$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: 7PZ9+J/P4aCQt5npfDnmRWKn6oh3GrLGcDgN62O7+dI= Subject key identifier: 60:2C:5B:F1:67:F9:88:0C:1B:A5:88:2B:F3:BF:54:DF:99:29:E5:CD Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 1DCDD0C2C3F047553386B294369149A03B06DC6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: 02 Signing time: Thu 16 Apr 2026 09:28:45 +0000 Manifest this update: Thu 16 Apr 2026 09:23:45 +0000 Manifest next update: Fri 17 Apr 2026 09:56:45 +0000 Files and hashes: 1: 32372e35302e3139322e302f31382d3138203d3e2030.roa (hash: MBb7AzieE/TA+26kXDcbcXdRl3K8Ikq6r5KvdQDFoiY=) 2: 32372e35302e3132382e302f32322d3232203d3e2030.roa (hash: x6i24AwJJsQi1lgr8WLwt4l7GV0ZS3/lO7FLLrNvE18=) 3: 32372e35302e3133332e302f32342d3234203d3e2030.roa (hash: HlhozveWgPOiNPsMsqsd754Fhtmj0sLvf7MUs3W/fdI=) 4: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 5: 32372e35302e3134342e302f32302d3230203d3e2030.roa (hash: f6/1rN/k+RxrEp288MaxcleNJOjavS0msZKkyP9Jhb0=) 6: 32372e35302e3136302e302f31392d3139203d3e2030.roa (hash: XUJ0r7P+ioJawumRdY6EAZqogznSukLGZLg//JZTnM0=) 7: 32372e35302e3133342e302f32332d3233203d3e2030.roa (hash: IsUhBWt4jf7sLKyNbMOzbGiRoHIEXUUXqamC964pVAs=) 8: 32372e35302e3133362e302f32312d3231203d3e2030.roa (hash: 8yvBpZdPwghm09OameVYGOgErD7A05NEiOdwISfxHPw=) 9: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: utMj6ccRzEEasNgH57GDXiG3TFIdgpz/VrptgyA6Qts=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cd:d0:c2:c3:f0:47:55:33:86:b2:94:36:91:49:a0:3b:06:dc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Apr 16 09:23:45 2026 GMT Not After : Apr 17 09:56:45 2026 GMT Subject: CN=602C5BF167F9880C1BA5882BF3BF54DF9929E5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:c0:6e:d9:08:60:d6:a0:02:6b:f9:ec:43: 4f:23:be:b8:af:89:0b:48:89:71:84:84:6d:65:20: 13:30:d7:08:ab:aa:d0:f7:10:ed:22:e0:59:b3:b5: 89:a9:6d:b2:39:c1:57:ea:58:39:79:d8:54:4a:9d: 2d:6f:49:ec:c9:af:27:c6:01:1a:6e:17:d5:2e:f4: 73:d1:24:5a:f8:5b:85:0a:c0:9c:75:56:6e:6a:dd: 84:af:ec:58:86:c2:66:ef:e3:e0:d9:ba:ee:4c:7f: 31:98:6f:51:df:19:bf:5a:4a:7f:21:00:ae:35:9d: 4c:3f:95:e7:b3:3b:02:76:6f:9a:4f:10:d0:d0:e8: 7a:3e:7e:11:b6:21:8d:fa:ac:b1:5c:8f:75:2b:00: 5f:14:2c:09:a8:55:fe:dd:69:4f:ba:a5:58:ec:44: 09:bb:d3:8f:bc:b9:5d:06:e9:9d:bd:31:78:de:ff: 32:55:67:b4:ec:00:4e:91:52:79:43:85:75:04:4c: 6a:1b:74:84:8a:ad:d9:fb:2b:ae:9b:43:28:1b:a8: 01:32:13:c0:49:74:23:9b:ef:e9:52:84:6d:1b:a2: cc:31:65:cc:df:6e:99:b3:aa:5b:18:9d:80:7d:a9: c0:9a:a2:7a:51:d3:6a:c2:8c:56:82:19:54:1a:35: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2C:5B:F1:67:F9:88:0C:1B:A5:88:2B:F3:BF:54:DF:99:29:E5:CD X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:19:13:79:72:a7:de:5f:df:a9:7b:a4:b2:42:f5:1f:8e: c4:9b:b3:9f:77:47:00:c1:f7:8c:32:b5:88:d5:13:92:3f:a2: 92:e7:59:2b:3f:44:fa:35:c3:cf:6e:2d:eb:1e:82:ea:58:c7: 4e:d7:af:68:ad:48:ca:82:e7:b0:ea:a3:5a:9c:be:2e:48:80: 12:76:e0:20:ab:34:a0:99:ed:17:cc:64:e8:ba:12:4b:5a:88: 70:ef:90:18:70:18:fa:c3:7d:86:a7:a5:70:ae:c2:9e:76:08: ed:4e:76:72:26:37:df:fb:b5:10:c5:ce:9b:fc:a7:94:de:42: 6b:70:9a:f0:aa:67:c7:77:0e:3d:7b:13:82:67:84:d1:20:f4: de:80:48:7f:95:78:86:c8:20:35:9e:22:e1:47:72:37:33:0b: f8:c5:0d:92:e9:2d:52:f5:54:5f:6b:07:9f:35:a0:49:b3:ad: 1d:02:7d:89:a6:2c:e4:2e:02:87:94:45:ec:49:55:5f:35:97: 67:52:30:37:88:05:56:49:49:07:aa:e9:23:bd:e8:03:87:da: 15:54:dd:a2:4d:cc:22:f3:e7:0a:b0:fc:0d:d0:74:63:7c:99: 1e:cb:65:10:8c:e2:4e:11:e5:9a:e3:b8:af:ea:ca:39:2a:a0: 15:09:c1:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHc3QwsPwR1UzhrKUNpFJoDsG3G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA0MTYwOTIzNDVaFw0yNjA0MTcwOTU2NDVaMDMxMTAvBgNV BAMTKDYwMkM1QkYxNjdGOTg4MEMxQkE1ODgyQkYzQkY1NERGOTkyOUU1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHsBu2Qhg1qACa/nsQ08jvriv iQtIiXGEhG1lIBMw1wirqtD3EO0i4FmztYmpbbI5wVfqWDl52FRKnS1vSezJryfG ARpuF9Uu9HPRJFr4W4UKwJx1Vm5q3YSv7FiGwmbv4+DZuu5MfzGYb1HfGb9aSn8h AK41nUw/leezOwJ2b5pPENDQ6Ho+fhG2IY36rLFcj3UrAF8ULAmoVf7daU+6pVjs RAm704+8uV0G6Z29MXje/zJVZ7TsAE6RUnlDhXUETGobdISKrdn7K66bQygbqAEy E8BJdCOb7+lShG0boswxZczfbpmzqlsYnYB9qcCaonpR02rCjFaCGVQaNZp3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYCxb8Wf5iAwbpYgr879U35kp5c0wHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbgZE3lyp95f 36l7pLJC9R+OxJuzn3dHAMH3jDK1iNUTkj+ikudZKz9E+jXDz24t6x6C6ljHTtev aK1IyoLnsOqjWpy+LkiAEnbgIKs0oJntF8xk6LoSS1qIcO+QGHAY+sN9hqelcK7C nnYI7U52ciY33/u1EMXOm/ynlN5Ca3Ca8Kpnx3cOPXsTgmeE0SD03oBIf5V4hsgg NZ4i4UdyNzML+MUNkuktUvVUX2sHnzWgSbOtHQJ9iaYs5C4Ch5RF7ElVXzWXZ1Iw N4gFVklJB6rpI73oA4faFVTdok3MIvPnCrD8DdB0Y3yZHstlEIziThHlmuO4r+rK OSqgFQnBTA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:46 2026 by rpki-client