$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: NftlvhkOAIuTmQCmC3kzigQRO02l8bT/Z8k6FaPf8IY= Subject key identifier: 74:B8:D0:39:F5:FA:68:3F:F0:12:B0:75:F3:CE:A1:1F:0D:AD:B5:53 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 042ADA18E7A74F2F6CB3205096E4DCE8279A159D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 014F Signing time: Wed 14 Oct 2026 07:03:40 +0000 Manifest this update: Wed 14 Oct 2026 06:58:40 +0000 Manifest next update: Sat 17 Oct 2026 15:07:40 +0000 Files and hashes: 1: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 9HAyldJ/jD5FRQSP1clOe2MQ3vFoocWV+jL1pyJoWQo=) 2: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) 3: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2a:da:18:e7:a7:4f:2f:6c:b3:20:50:96:e4:dc:e8:27:9a:15:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Oct 14 06:58:40 2026 GMT Not After : Oct 17 15:07:40 2026 GMT Subject: CN=74B8D039F5FA683FF012B075F3CEA11F0DADB553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:82:6f:9d:70:8f:3c:84:e6:10:32:13:1e: ce:9f:10:9f:52:70:9b:79:b0:f7:d3:5a:d5:d0:bf: 9d:d6:94:7e:14:e6:f6:2b:b5:42:d0:6e:42:0e:61: d3:a4:42:4e:f2:bd:7e:d6:cb:5a:50:67:ce:2c:59: 7e:c2:0f:dd:10:7f:f7:bc:83:1f:c9:54:e5:62:8d: 6a:54:f0:6a:d1:27:f7:2c:ff:74:3d:b8:ce:7d:c4: f0:58:3c:35:09:bc:2e:7e:ad:5d:4d:bd:5b:36:00: 72:5a:ca:8c:19:5f:86:f8:8e:a0:ca:b9:5e:90:47: 5b:4b:7b:dc:74:c6:09:d3:c2:28:65:f5:d7:77:ed: 66:88:73:a5:ac:ee:d9:a2:ee:ec:d3:d3:c8:a8:9f: 3e:62:42:70:77:be:76:97:d6:3e:c5:79:ed:02:25: df:b0:94:0e:36:43:0d:5c:55:38:59:34:da:84:d1: e0:f1:73:76:ff:c1:dd:77:76:38:d8:eb:82:63:c7: 50:11:01:e4:0e:51:ac:6c:24:dc:8f:4d:e9:48:0b: 99:a6:f3:52:de:70:b6:fb:84:f7:17:af:a2:a5:83: fc:5e:15:0e:11:4e:0f:21:1e:72:d0:b5:e2:e6:52: 4b:b2:e1:61:08:8b:14:9c:f5:aa:0a:a5:06:fe:88: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:D0:39:F5:FA:68:3F:F0:12:B0:75:F3:CE:A1:1F:0D:AD:B5:53 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:57:3f:82:6c:b9:21:d0:42:3a:d8:2e:6b:cc:40:34:b5:ef: 8f:74:ec:89:a1:0d:dc:d7:c6:20:74:a8:d7:1f:41:3c:06:77: a3:d2:95:03:44:b1:76:8b:ed:ac:92:35:54:45:d8:53:4f:12: 4d:21:e0:73:fe:0d:3b:98:67:fc:22:de:05:ef:ed:ce:d3:b0: 80:b4:15:96:2a:55:76:63:0c:a2:64:57:84:0b:b4:60:a7:cf: a3:46:2a:9c:b9:e1:62:93:99:f0:1c:12:7c:70:66:86:7b:f7: 76:d1:49:fd:00:49:31:95:93:d4:02:7a:a7:a8:ab:00:7c:92: f5:39:10:bb:68:38:38:f2:fe:0d:a1:ec:6d:f4:c1:5b:d2:8f: 11:c8:be:e8:35:ff:a7:ec:2e:d9:1d:ab:70:b4:64:15:9d:09: 4b:58:15:93:dc:e7:d8:be:da:4d:a5:54:9c:4c:d5:b7:50:dd: 98:b9:f9:14:87:09:7e:bc:62:17:ca:99:69:c8:fd:cc:3b:f8: db:2d:59:3c:11:f9:8f:11:d1:7a:f4:8c:50:49:0a:d4:ef:25: 00:da:ff:b3:31:08:26:8e:14:b5:aa:ca:b7:21:e0:2b:24:08: bd:72:b7:b3:bc:cd:8c:2e:90:0d:d0:ca:da:62:5a:72:ac:2a: da:b6:fb:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBCraGOenTy9ssyBQluTc6CeaFZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjEwMTQwNjU4NDBaFw0yNjEwMTcxNTA3NDBaMDMxMTAvBgNV BAMTKDc0QjhEMDM5RjVGQTY4M0ZGMDEyQjA3NUYzQ0VBMTFGMERBREI1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbh4JvnXCPPITmEDITHs6fEJ9S cJt5sPfTWtXQv53WlH4U5vYrtULQbkIOYdOkQk7yvX7Wy1pQZ84sWX7CD90Qf/e8 gx/JVOVijWpU8GrRJ/cs/3Q9uM59xPBYPDUJvC5+rV1NvVs2AHJayowZX4b4jqDK uV6QR1tLe9x0xgnTwihl9dd37WaIc6Ws7tmi7uzT08ionz5iQnB3vnaX1j7Fee0C Jd+wlA42Qw1cVThZNNqE0eDxc3b/wd13djjY64Jjx1ARAeQOUaxsJNyPTelIC5mm 81LecLb7hPcXr6Klg/xeFQ4RTg8hHnLQteLmUkuy4WEIixSc9aoKpQb+iExvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdLjQOfX6aD/wErB1886hHw2ttVMwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFc/gmy5IdBC Otgua8xANLXvj3TsiaEN3NfGIHSo1x9BPAZ3o9KVA0SxdovtrJI1VEXYU08STSHg c/4NO5hn/CLeBe/tztOwgLQVlipVdmMMomRXhAu0YKfPo0YqnLnhYpOZ8BwSfHBm hnv3dtFJ/QBJMZWT1AJ6p6irAHyS9TkQu2g4OPL+DaHsbfTBW9KPEci+6DX/p+wu 2R2rcLRkFZ0JS1gVk9zn2L7aTaVUnEzVt1DdmLn5FIcJfrxiF8qZacj9zDv42y1Z PBH5jxHRevSMUEkK1O8lANr/szEIJo4UtarKtyHgKyQIvXK3s7zNjC6QDdDK2mJa cqwq2rb7Tw== -----END CERTIFICATE-----Generated at Thu Oct 15 21:09:01 2026 by rpki-client