$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: kr52IqCxnncPVOO5EF5/HlqabuUmnu/k+Hox6r4VyGA= Subject key identifier: 9D:0C:BC:01:EE:41:EB:43:CF:7E:5D:33:AB:80:F8:FF:4F:75:E4:2C Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 281E59177D2C6CCD253515F7240AB4E7B4CC0AEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 4F Signing time: Sat 13 Jun 2026 01:56:01 +0000 Manifest this update: Sat 13 Jun 2026 01:51:01 +0000 Manifest next update: Sun 14 Jun 2026 05:48:01 +0000 Files and hashes: 1: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 2: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 3: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 4: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 5: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 6: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 7: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 8: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 9: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 10: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: 3FYD9sb4LUlFP2111heZ71G4buDo2bGMf85ZGzyaa2I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 05:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1e:59:17:7d:2c:6c:cd:25:35:15:f7:24:0a:b4:e7:b4:cc:0a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Jun 13 01:51:01 2026 GMT Not After : Jun 14 05:48:01 2026 GMT Subject: CN=9D0CBC01EE41EB43CF7E5D33AB80F8FF4F75E42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:27:5b:c2:e4:bc:aa:cb:6f:97:81:a7:70: c4:87:48:2f:9e:1e:9d:48:7f:23:be:78:ce:5f:6f: c5:50:ad:59:a5:05:56:76:95:4c:9b:37:a8:7e:ac: 90:29:b4:ac:17:ed:65:92:1b:43:7c:c3:a3:8d:93: 6b:8a:76:10:42:40:f6:40:11:e5:e4:81:41:b7:fa: 9a:d0:56:51:70:c0:38:d6:0e:4f:14:60:20:1c:be: 64:42:ec:89:67:71:68:45:9a:95:00:e5:09:fe:b6: dc:38:ca:20:d0:88:84:2d:de:e7:80:83:b8:51:76: 2a:94:20:30:1e:1c:29:c5:43:e0:fa:37:1e:f1:e3: f6:f3:9b:a4:48:33:97:b3:32:49:e8:0e:f4:46:91: 4d:ac:69:61:34:df:72:7c:81:3e:f7:d2:37:a5:d4: f6:55:7e:69:d2:94:a5:94:b9:41:92:81:7f:8b:9d: 11:42:56:58:ac:a4:5e:18:76:1f:32:84:d7:0c:36: 09:ed:c9:14:ec:13:f1:8a:cf:cd:ef:f1:03:d0:ea: fb:04:1a:32:f7:10:66:63:36:6b:5a:3c:e3:ee:df: f8:47:44:68:e1:ea:4b:0c:d7:1d:73:09:71:dd:01: 93:56:54:78:d4:28:c1:82:40:f4:2f:8c:13:8c:c2: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0C:BC:01:EE:41:EB:43:CF:7E:5D:33:AB:80:F8:FF:4F:75:E4:2C X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e7:29:41:08:b9:c3:15:ae:6e:8f:3e:8b:e9:6f:ca:d5:83: 44:85:ca:09:dc:aa:df:a5:d8:0b:7e:9c:06:da:77:45:ad:9c: 5f:61:b7:c5:5f:a5:87:e0:6b:20:2e:b8:75:b2:62:b2:ae:47: 98:e1:d7:3e:6e:30:40:d3:90:86:cb:0e:0e:a1:e9:f0:9d:cd: dd:2f:07:3a:07:80:46:27:48:a1:c6:1a:98:b9:b3:a8:05:5f: c6:08:3d:9c:8c:9c:8c:fd:b9:ce:18:f1:11:a8:4c:28:ee:8c: 16:07:d7:a6:c8:7d:4b:0d:1b:f6:6c:9c:4c:9a:40:02:73:aa: 10:c8:81:8f:cd:dd:ee:f5:c4:74:d6:4b:95:a7:76:8e:a9:a1: b3:f0:16:e4:b6:0e:70:28:eb:27:0f:58:a7:c3:b5:60:3c:c5: bb:85:91:f6:08:89:71:9c:8c:2d:6c:87:84:0c:78:77:2c:62: be:a2:07:03:b7:b4:57:c1:b1:a2:4a:ba:17:7c:b6:35:7c:49: 02:e5:69:8a:7e:1d:0f:1f:3e:64:60:9e:94:11:99:49:56:3b: 5d:4a:36:ee:e4:fb:90:4b:26:e9:c9:5e:04:c5:e7:08:c5:3a: 3f:77:8d:1c:b3:e5:ef:98:80:77:65:5a:b7:1c:6f:f3:c7:02: 96:b3:06:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKB5ZF30sbM0lNRX3JAq057TMCuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA2MTMwMTUxMDFaFw0yNjA2MTQwNTQ4MDFaMDMxMTAvBgNV BAMTKDlEMENCQzAxRUU0MUVCNDNDRjdFNUQzM0FCODBGOEZGNEY3NUU0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoidbwuS8qstvl4GncMSHSC+e Hp1IfyO+eM5fb8VQrVmlBVZ2lUybN6h+rJAptKwX7WWSG0N8w6ONk2uKdhBCQPZA EeXkgUG3+prQVlFwwDjWDk8UYCAcvmRC7IlncWhFmpUA5Qn+ttw4yiDQiIQt3ueA g7hRdiqUIDAeHCnFQ+D6Nx7x4/bzm6RIM5ezMknoDvRGkU2saWE033J8gT730jel 1PZVfmnSlKWUuUGSgX+LnRFCVlispF4Ydh8yhNcMNgntyRTsE/GKz83v8QPQ6vsE GjL3EGZjNmtaPOPu3/hHRGjh6ksM1x1zCXHdAZNWVHjUKMGCQPQvjBOMwpZZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnQy8Ae5B60PPfl0zq4D4/0915CwwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+cpQQi5wxWu bo8+i+lvytWDRIXKCdyq36XYC36cBtp3Ra2cX2G3xV+lh+BrIC64dbJisq5HmOHX Pm4wQNOQhssODqHp8J3N3S8HOgeARidIocYamLmzqAVfxgg9nIycjP25zhjxEahM KO6MFgfXpsh9Sw0b9mycTJpAAnOqEMiBj83d7vXEdNZLlad2jqmhs/AW5LYOcCjr Jw9Yp8O1YDzFu4WR9giJcZyMLWyHhAx4dyxivqIHA7e0V8Gxokq6F3y2NXxJAuVp in4dDx8+ZGCelBGZSVY7XUo27uT7kEsm6cleBMXnCMU6P3eNHLPl75iAd2Vatxxv 88cClrMG9g== -----END CERTIFICATE-----Generated at Sat Jun 13 23:29:32 2026 by rpki-client