$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: QixEKc9N4HS9zT/OM0AqFhUr+kUqNjraQr/iQArkw/A= Subject key identifier: 51:C9:16:99:9C:2E:92:4F:E4:9A:8A:28:B7:E6:F7:C5:3F:17:B2:68 Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 3BF350D3367F1AB7FF3FA23809DAB4A0B7365E69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: 9F Signing time: Mon 27 Jul 2026 00:12:51 +0000 Manifest this update: Mon 27 Jul 2026 00:07:51 +0000 Manifest next update: Tue 28 Jul 2026 01:24:51 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: sxSFMTizW8I1rGuGBjHv9CiK1Z3heAOpuZxqAj4BFgo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f3:50:d3:36:7f:1a:b7:ff:3f:a2:38:09:da:b4:a0:b7:36:5e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Jul 27 00:07:51 2026 GMT Not After : Jul 28 01:24:51 2026 GMT Subject: CN=51C916999C2E924FE49A8A28B7E6F7C53F17B268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:d0:4e:b3:7f:62:9a:8a:e5:2a:e3:27:fc: ba:a8:b5:59:0d:e7:9d:00:62:1d:d4:fe:b3:01:52: ec:fc:02:f8:4d:48:5e:3b:71:4c:c7:b7:d3:73:df: b6:b7:f3:9d:7a:c4:db:6a:6a:4b:e0:63:e1:05:c3: 17:e9:aa:1c:a0:df:d5:3e:33:bf:61:7c:7c:22:3d: c7:f8:59:3b:f8:4d:75:99:4e:08:7e:5f:98:82:58: fd:00:50:6e:c5:2c:fe:db:31:7f:ad:5e:64:59:4b: e6:e2:2b:c4:b2:3e:6a:5b:a1:d7:af:e2:db:13:4e: 0d:23:0f:67:cc:43:9b:93:d1:ee:a4:a3:b8:ab:11: 74:c0:96:31:30:3d:fa:4c:79:0d:7a:67:8d:fc:10: 5e:42:97:7f:ce:a3:bc:04:3e:c6:19:5e:5a:58:87: 14:b4:75:75:f9:c7:78:92:d9:fd:24:5b:1f:72:bc: c9:94:49:58:d3:1c:d3:b2:04:1d:52:b1:0d:a7:f5: 14:aa:17:3d:a6:45:fc:61:3a:83:cd:9f:34:85:1d: 26:b6:38:e3:e7:69:e7:cb:7e:88:fe:a3:f0:ad:1d: d5:51:4f:c7:90:1a:8e:b2:ca:71:d9:61:3e:33:0f: ad:02:d5:de:87:ae:45:78:af:4f:fb:52:2d:cf:f9: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C9:16:99:9C:2E:92:4F:E4:9A:8A:28:B7:E6:F7:C5:3F:17:B2:68 X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:3f:8f:c1:16:5f:86:6f:35:4d:b8:df:13:06:45:fc:70: 56:f6:47:e8:b2:e6:ab:d6:b6:13:0a:a8:7c:9e:ee:91:16:60: 08:dd:ab:4e:b0:c6:95:b4:cd:eb:94:ad:47:a0:58:98:df:49: 9f:19:ce:e5:0e:80:21:64:b0:a2:91:c2:28:31:67:70:4f:f4: 4a:93:ea:69:91:53:a1:9a:00:30:69:df:bf:e4:ae:a8:5f:80: 28:29:ad:16:5f:67:c9:4e:7d:73:ed:4e:1d:21:48:5a:0b:f4: 3a:4f:8b:ad:1f:09:ff:93:81:9b:af:4a:b5:01:aa:20:8b:76: 72:65:46:a1:b6:61:ac:54:2d:dd:72:32:24:0d:5e:8d:82:7d: 13:81:e7:7e:4c:c3:7a:eb:e2:00:9f:df:08:f0:bd:48:e2:f4: 6b:02:80:e7:90:34:d1:f4:71:cb:1a:19:de:6f:5d:ca:71:7a: cf:f3:b2:19:51:bb:94:27:72:f7:80:85:ac:4b:71:e2:aa:0a: 17:1f:b0:d4:26:74:00:87:d4:f4:54:13:9a:9e:fc:0f:c4:ab: 56:0c:f6:df:57:6d:6b:f2:0c:34:9b:72:7e:06:58:d5:88:c2: 99:37:e7:22:4b:a2:f0:8e:74:4b:0f:e2:3c:8b:19:fc:38:11: 82:77:1d:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/NQ0zZ/Grf/P6I4Cdq0oLc2XmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA3MjcwMDA3NTFaFw0yNjA3MjgwMTI0NTFaMDMxMTAvBgNV BAMTKDUxQzkxNjk5OUMyRTkyNEZFNDlBOEEyOEI3RTZGN0M1M0YxN0IyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46dBOs39imorlKuMn/LqotVkN 550AYh3U/rMBUuz8AvhNSF47cUzHt9Nz37a38516xNtqakvgY+EFwxfpqhyg39U+ M79hfHwiPcf4WTv4TXWZTgh+X5iCWP0AUG7FLP7bMX+tXmRZS+biK8SyPmpbodev 4tsTTg0jD2fMQ5uT0e6ko7irEXTAljEwPfpMeQ16Z438EF5Cl3/Oo7wEPsYZXlpY hxS0dXX5x3iS2f0kWx9yvMmUSVjTHNOyBB1SsQ2n9RSqFz2mRfxhOoPNnzSFHSa2 OOPnaefLfoj+o/CtHdVRT8eQGo6yynHZYT4zD60C1d6HrkV4r0/7Ui3P+aRfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUckWmZwukk/kmooot+b3xT8XsmgwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXg/j8EWX4Zv NU243xMGRfxwVvZH6LLmq9a2EwqofJ7ukRZgCN2rTrDGlbTN65StR6BYmN9JnxnO 5Q6AIWSwopHCKDFncE/0SpPqaZFToZoAMGnfv+SuqF+AKCmtFl9nyU59c+1OHSFI Wgv0Ok+LrR8J/5OBm69KtQGqIIt2cmVGobZhrFQt3XIyJA1ejYJ9E4HnfkzDeuvi AJ/fCPC9SOL0awKA55A00fRxyxoZ3m9dynF6z/OyGVG7lCdy94CFrEtx4qoKFx+w 1CZ0AIfU9FQTmp78D8SrVgz231dta/IMNJtyfgZY1YjCmTfnIkui8I50Sw/iPIsZ /DgRgncdyw== -----END CERTIFICATE-----Generated at Mon Jul 27 15:49:25 2026 by rpki-client