$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: gR4eYY9ygeVim7ZwfpRwMm5EyVmzzw2CX4hiMGKpVbM= Subject key identifier: 27:9A:17:E5:05:76:AF:38:13:78:26:D7:EB:54:E5:73:D8:F4:C4:EA Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 1E0E956FAED5EC5063818BFBAD01ED901649DF3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: C9 Signing time: Tue 13 Oct 2026 08:42:53 +0000 Manifest this update: Tue 13 Oct 2026 08:37:53 +0000 Manifest next update: Fri 16 Oct 2026 19:11:53 +0000 Files and hashes: 1: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) 2: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 3: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 4: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: wJ3YssbGkIXnOv0BaZKRLaMcB7mnC5/IV1EwXSEOlqs=) 5: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) 6: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 7: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0e:95:6f:ae:d5:ec:50:63:81:8b:fb:ad:01:ed:90:16:49:df:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Oct 13 08:37:53 2026 GMT Not After : Oct 16 19:11:53 2026 GMT Subject: CN=279A17E50576AF38137826D7EB54E573D8F4C4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:e4:cc:c1:83:cd:5e:3f:63:4a:f8:94:5e: 62:69:9c:4c:77:43:7b:84:e8:b0:00:c7:bb:e7:44: 43:b5:5d:95:bc:4f:dc:bd:1a:41:3d:15:82:8c:0d: 02:60:77:20:e4:5e:f4:ba:a8:6c:ce:08:f5:37:a1: c7:94:a2:57:34:57:c2:ac:f5:4f:c6:93:f1:3b:55: bc:b1:f0:46:aa:92:90:41:4b:c8:92:17:bb:73:39: af:53:c3:f8:3c:32:25:ee:7c:90:2b:31:7b:63:8a: 0f:6c:d2:69:d5:6a:97:4b:93:6a:14:59:d1:32:88: dc:53:32:c1:0c:c3:19:b2:2b:a0:e1:35:eb:c5:aa: c4:a2:46:fa:90:2d:63:a9:d7:a1:9e:59:d5:60:39: 9a:51:64:e5:54:68:e3:6c:74:84:5e:a0:86:9c:0f: 3f:27:fa:f2:f5:d2:92:06:81:08:5c:00:75:9d:59: 4f:67:94:27:50:81:2c:aa:cf:a0:f5:ae:1f:bf:81: f1:69:61:e2:ce:0f:a6:97:72:c5:26:43:a9:e2:6c: d3:98:db:eb:01:3a:78:34:8b:39:0d:a8:03:fa:91: b1:8e:b1:e2:55:7f:4b:fd:d3:52:5d:d6:5b:00:48: 61:d8:b3:3d:01:b0:ca:a2:70:ff:17:c7:36:c9:ea: 16:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9A:17:E5:05:76:AF:38:13:78:26:D7:EB:54:E5:73:D8:F4:C4:EA X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:17:ab:0f:81:eb:f8:61:93:f4:37:61:ff:86:08:06:77:24: 15:8f:9a:86:ff:df:43:82:87:06:7f:61:b3:97:36:84:e3:8f: 88:bf:ec:ab:19:9b:cf:06:12:80:44:eb:fb:66:b3:79:7a:24: 21:1f:c5:ae:14:70:75:42:70:4c:a5:70:3b:99:b5:f0:3f:90: 1e:2f:c2:73:3d:f9:de:88:c8:41:be:d1:de:c6:10:9a:15:b5: e6:10:aa:41:09:f6:92:bc:7e:11:45:a0:f6:42:57:13:c4:65: 22:40:d0:87:31:4f:00:d8:d7:8a:cd:e3:4a:d4:42:67:c8:0e: ea:3e:15:4d:fd:d4:42:e5:4f:1f:8c:31:4a:ad:ac:28:e2:4a: bc:86:5e:9c:e1:31:90:7e:ea:f1:3b:18:f8:99:e7:37:7c:a9: 67:ea:bb:12:8b:78:9f:de:6c:7c:de:05:3e:9c:1b:da:3a:b0: 3e:dd:be:a8:af:70:ad:f0:79:a8:5b:b4:43:2f:ff:cb:6c:a7: 39:07:a5:49:ce:1f:92:31:86:be:f0:dd:aa:44:35:3b:91:d0: 15:96:44:59:9b:e7:93:1f:0c:39:c6:fc:11:be:95:38:8b:3f: dc:17:c6:2c:cd:6e:d4:81:0b:89:9b:a4:f4:98:b3:01:7b:33: 3d:da:5c:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHg6Vb67V7FBjgYv7rQHtkBZJ3zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjEwMTMwODM3NTNaFw0yNjEwMTYxOTExNTNaMDMxMTAvBgNV BAMTKDI3OUExN0U1MDU3NkFGMzgxMzc4MjZEN0VCNTRFNTczRDhGNEM0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vOTMwYPNXj9jSviUXmJpnEx3 Q3uE6LAAx7vnREO1XZW8T9y9GkE9FYKMDQJgdyDkXvS6qGzOCPU3oceUolc0V8Ks 9U/Gk/E7Vbyx8EaqkpBBS8iSF7tzOa9Tw/g8MiXufJArMXtjig9s0mnVapdLk2oU WdEyiNxTMsEMwxmyK6DhNevFqsSiRvqQLWOp16GeWdVgOZpRZOVUaONsdIReoIac Dz8n+vL10pIGgQhcAHWdWU9nlCdQgSyqz6D1rh+/gfFpYeLOD6aXcsUmQ6nibNOY 2+sBOng0izkNqAP6kbGOseJVf0v901Jd1lsASGHYsz0BsMqicP8XxzbJ6hbnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ5oX5QV2rzgTeCbX61Tlc9j0xOowHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqherD4Hr+GGT 9Ddh/4YIBnckFY+ahv/fQ4KHBn9hs5c2hOOPiL/sqxmbzwYSgETr+2azeXokIR/F rhRwdUJwTKVwO5m18D+QHi/Ccz353ojIQb7R3sYQmhW15hCqQQn2krx+EUWg9kJX E8RlIkDQhzFPANjXis3jStRCZ8gO6j4VTf3UQuVPH4wxSq2sKOJKvIZenOExkH7q 8TsY+JnnN3ypZ+q7Eot4n95sfN4FPpwb2jqwPt2+qK9wrfB5qFu0Qy//y2ynOQel Sc4fkjGGvvDdqkQ1O5HQFZZEWZvnkx8MOcb8Eb6VOIs/3BfGLM1u1IELiZuk9Jiz AXszPdpckg== -----END CERTIFICATE-----Generated at Tue Oct 13 11:25:13 2026 by rpki-client