$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft File: 9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json) Hash identifier: SJtCv8SABYRV6UowolWrwinhEyqO5Wg90Iz1eRae+zE= Subject key identifier: 7A:BA:83:7E:6F:57:6A:79:DB:95:FF:3B:A7:02:54:31:3E:AC:1A:55 Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 Certificate issuer: /CN=9FEF44F113313B4929575EF55ED937D41AA80334 Certificate serial: 6F0B44552FEAC80DCE992ECF0751161A690CA1D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft Manifest number: CE Signing time: Wed 14 Oct 2026 11:29:02 +0000 Manifest this update: Wed 14 Oct 2026 11:24:02 +0000 Manifest next update: Sat 17 Oct 2026 12:06:02 +0000 Files and hashes: 1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: 9HI7nKabKCqbiu4/GeCl7AaCKZ+ZvUSD9VxHEhHdfcA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0b:44:55:2f:ea:c8:0d:ce:99:2e:cf:07:51:16:1a:69:0c:a1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334 Validity Not Before: Oct 14 11:24:02 2026 GMT Not After : Oct 17 12:06:02 2026 GMT Subject: CN=7ABA837E6F576A79DB95FF3BA70254313EAC1A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:a9:43:bc:0a:0c:ed:05:1c:40:ef:50:8d: 9b:82:10:94:e9:82:f8:5c:cd:b7:fd:8d:71:05:b3: b7:1e:2e:ff:3d:60:c8:b0:7b:39:ec:ff:c2:a5:e2: 54:cc:70:1f:a5:40:d3:7b:cc:a5:49:ed:c8:99:73: 0c:e3:e8:a6:e5:0b:91:d8:dd:88:d2:a5:45:80:11: ce:12:2a:fe:37:78:f6:d3:a1:16:1a:80:ba:dd:f7: c9:1f:54:e0:a2:70:83:7d:f2:d2:a5:fa:a0:2b:18: 24:08:22:92:35:e6:06:92:89:6b:37:57:97:0c:d7: 95:c5:06:c3:76:7d:3e:0b:23:f8:16:53:f6:3c:3f: e6:59:f2:4e:e6:f2:8f:86:5c:ef:be:ef:10:f2:94: 1d:76:c1:4b:5b:76:11:20:8d:96:ca:9e:80:34:2d: 15:9b:f2:91:1e:d8:69:e3:95:ab:3e:75:8a:4b:42: 7f:1c:db:fe:d5:dc:4c:09:4a:df:cd:f7:f7:35:0c: bf:4e:9e:28:d5:7e:38:c9:28:79:12:d2:bb:3a:0e: 49:2c:db:15:94:59:e8:f3:d9:89:f6:68:d5:b4:6f: d5:7a:29:58:4e:3b:02:43:25:13:b5:d6:9f:75:eb: 5a:8e:e8:c9:76:6f:81:20:4e:f3:79:f2:56:5b:18: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:83:7E:6F:57:6A:79:DB:95:FF:3B:A7:02:54:31:3E:AC:1A:55 X509v3 Authority Key Identifier: keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8c:27:50:40:be:20:8e:96:34:42:84:8b:a1:b2:bf:a7:fc: 34:d6:2b:10:f0:85:ac:d0:c0:a8:19:9e:d9:be:43:da:be:05: 84:da:b7:92:f1:0e:87:a2:e5:fd:a4:5d:27:d6:93:52:6c:9d: 15:ed:c1:2f:75:ce:4d:ec:a7:e2:18:13:b6:60:74:00:e7:da: ce:98:f8:fa:e4:ea:c8:9e:c1:99:d8:aa:06:85:98:43:86:1d: a0:e8:42:08:a9:55:3b:70:50:68:28:78:0c:6e:78:30:8b:95: fb:1d:c1:a4:57:c6:22:94:6f:ce:d8:8d:78:80:19:8a:14:ce: 0f:c5:43:ae:52:bf:ba:91:85:72:b4:53:11:e4:2d:2c:e5:31: 8e:88:d4:89:99:0d:d5:15:05:4b:f4:2a:c7:42:f7:5b:fb:99: 37:ef:5b:cb:44:76:0a:95:0f:a4:87:55:f9:39:e3:80:d1:53: 98:91:98:d4:86:b3:40:87:86:d9:d0:8c:60:ee:c4:66:08:1f: 72:10:84:34:67:d7:67:30:97:e0:68:f9:ce:76:52:14:48:85: 7f:c0:b2:f0:b3:d7:d1:e7:1e:a6:d6:08:59:4d:0a:5c:d2:85: 1d:4d:54:a0:63:03:e7:2f:cc:72:f5:3e:98:48:88:94:06:d3: c2:a3:e1:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbwtEVS/qyA3OmS7PB1EWGmkModEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQx QUE4MDMzNDAeFw0yNjEwMTQxMTI0MDJaFw0yNjEwMTcxMjA2MDJaMDMxMTAvBgNV BAMTKDdBQkE4MzdFNkY1NzZBNzlEQjk1RkYzQkE3MDI1NDMxM0VBQzFBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifalDvAoM7QUcQO9QjZuCEJTp gvhczbf9jXEFs7ceLv89YMiwezns/8Kl4lTMcB+lQNN7zKVJ7ciZcwzj6KblC5HY 3YjSpUWAEc4SKv43ePbToRYagLrd98kfVOCicIN98tKl+qArGCQIIpI15gaSiWs3 V5cM15XFBsN2fT4LI/gWU/Y8P+ZZ8k7m8o+GXO++7xDylB12wUtbdhEgjZbKnoA0 LRWb8pEe2Gnjlas+dYpLQn8c2/7V3EwJSt/N9/c1DL9OnijVfjjJKHkS0rs6Dkks 2xWUWejz2Yn2aNW0b9V6KVhOOwJDJRO11p9161qO6Ml2b4EgTvN58lZbGI8BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUerqDfm9Xannblf87pwJUMT6sGlUwHwYDVR0j BBgwFoAUn+9E8RMxO0kpV171Xtk31BqoAzQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk5Nzg0Nzg3NjE0MTA1Ny8wLzlGRUY0NEYxMTMzMTNCNDkyOTU3NUVGNTVFRDkz N0Q0MUFBODAzMzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5OTc4NDc4NzYxNDEwNTcvMC85RkVGNDRGMTEzMzEz QjQ5Mjk1NzVFRjU1RUQ5MzdENDFBQTgwMzM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFownUEC+II6W NEKEi6Gyv6f8NNYrEPCFrNDAqBme2b5D2r4FhNq3kvEOh6Ll/aRdJ9aTUmydFe3B L3XOTeyn4hgTtmB0AOfazpj4+uTqyJ7BmdiqBoWYQ4YdoOhCCKlVO3BQaCh4DG54 MIuV+x3BpFfGIpRvztiNeIAZihTOD8VDrlK/upGFcrRTEeQtLOUxjojUiZkN1RUF S/Qqx0L3W/uZN+9by0R2CpUPpIdV+TnjgNFTmJGY1IazQIeG2dCMYO7EZggfchCE NGfXZzCX4Gj5znZSFEiFf8Cy8LPX0eceptYIWU0KXNKFHU1UoGMD5y/McvU+mEiI lAbTwqPh5g== -----END CERTIFICATE-----Generated at Wed Oct 14 18:47:59 2026 by rpki-client