$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: OgwHy5ccbwgsN4dEFlMOqiDKDmPOz6RyD50X4vgL2FY= Subject key identifier: 40:11:ED:F5:13:A9:72:01:C0:DB:77:57:21:D2:54:74:15:DB:08:3C Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 3A2A71FBC40647E7A07ED35CD664F5F03E38124B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: CF Signing time: Tue 13 Oct 2026 17:03:11 +0000 Manifest this update: Tue 13 Oct 2026 16:58:11 +0000 Manifest next update: Fri 16 Oct 2026 19:37:11 +0000 Files and hashes: 1: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 2: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: gIi85k0mmUhd3RDR/0K8ikuHb+6dY4E33/elrqWnZ5c=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 19:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2a:71:fb:c4:06:47:e7:a0:7e:d3:5c:d6:64:f5:f0:3e:38:12:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Oct 13 16:58:11 2026 GMT Not After : Oct 16 19:37:11 2026 GMT Subject: CN=4011EDF513A97201C0DB775721D2547415DB083C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a2:21:79:64:e6:dc:69:ff:1d:e2:27:c8:39: cb:49:74:fd:d4:5c:10:a2:e1:dd:66:7b:2a:af:fd: e6:11:c7:8c:c8:71:50:1e:fc:b6:1e:81:c8:6c:cc: 83:8e:cc:fb:7d:e0:9c:42:dd:85:57:a0:91:e2:54: 7c:68:70:bf:e5:52:88:fa:7d:77:32:ef:53:b3:5f: 6b:c5:72:21:cb:0c:82:ad:f0:d9:bb:b1:19:c6:ad: 61:b6:db:89:1b:a9:dd:c6:57:b2:4a:5d:d7:d7:1e: e8:bc:b5:7e:b8:93:99:9d:ee:45:5e:65:83:5d:14: 01:c8:cc:53:37:6f:53:cf:a0:3b:52:50:1e:62:5f: 04:46:3b:c4:93:5b:fe:64:a4:c8:2c:bb:62:b2:21: aa:a3:4c:77:a8:bb:b4:09:ed:ed:a8:b8:c9:72:03: d1:61:74:07:db:b1:cd:b9:f7:45:32:33:46:81:41: a2:49:98:ab:1d:8e:f9:18:c8:3e:45:5f:93:86:9c: 65:3c:a9:32:48:94:45:20:4b:d6:e3:6a:24:85:fc: c5:ab:2d:ee:9c:41:88:8e:7f:96:57:54:2e:2a:9d: 2a:b1:a0:a4:65:ca:a3:aa:28:eb:ef:16:30:5a:85: 7b:e2:39:98:9e:50:4a:b8:c8:d8:16:fc:e5:24:63: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:11:ED:F5:13:A9:72:01:C0:DB:77:57:21:D2:54:74:15:DB:08:3C X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:42:4b:b2:e1:81:82:0a:5f:1f:b4:6e:ce:70:f8:ad:47:7f: 33:4b:07:aa:24:db:94:f5:dd:54:fb:e1:5b:10:e1:c1:2a:e4: e6:a3:70:26:5e:e0:cc:93:aa:5b:ee:f8:cc:df:cf:bc:3f:b2: c3:b4:40:a9:1c:ee:8d:bf:0a:d6:c9:c1:10:70:f9:82:d4:b7: 6a:7c:2d:12:7f:de:70:d6:7d:0e:6f:c2:5b:05:c4:6c:63:c7: ba:60:0c:62:15:d2:56:e0:1b:78:ae:7f:d4:86:63:a2:dc:99: c6:10:25:aa:ed:41:05:db:d1:72:26:a0:96:c9:92:0f:b7:0c: a5:2d:2e:96:1e:9e:a1:56:82:13:27:da:df:8a:7e:03:27:5e: 57:61:cb:bc:06:45:91:2c:0c:48:73:f2:2c:10:dc:97:6d:42: 79:28:e8:65:cb:64:91:67:a3:50:b8:f6:00:95:f7:9f:2a:69: df:31:53:5a:2d:ed:d2:fc:38:5e:7a:9d:8c:16:a1:79:5b:b2: 8d:55:dc:57:14:93:eb:70:75:56:51:85:24:b4:53:97:28:f6: 59:30:07:e6:b5:e0:b8:9f:ec:21:b9:7f:8e:27:38:cb:ac:6f: 94:b3:86:54:3f:89:2d:9a:27:58:51:07:05:8e:65:6b:7c:7d: d1:fb:26:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOipx+8QGR+egftNc1mT18D44EkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjEwMTMxNjU4MTFaFw0yNjEwMTYxOTM3MTFaMDMxMTAvBgNV BAMTKDQwMTFFREY1MTNBOTcyMDFDMERCNzc1NzIxRDI1NDc0MTVEQjA4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIoiF5ZObcaf8d4ifIOctJdP3U XBCi4d1meyqv/eYRx4zIcVAe/LYegchszIOOzPt94JxC3YVXoJHiVHxocL/lUoj6 fXcy71OzX2vFciHLDIKt8Nm7sRnGrWG224kbqd3GV7JKXdfXHui8tX64k5md7kVe ZYNdFAHIzFM3b1PPoDtSUB5iXwRGO8STW/5kpMgsu2KyIaqjTHeou7QJ7e2ouMly A9FhdAfbsc2590UyM0aBQaJJmKsdjvkYyD5FX5OGnGU8qTJIlEUgS9bjaiSF/MWr Le6cQYiOf5ZXVC4qnSqxoKRlyqOqKOvvFjBahXviOZieUEq4yNgW/OUkY/uHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQBHt9ROpcgHA23dXIdJUdBXbCDwwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEJLsuGBggpf H7RuznD4rUd/M0sHqiTblPXdVPvhWxDhwSrk5qNwJl7gzJOqW+74zN/PvD+yw7RA qRzujb8K1snBEHD5gtS3anwtEn/ecNZ9Dm/CWwXEbGPHumAMYhXSVuAbeK5/1IZj otyZxhAlqu1BBdvRciaglsmSD7cMpS0ulh6eoVaCEyfa34p+AydeV2HLvAZFkSwM SHPyLBDcl21CeSjoZctkkWejULj2AJX3nypp3zFTWi3t0vw4XnqdjBaheVuyjVXc VxST63B1VlGFJLRTlyj2WTAH5rXguJ/sIbl/jic4y6xvlLOGVD+JLZonWFEHBY5l a3x90fsm0g== -----END CERTIFICATE-----Generated at Thu Oct 15 02:21:46 2026 by rpki-client