$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: pe++Qa3ZS0xSjaFCViIkxd0mDLcMh4KQ/+6nrP/nvrU= Subject key identifier: 04:2F:F2:0C:2F:51:E3:F6:CC:7E:BE:3F:49:B2:17:BD:15:28:F4:38 Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 10CAF2EB648A556BC04773184D91674A0A52B379 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: CD Signing time: Wed 14 Oct 2026 16:04:20 +0000 Manifest this update: Wed 14 Oct 2026 15:59:20 +0000 Manifest next update: Sat 17 Oct 2026 23:38:20 +0000 Files and hashes: 1: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) 2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: NgNu2VWkpA2NeRXZSk1QTGDxsjDydpWD8zyANu15eQ0=) 3: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ca:f2:eb:64:8a:55:6b:c0:47:73:18:4d:91:67:4a:0a:52:b3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: Oct 14 15:59:20 2026 GMT Not After : Oct 17 23:38:20 2026 GMT Subject: CN=042FF20C2F51E3F6CC7EBE3F49B217BD1528F438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:35:71:2f:9f:1c:2a:a0:fd:d9:f2:84:99: 12:8f:25:44:83:74:df:9f:e0:4e:b3:04:ce:bf:8d: 29:b6:d2:d8:d4:75:a5:3b:37:85:40:62:61:69:85: ee:cd:46:32:71:92:03:c1:2a:e3:a9:16:ec:a9:4a: ea:48:41:7a:b4:ef:0b:3e:df:5d:47:78:6d:2b:a7: d8:33:72:7c:db:04:51:d0:de:95:64:8e:10:fa:5f: d1:7a:6b:66:71:b1:ed:bc:c4:b5:cd:b1:3c:5e:59: bb:ef:fd:bc:4d:fc:3a:fc:74:07:c2:b6:a1:d1:97: 26:64:e6:07:b5:3b:4f:a8:ce:c7:23:d5:81:22:1a: 2f:1d:4d:da:d7:17:a9:1d:da:ad:66:79:08:a2:52: 98:18:0f:b1:65:72:1f:19:ab:c4:3e:48:e5:53:44: bf:1e:78:27:72:57:ff:22:03:39:a3:87:c0:d5:0c: c1:70:14:28:5a:ab:5c:54:1d:cc:dd:10:c2:29:11: 0f:f6:c5:28:2d:1b:9f:d4:44:11:dd:b7:8f:b9:96: 30:a2:a6:4a:6f:2b:06:38:d5:f1:e1:a8:e3:fb:09: 8f:cf:61:29:56:dc:34:28:2d:bc:69:18:25:82:7b: 27:19:90:fc:2e:89:96:a7:e4:4f:5b:36:a2:48:77: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:F2:0C:2F:51:E3:F6:CC:7E:BE:3F:49:B2:17:BD:15:28:F4:38 X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:77:82:36:06:a8:7c:ab:f7:bb:ca:05:79:23:8a:47:27: 28:bd:8c:45:b3:50:59:60:c8:02:ae:00:17:42:d6:a2:9a:10: c2:8a:99:3c:13:25:02:e8:bb:dd:9d:d8:7e:69:ef:c9:0d:c3: 1b:19:a1:dd:16:0c:07:de:23:de:41:d7:f3:8a:cf:f6:74:84: b1:78:6f:ec:3b:d9:5f:04:2f:1d:b8:89:ce:c3:c2:93:a1:97: ca:40:17:a8:bc:05:1b:d9:8a:f6:f9:75:d4:2d:d6:8a:e7:36: be:a0:48:ab:b4:d8:97:ae:f5:a8:2e:4c:ee:74:7c:4b:04:0d: 8f:98:0b:e4:38:2e:5f:9a:c4:a9:de:e8:dc:55:9a:43:47:ee: 02:b0:42:64:1b:2c:46:7e:8a:b5:38:1a:bc:a0:8a:5c:c1:c2: 5b:f3:ae:6b:9c:85:be:fc:62:14:97:c3:4f:8d:2f:da:63:07: 62:5d:cc:d2:da:6f:2b:4a:8d:74:6b:c1:5e:29:03:eb:83:83: 00:46:fe:b4:fb:34:99:d5:60:57:88:85:d3:ff:c0:a2:df:50: e0:54:06:e8:65:6d:fe:91:44:68:66:e2:17:1a:fc:c8:ae:16: 1d:6c:8d:1a:ad:30:b6:da:03:0e:10:5e:b6:bf:4e:f2:5e:82: 0f:ea:a3:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEMry62SKVWvAR3MYTZFnSgpSs3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjEwMTQxNTU5MjBaFw0yNjEwMTcyMzM4MjBaMDMxMTAvBgNV BAMTKDA0MkZGMjBDMkY1MUUzRjZDQzdFQkUzRjQ5QjIxN0JEMTUyOEY0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pjVxL58cKqD92fKEmRKPJUSD dN+f4E6zBM6/jSm20tjUdaU7N4VAYmFphe7NRjJxkgPBKuOpFuypSupIQXq07ws+ 311HeG0rp9gzcnzbBFHQ3pVkjhD6X9F6a2Zxse28xLXNsTxeWbvv/bxN/Dr8dAfC tqHRlyZk5ge1O0+ozscj1YEiGi8dTdrXF6kd2q1meQiiUpgYD7Flch8Zq8Q+SOVT RL8eeCdyV/8iAzmjh8DVDMFwFChaq1xUHczdEMIpEQ/2xSgtG5/URBHdt4+5ljCi pkpvKwY41fHhqOP7CY/PYSlW3DQoLbxpGCWCeycZkPwuiZan5E9bNqJIdxejAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBC/yDC9R4/bMfr4/SbIXvRUo9DgwHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVV3gjYGqHyr 97vKBXkjikcnKL2MRbNQWWDIAq4AF0LWopoQwoqZPBMlAui73Z3YfmnvyQ3DGxmh 3RYMB94j3kHX84rP9nSEsXhv7DvZXwQvHbiJzsPCk6GXykAXqLwFG9mK9vl11C3W iuc2vqBIq7TYl671qC5M7nR8SwQNj5gL5DguX5rEqd7o3FWaQ0fuArBCZBssRn6K tTgavKCKXMHCW/Oua5yFvvxiFJfDT40v2mMHYl3M0tpvK0qNdGvBXikD64ODAEb+ tPs0mdVgV4iF0//Aot9Q4FQG6GVt/pFEaGbiFxr8yK4WHWyNGq0wttoDDhBetr9O 8l6CD+qjAA== -----END CERTIFICATE-----Generated at Thu Oct 15 05:24:05 2026 by rpki-client