$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft File: 209BC812EEDDC6074713463D5583CB221EADC76F.mft (raw, json) Hash identifier: 1Py8Ldv5p2PkM7BwTDBvgoNrPW/Ej2vsEktQpuO7a30= Subject key identifier: D3:8A:38:0C:BB:2A:D5:D8:69:0B:CF:BF:BE:72:CE:C7:5C:9F:1C:D2 Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F Certificate serial: 0E377CC2B814909E546DDB0C369C2F668BF61FA7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft Manifest number: 6A Signing time: Wed 14 Oct 2026 04:13:32 +0000 Manifest this update: Wed 14 Oct 2026 04:08:32 +0000 Manifest next update: Sat 17 Oct 2026 15:19:32 +0000 Files and hashes: 1: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (hash: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=) 2: 209BC812EEDDC6074713463D5583CB221EADC76F.crl (hash: qDWauUHC0CP1yyIe1yXb+sLml81GyiW88VkUwljI5m8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:37:7c:c2:b8:14:90:9e:54:6d:db:0c:36:9c:2f:66:8b:f6:1f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F Validity Not Before: Oct 14 04:08:32 2026 GMT Not After : Oct 17 15:19:32 2026 GMT Subject: CN=D38A380CBB2AD5D8690BCFBFBE72CEC75C9F1CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:c0:aa:51:5a:4e:96:f3:da:60:1e:37:dc: 5a:75:ec:06:49:9d:0b:82:77:4d:e7:89:3f:2e:d8: 75:a7:76:05:eb:d9:65:38:9e:52:bb:87:32:5d:ed: 10:86:5f:da:24:ce:45:75:ff:81:da:e3:75:7e:99: 6f:5c:d2:76:2e:e0:f0:c3:06:08:e6:54:ed:9b:bf: fd:97:49:3c:4f:40:78:ed:6b:59:97:fd:73:14:3b: 0f:c4:c1:cd:d7:f0:b6:41:b9:09:e1:19:c8:63:aa: d8:2d:d0:2d:fd:93:4d:69:51:c1:0d:8d:fb:6d:26: 0b:17:64:3a:53:95:da:ed:58:9a:21:e1:24:e0:bb: d1:d0:3d:ce:c0:fc:d2:3f:67:f6:67:b4:c9:ed:9d: 26:5a:0f:2e:73:c9:68:58:35:cb:62:af:60:70:55: 06:3b:31:89:c8:4d:e8:dc:d9:26:81:87:f7:17:dc: 0f:f6:63:a1:b8:96:36:6e:cd:ce:0e:2c:ec:3c:c7: c6:ed:ed:43:72:39:bb:c5:b4:29:29:17:2c:67:e6: 6a:66:8b:64:07:57:86:96:19:0d:fb:ec:ea:58:2e: 0b:96:8b:2b:23:15:36:9b:ef:66:09:65:1b:15:6f: fe:c2:a7:01:3e:5c:5c:59:ed:43:9e:01:03:4c:54: 25:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:38:0C:BB:2A:D5:D8:69:0B:CF:BF:BE:72:CE:C7:5C:9F:1C:D2 X509v3 Authority Key Identifier: keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f9:06:39:40:0a:fa:d9:fa:d7:fb:9b:47:12:f5:a8:5a:17: 07:0c:13:9a:20:6b:f1:97:82:9f:64:0d:89:f6:c9:ce:f2:2b: d1:2f:db:63:19:33:08:42:23:cb:17:f4:63:4e:8d:09:49:9b: c5:08:82:50:dc:b4:47:83:d0:08:64:54:20:56:b0:db:70:f4: 3e:9d:a3:7c:c8:f0:4c:f4:93:3e:18:07:26:6e:2a:73:f6:4e: f4:4c:bf:f7:76:a7:dd:af:5c:cc:fb:a5:cc:52:a5:d3:9f:39: 88:48:22:1e:b6:d3:fc:3d:78:5f:f2:b5:ba:f3:8e:e0:5e:d3: 8e:ce:3d:55:8c:5b:40:30:29:85:25:2f:43:87:f0:c8:24:4d: e2:1c:f4:3e:05:1d:c8:eb:46:09:62:23:f5:d1:1e:ee:31:06: 6f:25:3d:a8:7f:07:ea:1f:42:5f:88:08:54:ec:d9:03:86:17: 2e:e8:37:3d:d5:ad:41:ca:73:69:13:5c:37:99:8c:19:82:ba: 9c:b2:97:c6:e6:9a:f5:c8:89:a5:d3:30:b6:f9:4b:44:d5:15: 1c:79:98:c2:1e:4b:68:f6:9f:a7:5d:1d:1b:a4:70:9e:3c:93: c9:09:af:fa:09:22:4c:3a:91:85:ea:cb:5c:e2:bc:5b:7c:1f: 5f:2a:83:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDjd8wrgUkJ5UbdsMNpwvZov2H6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIx RUFEQzc2RjAeFw0yNjEwMTQwNDA4MzJaFw0yNjEwMTcxNTE5MzJaMDMxMTAvBgNV BAMTKEQzOEEzODBDQkIyQUQ1RDg2OTBCQ0ZCRkJFNzJDRUM3NUM5RjFDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQS8CqUVpOlvPaYB433Fp17AZJ nQuCd03niT8u2HWndgXr2WU4nlK7hzJd7RCGX9okzkV1/4Ha43V+mW9c0nYu4PDD BgjmVO2bv/2XSTxPQHjta1mX/XMUOw/Ewc3X8LZBuQnhGchjqtgt0C39k01pUcEN jfttJgsXZDpTldrtWJoh4STgu9HQPc7A/NI/Z/ZntMntnSZaDy5zyWhYNctir2Bw VQY7MYnITejc2SaBh/cX3A/2Y6G4ljZuzc4OLOw8x8bt7UNyObvFtCkpFyxn5mpm i2QHV4aWGQ377OpYLguWiysjFTab72YJZRsVb/7CpwE+XFxZ7UOeAQNMVCWTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU04o4DLsq1dhpC8+/vnLOx1yfHNIwHwYDVR0j BBgwFoAUIJvIEu7dxgdHE0Y9VYPLIh6tx28wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzI4MTMyNTg0MzgwODI5NS8wLzIwOUJDODEyRUVEREM2MDc0NzEzNDYzRDU1ODND QjIyMUVBREM3NkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjMyODEzMjU4NDM4MDgyOTUvMC8yMDlCQzgxMkVFRERD NjA3NDcxMzQ2M0Q1NTgzQ0IyMjFFQURDNzZGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/kGOUAK+tn6 1/ubRxL1qFoXBwwTmiBr8ZeCn2QNifbJzvIr0S/bYxkzCEIjyxf0Y06NCUmbxQiC UNy0R4PQCGRUIFaw23D0Pp2jfMjwTPSTPhgHJm4qc/ZO9Ey/93an3a9czPulzFKl 0585iEgiHrbT/D14X/K1uvOO4F7Tjs49VYxbQDAphSUvQ4fwyCRN4hz0PgUdyOtG CWIj9dEe7jEGbyU9qH8H6h9CX4gIVOzZA4YXLug3PdWtQcpzaRNcN5mMGYK6nLKX xuaa9ciJpdMwtvlLRNUVHHmYwh5LaPafp10dG6RwnjyTyQmv+gkiTDqRherLXOK8 W3wfXyqDaQ== -----END CERTIFICATE-----Generated at Thu Oct 15 08:10:20 2026 by rpki-client