$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: ogO/PjEwFCW3PYeZG68QU87z/lnjd7Sbu7OUaKVoTgY= Subject key identifier: E8:65:F7:76:3C:96:3D:6E:44:2A:38:4A:7C:F3:7E:04:D2:8F:A4:FD Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 22EDB8AACEB0E37F4DA55E0B4DEDD1E27A8AD9E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: B9 Signing time: Thu 10 Sep 2026 14:06:41 +0000 Manifest this update: Thu 10 Sep 2026 14:01:41 +0000 Manifest next update: Sun 13 Sep 2026 22:06:41 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: 6KsbeBCJyutmlGS1Z0ENHk6Ue6yXEz5zqTftdGu20NE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ed:b8:aa:ce:b0:e3:7f:4d:a5:5e:0b:4d:ed:d1:e2:7a:8a:d9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Sep 10 14:01:41 2026 GMT Not After : Sep 13 22:06:41 2026 GMT Subject: CN=E865F7763C963D6E442A384A7CF37E04D28FA4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:53:e9:2c:a1:dd:8d:f2:5e:17:bc:e2:c5: 1e:01:47:c5:b7:b2:2d:29:6d:3a:da:5e:8a:87:77: 90:a4:0d:38:89:fc:cd:9c:b3:3f:f4:80:79:15:1c: 66:dc:c0:3b:6e:54:c0:a2:da:e5:52:d9:1d:dd:ef: 08:5f:fd:92:53:dc:2c:08:1b:a7:21:71:5c:09:a9: f6:69:49:4e:e6:64:bf:6a:41:37:6e:11:56:06:dc: 95:0a:6c:41:fe:c4:56:d8:02:28:46:9d:fb:3e:52: 8b:2a:76:f5:6d:9a:ff:98:e2:c3:d2:88:79:44:b4: c5:95:3f:7f:be:20:ab:61:f5:a0:08:9a:2e:90:4a: 9b:18:21:6c:d7:b4:b0:16:1e:46:98:10:a1:6a:a6: c9:6b:b8:99:68:18:e4:7e:00:3d:7f:92:d1:a9:df: 16:0b:4a:16:25:71:fb:24:67:90:2a:6e:d0:d5:9b: 54:9b:86:e1:2f:5c:c1:8a:e3:40:44:58:45:d1:18: 8f:d4:88:49:8b:8b:56:84:56:e3:eb:18:62:39:b7: ad:27:43:dd:c1:5a:08:23:35:64:44:18:1f:8c:00: 01:4d:c2:90:72:d6:e0:e2:9c:8d:81:fe:0f:5d:23: 6e:4a:4f:42:c8:06:c2:96:bb:25:1a:99:89:e0:fe: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:65:F7:76:3C:96:3D:6E:44:2A:38:4A:7C:F3:7E:04:D2:8F:A4:FD X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:0e:95:e8:12:df:7e:e8:e4:ca:96:3d:b4:bf:9d:1d:8b: 01:36:76:a3:06:2e:49:7e:a3:33:cb:aa:93:04:b6:9c:a8:83: ac:f4:14:a6:46:bd:1b:98:48:88:d7:97:81:60:c0:83:ec:02: d0:f7:b9:13:1c:33:d6:e3:4d:49:4b:c7:6d:15:37:c6:36:7a: 02:b0:99:56:a7:ea:b7:a0:75:53:1c:64:fb:e4:cc:1a:3d:7c: 43:ae:b5:e2:dc:d6:19:b0:00:f1:76:58:1c:ff:7d:aa:89:22: 5c:44:c5:be:e9:46:0d:2c:33:2e:36:f0:21:05:82:fd:8c:84: 63:d5:b6:a2:33:63:8e:21:e2:0c:c9:9b:f4:73:05:c8:51:f2: 45:6f:65:77:23:0e:7a:d7:5c:1e:07:cd:d3:df:20:f8:55:99: 9d:4d:fd:b7:0e:15:01:5f:38:9b:2c:8b:a0:2c:f1:5a:4b:41: 04:8c:25:dc:2a:20:4c:bc:ce:a9:85:48:b6:d6:be:5b:30:39: b8:f7:a1:49:fc:28:ae:96:be:e8:8d:d0:26:47:2d:12:c9:3a: 89:30:a5:47:a5:c7:67:89:bb:0a:cb:a4:91:a9:f6:1d:9a:ff: 11:95:43:45:32:50:ca:ea:b8:ed:f9:1b:a4:12:a4:53:79:eb: ee:83:16:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIu24qs6w439NpV4LTe3R4nqK2eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA5MTAxNDAxNDFaFw0yNjA5MTMyMjA2NDFaMDMxMTAvBgNV BAMTKEU4NjVGNzc2M0M5NjNENkU0NDJBMzg0QTdDRjM3RTA0RDI4RkE0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhs1PpLKHdjfJeF7zixR4BR8W3 si0pbTraXoqHd5CkDTiJ/M2csz/0gHkVHGbcwDtuVMCi2uVS2R3d7whf/ZJT3CwI G6chcVwJqfZpSU7mZL9qQTduEVYG3JUKbEH+xFbYAihGnfs+UosqdvVtmv+Y4sPS iHlEtMWVP3++IKth9aAImi6QSpsYIWzXtLAWHkaYEKFqpslruJloGOR+AD1/ktGp 3xYLShYlcfskZ5AqbtDVm1SbhuEvXMGK40BEWEXRGI/UiEmLi1aEVuPrGGI5t60n Q93BWggjNWREGB+MAAFNwpBy1uDinI2B/g9dI25KT0LIBsKWuyUamYng/gGTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6GX3djyWPW5EKjhKfPN+BNKPpP0wHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOIOlegS337o 5MqWPbS/nR2LATZ2owYuSX6jM8uqkwS2nKiDrPQUpka9G5hIiNeXgWDAg+wC0Pe5 Exwz1uNNSUvHbRU3xjZ6ArCZVqfqt6B1Uxxk++TMGj18Q6614tzWGbAA8XZYHP99 qokiXETFvulGDSwzLjbwIQWC/YyEY9W2ojNjjiHiDMmb9HMFyFHyRW9ldyMOetdc HgfN098g+FWZnU39tw4VAV84myyLoCzxWktBBIwl3CogTLzOqYVItta+WzA5uPeh Sfworpa+6I3QJkctEsk6iTClR6XHZ4m7Csukkan2HZr/EZVDRTJQyuq47fkbpBKk U3nr7oMW7A== -----END CERTIFICATE-----Generated at Thu Sep 10 17:46:13 2026 by rpki-client