$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json) Hash identifier: Q+jBjubHfsBNDRxnwH7y/03kmqpsu9Y+IIW1Oh/MAKQ= Subject key identifier: 23:02:3E:CA:A6:AC:B0:E4:AB:80:AE:24:3F:BC:D2:E3:71:6B:F8:43 Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Certificate serial: 226885068C6D3CB0FA0411BED21A0CDF918D8027 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft Manifest number: 02E9 Signing time: Sat 26 Sep 2026 21:43:07 +0000 Manifest this update: Sat 26 Sep 2026 21:38:07 +0000 Manifest next update: Wed 30 Sep 2026 09:00:07 +0000 Files and hashes: 1: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=) 2: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: jduqDOkU7yJpSmMlpeCxkrF2o9gjjZwMk1sY1ul4Wn0=) 3: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:68:85:06:8c:6d:3c:b0:fa:04:11:be:d2:1a:0c:df:91:8d:80:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Validity Not Before: Sep 26 21:38:07 2026 GMT Not After : Sep 30 09:00:07 2026 GMT Subject: CN=23023ECAA6ACB0E4AB80AE243FBCD2E3716BF843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:1d:b6:4c:bf:cf:5e:ff:28:7f:7a:98:9a: ae:53:f4:96:6e:a1:23:a9:76:0b:56:07:f2:a5:88: 2e:1d:87:9c:de:b7:ce:a1:05:65:2c:17:1e:ac:66: 15:3d:53:f1:34:6d:a9:75:3d:51:d3:97:b9:bb:7a: 98:6d:d6:2a:71:f1:00:dc:91:11:c9:af:71:85:c9: bd:79:26:a8:35:7e:49:42:e9:22:25:05:8b:ee:de: ea:ad:92:0f:29:a4:a1:b4:f5:08:fb:8e:e8:67:0d: 82:e1:8a:44:a0:bb:9a:e2:64:b3:0a:a4:bc:57:c9: 68:74:3e:fc:6e:06:df:15:c6:4d:a8:dc:b9:3d:83: 94:24:53:44:73:f1:ec:cf:5c:4f:12:16:58:cc:d3: 5a:e2:60:2a:f1:80:f3:1d:89:ae:f7:fa:66:e9:71: 7e:6b:0c:f2:01:58:70:3f:05:99:67:c3:f2:1e:40: 98:29:2b:92:73:0c:60:4f:7c:1a:51:97:e6:f0:d1: c8:04:e8:a1:0d:a9:bc:7e:ea:70:5c:4c:bd:4b:49: dd:5e:b8:e1:97:61:63:2c:53:33:34:27:5a:2e:26: ab:7b:7a:30:01:25:31:36:80:94:90:f8:f6:32:e5: 5b:af:33:d1:95:5e:60:85:3e:7a:79:3c:e2:24:9f: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:3E:CA:A6:AC:B0:E4:AB:80:AE:24:3F:BC:D2:E3:71:6B:F8:43 X509v3 Authority Key Identifier: keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1f:70:bb:2e:2f:d8:d6:57:4c:8a:83:90:2f:42:dd:c0:d6: 8f:ea:6b:ff:ff:dc:10:bb:39:63:6b:0d:ae:18:3a:0b:ac:f6: c4:71:33:f4:69:8f:05:01:11:0d:d5:a0:d8:24:08:49:cf:04: 8b:7e:4f:5c:d8:f5:07:a1:fc:10:34:87:1c:d9:63:ee:45:ce: 25:f9:84:c4:2b:10:58:e3:e4:75:46:70:aa:0e:c4:e3:51:d9: 6b:c3:c1:93:d9:31:aa:fb:b0:95:52:38:83:90:62:a6:f6:c6: 34:03:ab:46:ac:9f:c9:ff:d6:58:81:0e:85:f1:58:bc:f0:77: b4:fd:83:10:d4:1a:03:8a:9d:b4:9f:40:6f:07:35:07:48:75: b2:48:3b:0d:a9:e9:0c:70:d6:6e:30:06:73:c7:84:48:74:5f: 9c:49:1d:9e:ec:51:04:a5:4b:f8:68:06:c0:d9:bd:1e:ed:0e: 89:4f:9d:30:e3:6b:8e:ef:ec:2c:a2:d5:4c:8b:af:c2:58:ca: d1:e8:07:51:df:d9:67:e9:f8:dc:32:63:07:43:12:3a:70:89: f8:cc:77:9d:41:db:1a:e2:a8:55:a8:ae:62:78:9c:28:d5:8a: 97:e9:ad:ba:c3:52:93:3e:a8:18:46:4c:5f:13:0c:8e:a7:98: 4e:85:b4:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUImiFBoxtPLD6BBG+0hoM35GNgCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg0QzlFNjcxRUFE NDY0RTA0NjIzQkIwNDNGRDYyRTdCQTJBNzdFREQ0MB4XDTI2MDkyNjIxMzgwN1oX DTI2MDkzMDA5MDAwN1owMzExMC8GA1UEAxMoMjMwMjNFQ0FBNkFDQjBFNEFCODBB RTI0M0ZCQ0QyRTM3MTZCRjg0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrSHbZMv89e/yh/epiarlP0lm6hI6l2C1YH8qWILh2HnN63zqEFZSwXHqxm FT1T8TRtqXU9UdOXubt6mG3WKnHxANyREcmvcYXJvXkmqDV+SULpIiUFi+7e6q2S DymkobT1CPuO6GcNguGKRKC7muJkswqkvFfJaHQ+/G4G3xXGTajcuT2DlCRTRHPx 7M9cTxIWWMzTWuJgKvGA8x2Jrvf6ZulxfmsM8gFYcD8FmWfD8h5AmCkrknMMYE98 GlGX5vDRyATooQ2pvH7qcFxMvUtJ3V644ZdhYyxTMzQnWi4mq3t6MAElMTaAlJD4 9jLlW68z0ZVeYIU+enk84iSfDPECAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQjAj7K pqyw5KuAriQ/vNLjcWv4QzAfBgNVHSMEGDAWgBRMnmcerUZOBGI7sEP9Yue6Knft 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzEvNEM5RTY3 MUVBRDQ2NEUwNDYyM0JCMDQzRkQ2MkU3QkEyQTc3RURENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvVEo1bkhxMUdU Z1JpTzdCRF9XTG51aXAzN2RRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8xLzRDOUU2NzFFQUQ0NjRFMDQ2MjNCQjA0M0ZENjJFN0JBMkE3N0VE RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAEH3C7Li/Y1ldMioOQL0LdwNaP6mv//9wQuzljaw2uGDoL rPbEcTP0aY8FAREN1aDYJAhJzwSLfk9c2PUHofwQNIcc2WPuRc4l+YTEKxBY4+R1 RnCqDsTjUdlrw8GT2TGq+7CVUjiDkGKm9sY0A6tGrJ/J/9ZYgQ6F8Vi88He0/YMQ 1BoDip20n0BvBzUHSHWySDsNqekMcNZuMAZzx4RIdF+cSR2e7FEEpUv4aAbA2b0e 7Q6JT50w42uO7+wsotVMi6/CWMrR6AdR39ln6fjcMmMHQxI6cIn4zHedQdsa4qhV qK5ieJwo1YqX6a26w1KTPqgYRkxfEwyOp5hOhbSI -----END CERTIFICATE-----Generated at Mon Sep 28 19:38:23 2026 by rpki-client