$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft File: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft (raw, json) Hash identifier: R7KxLCyKoFbj3SQuavjiOj0pi84Z6sAuCuhwlyActbE= Subject key identifier: A1:24:8E:31:4C:E2:10:4F:D0:73:38:43:1F:5C:F7:40:10:5C:7B:C7 Authority key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB Certificate issuer: /CN=A914EAE40000/serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB Certificate serial: 5A1D5BBC747EA15064FA826A7D5A3C660CB3039E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft Manifest number: 0389 Signing time: Tue 22 Sep 2026 16:25:22 +0000 Manifest this update: Tue 22 Sep 2026 16:20:22 +0000 Manifest next update: Fri 25 Sep 2026 21:23:22 +0000 Files and hashes: 1: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl (hash: LizG0QfcTaAlWDvuHwaVoMQPVfIg/2YNRrzh4KDO4vg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1d:5b:bc:74:7e:a1:50:64:fa:82:6a:7d:5a:3c:66:0c:b3:03:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB Validity Not Before: Sep 22 16:20:22 2026 GMT Not After : Sep 25 21:23:22 2026 GMT Subject: CN=A1248E314CE2104FD07338431F5CF740105C7BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:5b:0c:82:1c:8b:90:4e:48:2b:7d:2e:19: 7c:a2:b2:17:04:3e:be:fc:ad:c9:fc:bc:50:ee:a0: 60:49:cc:c2:2d:18:3e:ea:b5:12:b3:aa:1f:47:55: 2e:a2:82:f3:dc:17:b6:22:9a:0a:bb:cc:10:3a:c5: 84:96:31:df:30:d2:db:fc:ae:62:26:10:4e:30:f0: d4:05:28:96:ac:c1:b7:06:83:01:30:79:3e:f6:23: 74:68:c7:d5:f0:b8:09:1f:09:ee:e8:90:7e:08:64: a3:b5:25:28:b1:71:4b:e1:e3:2f:bd:5e:ec:0f:fd: 5d:1e:8c:d7:cb:49:15:f9:00:f6:01:1f:6f:21:a8: 76:6a:40:d5:e4:d9:3d:0c:03:da:80:76:43:07:6d: 86:69:10:b7:d1:a7:8d:c1:86:0e:f8:a0:e3:38:fb: b3:e1:0f:ff:30:5f:c7:27:0a:e2:75:fa:d5:7c:ef: d4:5b:ee:3c:57:22:96:36:a9:44:e0:69:e3:ed:05: cd:14:01:e9:1d:f5:a4:aa:4a:3f:18:c5:e7:bb:dd: eb:e5:fb:6f:f9:9c:ff:ad:d9:e5:e4:ff:8c:3e:92: fe:e2:d0:aa:44:90:d5:f3:3a:a6:7b:f6:84:12:e4: c8:97:2d:51:31:5e:e6:16:eb:bb:ab:80:46:08:42: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:8E:31:4C:E2:10:4F:D0:73:38:43:1F:5C:F7:40:10:5C:7B:C7 X509v3 Authority Key Identifier: keyid:9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c3:40:a7:7d:0d:c7:b0:d0:4a:c6:ca:74:83:16:36:2a:16: 04:5a:3a:d3:8b:70:56:e9:34:bb:0f:80:05:3f:36:b6:63:e2: 51:32:37:38:80:13:e8:db:ec:80:51:e9:ea:c5:93:b3:3a:6f: 2b:6f:25:1b:8c:c0:f9:2d:b8:f5:ea:1e:13:ed:d0:dd:41:e9: 8b:b3:93:2b:c6:de:18:b5:ae:24:f8:c7:c3:0c:cc:38:01:9e: 8e:1d:19:b6:3b:33:17:1b:ee:4d:66:e2:1f:53:06:a4:8e:38: b9:10:a2:ec:e2:43:92:c4:e4:94:7e:93:7d:76:7c:16:46:79: c6:75:83:c3:a1:f0:a0:01:46:f6:4c:00:12:b7:68:a9:36:93: db:de:7f:b8:9e:46:90:2a:66:eb:0e:e8:66:15:fc:4c:5a:9a: a4:79:e4:13:4a:49:a3:97:53:29:9a:cc:90:49:fd:ea:fb:af: 31:f4:3b:a2:2d:88:6c:c9:c8:67:d3:d2:83:8d:74:b1:6d:20: 74:fe:61:77:ac:b3:3e:3b:84:3d:73:35:d2:55:9e:97:70:0c: 59:e7:cf:d3:7a:35:46:c3:32:f8:5e:ec:20:77:2a:4e:e3:c9: 9c:71:2d:2f:a5:92:ce:d8:6f:2f:f0:91:b3:f3:1e:f3:ab:05: e0:fd:40:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWh1bvHR+oVBk+oJqfVo8ZgyzA54wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEyg5Q0IxMTJFMkE5 QzczRjE0ODQ1QjY2MDE2QkRGQkNBODgyQTFBN0VCMB4XDTI2MDkyMjE2MjAyMloX DTI2MDkyNTIxMjMyMlowMzExMC8GA1UEAxMoQTEyNDhFMzE0Q0UyMTA0RkQwNzMz ODQzMUY1Q0Y3NDAxMDVDN0JDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqBWwyCHIuQTkgrfS4ZfKKyFwQ+vvytyfy8UO6gYEnMwi0YPuq1ErOqH0dV LqKC89wXtiKaCrvMEDrFhJYx3zDS2/yuYiYQTjDw1AUolqzBtwaDATB5PvYjdGjH 1fC4CR8J7uiQfghko7UlKLFxS+HjL71e7A/9XR6M18tJFfkA9gEfbyGodmpA1eTZ PQwD2oB2QwdthmkQt9GnjcGGDvig4zj7s+EP/zBfxycK4nX61Xzv1FvuPFciljap ROBp4+0FzRQB6R31pKpKPxjF57vd6+X7b/mc/63Z5eT/jD6S/uLQqkSQ1fM6pnv2 hBLkyJctUTFe5hbru6uARghCuwkCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBShJI4x TOIQT9BzOEMfXPdAEFx7xzAfBgNVHSMEGDAWgBScsRLiqcc/FIRbZgFr37yogqGn 6zAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzIvOUNCMTEy RTJBOUM3M0YxNDg0NUI2NjAxNkJERkJDQTg4MkExQTdFQi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbkxFUzRxbkhQ eFNFVzJZQmE5LThxSUtocC1zLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8yLzlDQjExMkUyQTlDNzNGMTQ4NDVCNjYwMTZCREZCQ0E4ODJBMUE3 RUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQALw0CnfQ3HsNBKxsp0gxY2KhYEWjrTi3BW6TS7D4AFPza2 Y+JRMjc4gBPo2+yAUenqxZOzOm8rbyUbjMD5Lbj16h4T7dDdQemLs5Mrxt4Yta4k +MfDDMw4AZ6OHRm2OzMXG+5NZuIfUwakjji5EKLs4kOSxOSUfpN9dnwWRnnGdYPD ofCgAUb2TAASt2ipNpPb3n+4nkaQKmbrDuhmFfxMWpqkeeQTSkmjl1MpmsyQSf3q +68x9DuiLYhsychn09KDjXSxbSB0/mF3rLM+O4Q9czXSVZ6XcAxZ58/TejVGwzL4 XuwgdypO48mccS0vpZLO2G8v8JGz8x7zqwXg/UCB -----END CERTIFICATE-----Generated at Tue Sep 22 19:02:32 2026 by rpki-client