$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: GrvvBkF3zF+KaM+3Vz33KykK28spLA63nIzFwC3N8rw= Subject key identifier: 0C:3C:AF:14:82:15:DA:F1:57:0C:DE:67:C8:BD:27:85:7B:67:9D:04 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 442C5D4B1C390766CDA682AA16E67C595BEB38B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: C9 Signing time: Wed 07 Oct 2026 15:16:21 +0000 Manifest this update: Wed 07 Oct 2026 15:11:21 +0000 Manifest next update: Sat 10 Oct 2026 15:44:21 +0000 Files and hashes: 1: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 2: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 3: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 4: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: G5R3TEPreH+FoeacaVBVitmfTzYdPVIfP4CmQaDcYwk=) 5: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 6: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 7: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 8: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 9: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 10: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 15:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2c:5d:4b:1c:39:07:66:cd:a6:82:aa:16:e6:7c:59:5b:eb:38:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Oct 7 15:11:21 2026 GMT Not After : Oct 10 15:44:21 2026 GMT Subject: CN=0C3CAF148215DAF1570CDE67C8BD27857B679D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:57:58:a1:a5:bb:2b:8d:53:f8:dd:a6:43: f6:da:fa:da:49:d0:b9:6b:dd:84:15:44:87:38:89: 19:27:d7:39:ea:75:1d:51:40:0b:57:13:93:63:42: 6e:b5:ed:28:95:f9:3c:c9:49:33:72:8c:8d:54:82: b8:15:47:a0:36:31:c1:59:79:9d:40:2e:4f:09:9a: 69:d2:4a:c6:a4:0a:ce:8a:98:a2:12:89:34:95:c9: 33:d0:d0:a8:90:53:e1:14:95:37:97:89:a9:61:e6: e5:25:5f:b3:1a:2f:66:c2:45:83:bd:c9:d3:11:b2: a3:ba:b4:02:5a:b4:05:67:c0:ed:b1:36:8b:98:3a: eb:cc:03:27:7b:6d:46:25:bd:9b:f1:66:10:ab:c5: 01:98:3d:c8:26:85:f6:d1:e9:3d:75:a2:49:ed:07: 26:96:c0:59:c8:36:96:34:f7:c1:a2:29:d2:ec:1f: 18:72:99:f8:8f:ab:a3:b1:7d:75:f0:9e:54:76:72: 86:db:25:66:07:1a:9f:64:0f:b6:db:30:e6:27:a1: bf:d3:47:a8:a5:6b:d1:be:63:7b:5c:b6:ce:cd:18: eb:43:94:ea:a4:70:a7:b9:d3:1a:05:64:2d:31:7a: bd:bb:98:2a:1e:2b:4b:b7:78:a3:8b:5f:d0:2b:f5: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:AF:14:82:15:DA:F1:57:0C:DE:67:C8:BD:27:85:7B:67:9D:04 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:48:74:19:a8:67:e8:f0:4c:1c:7a:3f:fd:9d:da:6a:99:17: e1:f4:f1:6d:5c:f9:13:f6:99:b6:33:b9:bc:a1:08:b8:6f:88: c3:9c:00:d3:53:a2:7d:ec:8c:46:fb:63:9b:23:5d:0e:39:a0: 96:c1:4e:4c:19:43:de:78:3f:6f:24:92:11:92:1e:0d:6e:73: 69:bc:10:34:f6:6e:8a:94:ad:a6:3c:17:5f:56:23:77:eb:8e: 42:1f:61:ea:58:57:2f:2d:aa:2d:d2:df:5d:f7:87:52:0b:52: 9c:53:0a:2d:2f:ac:4d:9d:43:a4:1b:73:9a:22:7b:f8:68:53: 16:c6:b0:b5:1b:8c:d1:24:46:ef:ea:43:cd:50:d3:03:72:33: 10:99:cb:11:fe:71:26:32:80:f9:4f:3b:90:65:0d:0c:b6:04: c4:9e:bb:95:f1:91:a3:35:b3:25:78:91:69:5e:b3:55:02:3f: a5:94:89:db:85:e5:63:37:92:10:89:a5:d8:35:1d:86:cf:69: be:e9:74:74:cc:36:c7:40:07:9a:14:7f:b1:a3:b4:0a:c8:65: 7a:7f:03:01:b4:29:6f:b9:36:4c:1e:2b:e0:1c:e5:00:bb:31: 4a:4b:0f:40:df:ad:5a:7f:37:d5:69:aa:13:31:d2:74:ca:3c: 11:f6:85:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURCxdSxw5B2bNpoKqFuZ8WVvrOLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjEwMDcxNTExMjFaFw0yNjEwMTAxNTQ0MjFaMDMxMTAvBgNV BAMTKDBDM0NBRjE0ODIxNURBRjE1NzBDREU2N0M4QkQyNzg1N0I2NzlEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYldYoaW7K41T+N2mQ/ba+tpJ 0Llr3YQVRIc4iRkn1znqdR1RQAtXE5NjQm617SiV+TzJSTNyjI1UgrgVR6A2McFZ eZ1ALk8JmmnSSsakCs6KmKISiTSVyTPQ0KiQU+EUlTeXialh5uUlX7MaL2bCRYO9 ydMRsqO6tAJatAVnwO2xNouYOuvMAyd7bUYlvZvxZhCrxQGYPcgmhfbR6T11oknt ByaWwFnINpY098GiKdLsHxhymfiPq6OxfXXwnlR2cobbJWYHGp9kD7bbMOYnob/T R6ila9G+Y3tcts7NGOtDlOqkcKe50xoFZC0xer27mCoeK0u3eKOLX9Ar9SGBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDDyvFIIV2vFXDN5nyL0nhXtnnQQwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEh0Gahn6PBM HHo//Z3aapkX4fTxbVz5E/aZtjO5vKEIuG+Iw5wA01OifeyMRvtjmyNdDjmglsFO TBlD3ng/bySSEZIeDW5zabwQNPZuipStpjwXX1Yjd+uOQh9h6lhXLy2qLdLfXfeH UgtSnFMKLS+sTZ1DpBtzmiJ7+GhTFsawtRuM0SRG7+pDzVDTA3IzEJnLEf5xJjKA +U87kGUNDLYExJ67lfGRozWzJXiRaV6zVQI/pZSJ24XlYzeSEIml2DUdhs9pvul0 dMw2x0AHmhR/saO0Cshlen8DAbQpb7k2TB4r4BzlALsxSksPQN+tWn831WmqEzHS dMo8EfaFIg== -----END CERTIFICATE-----Generated at Thu Oct 8 09:00:54 2026 by rpki-client