$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: ad1CtNV258NPuj+M+jXG5oRmZa1MzYYim4k50gpSCnY= Subject key identifier: 5C:A7:07:31:C2:1B:48:76:02:8D:BE:98:3F:82:D2:4C:6D:19:CE:18 Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 1FB5C872F5F953E0FCC30C1AA77148DB7A704D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: A9 Signing time: Wed 14 Oct 2026 01:13:22 +0000 Manifest this update: Wed 14 Oct 2026 01:08:22 +0000 Manifest next update: Sat 17 Oct 2026 08:24:22 +0000 Files and hashes: 1: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=) 2: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=) 3: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) 4: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 5: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: i4MugWAjqUibwdrLw+yHargFFHjGDN0iG8OGLUHIKro=) 6: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 7: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 8: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 08:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b5:c8:72:f5:f9:53:e0:fc:c3:0c:1a:a7:71:48:db:7a:70:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: Oct 14 01:08:22 2026 GMT Not After : Oct 17 08:24:22 2026 GMT Subject: CN=5CA70731C21B4876028DBE983F82D24C6D19CE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:d5:92:b0:a9:f2:f5:fa:39:8c:88:75:21: 8a:18:3f:f7:3a:7c:20:b4:35:46:8d:8e:2f:b3:4b: 18:5c:b6:09:ee:57:06:2b:f7:69:f4:5d:bd:35:89: a9:a6:7b:d0:11:10:bc:ee:45:9a:9f:da:bf:4a:41: 42:65:54:39:98:97:2a:08:c0:94:3a:e3:5b:84:57: 91:0b:6f:de:7e:a3:8b:d1:0b:ce:3a:7b:a0:29:6f: d5:b4:bc:b1:60:07:03:55:aa:f6:1e:99:a1:8f:46: ee:d4:c8:c9:e6:83:89:3d:f3:9e:60:20:c2:2f:95: 99:e0:52:84:f0:f4:3f:77:87:f4:05:13:1e:dd:da: f2:ad:0e:3c:58:9c:54:3f:b9:01:99:c3:da:0e:26: 73:05:6e:79:a2:3f:88:d9:cd:1c:a1:be:60:46:18: bf:aa:8e:ae:11:bf:16:b2:95:29:f5:2c:53:45:c3: 9e:bf:76:ed:eb:45:85:f1:00:52:f3:3e:6a:d0:64: 6e:1f:64:c4:dd:03:e2:0c:38:5d:12:b1:9e:b9:c0: 36:df:cc:97:95:0f:5a:bf:dc:5d:8d:f2:d4:32:80: c6:9d:52:36:5d:c8:58:b5:28:eb:96:d1:5b:98:fe: 87:46:a6:4a:a4:42:19:00:a1:7a:e3:fb:7c:9e:9f: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:07:31:C2:1B:48:76:02:8D:BE:98:3F:82:D2:4C:6D:19:CE:18 X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:82:b2:12:05:1f:ed:cf:28:2f:4c:97:99:9c:93:f4:4e:7d: a5:c9:f5:f1:df:b2:5d:91:11:87:c8:2c:50:45:56:27:1c:de: 34:76:63:35:e6:c8:2d:ca:56:d5:2e:15:e3:65:5d:eb:24:78: c8:17:1d:e4:13:03:15:8f:12:dd:d4:0f:d9:b0:f7:72:b4:0d: a4:72:35:f1:33:71:9d:34:cf:e8:6a:ea:fc:6c:ec:54:6b:a9: 65:d1:09:93:f3:03:47:21:15:4f:1b:5e:79:64:4d:bf:b7:70: 28:8e:e1:24:a6:6f:93:87:84:0f:98:2c:ed:17:a9:d8:13:b2: 89:a3:d0:e7:a7:64:29:bc:96:eb:36:5d:37:e3:aa:b0:bd:68: ed:7c:94:aa:64:34:be:a2:8e:99:12:52:f9:0a:83:98:e5:a7: 9d:d4:c6:c9:b4:0e:cb:5d:c2:e7:29:89:8b:5f:b6:fe:f7:e5: 6b:f8:79:12:f6:92:55:58:6d:02:b1:ad:bf:c0:23:fa:a8:2d: 1c:1c:17:ca:0d:3c:7c:94:90:fe:4c:ea:94:a8:64:b0:ba:c9: 9b:55:22:87:38:e0:2a:c3:77:95:a0:e7:cc:a9:61:ce:dd:fd: 73:b1:59:1b:6c:a0:a6:94:45:d3:18:4e:bb:24:a9:e8:54:b0: 2d:51:c2:52 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITH7XIcvX5U+D8wwwap3FI23pwTTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDMjI5MEYyRjYxNTlGMUM4QzE0NkFFOUM2NDY5QkZCQzQ4 MUNDN0Q5MB4XDTI2MTAxNDAxMDgyMloXDTI2MTAxNzA4MjQyMlowMzExMC8GA1UE AxMoNUNBNzA3MzFDMjFCNDg3NjAyOERCRTk4M0Y4MkQyNEM2RDE5Q0UxODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJaX1ZKwqfL1+jmMiHUhihg/9zp8 ILQ1Ro2OL7NLGFy2Ce5XBiv3afRdvTWJqaZ70BEQvO5Fmp/av0pBQmVUOZiXKgjA lDrjW4RXkQtv3n6ji9ELzjp7oClv1bS8sWAHA1Wq9h6ZoY9G7tTIyeaDiT3znmAg wi+VmeBShPD0P3eH9AUTHt3a8q0OPFicVD+5AZnD2g4mcwVueaI/iNnNHKG+YEYY v6qOrhG/FrKVKfUsU0XDnr927etFhfEAUvM+atBkbh9kxN0D4gw4XRKxnrnANt/M l5UPWr/cXY3y1DKAxp1SNl3IWLUo65bRW5j+h0amSqRCGQCheuP7fJ6f8dsCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBRcpwcxwhtIdgKNvpg/gtJMbRnOGDAfBgNVHSME GDAWgBTCKQ8vYVnxyMFGrpxkab+8SBzH2TAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2 NTE2MTE0OTY5NDYwNzU1LzAvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJG QkM0ODFDQzdEOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9DMjI5MEYyRjYxNTlGMUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5LmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTEwNjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYx QzhDMTQ2QUU5QzY0NjlCRkJDNDgxQ0M3RDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjgrISBR/tzygv TJeZnJP0Tn2lyfXx37JdkRGHyCxQRVYnHN40dmM15sgtylbVLhXjZV3rJHjIFx3k EwMVjxLd1A/ZsPdytA2kcjXxM3GdNM/oaur8bOxUa6ll0QmT8wNHIRVPG155ZE2/ t3AojuEkpm+Th4QPmCztF6nYE7KJo9Dnp2QpvJbrNl0346qwvWjtfJSqZDS+oo6Z ElL5CoOY5aed1MbJtA7LXcLnKYmLX7b+9+Vr+HkS9pJVWG0Csa2/wCP6qC0cHBfK DTx8lJD+TOqUqGSwusmbVSKHOOAqw3eVoOfMqWHO3f1zsVkbbKCmlEXTGE67JKno VLAtUcJS -----END CERTIFICATE-----Generated at Wed Oct 14 20:31:07 2026 by rpki-client