$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: 0GiK4Fy9oDW1ygzrJYvAjHYZwxpkDFS+r35I8r9AP08= Subject key identifier: 00:E2:14:23:53:4A:C7:6C:15:A0:5D:D4:50:A8:3C:66:9B:C5:B8:2D Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 5DF3F379284F8606A158B1861FCE8DDA97E7BC40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: C9 Signing time: Tue 06 Oct 2026 09:34:59 +0000 Manifest this update: Tue 06 Oct 2026 09:29:59 +0000 Manifest next update: Fri 09 Oct 2026 10:35:59 +0000 Files and hashes: 1: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) 2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: XpY9/TqdOY4z4VAvF9/3HzA4J5j9sPslQal1mpN4/m4=) 3: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 10:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f3:f3:79:28:4f:86:06:a1:58:b1:86:1f:ce:8d:da:97:e7:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Oct 6 09:29:59 2026 GMT Not After : Oct 9 10:35:59 2026 GMT Subject: CN=00E21423534AC76C15A05DD450A83C669BC5B82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:9d:2e:63:d0:b8:ff:7f:10:8c:30:dc:2d: 64:2b:47:fb:29:c8:e2:bc:16:07:75:0d:56:9c:23: 46:ff:f8:27:79:6d:28:05:12:7e:75:52:0c:1e:3e: 79:61:ad:ec:c2:2d:2b:c4:05:73:7a:38:5d:7c:39: 26:3c:47:30:af:5b:2b:e9:59:c1:e6:fb:88:41:be: 84:ae:b7:00:cb:11:77:f2:b5:ef:04:70:a0:79:98: 1f:1b:6d:18:df:4a:74:9a:dc:89:43:5b:3e:3a:32: 5d:aa:2a:71:18:84:a2:d1:52:46:80:04:01:0c:0b: 5d:88:b2:1b:b9:e1:f6:af:af:78:d8:e5:6e:19:5c: ec:34:07:4b:aa:b1:dd:1f:31:4c:f3:bc:c4:17:f2: 6e:e8:2d:47:69:47:d9:e3:cc:0f:7b:2f:23:30:57: 44:ce:1d:b5:2a:02:db:4d:76:d0:e3:85:87:09:67: d8:bd:27:8b:c8:4a:91:c4:83:fb:31:77:24:ac:39: c7:6e:3c:8c:0f:2b:ca:ce:9b:a9:99:f9:27:5c:ec: 01:4d:b8:43:36:7a:1f:ed:b8:e0:01:b1:1c:f3:d2: 30:f2:72:e5:95:f1:4c:f1:ee:33:07:46:88:44:f9: 74:ea:62:17:60:e8:95:9f:51:6a:ac:1c:da:77:81: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:14:23:53:4A:C7:6C:15:A0:5D:D4:50:A8:3C:66:9B:C5:B8:2D X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:91:5a:b6:31:f4:d9:48:d6:e6:7f:3c:f8:9d:51:cc:65:75: 06:16:f9:2f:09:b8:e4:c4:ac:76:50:a0:09:39:33:c4:d3:9a: 89:c4:c0:12:6f:54:c6:6c:63:1e:a6:5f:66:26:6b:2f:3a:78: a4:78:3d:26:28:29:1b:5b:81:b4:2f:75:88:ba:5c:6a:d2:b1: 96:08:a3:b9:c5:44:3f:55:0b:92:ac:ae:a1:59:23:44:85:ca: 42:ca:b6:23:fb:8c:42:67:fc:d2:d4:3f:92:ff:a4:6f:18:13: f1:6b:7a:43:6a:9e:14:d9:b7:14:68:1b:6a:49:52:60:7a:cd: 27:0d:c4:9d:6b:98:bb:f4:34:21:d2:38:62:8e:d0:66:fc:d0: 48:e1:95:4c:30:45:18:da:d6:68:f8:7b:b9:f7:5c:a0:7e:7f: b1:55:c2:b7:5d:14:d4:e7:b3:ef:4b:bf:bc:53:01:d6:1a:6c: 99:89:54:23:14:9b:d1:66:55:47:3c:e4:43:6f:92:50:f7:b8: d0:08:5a:60:2e:c2:d6:71:c6:bd:26:58:3a:1d:d9:c8:b9:2d: 20:b4:99:c1:dd:65:1e:e2:4a:85:6b:12:78:da:8b:32:cf:e1: f5:61:03:92:c7:7d:d7:6d:ed:50:21:f8:72:ed:53:eb:ed:f6: c6:43:84:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXfPzeShPhgahWLGGH86N2pfnvEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjEwMDYwOTI5NTlaFw0yNjEwMDkxMDM1NTlaMDMxMTAvBgNV BAMTKDAwRTIxNDIzNTM0QUM3NkMxNUEwNURENDUwQTgzQzY2OUJDNUI4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStZ0uY9C4/38QjDDcLWQrR/sp yOK8Fgd1DVacI0b/+Cd5bSgFEn51UgwePnlhrezCLSvEBXN6OF18OSY8RzCvWyvp WcHm+4hBvoSutwDLEXfyte8EcKB5mB8bbRjfSnSa3IlDWz46Ml2qKnEYhKLRUkaA BAEMC12Ishu54favr3jY5W4ZXOw0B0uqsd0fMUzzvMQX8m7oLUdpR9njzA97LyMw V0TOHbUqAttNdtDjhYcJZ9i9J4vISpHEg/sxdySsOcduPIwPK8rOm6mZ+Sdc7AFN uEM2eh/tuOABsRzz0jDycuWV8Uzx7jMHRohE+XTqYhdg6JWfUWqsHNp3gdRNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAOIUI1NKx2wVoF3UUKg8ZpvFuC0wHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJFatjH02UjW 5n88+J1RzGV1Bhb5Lwm45MSsdlCgCTkzxNOaicTAEm9UxmxjHqZfZiZrLzp4pHg9 JigpG1uBtC91iLpcatKxlgijucVEP1ULkqyuoVkjRIXKQsq2I/uMQmf80tQ/kv+k bxgT8Wt6Q2qeFNm3FGgbaklSYHrNJw3EnWuYu/Q0IdI4Yo7QZvzQSOGVTDBFGNrW aPh7ufdcoH5/sVXCt10U1Oez70u/vFMB1hpsmYlUIxSb0WZVRzzkQ2+SUPe40Aha YC7C1nHGvSZYOh3ZyLktILSZwd1lHuJKhWsSeNqLMs/h9WEDksd9123tUCH4cu1T 6+32xkOEhQ== -----END CERTIFICATE-----Generated at Wed Oct 7 02:27:41 2026 by rpki-client