$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json) Hash identifier: w/vBgwXeGbw+AflgtMH8LCNH9GL+xZiv+g2gVGUVhyw= Subject key identifier: 40:6A:8F:70:9C:18:C9:02:89:8D:5C:BF:72:FF:51:D5:DC:82:2A:2D Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 4A9EA9F10259138BDDD983554562BA2A3819EC09 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft Manifest number: 02ED Signing time: Sun 04 Oct 2026 00:58:10 +0000 Manifest this update: Sun 04 Oct 2026 00:53:10 +0000 Manifest next update: Wed 07 Oct 2026 05:26:10 +0000 Files and hashes: 1: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=) 2: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=) 3: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=) 4: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=) 5: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=) 6: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=) 7: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=) 8: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=) 9: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=) 10: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=) 11: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=) 12: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=) 13: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=) 14: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: dpr5q20YwSYnNkTjPmHERfa+0585EdusCuE2i0LLANs=) 15: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=) 16: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=) 17: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=) 18: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 05:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9e:a9:f1:02:59:13:8b:dd:d9:83:55:45:62:ba:2a:38:19:ec:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Oct 4 00:53:10 2026 GMT Not After : Oct 7 05:26:10 2026 GMT Subject: CN=406A8F709C18C902898D5CBF72FF51D5DC822A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:5a:25:a7:7a:55:4f:44:55:5b:24:a6:1b: ef:e6:db:c6:b6:35:5d:20:b3:d9:3d:13:78:be:a0: c3:58:d4:00:d7:44:76:34:57:60:90:48:da:40:b1: d5:23:62:69:bc:8e:60:57:70:45:40:03:59:87:e5: 7f:fe:50:15:8a:2e:25:fd:ed:d8:68:be:64:9b:ea: aa:ee:f4:a6:e5:08:e2:88:0f:2c:37:af:52:04:86: 4b:48:19:77:b7:c0:a0:90:93:26:2b:a5:7d:a4:99: af:1a:ff:23:24:29:ec:41:6a:8b:c1:24:7a:63:26: 0e:77:ca:de:b7:ad:9a:00:6f:93:d3:bd:60:d0:15: 24:79:ee:eb:8d:90:9c:7f:03:71:9d:59:11:0a:43: 4f:c3:0f:bc:59:d6:dc:27:31:73:47:b8:e3:c3:c0: 0f:bf:f5:f1:66:c3:70:87:50:a1:eb:41:c9:18:6f: 36:85:b6:ad:30:22:8d:77:49:82:b3:f6:7e:d8:ab: 2f:de:1a:a4:7d:52:b3:1c:e9:91:79:81:85:7f:61: c5:e6:24:67:a9:15:30:74:a5:b3:41:a9:31:33:42: e2:94:c4:17:31:04:bd:e4:14:14:0a:96:87:b6:7f: 32:80:32:3b:1a:ee:31:03:5f:0a:3d:5b:96:f7:de: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:8F:70:9C:18:C9:02:89:8D:5C:BF:72:FF:51:D5:DC:82:2A:2D X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0d:f8:7b:34:4c:bc:2a:eb:38:07:06:18:3e:17:70:92:6f: 29:63:eb:3e:8b:04:b1:29:ef:5f:2d:6c:74:7d:08:15:90:34: f7:e9:25:1a:b0:a7:e7:9d:51:e1:52:1d:35:a3:6f:2a:91:4e: 39:b6:ee:0d:50:df:3f:7f:e7:de:0b:99:48:fa:d7:1d:f1:31: 60:bb:8b:a4:4b:3d:ce:7e:d4:28:00:33:41:d3:d7:82:5c:43: 01:df:5a:5e:27:54:8a:e7:ef:82:59:35:03:0a:9e:f9:aa:90: 24:a3:79:d7:cf:2c:37:ab:cc:3d:73:54:59:a1:d9:b5:31:c7: 1c:32:f7:c7:73:ce:38:b0:81:7a:7c:34:81:2e:07:21:64:4d: 34:95:20:05:06:7b:a9:20:1b:f0:5b:6c:4a:c1:90:e3:8d:49: f7:d2:ae:7a:f2:c8:60:aa:1e:94:bb:51:d2:08:8c:80:41:2a: 5b:55:71:41:98:37:5b:4d:5f:bc:83:c8:eb:16:ed:b5:89:37: d9:99:e0:7a:15:21:ce:ef:e5:b6:79:e2:93:32:25:1b:f2:c0: ea:29:2d:65:64:2e:18:e7:1f:d7:cf:3c:cd:38:a1:e9:81:af: 31:ef:62:e3:e2:d3:a5:38:0d:64:07:5b:c7:f1:62:76:fe:64: d8:91:ea:87 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSp6p8QJZE4vd2YNVRWK6KjgZ7AkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MTAwNDAwNTMxMFoX DTI2MTAwNzA1MjYxMFowMzExMC8GA1UEAxMoNDA2QThGNzA5QzE4QzkwMjg5OEQ1 Q0JGNzJGRjUxRDVEQzgyMkEyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJZBWiWnelVPRFVbJKYb7+bbxrY1XSCz2T0TeL6gw1jUANdEdjRXYJBI2kCx 1SNiabyOYFdwRUADWYflf/5QFYouJf3t2Gi+ZJvqqu70puUI4ogPLDevUgSGS0gZ d7fAoJCTJiulfaSZrxr/IyQp7EFqi8EkemMmDnfK3retmgBvk9O9YNAVJHnu642Q nH8DcZ1ZEQpDT8MPvFnW3Ccxc0e448PAD7/18WbDcIdQoetByRhvNoW2rTAijXdJ grP2ftirL94apH1SsxzpkXmBhX9hxeYkZ6kVMHSls0GpMTNC4pTEFzEEveQUFAqW h7Z/MoAyOxruMQNfCj1blvfenVECAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRAao9w nBjJAomNXL9y/1HV3IIqLTAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8wLzM5MDlDQ0Y2OUQ3RjFBMTdEQ0EwMTg3OEZBRTA2RUMzOUIzOEUz QkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCWDfh7NEy8Kus4BwYYPhdwkm8pY+s+iwSxKe9fLWx0fQgV kDT36SUasKfnnVHhUh01o28qkU45tu4NUN8/f+feC5lI+tcd8TFgu4ukSz3OftQo ADNB09eCXEMB31peJ1SK5++CWTUDCp75qpAko3nXzyw3q8w9c1RZodm1McccMvfH c844sIF6fDSBLgchZE00lSAFBnupIBvwW2xKwZDjjUn30q568shgqh6Uu1HSCIyA QSpbVXFBmDdbTV+8g8jrFu21iTfZmeB6FSHO7+W2eeKTMiUb8sDqKS1lZC4Y5x/X zzzNOKHpga8x72Lj4tOlOA1kB1vH8WJ2/mTYkeqH -----END CERTIFICATE-----Generated at Mon Oct 5 06:33:31 2026 by rpki-client