$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: SB/+smuC1b7KPAl5rR0ZSBr8/BM6c4hruPdSJwgd4QE= Subject key identifier: 42:87:33:71:49:8A:9F:C2:89:00:AE:FD:E8:B4:0A:AA:6F:68:C2:79 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 43925A965BB8C996EC569C93C00D6AEC75587671 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 8C Signing time: Wed 29 Jul 2026 06:08:40 +0000 Manifest this update: Wed 29 Jul 2026 06:03:40 +0000 Manifest next update: Thu 30 Jul 2026 07:30:40 +0000 Files and hashes: 1: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 2: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 3: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 4: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 5: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 6: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 7: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 8: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 9: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: 6f+3ul8B4mQxZoJ8dOG9YBZdu2eD9fm4Uy6Qr50SpTY=) 10: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:5a:96:5b:b8:c9:96:ec:56:9c:93:c0:0d:6a:ec:75:58:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Jul 29 06:03:40 2026 GMT Not After : Jul 30 07:30:40 2026 GMT Subject: CN=42873371498A9FC28900AEFDE8B40AAA6F68C279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:a5:54:1e:d8:3e:f4:1d:c7:2a:e7:71:52: 14:fc:db:0a:20:9d:65:96:86:04:28:d4:61:64:be: e4:bb:db:7a:05:11:84:81:51:38:2e:07:7e:18:95: 3d:aa:1a:56:92:ff:28:00:67:f5:5f:96:cf:e5:84: 70:bf:5a:ff:4c:d5:17:1f:e7:ff:29:8a:23:40:41: e2:c7:75:21:1a:7d:c8:96:a0:97:92:21:16:53:cb: 0b:b1:9a:2b:79:af:29:3b:27:61:46:f0:1d:e2:89: 32:6b:5b:51:78:94:6e:31:bd:74:f4:2d:c3:c6:12: 68:64:75:ae:93:c4:b4:b7:8b:95:bd:68:7e:3c:2b: a7:cb:d6:76:69:c9:93:46:a7:4e:ad:df:24:69:ef: 67:35:50:42:4b:af:67:42:4c:9b:5f:05:3d:ba:db: 6d:bb:3e:50:c9:cf:ec:d4:2f:7f:9f:02:a9:c2:e7: 76:32:d9:27:66:05:f8:f4:75:5a:0d:f9:e7:2d:37: 31:ae:58:7a:9a:56:0f:17:f4:d3:9e:f9:d4:d2:97: 7b:b3:f1:f6:9d:f4:c1:a8:ae:8a:af:8e:69:1b:29: 75:53:b2:b5:14:9c:d9:17:17:85:64:01:0d:12:83: d2:86:c3:6b:c1:cc:dd:34:f9:89:bd:9e:60:6d:6f: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:33:71:49:8A:9F:C2:89:00:AE:FD:E8:B4:0A:AA:6F:68:C2:79 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:f7:d9:5b:8d:5d:d8:0f:ff:b1:27:2a:d9:a8:06:c3:69: 73:ac:d6:58:4f:d3:4e:6b:b9:d5:1d:47:48:88:88:d4:7e:97: 8c:66:81:b1:e0:42:11:c1:3f:8b:df:90:d9:6f:3d:55:e8:62: e2:c6:98:37:75:e8:f1:3d:0e:e7:c5:41:c5:80:13:53:9c:97: 8d:64:df:ff:3f:53:1b:cb:3b:90:f7:20:5a:52:d3:3f:8d:a1: ee:45:c0:0a:f1:da:d3:48:8e:5a:ef:c2:22:9d:17:ef:3d:b1: cd:3b:7e:7e:9d:9c:16:50:f3:69:95:12:aa:79:02:f9:1c:aa: 5d:ba:da:8e:4f:2f:d8:f8:ec:8d:69:6c:f4:41:b4:21:6f:80: 79:47:0e:91:44:86:89:d7:e6:6d:b3:15:86:c5:fb:95:16:f2: 59:be:89:ab:be:ff:5f:d7:2e:57:e0:65:20:1d:a8:ea:12:d8: c9:12:09:ab:37:46:5f:6a:08:22:7f:38:10:38:77:ea:64:34: 1e:46:b1:09:62:d5:99:6b:25:96:da:bc:06:27:a2:38:9a:32: ca:c7:f3:8c:b7:c3:81:07:8a:35:ee:ff:1c:1c:15:bb:9c:3e: cf:9a:c9:d5:9b:6b:7f:eb:f4:3d:0f:fe:2e:e9:79:13:f4:3e: fe:e8:11:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ5Jallu4yZbsVpyTwA1q7HVYdnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA3MjkwNjAzNDBaFw0yNjA3MzAwNzMwNDBaMDMxMTAvBgNV BAMTKDQyODczMzcxNDk4QTlGQzI4OTAwQUVGREU4QjQwQUFBNkY2OEMyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZKVUHtg+9B3HKudxUhT82wog nWWWhgQo1GFkvuS723oFEYSBUTguB34YlT2qGlaS/ygAZ/Vfls/lhHC/Wv9M1Rcf 5/8piiNAQeLHdSEafciWoJeSIRZTywuxmit5ryk7J2FG8B3iiTJrW1F4lG4xvXT0 LcPGEmhkda6TxLS3i5W9aH48K6fL1nZpyZNGp06t3yRp72c1UEJLr2dCTJtfBT26 2227PlDJz+zUL3+fAqnC53Yy2SdmBfj0dVoN+ectNzGuWHqaVg8X9NOe+dTSl3uz 8fad9MGoroqvjmkbKXVTsrUUnNkXF4VkAQ0Sg9KGw2vBzN00+Ym9nmBtb7HLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQoczcUmKn8KJAK796LQKqm9ownkwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACor32VuNXdgP /7EnKtmoBsNpc6zWWE/TTmu51R1HSIiI1H6XjGaBseBCEcE/i9+Q2W89Vehi4saY N3Xo8T0O58VBxYATU5yXjWTf/z9TG8s7kPcgWlLTP42h7kXACvHa00iOWu/CIp0X 7z2xzTt+fp2cFlDzaZUSqnkC+RyqXbrajk8v2PjsjWls9EG0IW+AeUcOkUSGidfm bbMVhsX7lRbyWb6Jq77/X9cuV+BlIB2o6hLYyRIJqzdGX2oIIn84EDh36mQ0Hkax CWLVmWslltq8BieiOJoyysfzjLfDgQeKNe7/HBwVu5w+z5rJ1Ztrf+v0PQ/+Lul5 E/Q+/ugRRA== -----END CERTIFICATE-----Generated at Wed Jul 29 14:18:30 2026 by rpki-client