$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: TEG2c+G92g+bSw863X8Psqlq9ySYMXesz8g9++UmQ8I= Subject key identifier: C9:DC:B5:05:43:3E:D9:DE:87:1B:E9:17:59:07:F5:68:01:FD:51:7C Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 607BA493680C14476559938A0EF5BC3CBE0A1B0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 9D Signing time: Wed 14 Oct 2026 15:49:20 +0000 Manifest this update: Wed 14 Oct 2026 15:44:20 +0000 Manifest next update: Sun 18 Oct 2026 01:18:20 +0000 Files and hashes: 1: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) 2: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) 3: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: gFOMjBjk+ZXkQ0M/Jazjk/E9c+3ciZucv+B++TWFGr8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:a4:93:68:0c:14:47:65:59:93:8a:0e:f5:bc:3c:be:0a:1b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Oct 14 15:44:20 2026 GMT Not After : Oct 18 01:18:20 2026 GMT Subject: CN=C9DCB505433ED9DE871BE9175907F56801FD517C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:72:82:f5:64:41:08:2a:ee:5f:68:f4:15: 0c:b9:47:e3:db:79:a4:29:62:65:5c:81:a5:c8:56: 69:31:1d:41:b8:06:05:7e:a5:46:6b:b5:88:d0:a2: 0f:30:48:a4:08:0c:34:94:e4:04:5c:95:ed:88:15: 5f:f9:b0:b1:41:0c:10:fb:9a:5c:74:cb:88:6f:ae: 99:58:99:9a:01:d5:94:ba:61:35:20:dd:33:68:90: f6:8f:41:7d:95:93:30:83:5d:60:25:5f:05:b0:15: 9a:d6:86:8a:96:ba:5e:53:56:d8:2b:e2:9e:99:93: c6:2c:05:c0:11:76:65:21:3a:38:79:ba:57:1a:0c: 52:00:ae:2f:c7:6a:d4:34:00:98:dc:72:b9:a0:11: 6b:17:1b:e0:90:52:d5:84:d0:f2:16:53:cd:2c:47: fd:3b:0b:4a:ce:5e:56:1d:d1:51:4e:6c:39:d3:4c: 48:0f:da:c8:43:ab:53:0f:26:23:b0:c2:ef:43:42: 26:74:94:9c:7d:5e:b9:12:af:16:b0:e5:ac:0e:d7: ac:4c:73:70:68:0b:52:cd:74:0f:64:f8:2e:64:f4: 98:73:11:b6:d7:15:18:59:87:7e:af:4a:bb:e1:13: 58:da:8f:06:69:f4:b2:d2:14:ec:8b:d4:7c:1b:b1: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:B5:05:43:3E:D9:DE:87:1B:E9:17:59:07:F5:68:01:FD:51:7C X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c8:a3:ff:85:d9:4b:84:88:16:3c:02:29:26:59:ce:04:5a: 6d:79:b6:26:e5:fd:25:3f:4c:bc:a7:b1:c1:6c:92:aa:52:26: ec:9f:54:ff:2e:de:78:30:cd:f1:3e:b7:31:45:bb:f8:c3:39: 6c:16:6d:26:d9:41:cd:42:3d:4b:ec:7d:7a:1e:e4:08:48:72: 02:a4:fa:5c:ec:eb:34:1f:58:9e:a5:cb:9a:94:2d:b2:6d:5b: a5:30:d7:f5:94:72:13:ff:ad:14:b7:30:af:b5:98:d0:82:5b: 46:63:d5:47:06:c6:3b:bb:ed:89:f4:75:4a:b9:1d:52:89:0e: ce:55:c9:54:ad:ad:64:ad:a3:eb:3a:51:33:e5:c0:2e:1a:67: e1:50:62:1f:d2:98:59:62:c3:6c:e3:b4:a6:5c:e6:9a:a3:1f: 18:89:32:38:7e:fd:4c:5d:c7:e6:63:c7:8e:7b:2d:c5:da:00: 41:15:73:bf:6a:62:a6:d3:1e:64:be:23:d6:22:45:8d:bb:c5: 0d:89:cb:66:de:00:92:3e:13:89:cd:b5:4d:c1:1d:92:12:f8: d7:e5:c7:cf:3c:4a:4e:94:ac:a8:9b:e7:8b:2b:f3:45:f4:26: 04:00:fe:f8:dd:c9:4b:24:05:23:42:69:e3:d5:c6:25:11:68: c2:e7:3c:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYHukk2gMFEdlWZOKDvW8PL4KGw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjEwMTQxNTQ0MjBaFw0yNjEwMTgwMTE4MjBaMDMxMTAvBgNV BAMTKEM5RENCNTA1NDMzRUQ5REU4NzFCRTkxNzU5MDdGNTY4MDFGRDUxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0HKC9WRBCCruX2j0FQy5R+Pb eaQpYmVcgaXIVmkxHUG4BgV+pUZrtYjQog8wSKQIDDSU5ARcle2IFV/5sLFBDBD7 mlx0y4hvrplYmZoB1ZS6YTUg3TNokPaPQX2VkzCDXWAlXwWwFZrWhoqWul5TVtgr 4p6Zk8YsBcARdmUhOjh5ulcaDFIAri/HatQ0AJjccrmgEWsXG+CQUtWE0PIWU80s R/07C0rOXlYd0VFObDnTTEgP2shDq1MPJiOwwu9DQiZ0lJx9XrkSrxaw5awO16xM c3BoC1LNdA9k+C5k9JhzEbbXFRhZh36vSrvhE1jajwZp9LLSFOyL1HwbsdnHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUydy1BUM+2d6HG+kXWQf1aAH9UXwwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMij/4XZS4SI FjwCKSZZzgRabXm2JuX9JT9MvKexwWySqlIm7J9U/y7eeDDN8T63MUW7+MM5bBZt JtlBzUI9S+x9eh7kCEhyAqT6XOzrNB9YnqXLmpQtsm1bpTDX9ZRyE/+tFLcwr7WY 0IJbRmPVRwbGO7vtifR1SrkdUokOzlXJVK2tZK2j6zpRM+XALhpn4VBiH9KYWWLD bOO0plzmmqMfGIkyOH79TF3H5mPHjnstxdoAQRVzv2piptMeZL4j1iJFjbvFDYnL Zt4Akj4Tic21TcEdkhL41+XHzzxKTpSsqJvniyvzRfQmBAD++N3JSyQFI0Jp49XG JRFowuc8QQ== -----END CERTIFICATE-----Generated at Wed Oct 14 22:28:26 2026 by rpki-client