$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: /4jH9Jk967Ib1WFlUyXJRs3Rz0YYa4cgF0sqDvXli5s= Subject key identifier: C4:18:6E:ED:62:C4:99:7C:45:99:C0:E7:21:40:75:E4:CD:5A:92:EA Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 075F67099D86393FCE64FDA67350B8C84527B71E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: C9 Signing time: Fri 09 Oct 2026 17:13:36 +0000 Manifest this update: Fri 09 Oct 2026 17:08:36 +0000 Manifest next update: Tue 13 Oct 2026 03:09:36 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: etAuvyQXL5lOboaJsC/1NdhrWISGe/xrZZkJgmi5cHo=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 03:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5f:67:09:9d:86:39:3f:ce:64:fd:a6:73:50:b8:c8:45:27:b7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Oct 9 17:08:36 2026 GMT Not After : Oct 13 03:09:36 2026 GMT Subject: CN=C4186EED62C4997C4599C0E7214075E4CD5A92EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:46:09:3a:9b:d7:1e:43:ff:1c:6c:4d:44: 91:2b:49:84:b5:f1:05:ca:38:ee:2c:cb:4e:6b:7c: 0e:c6:20:99:00:42:dd:99:41:09:11:af:78:c7:14: 10:81:0e:30:10:56:89:87:6e:4a:f5:8d:a4:9c:e2: 29:45:e3:60:03:9c:b0:44:c1:04:e3:b4:67:b6:66: 2a:da:5e:dd:4d:96:b3:27:49:4f:72:9c:c1:ed:75: 51:f8:0d:51:63:24:39:9c:b8:2f:f0:3a:a4:dd:00: 58:9a:cc:4c:6f:b7:16:9b:6d:21:c4:57:18:77:2a: ff:b8:e5:42:24:86:c9:4b:07:ef:58:81:69:56:3b: 52:4a:c9:67:51:cb:8e:c1:c5:3a:fa:2b:b9:06:c9: 26:2a:cf:fb:af:c4:ac:b7:b5:53:6d:f2:6a:72:70: 10:17:63:30:a4:55:ed:5d:1b:99:cf:d7:61:b1:b4: 9a:8f:57:d9:e6:45:47:27:8c:fe:83:b0:f9:67:b6: 75:21:f0:65:66:3b:12:3c:40:f6:62:09:30:90:2a: 35:a8:e2:87:92:f5:d1:e3:15:bc:87:8a:03:d2:d3: c6:53:62:01:e7:46:fd:61:35:a2:dc:e9:b3:ab:07: 66:38:d3:bc:19:c8:ca:5a:14:5d:6b:11:80:f4:20: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:18:6E:ED:62:C4:99:7C:45:99:C0:E7:21:40:75:E4:CD:5A:92:EA X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0e:95:25:6f:1b:10:d0:3b:81:02:53:a3:2d:e2:35:e6:2e: c7:04:61:be:e3:a2:11:04:bd:26:c8:88:5e:0e:f4:a3:f5:83: 6b:96:b4:92:2e:93:21:47:87:33:d0:96:46:b3:1d:ba:a2:47: 7d:50:34:c2:6d:61:16:ea:8d:bc:1f:cf:1d:e0:89:5a:c7:f0: e4:db:40:30:77:3b:a6:2e:7e:99:7f:31:69:57:e8:e2:88:28: 3d:c1:23:33:84:9f:19:0f:15:de:58:dd:bf:78:7a:cd:de:d9: fb:6c:6f:c6:58:3e:76:6e:46:f0:44:e9:96:88:65:57:52:b3: 3f:16:cd:0d:02:be:89:f1:de:78:06:6d:ed:19:95:13:bb:9f: a5:60:08:81:59:c1:13:2f:14:42:da:76:ad:c7:95:f6:b1:8f: 9d:df:4e:3a:bf:53:37:a7:8c:c9:9e:8f:b9:d1:1b:a8:3e:47: 43:6a:10:08:be:4e:fb:50:b4:c0:02:d1:c3:b3:1a:5c:7d:69: 8f:64:01:99:8d:2e:27:91:0f:91:c5:25:e3:8c:63:6e:b9:c4: 19:07:b4:a5:9b:53:ac:16:df:03:33:65:a2:7d:4f:43:24:61: 47:a7:8d:b4:06:7a:c4:47:f9:9e:7c:5a:96:79:1f:35:6b:4e: 75:a9:4a:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB19nCZ2GOT/OZP2mc1C4yEUntx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjEwMDkxNzA4MzZaFw0yNjEwMTMwMzA5MzZaMDMxMTAvBgNV BAMTKEM0MTg2RUVENjJDNDk5N0M0NTk5QzBFNzIxNDA3NUU0Q0Q1QTkyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xUYJOpvXHkP/HGxNRJErSYS1 8QXKOO4sy05rfA7GIJkAQt2ZQQkRr3jHFBCBDjAQVomHbkr1jaSc4ilF42ADnLBE wQTjtGe2ZiraXt1NlrMnSU9ynMHtdVH4DVFjJDmcuC/wOqTdAFiazExvtxabbSHE Vxh3Kv+45UIkhslLB+9YgWlWO1JKyWdRy47BxTr6K7kGySYqz/uvxKy3tVNt8mpy cBAXYzCkVe1dG5nP12GxtJqPV9nmRUcnjP6DsPlntnUh8GVmOxI8QPZiCTCQKjWo 4oeS9dHjFbyHigPS08ZTYgHnRv1hNaLc6bOrB2Y407wZyMpaFF1rEYD0IGJXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxBhu7WLEmXxFmcDnIUB15M1akuowHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ6VJW8bENA7 gQJToy3iNeYuxwRhvuOiEQS9JsiIXg70o/WDa5a0ki6TIUeHM9CWRrMduqJHfVA0 wm1hFuqNvB/PHeCJWsfw5NtAMHc7pi5+mX8xaVfo4ogoPcEjM4SfGQ8V3ljdv3h6 zd7Z+2xvxlg+dm5G8ETplohlV1KzPxbNDQK+ifHeeAZt7RmVE7ufpWAIgVnBEy8U Qtp2rceV9rGPnd9OOr9TN6eMyZ6PudEbqD5HQ2oQCL5O+1C0wALRw7MaXH1pj2QB mY0uJ5EPkcUl44xjbrnEGQe0pZtTrBbfAzNlon1PQyRhR6eNtAZ6xEf5nnxalnkf NWtOdalKCQ== -----END CERTIFICATE-----Generated at Sun Oct 11 22:41:12 2026 by rpki-client