$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: p1Chb/XGwz/80mOVUZkexKp+6v73Q3MBnLcCBfOxhLA= Subject key identifier: AC:7E:B4:3D:CE:BB:62:B0:07:49:A3:0D:C8:14:37:FF:C3:1C:64:5B Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 67D58D88CC3CEF5ABBF9E1171C5826391CA22E04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: CF Signing time: Tue 08 Sep 2026 19:14:55 +0000 Manifest this update: Tue 08 Sep 2026 19:09:55 +0000 Manifest next update: Fri 11 Sep 2026 20:43:55 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: mFzXBOKbjHddox/Kok3DLmySQWRnN73jflWGTFLk3JU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d5:8d:88:cc:3c:ef:5a:bb:f9:e1:17:1c:58:26:39:1c:a2:2e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Sep 8 19:09:55 2026 GMT Not After : Sep 11 20:43:55 2026 GMT Subject: CN=AC7EB43DCEBB62B00749A30DC81437FFC31C645B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:8b:b7:5c:2e:4c:be:86:88:8a:40:17:f5: 09:3d:b8:9f:0a:67:ab:70:cc:5a:ad:12:6d:b1:92: 33:79:34:39:09:e0:b1:84:46:e5:b0:05:95:3d:27: fc:ed:e6:cf:aa:70:50:1b:19:bc:d0:02:9d:cf:1c: 31:75:e7:b1:91:be:02:5e:9d:fd:30:42:c2:f5:8b: 19:c5:82:8f:df:76:97:25:e6:35:30:52:ea:a4:b0: 77:5a:49:57:d8:75:d0:45:8b:00:8a:5c:74:a7:3c: ef:0a:85:b8:cf:fe:fc:7b:31:71:ac:6a:a4:1b:2f: aa:d4:eb:03:17:f1:3c:b8:81:f6:c5:fc:b0:7a:1d: a5:f4:b1:b8:ab:12:9c:d1:ce:a5:fb:3a:a6:eb:bc: 9b:9a:46:fc:b9:f2:9d:12:a7:69:87:42:ba:3e:dc: 65:cb:ae:55:8d:30:ac:10:ad:68:4c:d4:09:0b:82: 74:87:70:22:0d:d6:99:33:2f:8e:21:90:82:31:97: 0c:96:04:ce:1e:9b:e0:36:96:c8:72:c7:1b:dd:e0: a8:2e:3b:0a:87:03:c9:f5:39:24:53:a8:b7:0f:a2: 22:53:c0:c1:6c:43:b6:e0:4a:1d:30:9c:4d:10:47: 64:34:11:f8:5a:8d:50:1d:a6:34:82:10:f3:17:29: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:B4:3D:CE:BB:62:B0:07:49:A3:0D:C8:14:37:FF:C3:1C:64:5B X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:f9:df:b4:37:a1:fe:55:d2:a6:9b:08:e7:c0:4e:93:54: 7a:19:3d:93:0a:96:1c:0e:77:8b:06:71:83:4d:7b:a8:6a:ef: d5:6d:e9:7e:fb:a5:57:4c:3c:75:08:77:77:99:8b:4a:4c:b8: 42:16:b7:16:72:38:b4:b1:49:6d:33:d5:98:1d:fc:0f:77:65: 92:c5:29:b1:6a:9c:50:eb:37:bf:9a:d6:ed:c1:fb:46:28:50: 4d:d2:ab:81:ba:62:4f:2b:99:6a:fe:7c:62:18:a4:89:dc:31: 26:23:26:ca:5f:58:ba:cd:a0:08:dd:4c:bb:04:a9:a9:8f:5d: 03:e8:2f:55:c8:c2:dc:56:d9:79:1e:94:11:8a:08:8f:ad:b8: a7:ba:06:35:3a:89:0d:9c:6e:c6:b5:02:ee:4a:20:4d:7b:77: e0:58:05:87:98:a7:df:90:7d:6c:3c:14:2c:17:d1:39:dc:be: 16:15:8c:89:d8:3c:82:6f:9e:e4:f4:2e:c6:f6:5e:34:4a:37: 7d:cf:e8:3a:f7:56:90:c2:77:63:e1:bd:af:3e:9e:de:28:af: 63:5f:7f:74:7a:21:b8:24:f0:20:d6:2c:1c:f5:e3:c3:88:44: 3b:85:1d:f1:3e:1d:08:0d:c9:74:7d:e2:5d:b6:bd:32:31:8f: 54:ef:58:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ9WNiMw871q7+eEXHFgmORyiLgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA5MDgxOTA5NTVaFw0yNjA5MTEyMDQzNTVaMDMxMTAvBgNV BAMTKEFDN0VCNDNEQ0VCQjYyQjAwNzQ5QTMwREM4MTQzN0ZGQzMxQzY0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0Iu3XC5MvoaIikAX9Qk9uJ8K Z6twzFqtEm2xkjN5NDkJ4LGERuWwBZU9J/zt5s+qcFAbGbzQAp3PHDF157GRvgJe nf0wQsL1ixnFgo/fdpcl5jUwUuqksHdaSVfYddBFiwCKXHSnPO8KhbjP/vx7MXGs aqQbL6rU6wMX8Ty4gfbF/LB6HaX0sbirEpzRzqX7OqbrvJuaRvy58p0Sp2mHQro+ 3GXLrlWNMKwQrWhM1AkLgnSHcCIN1pkzL44hkIIxlwyWBM4em+A2lshyxxvd4Kgu OwqHA8n1OSRTqLcPoiJTwMFsQ7bgSh0wnE0QR2Q0EfhajVAdpjSCEPMXKdW5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrH60Pc67YrAHSaMNyBQ3/8McZFswHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEn537Q3of5V 0qabCOfATpNUehk9kwqWHA53iwZxg017qGrv1W3pfvulV0w8dQh3d5mLSky4Qha3 FnI4tLFJbTPVmB38D3dlksUpsWqcUOs3v5rW7cH7RihQTdKrgbpiTyuZav58Yhik idwxJiMmyl9Yus2gCN1MuwSpqY9dA+gvVcjC3FbZeR6UEYoIj624p7oGNTqJDZxu xrUC7kogTXt34FgFh5in35B9bDwULBfROdy+FhWMidg8gm+e5PQuxvZeNEo3fc/o OvdWkMJ3Y+G9rz6e3iivY19/dHohuCTwINYsHPXjw4hEO4Ud8T4dCA3JdH3iXba9 MjGPVO9YhQ== -----END CERTIFICATE-----Generated at Thu Sep 10 17:43:25 2026 by rpki-client