$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: 1cura/2E2jzwoh1RzQ4jOyNTMcJQMpBbwvOPQjkiO98= Subject key identifier: 3B:2E:56:B4:F9:64:E6:F3:24:20:9E:CE:59:73:CB:26:F7:5E:63:07 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 78B660C5351CD788F45C7517FA2684F2231709B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 9C Signing time: Mon 12 Oct 2026 12:11:56 +0000 Manifest this update: Mon 12 Oct 2026 12:06:56 +0000 Manifest next update: Thu 15 Oct 2026 15:46:56 +0000 Files and hashes: 1: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: vFR+AuJEQ8CrOT31O1/2KA7GpMm8nzDhlWkkeN0YTgg=) 2: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) 3: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b6:60:c5:35:1c:d7:88:f4:5c:75:17:fa:26:84:f2:23:17:09:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Oct 12 12:06:56 2026 GMT Not After : Oct 15 15:46:56 2026 GMT Subject: CN=3B2E56B4F964E6F324209ECE5973CB26F75E6307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:60:4b:98:ec:a8:6a:e0:d6:7e:a2:7b:65: 66:58:c4:87:ef:eb:77:2a:28:fc:26:7b:18:85:ae: 05:5d:c2:36:fc:76:38:46:b4:64:cb:30:cc:57:f0: 5d:1b:31:1d:85:b6:03:b9:19:42:88:a0:09:d4:b2: a9:d1:06:7b:35:05:a2:e7:ef:92:2b:da:7a:90:9f: b7:01:e0:f5:9d:db:4d:23:09:c9:73:b3:23:cd:b3: 85:e6:51:a7:29:ff:37:dc:b9:de:71:3e:9d:25:25: 68:14:d2:1e:83:d4:90:c0:64:e1:e1:23:c0:58:55: f8:66:0f:3f:c1:6d:c4:8b:ae:1c:9c:4d:0a:7b:eb: 7b:56:01:87:dc:9b:de:e8:c3:e8:c3:27:74:0e:5c: 60:df:42:c8:ed:0e:66:c2:8e:13:ef:6a:ea:fc:c9: b3:1d:af:93:54:b0:bc:4e:58:59:24:94:86:1e:71: bd:b9:e9:e0:96:4b:2c:e4:9f:76:25:61:ea:e8:9f: ab:72:34:64:3e:03:02:95:18:d3:42:a3:df:56:13: 4b:ae:c7:66:6d:20:c0:23:78:bc:83:13:2c:b0:de: 4c:24:4b:ab:f9:82:d9:e8:14:64:08:79:f5:0e:c8: d7:60:5e:dc:00:95:f8:c7:fa:e6:78:b5:2c:df:01: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:56:B4:F9:64:E6:F3:24:20:9E:CE:59:73:CB:26:F7:5E:63:07 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:be:bb:77:d3:30:1d:93:7f:92:dc:98:2b:ca:f6:da:bb:e6: 07:cb:28:b1:b7:01:73:54:44:40:bb:fe:8f:c1:c6:22:9f:56: 54:c3:0a:5a:2c:64:38:9f:6e:c8:1e:02:36:47:b0:71:76:61: 10:a8:48:93:c3:e9:30:0c:7b:12:26:33:1b:8a:2e:ea:ff:08: d9:04:95:c6:4e:a7:ca:d5:fb:65:68:73:39:e1:ca:c4:4d:75: 9f:4e:57:ee:4e:21:95:c3:93:4c:b4:31:e1:69:79:2a:7a:55: f6:77:a3:7f:b7:a6:a5:b2:15:48:73:34:5c:60:8c:bc:ec:bc: 1f:30:d3:54:ba:df:6b:90:c8:62:75:d3:88:9b:cd:92:96:cb: 9b:53:b9:87:f0:6c:6b:06:1a:68:1a:a1:86:22:52:85:f4:c2: c9:54:6d:fe:8c:d1:da:fa:c1:55:29:5a:51:8b:cd:fc:8b:e2: b6:fe:7a:be:c1:20:a0:8e:6a:81:39:b1:04:4e:68:b8:2b:d0: 40:59:1e:31:15:9f:6a:f5:7f:db:62:ec:fa:3b:a2:2e:0a:98: 7c:33:8a:f9:7d:3a:39:c3:15:07:b2:a3:cf:36:a8:94:7d:12: 5b:15:30:76:0d:e7:43:5b:e6:9b:dc:93:95:d4:2d:13:42:54: c7:86:70:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeLZgxTUc14j0XHUX+iaE8iMXCbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjEwMTIxMjA2NTZaFw0yNjEwMTUxNTQ2NTZaMDMxMTAvBgNV BAMTKDNCMkU1NkI0Rjk2NEU2RjMyNDIwOUVDRTU5NzNDQjI2Rjc1RTYzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKP2BLmOyoauDWfqJ7ZWZYxIfv 63cqKPwmexiFrgVdwjb8djhGtGTLMMxX8F0bMR2FtgO5GUKIoAnUsqnRBns1BaLn 75Ir2nqQn7cB4PWd200jCclzsyPNs4XmUacp/zfcud5xPp0lJWgU0h6D1JDAZOHh I8BYVfhmDz/BbcSLrhycTQp763tWAYfcm97ow+jDJ3QOXGDfQsjtDmbCjhPvaur8 ybMdr5NUsLxOWFkklIYecb256eCWSyzkn3YlYeron6tyNGQ+AwKVGNNCo99WE0uu x2ZtIMAjeLyDEyyw3kwkS6v5gtnoFGQIefUOyNdgXtwAlfjH+uZ4tSzfARSPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOy5WtPlk5vMkIJ7OWXPLJvdeYwcwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD767d9MwHZN/ ktyYK8r22rvmB8sosbcBc1REQLv+j8HGIp9WVMMKWixkOJ9uyB4CNkewcXZhEKhI k8PpMAx7EiYzG4ou6v8I2QSVxk6nytX7ZWhzOeHKxE11n05X7k4hlcOTTLQx4Wl5 KnpV9nejf7empbIVSHM0XGCMvOy8HzDTVLrfa5DIYnXTiJvNkpbLm1O5h/BsawYa aBqhhiJShfTCyVRt/ozR2vrBVSlaUYvN/Ivitv56vsEgoI5qgTmxBE5ouCvQQFke MRWfavV/22Ls+juiLgqYfDOK+X06OcMVB7KjzzaolH0SWxUwdg3nQ1vmm9yTldQt E0JUx4Zwmg== -----END CERTIFICATE-----Generated at Tue Oct 13 22:37:59 2026 by rpki-client