$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: f8UioPcrBw5/8X4Bj4Dw++mnc4UwJe9UbHEfy8wXDRk= Subject key identifier: 83:10:58:E0:E3:50:B6:5C:57:69:EA:7B:F5:BA:13:4C:13:24:06:4E Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 59CCE02CCBD19286644110BD98EC400585063427 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 9B Signing time: Sun 18 Oct 2026 14:04:52 +0000 Manifest this update: Sun 18 Oct 2026 13:59:52 +0000 Manifest next update: Wed 21 Oct 2026 22:44:52 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: xONaazjL7w98S+6T0zlwvAxwjypDuOu5KE1NCLL0qtw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 22:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:e0:2c:cb:d1:92:86:64:41:10:bd:98:ec:40:05:85:06:34:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Oct 18 13:59:52 2026 GMT Not After : Oct 21 22:44:52 2026 GMT Subject: CN=831058E0E350B65C5769EA7BF5BA134C1324064E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:7e:82:51:7d:8d:fc:7e:71:0d:d9:c6:45: 57:3e:08:a7:e6:94:18:1d:c1:03:75:fc:d0:f1:19: 45:76:51:22:36:80:44:6b:6a:b0:db:14:7a:fb:64: 5c:da:b7:47:bd:e6:53:85:1c:ba:06:6c:83:bf:d2: e8:96:66:f4:1d:4f:95:1f:f7:57:47:5b:1d:7c:a4: 29:5e:a8:ef:00:72:ba:52:f9:30:8c:40:d8:53:1e: 1a:ed:d8:50:15:d5:b2:5c:b1:08:76:48:b8:6a:b7: e3:d5:44:0b:ed:af:c9:a8:99:62:a9:7f:d3:5a:18: d4:61:fb:1d:c0:0d:1b:b5:eb:b9:16:09:0a:1f:76: 39:62:8c:89:a6:4f:9b:4f:9e:e5:a4:2a:27:05:90: 5c:27:f4:13:f9:96:25:76:a5:03:6c:14:61:13:7e: 37:6c:f4:fb:a5:7d:89:df:77:10:56:c6:b6:ad:c9: 99:c7:29:b2:e9:f6:db:80:a2:e2:fe:40:3c:e4:ca: a6:d4:a1:f3:c7:ea:3e:de:84:44:34:7c:43:72:39: de:5c:4d:c4:ee:a7:0a:59:87:41:23:a1:eb:d1:29: ce:2b:e0:0a:79:a4:7b:fc:34:1b:bf:7a:7f:f2:43: 8a:42:35:28:2a:92:66:bb:ea:10:d1:04:5a:11:c7: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:58:E0:E3:50:B6:5C:57:69:EA:7B:F5:BA:13:4C:13:24:06:4E X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:ca:2d:59:f7:9d:52:02:af:66:f4:ba:20:92:ac:10:e4: 6c:bd:76:88:9d:c7:58:8c:fa:69:1e:15:14:5c:5c:cd:3f:41: 45:bb:c5:ec:87:76:d7:29:03:2a:98:09:55:bb:d6:99:1c:21: 39:7f:bb:0e:70:f3:ec:04:b7:19:23:ae:34:12:9c:da:9e:db: 43:36:33:fd:a8:09:91:65:e0:c6:dc:09:03:77:ea:23:e9:34: d6:af:ec:3f:f1:7d:de:c0:ba:6b:d6:3a:fd:5c:53:91:81:ae: f2:9b:a9:02:0e:2d:0d:ba:f2:df:0f:31:93:00:2b:3f:53:ae: 16:74:ef:42:86:e5:4c:f0:e8:06:a5:c3:19:f3:dd:6a:6d:3a: cc:d3:38:03:b6:e2:f7:fb:6c:7b:16:fa:13:5a:df:4a:02:06: df:f5:6f:19:e9:6a:0b:63:b2:ec:79:8a:d6:0d:22:5a:93:7f: f8:a5:0e:71:14:6f:2c:8b:99:65:a4:15:f0:c8:10:e5:b9:f0: b3:2e:fd:fc:95:05:a5:da:be:42:db:b1:fd:e0:bb:0d:d8:f4: 71:66:5f:2f:31:95:a6:29:74:85:e7:cd:be:79:29:95:04:1d: b0:53:8f:a6:ea:86:62:17:b7:af:17:01:73:68:40:29:93:47: 83:7a:82:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWczgLMvRkoZkQRC9mOxABYUGNCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjEwMTgxMzU5NTJaFw0yNjEwMjEyMjQ0NTJaMDMxMTAvBgNV BAMTKDgzMTA1OEUwRTM1MEI2NUM1NzY5RUE3QkY1QkExMzRDMTMyNDA2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wX6CUX2N/H5xDdnGRVc+CKfm lBgdwQN1/NDxGUV2USI2gERrarDbFHr7ZFzat0e95lOFHLoGbIO/0uiWZvQdT5Uf 91dHWx18pCleqO8AcrpS+TCMQNhTHhrt2FAV1bJcsQh2SLhqt+PVRAvtr8momWKp f9NaGNRh+x3ADRu167kWCQofdjlijImmT5tPnuWkKicFkFwn9BP5liV2pQNsFGET fjds9PulfYnfdxBWxratyZnHKbLp9tuAouL+QDzkyqbUofPH6j7ehEQ0fENyOd5c TcTupwpZh0EjoevRKc4r4Ap5pHv8NBu/en/yQ4pCNSgqkma76hDRBFoRx1bFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgxBY4ONQtlxXaep79boTTBMkBk4wHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/nKLVn3nVIC r2b0uiCSrBDkbL12iJ3HWIz6aR4VFFxczT9BRbvF7Id21ykDKpgJVbvWmRwhOX+7 DnDz7AS3GSOuNBKc2p7bQzYz/agJkWXgxtwJA3fqI+k01q/sP/F93sC6a9Y6/VxT kYGu8pupAg4tDbry3w8xkwArP1OuFnTvQoblTPDoBqXDGfPdam06zNM4A7bi9/ts exb6E1rfSgIG3/VvGelqC2Oy7HmK1g0iWpN/+KUOcRRvLIuZZaQV8MgQ5bnwsy79 /JUFpdq+Qtux/eC7Ddj0cWZfLzGVpil0hefNvnkplQQdsFOPpuqGYhe3rxcBc2hA KZNHg3qCoQ== -----END CERTIFICATE-----Generated at Mon Oct 19 23:50:54 2026 by rpki-client