$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: z0EcgORhligCN8ucGrR5GixjVTZGLN3ulih3BRWl1dk= Subject key identifier: E5:2D:9C:37:5E:4F:3E:DE:4C:67:3A:78:82:91:39:24:D4:88:09:67 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 48564F373DDDABB85C16C342D6D32B5F86A4B832 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: D8 Signing time: Mon 26 Oct 2026 18:08:54 +0000 Manifest this update: Mon 26 Oct 2026 18:03:54 +0000 Manifest next update: Fri 30 Oct 2026 01:56:54 +0000 Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=) 2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: PU9ZgRLo83FtLPf80X5PLbl7tOOG2qPbtxXyD6ZfKhs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 01:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:56:4f:37:3d:dd:ab:b8:5c:16:c3:42:d6:d3:2b:5f:86:a4:b8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Oct 26 18:03:54 2026 GMT Not After : Oct 30 01:56:54 2026 GMT Subject: CN=E52D9C375E4F3EDE4C673A7882913924D4880967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:06:25:4d:b8:fe:80:0f:57:84:21:8d:39: cd:2d:14:cb:1b:1b:66:f4:35:a7:50:b5:d9:db:9e: 75:de:53:b5:e8:ec:d0:68:5e:6f:83:82:14:bf:90: d7:32:9f:6c:64:9c:a9:08:90:72:75:99:5d:10:71: 77:0a:5c:86:16:27:df:6c:f2:d8:00:f0:be:ed:57: a6:fa:0a:50:db:75:09:40:8d:3d:1c:cd:21:d3:30: fa:46:b9:6f:15:b0:ae:d4:28:45:18:c3:e0:31:9f: 39:90:cb:40:6b:b4:b0:ce:e0:e7:65:2f:4e:5c:8c: fc:19:da:1a:c5:69:6b:9c:d1:ce:c3:84:26:cd:b1: ec:4e:bb:5b:63:c0:3a:28:3d:07:60:13:ec:50:67: ee:d9:9a:71:f1:95:d9:99:17:d8:cd:81:a0:df:7d: 43:a8:f6:44:19:d4:fa:62:28:ce:c2:35:d0:f1:83: 7b:3e:b0:41:ef:2b:33:16:3c:28:01:59:87:0f:c6: 11:2b:c1:29:7c:11:61:15:70:e0:75:ad:ff:e0:65: 4e:79:26:6b:bd:5f:2e:81:38:40:48:93:eb:0f:ef: eb:a2:ec:1a:44:f7:e1:6f:47:c6:a5:7c:b6:d7:20: 1c:ee:3a:45:ae:de:2c:6a:1f:c2:5d:b3:8a:f2:1d: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:9C:37:5E:4F:3E:DE:4C:67:3A:78:82:91:39:24:D4:88:09:67 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ee:bf:aa:87:cb:17:ef:77:8e:c2:8f:9d:7c:23:f4:d9:1f: f9:8b:59:2d:ca:e0:72:b1:4d:8f:de:86:ad:36:49:ed:16:32: 6d:f0:c9:70:a6:89:1a:1c:3c:6f:b0:58:12:6a:ff:f3:53:e6: 1e:9d:f6:c6:5b:7a:7b:5b:b6:4e:9d:48:37:9e:b0:3d:1e:9a: 27:42:80:e0:a3:a0:30:fe:98:88:eb:54:32:46:57:9c:7f:c0: 2b:17:a9:ae:ee:85:2f:3f:c8:fb:0b:ea:fb:18:99:2d:1b:fd: 51:f1:e2:0c:a2:bd:9c:01:47:e1:c9:1c:5f:54:9d:6e:5d:c1: 5c:c4:8b:1d:8f:a9:8f:64:b1:94:7e:56:fa:bd:fd:d7:b8:64: 43:bc:ae:ee:64:93:5b:b2:f2:dd:e4:5f:9c:22:73:3a:13:15: cf:d9:9b:2f:a2:1d:2c:5e:fa:cc:5b:9e:04:3f:74:9e:59:14: df:7e:9a:70:1f:e6:63:aa:1a:61:ab:8e:01:b7:26:2d:ab:a4: cb:bd:b5:19:e1:d2:72:c2:a8:9f:a1:f1:43:3b:db:0b:95:82: 5c:9b:82:63:52:00:85:10:d2:b9:20:d3:25:41:12:bd:74:60: d8:85:b9:9c:18:ee:d2:3d:b6:95:1f:9e:90:d2:ab:79:ff:ba: 5a:94:c2:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSFZPNz3dq7hcFsNC1tMrX4akuDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjEwMjYxODAzNTRaFw0yNjEwMzAwMTU2NTRaMDMxMTAvBgNV BAMTKEU1MkQ5QzM3NUU0RjNFREU0QzY3M0E3ODgyOTEzOTI0RDQ4ODA5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiQYlTbj+gA9XhCGNOc0tFMsb G2b0NadQtdnbnnXeU7Xo7NBoXm+DghS/kNcyn2xknKkIkHJ1mV0QcXcKXIYWJ99s 8tgA8L7tV6b6ClDbdQlAjT0czSHTMPpGuW8VsK7UKEUYw+AxnzmQy0BrtLDO4Odl L05cjPwZ2hrFaWuc0c7DhCbNsexOu1tjwDooPQdgE+xQZ+7ZmnHxldmZF9jNgaDf fUOo9kQZ1PpiKM7CNdDxg3s+sEHvKzMWPCgBWYcPxhErwSl8EWEVcOB1rf/gZU55 Jmu9Xy6BOEBIk+sP7+ui7BpE9+FvR8alfLbXIBzuOkWu3ixqH8Jds4ryHdVRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5S2cN15PPt5MZzp4gpE5JNSICWcwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO6/qofLF+93 jsKPnXwj9Nkf+YtZLcrgcrFNj96GrTZJ7RYybfDJcKaJGhw8b7BYEmr/81PmHp32 xlt6e1u2Tp1IN56wPR6aJ0KA4KOgMP6YiOtUMkZXnH/AKxepru6FLz/I+wvq+xiZ LRv9UfHiDKK9nAFH4ckcX1Sdbl3BXMSLHY+pj2SxlH5W+r3917hkQ7yu7mSTW7Ly 3eRfnCJzOhMVz9mbL6IdLF76zFueBD90nlkU336acB/mY6oaYauOAbcmLauky721 GeHScsKon6HxQzvbC5WCXJuCY1IAhRDSuSDTJUESvXRg2IW5nBju0j22lR+ekNKr ef+6WpTCrA== -----END CERTIFICATE-----Generated at Tue Oct 27 17:23:53 2026 by rpki-client