$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: zo/ENSZVOVvCIps8+aV2jqt2/z46sMq00F7Fr2s5+HQ= Subject key identifier: 13:5A:D9:3C:5B:5F:CE:FB:B9:31:44:69:25:6B:55:E8:86:53:77:D1 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 478D6D226FDC62912A7C310BE218BAE719B20822 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 01A1 Signing time: Tue 27 Oct 2026 14:34:48 +0000 Manifest this update: Tue 27 Oct 2026 14:29:48 +0000 Manifest next update: Sat 31 Oct 2026 01:43:48 +0000 Files and hashes: 1: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=) 2: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=) 3: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=) 4: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=) 5: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) 6: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=) 7: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: XP6CfPoOgZTvQ54EKE+/J0F3BuNZMBQDHU9bfW8HBzE=) 8: AS55990.roa (hash: nkM515uXV5KxhmAI7tmB49q5A4TfSDQHkogbTjBP35k=) 9: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=) 10: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=) 11: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=) 12: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=) 13: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=) 14: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8d:6d:22:6f:dc:62:91:2a:7c:31:0b:e2:18:ba:e7:19:b2:08:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Oct 27 14:29:48 2026 GMT Not After : Oct 31 01:43:48 2026 GMT Subject: CN=135AD93C5B5FCEFBB9314469256B55E8865377D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f6:6e:b9:20:65:6c:b7:59:8b:61:32:60:f4: fd:2c:ae:5d:33:79:76:e1:8c:e2:02:39:54:3e:bd: 65:29:84:9d:3c:94:a9:f3:14:e1:69:97:42:ad:27: eb:b9:c5:91:3b:4d:e1:32:55:46:b3:9c:e5:2d:8e: b2:31:f9:78:ae:2e:65:6c:10:44:ef:85:af:e1:fd: 11:46:57:4f:52:83:3c:ae:4b:c2:4f:1f:98:79:d5: 88:d9:1a:56:ec:fc:1c:c6:1a:11:26:e7:b4:07:d9: bb:29:1e:54:46:a3:e4:71:6b:83:a3:e8:04:83:42: 28:ac:8f:c6:5a:57:26:3f:af:b8:34:fa:a7:01:f4: bd:75:8e:10:c0:17:5e:73:1f:bb:bb:0a:07:51:c2: 35:02:c1:4f:e1:6e:c8:91:84:f9:4e:ab:25:53:9c: 3c:c5:8d:27:1e:b1:90:99:53:d9:01:be:95:ef:15: a5:d8:3e:8b:6b:a9:21:e0:52:dd:e1:1c:2c:9b:7a: bb:4b:83:ca:61:62:ab:aa:a6:0e:9a:80:0b:21:c1: dc:ac:3c:58:1d:9a:9f:09:de:ba:e7:32:f5:5f:42: 2b:fd:59:99:6c:69:70:d3:16:14:ab:01:39:f7:30: ac:af:21:7d:d1:07:3a:45:48:4c:9c:1f:f6:cc:56: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5A:D9:3C:5B:5F:CE:FB:B9:31:44:69:25:6B:55:E8:86:53:77:D1 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d1:37:1e:f2:56:6b:0f:69:29:2e:65:42:65:47:79:bd:1e: f9:f7:90:37:8d:2f:3e:52:5d:9d:55:ff:7d:af:4f:de:49:ae: aa:5e:be:a6:b0:e7:78:1e:1c:80:db:5b:a7:c3:b0:14:09:6f: 30:0e:c8:41:59:a3:84:24:77:da:43:67:8d:19:93:0c:94:cc: 03:15:c9:d2:69:38:3e:05:c8:5f:67:f6:1e:0e:12:a2:27:2c: 23:c9:ff:0b:ff:5a:bd:a3:3c:69:fd:1a:fc:4d:c0:95:1c:fe: fd:5d:fb:18:35:66:48:b3:cd:b6:4d:c6:e1:f1:a7:85:b1:81: 84:8d:21:e1:fa:61:89:a1:1d:23:49:1c:7e:33:39:15:e7:58: b0:c8:0f:ea:76:a4:00:ea:91:7c:db:e6:ea:c7:0a:26:4c:7e: 77:40:e8:bc:29:29:65:33:25:c0:a3:ad:95:90:44:82:1f:e4: e7:b6:79:e6:c1:7a:5f:37:98:ef:83:e1:95:6b:00:ff:f0:82: 18:4d:d4:e8:38:e4:81:3a:47:75:64:0b:49:2e:53:67:e4:3b: 72:a4:91:9c:de:e1:b3:74:c0:9f:3e:74:d4:0e:c8:54:6c:1b: ad:58:14:ab:6a:f5:80:d7:d7:f5:45:fe:a3:67:5d:40:5e:cf: cc:03:a2:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR41tIm/cYpEqfDEL4hi65xmyCCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjEwMjcxNDI5NDhaFw0yNjEwMzEwMTQzNDhaMDMxMTAvBgNV BAMTKDEzNUFEOTNDNUI1RkNFRkJCOTMxNDQ2OTI1NkI1NUU4ODY1Mzc3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9m65IGVst1mLYTJg9P0srl0z eXbhjOICOVQ+vWUphJ08lKnzFOFpl0KtJ+u5xZE7TeEyVUaznOUtjrIx+XiuLmVs EETvha/h/RFGV09SgzyuS8JPH5h51YjZGlbs/BzGGhEm57QH2bspHlRGo+Rxa4Oj 6ASDQiisj8ZaVyY/r7g0+qcB9L11jhDAF15zH7u7CgdRwjUCwU/hbsiRhPlOqyVT nDzFjScesZCZU9kBvpXvFaXYPotrqSHgUt3hHCybertLg8phYquqpg6agAshwdys PFgdmp8J3rrnMvVfQiv9WZlsaXDTFhSrATn3MKyvIX3RBzpFSEycH/bMVkjzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE1rZPFtfzvu5MURpJWtV6IZTd9EwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdE3HvJWaw9p KS5lQmVHeb0e+feQN40vPlJdnVX/fa9P3kmuql6+prDneB4cgNtbp8OwFAlvMA7I QVmjhCR32kNnjRmTDJTMAxXJ0mk4PgXIX2f2Hg4SoicsI8n/C/9avaM8af0a/E3A lRz+/V37GDVmSLPNtk3G4fGnhbGBhI0h4fphiaEdI0kcfjM5FedYsMgP6nakAOqR fNvm6scKJkx+d0DovCkpZTMlwKOtlZBEgh/k57Z55sF6XzeY74PhlWsA//CCGE3U 6DjkgTpHdWQLSS5TZ+Q7cqSRnN7hs3TAnz501A7IVGwbrVgUq2r1gNfX9UX+o2dd QF7PzAOiDA== -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:04 2026 by rpki-client