$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json) Hash identifier: UHdonCENtQw+pirdv0+oc/yZ+HjCTe/wSLiGBi3YzWU= Subject key identifier: 32:A5:84:FE:4D:9F:87:4F:5C:6A:AC:FE:1F:16:15:D7:6D:2C:01:F6 Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 6A2A821D66BAB693B729D54ADA661CF6463069CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft Manifest number: 0114 Signing time: Tue 28 Jul 2026 20:47:45 +0000 Manifest this update: Tue 28 Jul 2026 20:42:45 +0000 Manifest next update: Wed 29 Jul 2026 23:57:45 +0000 Files and hashes: 1: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=) 2: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=) 3: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=) 4: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=) 5: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=) 6: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=) 7: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=) 8: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: k2XkFpLudwOq3V66aNFtvNv95Q62fR6CwiaBNMb3MiA=) 9: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=) 10: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=) 11: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:82:1d:66:ba:b6:93:b7:29:d5:4a:da:66:1c:f6:46:30:69:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Jul 28 20:42:45 2026 GMT Not After : Jul 29 23:57:45 2026 GMT Subject: CN=32A584FE4D9F874F5C6AACFE1F1615D76D2C01F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:b8:b4:42:77:e1:05:2c:a1:50:66:be:18: 5d:2b:43:0f:f7:44:03:4c:21:33:09:60:6d:38:76: 50:c0:7b:e9:4f:27:f5:c3:73:a3:c9:dd:d1:05:eb: c0:5f:72:f8:a2:1c:8c:dc:fd:37:62:4d:b4:64:41: 27:f6:d3:22:b0:28:a1:62:77:07:39:1f:93:03:ff: b8:60:05:b1:84:b8:d7:9a:d4:89:16:40:e6:3e:dc: aa:3d:0a:8e:c1:95:b3:46:28:ef:86:0e:e6:c8:09: 27:b4:0b:08:85:7f:11:31:51:3e:bd:0d:00:db:80: bf:92:1c:ed:49:e0:6e:88:23:73:1a:d0:b4:2b:fe: 8e:9a:b7:0d:20:ea:2e:93:2b:d0:81:67:ac:58:78: 4a:55:2a:83:2e:df:8f:b0:1f:4b:4a:4b:a2:00:c0: 23:bd:6a:19:dc:29:c4:8d:e1:97:b3:96:76:57:47: 4a:6b:29:e4:02:e9:8f:ce:a9:3f:1f:41:ab:96:30: 2a:65:d1:e7:6b:dc:5b:74:d7:4d:ff:33:a3:73:64: 56:88:7a:1e:7c:2c:3e:bb:58:e0:68:9e:b4:4b:74: cc:96:31:3a:1d:bd:f8:77:e6:8e:9d:7f:47:0a:91: 78:8d:9d:04:8b:82:ec:41:6c:61:42:40:d1:f2:81: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:84:FE:4D:9F:87:4F:5C:6A:AC:FE:1F:16:15:D7:6D:2C:01:F6 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:9c:eb:2f:83:ff:bd:b0:1f:2b:14:22:cf:0c:0a:cf:88: d2:57:57:69:8a:5b:d0:27:e5:93:66:a0:06:7d:d2:60:92:c4: 20:21:c9:68:40:77:8c:8c:26:b1:31:54:8c:cb:bb:e3:3e:43: c2:fa:f2:8e:5a:f1:e5:ba:f7:8e:63:3a:8a:a2:c7:cd:7c:54: 3b:6b:07:d0:58:04:f1:69:38:b5:ed:9c:4e:0f:74:e6:5b:1e: 83:a6:12:c9:f4:98:aa:5d:e0:c3:15:f5:84:ab:e3:1b:60:3d: be:0b:51:f7:6e:0c:c6:f4:10:1d:aa:1f:c2:8e:ba:99:12:15: 84:dc:44:01:71:8a:b7:df:13:80:98:b5:09:4b:5c:92:3c:02: 08:88:98:79:9a:09:ab:cf:e6:fb:ce:90:cb:57:85:12:3e:95: fb:15:ea:92:02:8f:e8:5f:de:4b:b7:78:15:d8:2c:bc:ec:3e: e1:56:f2:55:40:fc:5a:9a:dc:45:5d:2f:44:b0:29:07:2f:93: ae:62:10:f1:d2:cd:61:26:2a:8e:11:a5:ca:f0:fa:a1:7f:b7: 58:68:6a:88:03:27:36:0f:17:96:0d:d6:98:ea:73:8f:a7:05: a1:9f:37:5f:9e:31:79:be:fd:b8:15:54:0c:68:92:3f:c7:21: 13:cc:09:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaiqCHWa6tpO3KdVK2mYc9kYwacswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjA3MjgyMDQyNDVaFw0yNjA3MjkyMzU3NDVaMDMxMTAvBgNV BAMTKDMyQTU4NEZFNEQ5Rjg3NEY1QzZBQUNGRTFGMTYxNUQ3NkQyQzAxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1bi0QnfhBSyhUGa+GF0rQw/3 RANMITMJYG04dlDAe+lPJ/XDc6PJ3dEF68BfcviiHIzc/TdiTbRkQSf20yKwKKFi dwc5H5MD/7hgBbGEuNea1IkWQOY+3Ko9Co7BlbNGKO+GDubICSe0CwiFfxExUT69 DQDbgL+SHO1J4G6II3Ma0LQr/o6atw0g6i6TK9CBZ6xYeEpVKoMu34+wH0tKS6IA wCO9ahncKcSN4ZezlnZXR0prKeQC6Y/OqT8fQauWMCpl0edr3Ft0103/M6NzZFaI eh58LD67WOBonrRLdMyWMTodvfh35o6df0cKkXiNnQSLguxBbGFCQNHygZyTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMqWE/k2fh09caqz+HxYV120sAfYwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3MjE4NTkvMC85QjIyQzE5RDg0MkU0 NUFBODQ0MzkzNjY2OTRFNEM4MjhDMzA5Q0VFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLWc6y+D/72w HysUIs8MCs+I0ldXaYpb0Cflk2agBn3SYJLEICHJaEB3jIwmsTFUjMu74z5Dwvry jlrx5br3jmM6iqLHzXxUO2sH0FgE8Wk4te2cTg905lseg6YSyfSYql3gwxX1hKvj G2A9vgtR924MxvQQHaofwo66mRIVhNxEAXGKt98TgJi1CUtckjwCCIiYeZoJq8/m +86Qy1eFEj6V+xXqkgKP6F/eS7d4FdgsvOw+4VbyVUD8WprcRV0vRLApBy+TrmIQ 8dLNYSYqjhGlyvD6oX+3WGhqiAMnNg8Xlg3WmOpzj6cFoZ83X54xeb79uBVUDGiS P8chE8wJrA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:39:45 2026 by rpki-client