$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: +No0A8YLZWJvNHFqJqSLLYwKOWhI75TlnDhx0Mvd5JE= Subject key identifier: D1:85:84:2F:81:5D:13:BF:9C:39:32:12:0B:00:10:C7:4C:DF:1C:DE Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 11D34525A9B541551BED01A233029428589D169F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 02 Signing time: Thu 16 Apr 2026 05:55:34 +0000 Manifest this update: Thu 16 Apr 2026 05:50:34 +0000 Manifest next update: Fri 17 Apr 2026 07:08:34 +0000 Files and hashes: 1: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 2: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 3: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: 7bBW2rkHHgacHGQ/sYocVFp9NtTM1FixwYign1khg8Q=) 4: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 5: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 6: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 7: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 8: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 9: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 07:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d3:45:25:a9:b5:41:55:1b:ed:01:a2:33:02:94:28:58:9d:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Apr 16 05:50:34 2026 GMT Not After : Apr 17 07:08:34 2026 GMT Subject: CN=D185842F815D13BF9C3932120B0010C74CDF1CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:50:d7:24:85:3d:6a:90:41:8e:29:80:e6: b5:06:1d:0d:b2:4f:48:1b:1e:f8:00:fd:fc:4a:ee: 3c:14:e2:3a:15:0f:a5:fa:1a:3e:3b:de:03:32:7f: ab:93:46:8b:73:1c:81:7b:04:06:36:ab:22:d7:b3: 24:e4:a5:35:23:8f:bf:c4:fa:0e:79:d6:32:a0:ff: 5d:5f:f7:02:17:62:54:f7:e7:b2:5d:5b:a2:06:43: 36:7e:6a:5d:61:84:cc:cb:a6:66:ed:9b:88:04:97: 11:bc:12:d5:9e:c6:86:dc:0d:ff:4d:c8:e6:9a:3e: e1:4d:45:56:81:01:06:6c:9b:8f:57:69:de:b3:d0: 65:34:5d:cf:0c:3e:1b:12:14:25:e5:32:29:7d:fd: d7:e3:4f:2f:4a:75:16:a6:83:bd:65:7b:e3:96:89: 94:62:e4:a7:65:28:6d:f7:32:fb:3a:f9:ca:98:ba: 4b:d4:ab:c1:21:d8:6d:de:07:ab:eb:a6:2a:7a:59: e7:09:4a:96:bc:ab:43:67:8d:71:51:ae:20:b8:c8: ca:eb:e8:a3:e6:e5:d5:90:83:a0:b9:d8:8f:f2:52: 0d:a8:1d:8d:62:3d:06:c8:9e:be:64:b9:59:49:b5: 46:49:a3:98:76:bf:41:bc:22:66:70:e2:b7:a3:42: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:85:84:2F:81:5D:13:BF:9C:39:32:12:0B:00:10:C7:4C:DF:1C:DE X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:28:2b:75:8e:0e:67:43:71:da:4c:55:19:f6:1c:98:f9:9a: a6:f8:3f:0c:c3:ba:5f:63:63:20:19:d5:4f:e0:78:0a:d0:d5: 24:31:22:d6:88:c7:3d:75:b0:b8:a0:9c:94:8e:0c:67:52:02: 27:c9:e2:6f:bc:b5:5d:ff:99:4e:4f:8e:51:1b:48:e9:4c:93: 55:c2:70:f8:32:d6:c9:55:00:e3:2e:d9:5c:72:23:6c:5e:ae: 03:d8:0d:8d:a0:60:8d:4b:ae:df:58:c3:44:87:db:78:d8:ea: 71:c8:39:0b:e5:6a:10:f9:c6:21:a4:93:8c:5c:b5:2b:03:d9: 1c:2e:7d:c1:19:25:d2:3e:b0:05:07:61:33:66:35:56:69:69: da:b4:3e:b6:1e:d2:52:26:50:61:a0:c5:09:d0:de:21:f9:4b: 7a:75:6d:29:63:da:48:10:10:7f:73:46:ea:1a:b8:94:a1:94: 13:5e:27:6a:53:4a:df:5d:04:55:a9:45:eb:11:22:12:b3:f3: c2:e8:0f:5c:85:6c:33:0b:c3:62:e1:a8:fc:58:54:74:a2:cd: 4c:78:b2:85:02:fc:a6:76:21:68:f0:70:3d:c4:ea:be:bc:34: 45:29:3f:a0:4a:06:24:5f:6c:86:ff:08:f3:83:0c:46:18:df: 61:31:ae:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEdNFJam1QVUb7QGiMwKUKFidFp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA0MTYwNTUwMzRaFw0yNjA0MTcwNzA4MzRaMDMxMTAvBgNV BAMTKEQxODU4NDJGODE1RDEzQkY5QzM5MzIxMjBCMDAxMEM3NENERjFDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvx1DXJIU9apBBjimA5rUGHQ2y T0gbHvgA/fxK7jwU4joVD6X6Gj473gMyf6uTRotzHIF7BAY2qyLXsyTkpTUjj7/E +g551jKg/11f9wIXYlT357JdW6IGQzZ+al1hhMzLpmbtm4gElxG8EtWexobcDf9N yOaaPuFNRVaBAQZsm49Xad6z0GU0Xc8MPhsSFCXlMil9/dfjTy9KdRamg71le+OW iZRi5KdlKG33Mvs6+cqYukvUq8Eh2G3eB6vrpip6WecJSpa8q0NnjXFRriC4yMrr 6KPm5dWQg6C52I/yUg2oHY1iPQbInr5kuVlJtUZJo5h2v0G8ImZw4rejQvHtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0YWEL4FdE7+cOTISCwAQx0zfHN4wHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGigrdY4OZ0Nx 2kxVGfYcmPmapvg/DMO6X2NjIBnVT+B4CtDVJDEi1ojHPXWwuKCclI4MZ1ICJ8ni b7y1Xf+ZTk+OURtI6UyTVcJw+DLWyVUA4y7ZXHIjbF6uA9gNjaBgjUuu31jDRIfb eNjqccg5C+VqEPnGIaSTjFy1KwPZHC59wRkl0j6wBQdhM2Y1Vmlp2rQ+th7SUiZQ YaDFCdDeIflLenVtKWPaSBAQf3NG6hq4lKGUE14nalNK310EValF6xEiErPzwugP XIVsMwvDYuGo/FhUdKLNTHiyhQL8pnYhaPBwPcTqvrw0RSk/oEoGJF9shv8I84MM RhjfYTGuBg== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:26 2026 by rpki-client