$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: 29wrjq5LXNT4y1KsSa+/F+l0e1/MJBgf6vx+7B4Yvm8= Subject key identifier: D8:14:CF:9A:83:F5:8B:CF:2B:9D:93:5A:19:24:39:CC:B9:D4:F8:53 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 1D992B601AF2278C2E39D66397ECAEF8B7381EF7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 92 Signing time: Tue 28 Jul 2026 21:12:47 +0000 Manifest this update: Tue 28 Jul 2026 21:07:47 +0000 Manifest next update: Wed 29 Jul 2026 22:08:47 +0000 Files and hashes: 1: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 2: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 3: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 4: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: Nr8tj/d0Pbll4f6VTgZoFjEkkXkpmeGKjXCy5SX0z7U=) 5: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 6: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 7: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 8: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 9: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 10: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 11: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 12: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 13: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 14: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 15: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 16: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 17: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 18: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 19: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 20: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 21: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 22: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 23: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:99:2b:60:1a:f2:27:8c:2e:39:d6:63:97:ec:ae:f8:b7:38:1e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jul 28 21:07:47 2026 GMT Not After : Jul 29 22:08:47 2026 GMT Subject: CN=D814CF9A83F58BCF2B9D935A192439CCB9D4F853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:f4:cc:40:d0:fc:9b:06:60:26:97:1d:00: 49:5f:e3:1d:37:03:30:eb:72:f2:68:56:63:18:f2: 46:eb:c9:0f:e4:e7:e7:da:ae:0c:44:98:e3:76:f5: ed:91:ba:8a:04:86:1f:77:99:bd:ee:46:5c:e6:6c: 27:3b:d3:9c:05:1b:40:01:94:d1:99:f5:f9:1f:72: 2c:f1:34:0c:b4:82:f9:6c:57:a4:94:01:ee:90:6b: b4:7a:2f:fd:d3:ca:d8:66:c8:6a:80:e5:a8:93:f9: 23:91:2e:5d:69:f7:5a:03:6a:be:76:99:0d:d4:9e: df:c6:c9:78:34:a0:56:91:6a:5a:c8:45:a8:bb:95: 0b:33:47:60:c5:58:db:94:bd:cf:c2:e4:50:e8:92: ce:f3:70:22:e3:69:27:82:97:34:ae:b0:c7:96:52: 03:32:a4:93:c6:4d:8e:1e:8d:5b:33:a2:6a:d1:4f: 0d:1e:66:89:f1:47:2a:c9:d7:47:73:5d:f6:9b:8f: 4f:4c:d8:8d:ec:5c:29:8a:fa:2a:18:69:6b:bd:55: 0a:4a:b8:e6:2e:46:ac:f2:6f:c6:b3:53:5b:9f:35: d6:3c:a1:7f:00:08:8b:0f:06:3c:8c:87:d2:b5:36: 23:3d:39:c0:21:d6:68:24:04:bc:d8:a5:d2:d2:c8: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:14:CF:9A:83:F5:8B:CF:2B:9D:93:5A:19:24:39:CC:B9:D4:F8:53 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:31:10:ba:40:88:c2:ec:19:e1:17:51:9e:f3:06:4e:67:7d: 3e:1f:98:1d:87:9b:67:36:58:99:19:c1:b2:32:5b:25:70:41: 65:53:6d:aa:bd:0f:8c:e2:0c:bf:a5:9a:c1:3d:bd:eb:e0:a1: 54:8f:5a:b8:b8:f0:ff:a5:02:df:de:43:02:82:6b:49:b9:98: 32:dc:60:ba:ee:d6:ff:3a:7a:52:90:69:75:d2:85:7d:ea:a3: c0:5c:fb:f6:67:d4:85:ba:dd:0a:be:4d:6c:04:3b:1d:54:05: a4:a6:32:ac:df:ff:7b:e3:c2:b4:71:9b:98:9b:d2:d9:e8:e0: 3e:93:25:2b:f3:d3:66:78:e3:26:c2:d0:4a:ea:c2:f4:2e:51: 5a:6b:77:0b:aa:ae:72:26:90:b6:fc:95:e7:82:d4:31:66:c7: 9c:53:9a:6d:af:49:58:5e:94:6d:9f:fc:66:a0:e7:c3:d0:21: 36:a2:cb:f3:a3:58:3d:3e:06:b0:81:08:27:c0:14:94:7a:ce: 59:72:47:2b:5e:0f:44:9a:9f:49:10:6e:e3:33:3d:5a:ca:42: 80:00:81:b7:9e:ed:4d:43:d7:eb:78:5e:4a:a7:25:ba:9b:4f: 48:c1:83:5b:45:9f:28:31:ba:55:26:22:a7:52:d9:4c:2c:ae: 64:32:22:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHZkrYBryJ4wuOdZjl+yu+Lc4HvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA3MjgyMTA3NDdaFw0yNjA3MjkyMjA4NDdaMDMxMTAvBgNV BAMTKEQ4MTRDRjlBODNGNThCQ0YyQjlEOTM1QTE5MjQzOUNDQjlENEY4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwVfTMQND8mwZgJpcdAElf4x03 AzDrcvJoVmMY8kbryQ/k5+fargxEmON29e2RuooEhh93mb3uRlzmbCc705wFG0AB lNGZ9fkfcizxNAy0gvlsV6SUAe6Qa7R6L/3TythmyGqA5aiT+SORLl1p91oDar52 mQ3Unt/GyXg0oFaRalrIRai7lQszR2DFWNuUvc/C5FDoks7zcCLjaSeClzSusMeW UgMypJPGTY4ejVszomrRTw0eZonxRyrJ10dzXfabj09M2I3sXCmK+ioYaWu9VQpK uOYuRqzyb8azU1ufNdY8oX8ACIsPBjyMh9K1NiM9OcAh1mgkBLzYpdLSyBkzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2BTPmoP1i88rnZNaGSQ5zLnU+FMwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozEQukCIwuwZ 4RdRnvMGTmd9Ph+YHYebZzZYmRnBsjJbJXBBZVNtqr0PjOIMv6WawT296+ChVI9a uLjw/6UC395DAoJrSbmYMtxguu7W/zp6UpBpddKFfeqjwFz79mfUhbrdCr5NbAQ7 HVQFpKYyrN//e+PCtHGbmJvS2ejgPpMlK/PTZnjjJsLQSurC9C5RWmt3C6quciaQ tvyV54LUMWbHnFOaba9JWF6UbZ/8ZqDnw9AhNqLL86NYPT4GsIEIJ8AUlHrOWXJH K14PRJqfSRBu4zM9WspCgACBt57tTUPX63heSqcluptPSMGDW0WfKDG6VSYip1LZ TCyuZDIinA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:43:42 2026 by rpki-client