$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: E+ILfOw02QZRRa10i+rLTZrpKNB29A8zIODgLxKBkSg= Subject key identifier: BB:8A:42:5B:44:1E:5D:B9:C3:C0:65:7F:F3:F5:BB:43:68:A0:D8:D6 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 272E4DECF3099F1C67001C762F742F414BB838FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 8A Signing time: Mon 27 Apr 2026 15:18:48 +0000 Manifest this update: Mon 27 Apr 2026 15:13:48 +0000 Manifest next update: Tue 28 Apr 2026 15:58:48 +0000 Files and hashes: 1: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: aM9YKuqUJepiG7SRLUdwj3f5de2OuRmTboVHglp6I/M=) 2: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=) 3: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2e:4d:ec:f3:09:9f:1c:67:00:1c:76:2f:74:2f:41:4b:b8:38:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Apr 27 15:13:48 2026 GMT Not After : Apr 28 15:58:48 2026 GMT Subject: CN=BB8A425B441E5DB9C3C0657FF3F5BB4368A0D8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:0d:a4:cf:21:30:24:6d:e6:20:09:20:c9: b3:d6:73:fd:01:f8:ba:85:54:bc:27:05:37:72:ab: c6:a0:ec:33:b4:cb:f0:26:9d:d7:f8:ea:e3:98:32: 0c:8c:ac:72:1e:ea:28:53:a3:72:f0:85:2e:10:61: c2:86:f1:0e:80:e0:41:e0:83:9a:a1:22:63:f6:78: 3c:5f:47:56:05:f0:e5:d4:1d:1d:40:28:4c:3f:63: 7f:28:d0:f6:48:05:81:25:c8:9b:2f:3a:47:90:e5: d5:05:f3:d7:e3:e9:76:6a:95:ac:b2:7b:85:c9:04: 51:ba:2b:a0:15:a6:46:4a:4f:42:08:0e:ef:06:1e: 3f:e6:fc:81:48:8b:2f:c2:e4:64:c5:61:5f:d8:70: b5:7c:48:e1:b2:4e:c6:1b:42:49:5e:20:8b:0d:70: e8:f0:52:4d:f3:cc:95:20:1e:e3:eb:30:73:e3:7e: 96:af:35:63:9c:7b:cf:84:bb:8b:bc:55:18:71:8a: 0c:0b:b5:31:77:ff:6a:80:57:de:74:1d:ae:fe:28: 17:79:d6:8c:fb:26:df:68:4a:b4:4d:b2:c1:6c:cf: dc:2b:b8:3d:67:b2:e5:f9:09:34:6a:f3:ff:08:a9: 24:93:c5:e1:f4:44:39:32:7b:e7:df:79:bd:3a:4a: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8A:42:5B:44:1E:5D:B9:C3:C0:65:7F:F3:F5:BB:43:68:A0:D8:D6 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5d:47:ad:4a:6a:ab:cf:90:5e:88:cd:59:c0:4b:5b:f6:26: d0:f4:88:6b:74:dc:28:bc:2a:c4:08:6b:df:ed:2f:79:0a:02: ab:27:ee:71:3a:d2:c9:bc:dd:5c:6f:be:60:aa:8e:4d:d4:6d: c7:8e:79:2b:5d:6d:d0:23:6c:1c:7c:7d:44:78:e8:5f:f2:3a: ce:8b:80:95:4e:fc:8a:d4:ce:00:59:86:3e:cd:8e:5d:5f:13: ec:da:7f:ae:d2:1a:63:30:2d:4a:b9:f6:68:a2:bb:4b:f8:69: a7:45:e7:2b:2d:79:42:9a:ce:52:35:8b:9d:e6:9b:5e:5f:ca: f6:8e:2c:14:21:b3:fb:79:67:dc:26:80:4a:e1:ca:c4:f7:5d: 8f:5a:19:51:86:82:d9:34:9d:71:b7:8e:99:19:40:e8:aa:2c: bf:4a:9e:19:2f:3b:bb:96:fa:d3:a1:91:a2:97:df:08:c8:c1: ec:63:c2:c4:4d:ae:6c:aa:76:79:a2:8e:9e:87:f1:d4:fc:84: 7c:e6:3f:47:8b:0e:73:99:c3:4a:0c:ce:0e:59:af:61:a9:cb: 71:a4:d2:e4:e5:b2:b6:f2:52:07:7b:3f:42:a5:be:ea:b2:f7: a8:f7:36:0d:75:82:1d:1e:5f:a0:7f:b5:30:02:e8:e9:8e:5a: a7:db:9e:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJy5N7PMJnxxnABx2L3QvQUu4OP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA0MjcxNTEzNDhaFw0yNjA0MjgxNTU4NDhaMDMxMTAvBgNV BAMTKEJCOEE0MjVCNDQxRTVEQjlDM0MwNjU3RkYzRjVCQjQzNjhBMEQ4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRXQ2kzyEwJG3mIAkgybPWc/0B +LqFVLwnBTdyq8ag7DO0y/Amndf46uOYMgyMrHIe6ihTo3LwhS4QYcKG8Q6A4EHg g5qhImP2eDxfR1YF8OXUHR1AKEw/Y38o0PZIBYElyJsvOkeQ5dUF89fj6XZqlayy e4XJBFG6K6AVpkZKT0IIDu8GHj/m/IFIiy/C5GTFYV/YcLV8SOGyTsYbQkleIIsN cOjwUk3zzJUgHuPrMHPjfpavNWOce8+Eu4u8VRhxigwLtTF3/2qAV950Ha7+KBd5 1oz7Jt9oSrRNssFsz9wruD1nsuX5CTRq8/8IqSSTxeH0RDkye+ffeb06SnhfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu4pCW0QeXbnDwGV/8/W7Q2ig2NYwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm11HrUpqq8+Q XojNWcBLW/Ym0PSIa3TcKLwqxAhr3+0veQoCqyfucTrSybzdXG++YKqOTdRtx455 K11t0CNsHHx9RHjoX/I6zouAlU78itTOAFmGPs2OXV8T7Np/rtIaYzAtSrn2aKK7 S/hpp0XnKy15QprOUjWLneabXl/K9o4sFCGz+3ln3CaASuHKxPddj1oZUYaC2TSd cbeOmRlA6Kosv0qeGS87u5b606GRopffCMjB7GPCxE2ubKp2eaKOnofx1PyEfOY/ R4sOc5nDSgzODlmvYanLcaTS5OWytvJSB3s/QqW+6rL3qPc2DXWCHR5foH+1MALo 6Y5ap9uedQ== -----END CERTIFICATE-----Generated at Mon Apr 27 23:46:14 2026 by rpki-client