$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json) Hash identifier: 5gLJuJSv16yg/k6AWBmafpboHCdAveg19OS7D1hFWhg= Subject key identifier: 4F:6B:5D:71:03:FE:E9:69:27:EE:75:F3:4F:66:EE:0B:43:03:CF:5F Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 2DB6E9617663E9F72D6B76C4FFDF7EDEFD629718 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft Manifest number: C9 Signing time: Sat 17 Oct 2026 03:03:24 +0000 Manifest this update: Sat 17 Oct 2026 02:58:24 +0000 Manifest next update: Tue 20 Oct 2026 07:55:24 +0000 Files and hashes: 1: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: GDLMXLI7DutD6DzGZ2qOYg6zKMNHU8d5xo5f0I6O7fE=) 2: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:e9:61:76:63:e9:f7:2d:6b:76:c4:ff:df:7e:de:fd:62:97:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: Oct 17 02:58:24 2026 GMT Not After : Oct 20 07:55:24 2026 GMT Subject: CN=4F6B5D7103FEE96927EE75F34F66EE0B4303CF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:18:78:c0:ab:3e:65:7e:ab:73:8c:d3:03: 14:55:39:4d:bf:b4:9c:aa:f9:c6:8a:21:1e:7f:8c: b5:f2:16:fa:53:80:2e:b0:f6:7c:fd:2e:3e:05:0c: e1:fe:03:5c:e5:4e:10:40:05:5b:87:12:0e:0e:98: 5e:58:af:63:f0:07:a2:78:3e:65:65:4e:af:64:84: c6:db:97:4c:10:e4:75:03:6b:ac:13:31:74:7a:34: 81:cf:92:76:4d:dd:77:a0:68:da:ea:18:d6:c8:40: 1d:e7:fb:a3:53:87:9a:f4:23:d3:4b:a0:1f:97:ec: 24:ca:57:a2:db:10:a9:96:67:f7:16:ef:ad:ea:1f: 90:a8:2c:30:ce:15:8c:15:fd:ee:04:2e:dd:71:cd: 85:50:f7:d1:b8:e3:94:e4:f7:f6:8b:72:ae:54:86: b0:6b:2a:69:cb:ec:75:33:b7:8d:cf:67:cb:74:7a: f7:e4:45:99:26:bd:e5:52:7b:2b:31:7f:ca:1e:6a: cc:a0:8d:fc:98:42:24:15:04:ec:92:91:37:77:63: f3:2a:a1:c7:16:7e:a0:02:6a:e0:18:62:d9:2a:73: 05:b6:04:84:d7:5d:ae:4c:90:d8:25:e4:0a:bc:b8: 20:0a:26:ed:cb:ab:d5:69:75:93:68:a8:a9:90:4d: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:5D:71:03:FE:E9:69:27:EE:75:F3:4F:66:EE:0B:43:03:CF:5F X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d7:06:2c:99:39:8a:80:db:fd:36:4a:f4:ce:9d:10:02:30: 91:89:e4:eb:9b:2d:e9:6c:a4:bd:8a:c1:6a:99:ab:ef:aa:4b: 3a:8d:dd:d5:0a:09:96:2d:83:97:29:e9:6c:47:ac:62:1a:ea: 40:1e:ae:24:03:18:33:d3:7b:19:fd:53:99:ac:90:86:3f:e1: b9:55:3b:78:1f:1a:df:4a:bb:74:d0:91:5b:44:0b:6b:de:02: ac:32:b0:bb:99:8b:b1:e3:a2:72:8e:52:65:3e:7d:08:a1:18: 05:03:52:09:85:12:5a:79:56:a7:b4:93:70:88:66:be:a4:33: 0f:5e:f8:87:48:52:2f:8d:22:38:9c:ac:97:c6:fb:af:5c:bf: b1:e4:6a:b8:e8:7b:91:b5:67:f8:b4:ed:12:03:c1:52:e3:27: 7c:4e:d1:49:df:bf:4f:98:da:3a:be:07:06:91:49:6b:1e:b4: 43:95:03:ba:69:5b:d6:f8:a4:af:24:0f:bc:7d:fb:95:e4:a9: 36:8b:92:e1:60:6a:49:77:e8:e5:1a:43:da:d8:9c:33:b6:fa: 4b:1c:c8:89:bb:cc:6f:b7:be:a2:f1:b9:df:f6:6c:28:c7:94: 94:73:12:a2:97:38:64:bf:7a:de:df:b3:20:39:4a:e5:ec:be: bb:53:b7:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULbbpYXZj6fcta3bE/99+3v1ilxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjEwMTcwMjU4MjRaFw0yNjEwMjAwNzU1MjRaMDMxMTAvBgNV BAMTKDRGNkI1RDcxMDNGRUU5NjkyN0VFNzVGMzRGNjZFRTBCNDMwM0NGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpBh4wKs+ZX6rc4zTAxRVOU2/ tJyq+caKIR5/jLXyFvpTgC6w9nz9Lj4FDOH+A1zlThBABVuHEg4OmF5Yr2PwB6J4 PmVlTq9khMbbl0wQ5HUDa6wTMXR6NIHPknZN3XegaNrqGNbIQB3n+6NTh5r0I9NL oB+X7CTKV6LbEKmWZ/cW763qH5CoLDDOFYwV/e4ELt1xzYVQ99G445Tk9/aLcq5U hrBrKmnL7HUzt43PZ8t0evfkRZkmveVSeysxf8oeasygjfyYQiQVBOySkTd3Y/Mq occWfqACauAYYtkqcwW2BITXXa5MkNgl5Aq8uCAKJu3Lq9VpdZNoqKmQTV8ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT2tdcQP+6Wkn7nXzT2buC0MDz18wHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdcGLJk5ioDb /TZK9M6dEAIwkYnk65st6WykvYrBapmr76pLOo3d1QoJli2DlynpbEesYhrqQB6u JAMYM9N7Gf1TmayQhj/huVU7eB8a30q7dNCRW0QLa94CrDKwu5mLseOico5SZT59 CKEYBQNSCYUSWnlWp7STcIhmvqQzD174h0hSL40iOJysl8b7r1y/seRquOh7kbVn +LTtEgPBUuMnfE7RSd+/T5jaOr4HBpFJax60Q5UDumlb1vikryQPvH37leSpNouS 4WBqSXfo5RpD2ticM7b6SxzIibvMb7e+ovG53/ZsKMeUlHMSopc4ZL963t+zIDlK 5ey+u1O3UQ== -----END CERTIFICATE-----Generated at Sat Oct 17 11:49:46 2026 by rpki-client