$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: 6UJ1ZUFqtuNDxGtV5p6yhMk5f3Kl94zRmOUDGYjwTLQ= Subject key identifier: 72:3C:06:F8:DE:58:4E:47:9B:7E:76:7C:E7:77:7B:A2:B6:F7:85:B4 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 19776477E82FB1AD5EED884D1E80A32E734C3CE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 0117 Signing time: Thu 11 Jun 2026 16:02:07 +0000 Manifest this update: Thu 11 Jun 2026 15:57:07 +0000 Manifest next update: Fri 12 Jun 2026 17:48:07 +0000 Files and hashes: 1: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=) 2: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=) 3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: dPzowFDpOz+Ng9xJViH/RQL92Y9QiQ+XN1GL0F+qSYU=) 4: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) 5: AS55990.roa (hash: IaZFVsZPAOrngG6juOtS2kJ3WskG7NkUfbooiMvRaV0=) 6: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 17:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:77:64:77:e8:2f:b1:ad:5e:ed:88:4d:1e:80:a3:2e:73:4c:3c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 11 15:57:07 2026 GMT Not After : Jun 12 17:48:07 2026 GMT Subject: CN=723C06F8DE584E479B7E767CE7777BA2B6F785B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:69:f2:c4:38:68:5a:68:af:22:b4:99:4b: 52:03:58:a1:4c:a1:a6:8a:90:40:51:bf:40:8c:2e: cf:e6:7d:54:fb:a0:bc:86:37:1f:00:4f:1e:5e:f4: 68:7c:f3:15:8f:0d:0c:87:c4:b5:90:49:78:5c:1c: 02:65:28:97:3f:f1:4b:c0:58:b5:b8:c2:b2:62:f3: 70:18:61:6e:27:31:8d:50:b8:9d:19:d8:8f:18:67: 66:01:6e:29:e6:af:7d:98:86:b1:69:e8:11:7d:aa: ba:31:1d:7c:0f:cc:78:82:fb:c3:96:2f:9c:c7:ee: 3c:4b:89:cb:95:18:32:d0:a6:02:c7:10:6f:e8:98: 45:fb:f0:13:33:ad:76:3e:fd:db:38:82:46:94:7a: d8:85:9c:66:ae:b3:98:69:1d:4e:27:a5:17:e4:a8: 03:10:93:87:aa:5d:1f:35:9a:0d:f5:ae:11:7f:46: 9d:93:29:aa:ad:8b:fb:9d:5b:2f:5e:fb:c3:0a:91: bf:15:c7:da:ae:10:ae:c0:02:53:f2:b7:97:a0:5e: 8e:9a:c0:2e:4a:ac:00:a5:ca:ea:3f:50:94:af:ed: 28:1e:68:aa:c6:c8:63:2b:0b:97:6d:ff:d3:44:13: c7:0c:d3:4c:b9:f0:cc:cb:8f:80:31:3e:e7:0c:f8: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3C:06:F8:DE:58:4E:47:9B:7E:76:7C:E7:77:7B:A2:B6:F7:85:B4 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:59:5b:8f:e0:33:f5:52:2a:f2:68:96:02:70:91:0c:fc:de: 23:bf:c8:96:56:56:1c:e7:05:ac:68:fa:a8:a1:76:33:82:73: 79:b1:f1:06:75:70:4e:45:f6:71:3b:2c:25:8f:6b:ff:07:2f: 01:92:ea:96:0c:48:b1:b0:4d:6c:b9:84:a4:e0:b4:f1:83:59: 63:3d:7f:b2:4f:d1:3e:27:f9:3b:2e:cb:da:43:23:5e:85:03: e0:89:d7:79:2c:58:fc:b8:6d:7c:4f:59:4f:b4:13:13:0d:a5: 90:87:c5:02:75:2c:4e:11:8c:53:4d:45:bc:24:54:ab:5a:c2: 8a:0b:7b:89:38:85:cb:f5:8b:b7:d6:89:86:df:84:33:3a:43: 70:85:60:34:73:0f:c2:25:77:50:06:86:ae:b4:16:f9:f6:e8: cc:ea:dd:e6:98:9f:8c:5b:af:60:b1:fd:47:b1:6c:7d:64:0f: be:9d:04:70:48:e2:36:ea:8f:87:89:8d:28:c6:20:bd:e2:03: d0:ef:53:87:6e:3b:38:f4:76:74:cd:96:8c:4b:f3:d2:0c:ec: c6:81:a7:17:94:0a:7a:39:a3:63:90:d9:c1:15:1c:b2:c8:71: f0:be:48:f6:14:de:cb:6d:df:f8:40:9c:09:4f:12:a5:6d:25: a2:af:66:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGXdkd+gvsa1e7YhNHoCjLnNMPOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTExNTU3MDdaFw0yNjA2MTIxNzQ4MDdaMDMxMTAvBgNV BAMTKDcyM0MwNkY4REU1ODRFNDc5QjdFNzY3Q0U3Nzc3QkEyQjZGNzg1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/GnyxDhoWmivIrSZS1IDWKFM oaaKkEBRv0CMLs/mfVT7oLyGNx8ATx5e9Gh88xWPDQyHxLWQSXhcHAJlKJc/8UvA WLW4wrJi83AYYW4nMY1QuJ0Z2I8YZ2YBbinmr32YhrFp6BF9qroxHXwPzHiC+8OW L5zH7jxLicuVGDLQpgLHEG/omEX78BMzrXY+/ds4gkaUetiFnGaus5hpHU4npRfk qAMQk4eqXR81mg31rhF/Rp2TKaqti/udWy9e+8MKkb8Vx9quEK7AAlPyt5egXo6a wC5KrAClyuo/UJSv7SgeaKrGyGMrC5dt/9NEE8cM00y58MzLj4AxPucM+GXDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcjwG+N5YTkebfnZ853d7orb3hbQwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFlbj+Az9VIq 8miWAnCRDPzeI7/IllZWHOcFrGj6qKF2M4JzebHxBnVwTkX2cTssJY9r/wcvAZLq lgxIsbBNbLmEpOC08YNZYz1/sk/RPif5Oy7L2kMjXoUD4InXeSxY/LhtfE9ZT7QT Ew2lkIfFAnUsThGMU01FvCRUq1rCigt7iTiFy/WLt9aJht+EMzpDcIVgNHMPwiV3 UAaGrrQW+fbozOrd5pifjFuvYLH9R7FsfWQPvp0EcEjiNuqPh4mNKMYgveID0O9T h247OPR2dM2WjEvz0gzsxoGnF5QKejmjY5DZwRUcsshx8L5I9hTey23f+ECcCU8S pW0loq9mVQ== -----END CERTIFICATE-----Generated at Fri Jun 12 03:55:45 2026 by rpki-client