$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: Amww+XMNf3Rs8RoCgrNriu1FA1BvvfnqPU3/7nsoKbI= Subject key identifier: D9:03:F4:4D:7B:D4:40:0D:02:C8:A1:F0:06:02:25:CD:59:BF:C9:BA Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 11E11CB4C2AAD3A8B275BD209E311F52B11123C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: C1 Signing time: Sun 27 Sep 2026 16:10:05 +0000 Manifest this update: Sun 27 Sep 2026 16:05:05 +0000 Manifest next update: Wed 30 Sep 2026 23:32:05 +0000 Files and hashes: 1: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 2: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 3: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: LLDop85ghJvciyavlKX/zpopf1+ZXVGte2f2iuut+0k=) 4: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 5: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 6: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 7: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 8: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 9: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 10: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 23:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:1c:b4:c2:aa:d3:a8:b2:75:bd:20:9e:31:1f:52:b1:11:23:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Sep 27 16:05:05 2026 GMT Not After : Sep 30 23:32:05 2026 GMT Subject: CN=D903F44D7BD4400D02C8A1F0060225CD59BFC9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:cb:56:3d:44:99:aa:0f:05:d4:e2:16:d9: 73:19:21:57:68:5c:3e:45:0d:7c:20:c1:6c:7e:e0: 1a:78:2b:a1:19:79:80:c3:81:97:67:f1:81:db:c3: aa:c8:b7:e2:3e:47:3d:23:e2:dc:7c:b0:9b:4b:15: 32:e1:b2:f2:90:c2:a7:5a:1e:9f:96:94:53:f0:c2: e3:f9:90:1c:96:8d:d2:cb:52:47:af:50:ab:34:72: f4:ea:d0:43:7a:a4:26:a9:3b:e3:4d:cc:52:97:1f: 9a:db:ea:96:e4:dc:6a:9d:9a:53:de:2f:6a:61:c7: 06:d3:9e:37:c3:05:8e:00:24:87:74:6b:bb:67:2e: af:24:fb:2b:a0:8a:e8:65:22:5a:57:39:e7:18:1c: 60:45:59:58:23:f2:6b:2a:8d:d5:aa:2f:da:2a:48: 31:6a:68:4d:7c:b0:2a:c8:d1:ca:f2:ce:fe:89:44: 31:5a:0b:2b:69:4e:03:cd:cc:0a:7c:81:8a:c7:5d: a2:93:e1:d6:2e:ac:c7:6a:7c:37:af:15:34:0f:3a: f6:4c:52:25:3d:8c:cc:e3:a3:7c:24:c7:17:8a:28: 29:52:24:94:9c:0c:da:ad:f0:04:9c:4e:e4:88:75: 9b:a5:50:51:ed:1b:b9:8b:f0:51:63:18:e7:80:3d: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:F4:4D:7B:D4:40:0D:02:C8:A1:F0:06:02:25:CD:59:BF:C9:BA X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:91:ac:5a:e3:15:aa:88:b2:20:1a:75:be:fb:ce:1e:07:f0: b6:3a:65:d6:cf:4a:39:76:3c:3f:4f:a5:a7:b0:00:1e:da:15: dd:6b:25:35:db:fa:39:bf:c0:99:30:f4:aa:6d:a3:8a:22:55: 25:82:f9:30:d3:df:25:5a:34:0d:b9:f4:bf:e1:f9:52:e8:d8: 67:2a:5b:d0:de:ef:f0:73:e5:23:83:46:4e:75:85:d7:e9:83: ce:8f:e7:4d:92:ad:0e:a0:4f:ce:4b:39:45:55:9b:ad:10:72: 70:d0:ba:45:2d:4a:ce:ac:2d:0c:ae:90:a8:06:24:8e:98:af: fd:0e:e0:95:cb:b1:96:7d:2e:de:ce:ca:1a:72:23:88:2a:73: 19:84:48:81:7d:75:fc:2f:ea:45:ce:75:b8:30:d2:7f:1e:bb: ed:56:48:5f:98:e0:b4:3b:46:1d:70:d8:30:8f:56:cd:33:b0: 21:5a:eb:e0:9b:8d:49:fd:77:4f:d7:ba:87:2c:60:a3:95:6e: ba:d8:ba:96:2b:8b:03:18:02:d7:f0:96:31:15:c9:4c:c4:e0: 06:3d:6f:3b:0d:d0:77:2d:f8:32:8c:4e:2f:69:94:bf:ec:a2: d2:ee:93:4f:bf:40:30:23:1b:c0:59:5b:ae:0a:2d:88:01:98: 0e:79:52:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEeEctMKq06iydb0gnjEfUrERI8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA5MjcxNjA1MDVaFw0yNjA5MzAyMzMyMDVaMDMxMTAvBgNV BAMTKEQ5MDNGNDREN0JENDQwMEQwMkM4QTFGMDA2MDIyNUNENTlCRkM5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLctWPUSZqg8F1OIW2XMZIVdo XD5FDXwgwWx+4Bp4K6EZeYDDgZdn8YHbw6rIt+I+Rz0j4tx8sJtLFTLhsvKQwqda Hp+WlFPwwuP5kByWjdLLUkevUKs0cvTq0EN6pCapO+NNzFKXH5rb6pbk3GqdmlPe L2phxwbTnjfDBY4AJId0a7tnLq8k+yugiuhlIlpXOecYHGBFWVgj8msqjdWqL9oq SDFqaE18sCrI0cryzv6JRDFaCytpTgPNzAp8gYrHXaKT4dYurMdqfDevFTQPOvZM UiU9jMzjo3wkxxeKKClSJJScDNqt8AScTuSIdZulUFHtG7mL8FFjGOeAPX8nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2QP0TXvUQA0CyKHwBgIlzVm/ybowHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5GsWuMVqoiy IBp1vvvOHgfwtjpl1s9KOXY8P0+lp7AAHtoV3WslNdv6Ob/AmTD0qm2jiiJVJYL5 MNPfJVo0Dbn0v+H5UujYZypb0N7v8HPlI4NGTnWF1+mDzo/nTZKtDqBPzks5RVWb rRBycNC6RS1KzqwtDK6QqAYkjpiv/Q7glcuxln0u3s7KGnIjiCpzGYRIgX11/C/q Rc51uDDSfx677VZIX5jgtDtGHXDYMI9WzTOwIVrr4JuNSf13T9e6hyxgo5Vuuti6 liuLAxgC1/CWMRXJTMTgBj1vOw3Qdy34MoxOL2mUv+yi0u6TT79AMCMbwFlbrgot iAGYDnlSJw== -----END CERTIFICATE-----Generated at Tue Sep 29 00:00:35 2026 by rpki-client