$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: 2/SWdfmZAqybpcj8sqwsvj3EULMMsrxYJzV+EDiVoMM= Subject key identifier: D6:39:9C:B2:C3:0A:EE:E5:D9:44:49:B2:EB:63:82:F3:44:56:36:D9 Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 5285DFF2269C33406326B611252E8E7E91AEFEA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: C2 Signing time: Sun 11 Oct 2026 14:10:40 +0000 Manifest this update: Sun 11 Oct 2026 14:05:40 +0000 Manifest next update: Wed 14 Oct 2026 23:44:40 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: sioCWbV/vEgP+zpTJWf7gwCC1wuqH8PQnCLLCX+N9Kk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 23:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:85:df:f2:26:9c:33:40:63:26:b6:11:25:2e:8e:7e:91:ae:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: Oct 11 14:05:40 2026 GMT Not After : Oct 14 23:44:40 2026 GMT Subject: CN=D6399CB2C30AEEE5D94449B2EB6382F3445636D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:fb:f6:9e:6a:5a:b3:98:54:48:35:17:01: 1c:31:1c:20:2a:e3:ad:b1:68:4a:63:07:56:16:05: b7:5b:35:29:a3:ed:17:35:cb:fe:86:27:c1:b3:cf: 71:41:4c:6e:c8:bf:e2:4b:5d:b8:cb:c6:26:1b:c6: 0a:e9:cc:59:b5:56:08:1e:93:b7:55:36:ec:1c:59: 49:be:b1:9c:06:5f:c8:b4:ba:ac:2a:f1:cb:97:7d: e6:01:55:c3:70:26:85:75:2e:3f:ec:66:80:f8:18: 26:fa:22:59:99:2e:d2:73:92:b0:95:07:f0:ba:7b: 80:31:0d:2e:2a:94:d9:0e:80:4c:88:93:d3:d5:25: a0:0b:79:4f:2d:e9:7c:06:b9:6b:a1:a1:71:81:2e: b4:b5:74:5a:10:96:68:df:b2:69:f6:4b:c4:b3:6f: 92:9a:bc:f2:fc:59:ed:d1:cf:08:9a:41:1d:c1:c5: 8f:df:55:99:50:64:16:59:20:9b:1e:ce:86:f6:b9: d5:af:c7:c4:78:08:f0:d0:2e:65:0f:ea:4b:04:b9: db:75:72:a2:03:4b:40:bc:e9:6f:42:d7:a6:ff:b6: 85:66:2c:dc:05:b2:3f:bb:e3:10:a0:24:98:70:a9: 7d:64:37:54:a2:64:ac:20:f6:41:74:5e:04:fc:71: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:9C:B2:C3:0A:EE:E5:D9:44:49:B2:EB:63:82:F3:44:56:36:D9 X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c9:0b:b2:96:48:15:b3:e7:ae:05:74:0b:bc:cc:d6:1b:43: a6:c3:f1:99:1c:19:45:3a:97:29:f2:5b:7d:76:6b:04:77:b8: 49:c9:c8:49:a3:4e:76:f3:c0:7e:67:dd:e4:5d:97:91:0b:41: 10:87:37:4c:0e:d1:91:b5:89:73:76:2f:83:21:66:23:46:fd: 0a:9a:6c:b4:ce:44:24:8e:fb:95:b5:81:3a:16:04:89:b4:d6: aa:e7:20:40:1c:95:af:b1:b8:84:e5:2b:50:c3:08:41:48:36: bc:e4:23:79:f9:b5:11:0b:24:5d:b9:81:54:a1:9f:3a:d0:74: a9:d6:6e:52:e8:f8:37:67:1d:e8:c6:9b:cf:a4:71:1a:03:7e: 59:50:03:44:07:a6:71:1e:e6:a3:b7:0b:f9:c8:ad:8a:ff:45: 97:77:8f:de:a9:c6:4b:bf:7b:2b:b5:fc:a5:1c:78:82:27:14: ed:62:1b:d3:b0:68:66:1d:14:5b:b3:bf:95:ee:8a:4d:9b:46: d9:44:00:23:96:e7:01:e6:59:91:3b:04:92:66:00:a0:4d:b9: a5:a5:cd:dc:da:2d:d4:52:9e:a9:77:9d:85:ea:d7:07:a1:98: 64:f9:4e:7d:6b:a6:ad:5d:55:83:c1:f0:e5:26:d8:41:f2:6f: b7:c4:53:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUoXf8iacM0BjJrYRJS6OfpGu/qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjEwMTExNDA1NDBaFw0yNjEwMTQyMzQ0NDBaMDMxMTAvBgNV BAMTKEQ2Mzk5Q0IyQzMwQUVFRTVEOTQ0NDlCMkVCNjM4MkYzNDQ1NjM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7fv2nmpas5hUSDUXARwxHCAq 462xaEpjB1YWBbdbNSmj7Rc1y/6GJ8Gzz3FBTG7Iv+JLXbjLxiYbxgrpzFm1Vgge k7dVNuwcWUm+sZwGX8i0uqwq8cuXfeYBVcNwJoV1Lj/sZoD4GCb6IlmZLtJzkrCV B/C6e4AxDS4qlNkOgEyIk9PVJaALeU8t6XwGuWuhoXGBLrS1dFoQlmjfsmn2S8Sz b5KavPL8We3RzwiaQR3BxY/fVZlQZBZZIJsezob2udWvx8R4CPDQLmUP6ksEudt1 cqIDS0C86W9C16b/toVmLNwFsj+74xCgJJhwqX1kN1SiZKwg9kF0XgT8cYfFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1jmcssMK7uXZREmy62OC80RWNtkwHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMkLspZIFbPn rgV0C7zM1htDpsPxmRwZRTqXKfJbfXZrBHe4ScnISaNOdvPAfmfd5F2XkQtBEIc3 TA7RkbWJc3YvgyFmI0b9CppstM5EJI77lbWBOhYEibTWqucgQByVr7G4hOUrUMMI QUg2vOQjefm1EQskXbmBVKGfOtB0qdZuUuj4N2cd6Mabz6RxGgN+WVADRAemcR7m o7cL+citiv9Fl3eP3qnGS797K7X8pRx4gicU7WIb07BoZh0UW7O/le6KTZtG2UQA I5bnAeZZkTsEkmYAoE25paXN3Not1FKeqXedherXB6GYZPlOfWumrV1Vg8Hw5SbY QfJvt8RTVA== -----END CERTIFICATE-----Generated at Tue Oct 13 20:53:57 2026 by rpki-client