$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: yyDY3abKrvsHEnS4OCVLtLu5vjmW5zsGCqYpvr1mI88= Subject key identifier: F7:34:A3:7E:DE:88:DB:6F:D6:C3:D5:FA:B3:DF:CE:53:E1:0B:43:CD Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 6A5356224ED67FA4546181EF910A0FAB292139EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: F1 Signing time: Mon 12 Oct 2026 04:26:30 +0000 Manifest this update: Mon 12 Oct 2026 04:21:30 +0000 Manifest next update: Thu 15 Oct 2026 11:41:30 +0000 Files and hashes: 1: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=) 2: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=) 3: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) 4: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=) 5: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=) 6: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=) 7: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 8: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=) 9: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 10: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=) 11: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: Aci87rUsmXBBeQfICGLuQWfPoybkp4SFhHjCMxkxbb0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:53:56:22:4e:d6:7f:a4:54:61:81:ef:91:0a:0f:ab:29:21:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: Oct 12 04:21:30 2026 GMT Not After : Oct 15 11:41:30 2026 GMT Subject: CN=F734A37EDE88DB6FD6C3D5FAB3DFCE53E10B43CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:aa:f1:ae:6b:46:3a:ad:63:43:f0:1d:02:39: a5:bb:92:83:05:ad:f7:9a:82:e5:9a:69:e8:85:07: 09:d6:17:49:14:e6:7c:2d:fb:db:48:79:9e:f3:9d: dc:40:c9:de:4b:17:ca:bd:75:b9:30:00:17:27:34: d9:90:74:f6:35:34:11:aa:19:a9:19:8d:38:6f:aa: 63:60:a1:ac:82:0c:99:04:a4:61:e7:ce:cc:df:a2: bc:5b:cb:bd:23:da:20:f8:c3:bb:95:51:45:47:bd: 0c:2e:e2:7f:3a:47:49:26:a8:7c:13:97:9b:ce:03: af:db:f3:a9:dc:01:6b:61:a4:ce:cb:23:d9:bd:4a: d1:ef:29:97:7f:ba:b3:9e:6c:d9:8b:a6:8a:69:0a: d6:db:0b:4b:41:57:61:df:9d:bd:ea:15:be:c3:be: 92:14:7f:8e:78:4f:e3:1b:5d:ee:b2:11:ef:e6:e4: fc:f4:16:32:8b:7a:ca:c1:91:64:af:d1:55:bf:18: dc:5f:89:3c:5c:76:df:3b:f0:c6:d6:c1:14:f9:de: 9b:b1:59:12:dc:8c:a6:00:ac:65:ab:74:fc:bc:2c: 5b:13:de:aa:ed:fd:15:1a:e8:9d:b0:1a:a4:57:c2: 46:fc:17:bb:3c:32:78:3f:d2:28:92:6b:74:72:05: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:A3:7E:DE:88:DB:6F:D6:C3:D5:FA:B3:DF:CE:53:E1:0B:43:CD X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:cc:2f:d2:4c:71:2b:63:9a:53:b2:12:05:9f:49:52:6b: e3:e1:99:3c:dd:4e:ed:65:8f:f9:59:7c:bc:a0:26:b8:d4:0a: 8e:49:dd:79:50:82:68:5c:58:2b:da:1f:76:55:e9:c0:c4:ec: 76:e5:0c:4d:bb:00:08:9d:3c:5f:1e:dd:11:0b:d7:bc:e0:74: 74:61:66:97:99:30:f3:db:7c:38:69:43:99:e2:51:43:07:f4: 48:13:9b:31:17:0f:59:37:09:d9:b5:51:e1:8c:13:ec:fa:09: de:4a:67:03:29:20:cd:d6:ef:ce:b1:fe:f3:8a:4d:3e:b3:23: 4d:da:3a:e2:aa:13:5d:bb:79:6b:29:60:b5:67:4a:e8:e1:ea: 09:b1:ba:80:c1:c5:d5:bf:5f:ff:9e:7e:2d:b5:a0:61:04:78: 76:ab:03:57:65:f7:89:34:71:25:cc:90:2b:aa:2d:41:6a:fe: c2:fa:dd:eb:19:16:ef:39:98:75:b3:a8:67:f5:af:42:56:b4: 97:51:d8:f5:39:3f:0a:10:cd:84:65:b4:65:00:b0:a3:a1:0f: a5:01:1d:0d:82:8d:6f:ef:15:67:e3:f5:32:b5:16:2b:c4:e5: 78:fc:14:4e:43:08:c1:1e:e9:98:51:05:7e:00:76:0b:c3:84: 2b:dc:61:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUalNWIk7Wf6RUYYHvkQoPqykhOewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjEwMTIwNDIxMzBaFw0yNjEwMTUxMTQxMzBaMDMxMTAvBgNV BAMTKEY3MzRBMzdFREU4OERCNkZENkMzRDVGQUIzREZDRTUzRTEwQjQzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqvGua0Y6rWND8B0COaW7koMF rfeaguWaaeiFBwnWF0kU5nwt+9tIeZ7zndxAyd5LF8q9dbkwABcnNNmQdPY1NBGq GakZjThvqmNgoayCDJkEpGHnzszforxby70j2iD4w7uVUUVHvQwu4n86R0kmqHwT l5vOA6/b86ncAWthpM7LI9m9StHvKZd/urOebNmLpoppCtbbC0tBV2Hfnb3qFb7D vpIUf454T+MbXe6yEe/m5Pz0FjKLesrBkWSv0VW/GNxfiTxcdt878MbWwRT53pux WRLcjKYArGWrdPy8LFsT3qrt/RUa6J2wGqRXwkb8F7s8Mng/0iiSa3RyBURHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9zSjft6I22/Ww9X6s9/OU+ELQ80wHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACubML9JMcStj mlOyEgWfSVJr4+GZPN1O7WWP+Vl8vKAmuNQKjkndeVCCaFxYK9ofdlXpwMTsduUM TbsACJ08Xx7dEQvXvOB0dGFml5kw89t8OGlDmeJRQwf0SBObMRcPWTcJ2bVR4YwT 7PoJ3kpnAykgzdbvzrH+84pNPrMjTdo64qoTXbt5aylgtWdK6OHqCbG6gMHF1b9f /55+LbWgYQR4dqsDV2X3iTRxJcyQK6otQWr+wvrd6xkW7zmYdbOoZ/WvQla0l1HY 9Tk/ChDNhGW0ZQCwo6EPpQEdDYKNb+8VZ+P1MrUWK8TlePwUTkMIwR7pmFEFfgB2 C8OEK9xhSA== -----END CERTIFICATE-----Generated at Tue Oct 13 19:39:35 2026 by rpki-client