceJmSOFdsndrCsbk45QyRTHTjDRab9Q=) 2: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 16:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bc:04:35:05:20:48:f9:c7:b7:06:ff:03:37:88:f4:2a:56:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Oct 9 08:08:16 2026 GMT Not After : Oct 12 16:48:16 2026 GMT Subject: CN=1EC3C829F907B3AEE2F29280B37A9F700624C279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:65:81:ca:e7:e5:0b:e2:25:b5:ec:6f:7c: 74:e0:63:51:89:95:e8:dc:9f:9b:a3:20:5d:6a:c8: ed:e5:cd:89:3e:dc:1e:42:7f:26:88:e3:1a:5d:85: 6a:24:b4:f8:c1:c7:5b:95:49:f6:86:33:fb:1e:f2: e1:85:37:bc:7c:3d:74:1e:da:7c:51:68:07:1c:c6: aa:98:96:88:ab:c6:3b:ab:82:61:59:7a:9c:0a:c4: dd:84:1e:c2:c9:d8:d0:98:fc:a2:53:99:2c:df:b9: d3:d4:49:97:72:e4:03:06:6d:90:5d:70:62:d5:83: 4d:7b:59:21:b0:5f:bc:c2:d1:16:7f:5a:d4:ae:7e: ff:5b:6b:66:7c:d2:76:1e:48:b7:01:6f:10:7a:f4: 7a:e3:a9:19:16:c9:8e:7e:de:b2:a6:bd:78:4d:36: be:63:1a:10:b3:11:cf:e0:ac:86:57:d7:03:d8:d0: 6c:21:81:9b:63:0a:2b:06:1a:51:67:9e:2d:2f:d6: a4:fb:3b:4b:57:91:74:2a:99:e1:db:a6:74:e6:0c: c8:e6:9d:08:31:51:8b:02:b8:f8:ee:fb:ba:e4:13: f8:8a:47:3a:54:f5:24:50:9d:96:fb:02:3f:5c:82: c0:37:d4:c8:d2:54:d9:ae:39:97:72:8e:94:ad:45: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:C8:29:F9:07:B3:AE:E2:F2:92:80:B3:7A:9F:70:06:24:C2:79 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7d:72:41:2c:57:b0:86:4b:ab:16:ff:ad:f1:4b:e2:9b:9c: d2:3f:ca:37:c1:07:fa:49:a2:94:e3:d9:b4:fe:7f:76:77:d4: b8:f1:55:db:90:0a:f0:0f:8f:d4:9e:36:82:a8:22:1e:88:af: 57:c1:4b:b1:09:4d:c8:62:62:b5:3c:34:30:6c:30:90:b6:20: 15:eb:b1:1a:58:db:23:44:69:c0:cf:de:f6:f9:bf:8e:af:ff: d2:71:a3:9d:6d:1d:f6:a2:15:37:c4:22:e5:8c:05:2f:f5:f2: a5:f1:bf:90:95:34:fe:5d:6f:61:e6:00:fb:e4:df:5e:91:a6: a1:6c:43:9d:e4:4b:20:18:c4:74:b6:b7:bb:a0:93:92:46:e5: 04:80:bd:d6:e7:48:10:3a:bc:25:cf:6b:0d:64:76:0c:cb:0b: 11:30:ed:70:38:2a:42:53:11:29:fc:a5:5e:aa:60:13:44:4b: 4a:38:24:55:24:47:0b:6f:6a:c7:cd:98:20:c5:df:97:91:af: be:eb:e3:a4:13:40:74:f6:c0:06:51:02:22:55:bd:ae:cc:e0: 41:5a:c6:51:15:83:f6:9b:56:47:d8:49:52:6d:f9:c4:45:97: d7:92:52:c1:71:13:73:3d:a3:39:6b:25:6d:35:96:f5:85:5e: 09:61:d8:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQbwENQUgSPnHtwb/AzeI9CpWRFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjEwMDkwODA4MTZaFw0yNjEwMTIxNjQ4MTZaMDMxMTAvBgNV BAMTKDFFQzNDODI5RjkwN0IzQUVFMkYyOTI4MEIzN0E5RjcwMDYyNEMyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtM2WByuflC+IltexvfHTgY1GJ lejcn5ujIF1qyO3lzYk+3B5CfyaI4xpdhWoktPjBx1uVSfaGM/se8uGFN7x8PXQe 2nxRaAccxqqYloirxjurgmFZepwKxN2EHsLJ2NCY/KJTmSzfudPUSZdy5AMGbZBd cGLVg017WSGwX7zC0RZ/WtSufv9ba2Z80nYeSLcBbxB69HrjqRkWyY5+3rKmvXhN Nr5jGhCzEc/grIZX1wPY0GwhgZtjCisGGlFnni0v1qT7O0tXkXQqmeHbpnTmDMjm nQgxUYsCuPju+7rkE/iKRzpU9SRQnZb7Aj9cgsA31MjSVNmuOZdyjpStRS6HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHsPIKfkHs67i8pKAs3qfcAYkwnkwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqH1yQSxXsIZL qxb/rfFL4puc0j/KN8EH+kmilOPZtP5/dnfUuPFV25AK8A+P1J42gqgiHoivV8FL sQlNyGJitTw0MGwwkLYgFeuxGljbI0RpwM/e9vm/jq//0nGjnW0d9qIVN8Qi5YwF L/XypfG/kJU0/l1vYeYA++TfXpGmoWxDneRLIBjEdLa3u6CTkkblBIC91udIEDq8 Jc9rDWR2DMsLETDtcDgqQlMRKfylXqpgE0RLSjgkVSRHC29qx82YIMXfl5Gvvuvj pBNAdPbABlECIlW9rszgQVrGURWD9ptWR9hJUm35xEWX15JSwXETcz2jOWslbTWW 9YVeCWHYBw== -----END CERTIFICATE-----Generated at Sat Oct 10 11:52:24 2026 by rpki-client