$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: Hqrc2cKyhetcqtubUNzbYUmIwZMJ3hl0B9bdXvnj3PY= Subject key identifier: 73:D6:13:19:26:68:B6:A2:2F:EE:FD:B7:8A:35:96:A0:67:B3:03:74 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 04DBF3449AA76DA540EDC427707A469DC9F52D45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 01A0 Signing time: Sun 25 Oct 2026 12:37:34 +0000 Manifest this update: Sun 25 Oct 2026 12:32:34 +0000 Manifest next update: Wed 28 Oct 2026 14:34:34 +0000 Files and hashes: 1: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=) 2: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=) 3: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=) 4: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=) 5: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=) 6: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=) 7: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=) 8: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=) 9: AS55990.roa (hash: nkM515uXV5KxhmAI7tmB49q5A4TfSDQHkogbTjBP35k=) 10: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=) 11: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) 12: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=) 13: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: umY3J5lwUJz8MX2iJtmW978Wp1MgfEt+Ru5GEeJ25CE=) 14: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 14:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:db:f3:44:9a:a7:6d:a5:40:ed:c4:27:70:7a:46:9d:c9:f5:2d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Oct 25 12:32:34 2026 GMT Not After : Oct 28 14:34:34 2026 GMT Subject: CN=73D613192668B6A22FEEFDB78A3596A067B30374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:f4:d2:31:0b:c5:6c:38:a7:99:63:f8:c0: aa:55:f1:b1:45:8c:95:3a:2e:3c:41:87:b5:33:45: e2:db:f7:a8:93:bc:6b:f6:0e:b4:40:5f:f4:36:bc: 8e:d0:95:3e:0b:c4:58:5b:bd:5f:c6:8c:90:99:ea: 97:e7:bd:53:3c:64:27:4d:87:c1:6e:62:fb:db:d1: f3:2c:e1:36:29:cd:5f:c2:1c:90:1a:78:8b:bd:da: fe:37:ae:b9:28:56:34:dc:14:27:b7:00:be:35:6e: 77:48:2a:a0:c2:3c:f4:0b:06:ed:df:8f:f8:f6:b2: a8:5d:0a:5a:fa:0a:7c:47:63:4d:64:71:35:bc:ab: b5:9f:5d:7c:e7:9a:34:51:ed:68:db:b2:be:81:da: dc:56:24:8c:70:fe:97:64:61:24:e2:da:5c:5e:c4: 5c:f3:4e:f4:a0:48:54:4e:a8:ca:69:26:9b:5d:6e: 89:37:d1:b2:e5:27:78:17:a7:3d:63:9b:af:e8:36: 54:2a:f0:60:97:ed:4a:d8:56:9c:2f:1d:2f:83:ad: 37:1b:f1:7e:b4:0d:52:cc:67:d8:dc:b9:a7:7a:7a: 26:2a:2e:d1:89:c3:26:8a:ea:a1:7b:c7:0c:3b:15: 2d:b1:ed:21:c9:33:9f:05:d7:d0:35:fa:5c:b5:63: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:13:19:26:68:B6:A2:2F:EE:FD:B7:8A:35:96:A0:67:B3:03:74 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:ac:2e:ff:90:40:1b:61:5a:68:e7:16:42:a1:94:96:a0: a7:9b:99:10:62:1a:1b:2d:e2:89:fd:50:9d:7e:17:31:82:6c: de:ee:2b:0b:be:87:ef:b9:6c:ea:4d:53:57:28:8c:55:8d:52: 73:fb:db:70:26:0b:86:e1:b9:c7:b8:b7:54:3f:d9:77:91:18: ec:d5:ef:84:be:d5:bd:72:5f:68:8e:bc:ad:d7:1d:de:02:fc: c3:d3:70:71:f4:3e:4a:a9:9d:6f:21:d6:3e:b6:31:c2:bc:21: b4:5d:cf:70:86:30:f5:39:4d:f8:29:a8:97:7b:9d:fa:5d:69: f1:14:2e:db:bb:88:ae:39:15:1e:18:83:d9:ff:53:ee:32:06: 3a:8d:88:99:e8:67:db:80:05:7d:8c:4f:e4:c8:52:11:ca:a0: 53:65:a2:d0:71:2e:2b:63:c5:c3:83:d4:6c:81:3a:84:7f:06: 77:4d:83:69:9f:f0:81:66:c3:1c:7c:f3:82:a3:fc:51:11:c8: b7:a2:c0:fc:a9:a1:34:a6:a4:e7:de:75:61:20:bf:57:b1:0f: e5:0a:68:1a:cd:fc:5d:7e:d0:9c:15:df:be:fe:6e:2b:66:ed: d9:4e:58:c2:b7:9f:00:40:67:78:8d:01:2a:31:fa:15:63:fb: d1:3f:c2:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBNvzRJqnbaVA7cQncHpGncn1LUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjEwMjUxMjMyMzRaFw0yNjEwMjgxNDM0MzRaMDMxMTAvBgNV BAMTKDczRDYxMzE5MjY2OEI2QTIyRkVFRkRCNzhBMzU5NkEwNjdCMzAzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8/TSMQvFbDinmWP4wKpV8bFF jJU6LjxBh7UzReLb96iTvGv2DrRAX/Q2vI7QlT4LxFhbvV/GjJCZ6pfnvVM8ZCdN h8FuYvvb0fMs4TYpzV/CHJAaeIu92v43rrkoVjTcFCe3AL41bndIKqDCPPQLBu3f j/j2sqhdClr6CnxHY01kcTW8q7WfXXznmjRR7Wjbsr6B2txWJIxw/pdkYSTi2lxe xFzzTvSgSFROqMppJptdbok30bLlJ3gXpz1jm6/oNlQq8GCX7UrYVpwvHS+DrTcb 8X60DVLMZ9jcuad6eiYqLtGJwyaK6qF7xww7FS2x7SHJM58F19A1+ly1Y3GtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc9YTGSZotqIv7v23ijWWoGezA3QwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlGsLv+QQBth WmjnFkKhlJagp5uZEGIaGy3iif1QnX4XMYJs3u4rC76H77ls6k1TVyiMVY1Sc/vb cCYLhuG5x7i3VD/Zd5EY7NXvhL7VvXJfaI68rdcd3gL8w9NwcfQ+SqmdbyHWPrYx wrwhtF3PcIYw9TlN+Cmol3ud+l1p8RQu27uIrjkVHhiD2f9T7jIGOo2Imehn24AF fYxP5MhSEcqgU2Wi0HEuK2PFw4PUbIE6hH8Gd02DaZ/wgWbDHHzzgqP8URHIt6LA /KmhNKak5951YSC/V7EP5QpoGs38XX7QnBXfvv5uK2bt2U5YwrefAEBneI0BKjH6 FWP70T/CXw== -----END CERTIFICATE-----Generated at Tue Oct 27 11:06:43 2026 by rpki-client