$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: XzjcHlBwsF/0LkSZti+p05WA74Bvxv0WXeoSawauQ4Y= Subject key identifier: 61:A6:41:B4:DD:A8:4C:16:68:0C:C9:00:3B:D7:0A:0D:DD:3D:7C:A7 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 2B4B411534F7045F8CE5511026375DF83BF01C74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: AA Signing time: Mon 12 Oct 2026 11:11:53 +0000 Manifest this update: Mon 12 Oct 2026 11:06:53 +0000 Manifest next update: Thu 15 Oct 2026 21:54:53 +0000 Files and hashes: 1: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 2: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: Ha1zLwiGe+trL9jdARvXzcWW7nz6OPIUM4wek/K7idg=) 3: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) 4: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 5: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 6: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4b:41:15:34:f7:04:5f:8c:e5:51:10:26:37:5d:f8:3b:f0:1c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Oct 12 11:06:53 2026 GMT Not After : Oct 15 21:54:53 2026 GMT Subject: CN=61A641B4DDA84C16680CC9003BD70A0DDD3D7CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:0d:49:ee:a7:98:88:5b:f6:95:81:b9:12: 6e:d3:68:ca:37:56:be:11:75:4a:31:17:01:21:2d: f1:ef:ec:1a:70:04:d7:d8:19:e4:16:2f:c3:91:89: 72:07:77:bc:44:83:d1:15:64:50:3b:15:32:f2:a9: db:9b:ff:b7:5e:74:4e:00:fa:70:fa:04:d2:7d:4c: bc:5f:25:53:09:66:20:24:60:19:84:5a:03:09:f4: fa:52:8f:9f:23:34:9b:91:ee:89:18:f8:42:9a:77: 6c:4f:78:3e:40:0e:61:32:94:ac:1f:22:77:89:84: b1:ed:20:af:ba:d0:6f:c7:f1:1f:b1:92:fc:08:a0: 74:f5:0d:ed:e5:4f:b9:b7:b8:f8:60:4e:ec:c2:ed: 8a:3f:c4:1f:f8:3d:5c:c2:60:aa:23:93:d1:5d:15: 50:ca:57:49:85:e6:47:23:c3:a0:1c:19:cb:0f:75: 8e:57:8a:7b:ad:28:d0:c1:65:95:0f:e1:5d:48:50: 25:c1:11:43:b5:d4:a5:cf:0d:4c:ec:b1:cb:a0:29: af:f1:aa:7f:5f:ed:50:e7:1a:7a:a6:a5:2b:2b:87: c8:57:93:e8:4a:7d:c4:ae:2d:de:97:87:eb:49:c5: f0:41:54:56:fe:d9:1e:85:af:91:91:e7:26:10:50: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:41:B4:DD:A8:4C:16:68:0C:C9:00:3B:D7:0A:0D:DD:3D:7C:A7 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:30:c5:f3:e7:6b:64:b7:44:bb:92:c3:f0:2d:ae:17:3d:e8: f0:e1:c9:dd:b6:46:71:8a:01:eb:5e:b5:5a:1c:28:4e:bf:01: ae:b9:cd:a6:89:88:60:d9:9c:8d:c9:8a:63:b6:b4:5f:8f:3d: 52:b3:51:92:4e:81:43:38:18:4c:6b:a1:39:1c:58:e9:df:71: a7:c4:89:92:8d:ef:7c:23:e3:1a:3e:ab:48:17:a8:d0:e0:48: a9:c8:eb:d4:fa:5e:6b:99:a8:2d:f0:83:a8:db:96:de:f2:ff: 2e:7b:b6:b6:c4:a8:71:f1:1d:50:6c:ae:bf:1b:0e:91:cb:6b: 11:07:1d:db:b5:db:38:d4:dc:14:e8:f1:69:08:56:f7:b1:a9: ac:0f:0d:4f:41:e2:4c:53:bb:b6:24:22:b9:5a:29:f9:c9:f0: 55:42:b4:64:64:cc:08:a4:d5:ef:6b:2e:70:7d:8f:ae:e4:ed: 6c:1e:1f:c1:61:e0:7f:c7:6a:61:12:e0:43:c4:21:0e:bb:9f: 5a:d1:b3:f5:e5:99:e5:86:49:78:e5:55:c8:6d:fb:13:9a:cc: 3b:9e:de:13:90:d9:ed:be:f0:2a:30:54:9a:fe:57:2f:cc:b3: 8b:49:9b:4e:ce:d1:2b:ab:39:a6:13:da:f2:d1:88:a6:01:63: b8:d3:e3:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK0tBFTT3BF+M5VEQJjdd+DvwHHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjEwMTIxMTA2NTNaFw0yNjEwMTUyMTU0NTNaMDMxMTAvBgNV BAMTKDYxQTY0MUI0RERBODRDMTY2ODBDQzkwMDNCRDcwQTBEREQzRDdDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Uw1J7qeYiFv2lYG5Em7TaMo3 Vr4RdUoxFwEhLfHv7BpwBNfYGeQWL8ORiXIHd7xEg9EVZFA7FTLyqdub/7dedE4A +nD6BNJ9TLxfJVMJZiAkYBmEWgMJ9PpSj58jNJuR7okY+EKad2xPeD5ADmEylKwf IneJhLHtIK+60G/H8R+xkvwIoHT1De3lT7m3uPhgTuzC7Yo/xB/4PVzCYKojk9Fd FVDKV0mF5kcjw6AcGcsPdY5XinutKNDBZZUP4V1IUCXBEUO11KXPDUzsscugKa/x qn9f7VDnGnqmpSsrh8hXk+hKfcSuLd6Xh+tJxfBBVFb+2R6Fr5GR5yYQUFKXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYaZBtN2oTBZoDMkAO9cKDd09fKcwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzDF8+drZLdE u5LD8C2uFz3o8OHJ3bZGcYoB6161WhwoTr8BrrnNpomIYNmcjcmKY7a0X489UrNR kk6BQzgYTGuhORxY6d9xp8SJko3vfCPjGj6rSBeo0OBIqcjr1Ppea5moLfCDqNuW 3vL/Lnu2tsSocfEdUGyuvxsOkctrEQcd27XbONTcFOjxaQhW97GprA8NT0HiTFO7 tiQiuVop+cnwVUK0ZGTMCKTV72sucH2PruTtbB4fwWHgf8dqYRLgQ8QhDrufWtGz 9eWZ5YZJeOVVyG37E5rMO57eE5DZ7b7wKjBUmv5XL8yzi0mbTs7RK6s5phPa8tGI pgFjuNPjCQ== -----END CERTIFICATE-----Generated at Mon Oct 12 21:36:21 2026 by rpki-client