$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: KsSrD40g3N42mxfB1D+SnekEBWU3ob9tiIhkLNoJYIE= Subject key identifier: 92:AE:DB:12:7B:1F:9E:C7:DA:8F:B9:44:A4:B4:F2:60:FE:DB:EC:80 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 75FDA21960D807E175AD94A0B493FB2DD96888F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: D0 Signing time: Wed 14 Oct 2026 11:54:04 +0000 Manifest this update: Wed 14 Oct 2026 11:49:04 +0000 Manifest next update: Sat 17 Oct 2026 21:16:04 +0000 Files and hashes: 1: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 2: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 3: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 4: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 5: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 6: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 7: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 8: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 9: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 10: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 11: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 12: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 13: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 14: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 15: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: ExzFQQxwN9Y8ZH6ITmnaveSgTHqNIsJ0Lr2tZUGaYDM=) 16: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 17: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 18: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 19: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 20: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 21: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 22: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 23: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fd:a2:19:60:d8:07:e1:75:ad:94:a0:b4:93:fb:2d:d9:68:88:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Oct 14 11:49:04 2026 GMT Not After : Oct 17 21:16:04 2026 GMT Subject: CN=92AEDB127B1F9EC7DA8FB944A4B4F260FEDBEC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:18:95:89:12:4a:2f:40:0c:d8:6b:29:91: 09:40:1d:66:70:a5:a0:af:39:3b:57:0c:8e:c0:b1: 83:53:71:7a:39:c7:8e:4f:4f:17:cb:aa:a6:bb:5a: 48:22:86:7f:1c:e9:80:8e:af:93:5a:69:e0:ca:9a: cd:99:87:cc:18:53:e3:f8:0d:84:e4:57:7c:e6:fc: 41:ef:1f:03:72:80:2e:05:5c:28:64:b4:8e:22:76: e8:69:ed:23:e2:d3:38:80:51:fc:77:48:a8:7d:a7: d8:df:2b:95:70:08:59:f3:a6:30:5d:01:1e:6e:14: 09:a6:01:5e:46:0c:e5:d1:56:68:7a:4d:20:5c:d3: 66:7d:72:9d:31:fc:cd:c5:8c:ba:61:a1:6d:ea:89: a1:5a:99:48:57:35:1a:6b:d3:38:9e:4e:ad:e5:19: 3d:fa:dd:85:4f:32:3c:95:71:cd:e4:18:00:5b:f2: 74:48:4f:16:19:0d:3c:be:aa:b2:00:d1:b3:3f:07: c1:bc:e9:9b:c0:ea:2a:32:c1:91:b0:86:eb:84:87: ce:77:b3:28:c2:5a:6c:af:11:17:fa:6b:40:bd:47: 3b:91:4d:f7:ae:66:2a:fd:a0:28:82:3e:80:24:c9: dd:58:5b:1f:71:37:49:c0:bb:29:d5:af:c8:ea:be: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:DB:12:7B:1F:9E:C7:DA:8F:B9:44:A4:B4:F2:60:FE:DB:EC:80 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7f:45:a4:98:b2:4e:74:7c:98:f3:90:0c:5d:f7:27:ee:17: 23:99:a7:72:40:3f:bf:67:7f:1f:92:63:6c:fd:a4:27:84:c2: 42:ad:08:41:f8:85:c6:0f:4c:82:d8:29:d4:f8:fd:e1:9c:97: 06:a5:d2:d0:92:82:7f:1b:aa:40:0c:6c:f2:97:56:b0:02:ab: 14:f6:df:7e:0a:10:0a:64:bf:4a:2a:dc:9d:d3:8b:dc:3e:1b: c6:5f:d7:28:9e:af:0f:28:0c:aa:b0:d9:8a:ef:a7:e5:68:37: 4e:87:34:f6:ce:8e:e4:a1:6d:f7:23:47:56:dc:57:e0:cd:64: 0f:7a:c3:ff:c5:eb:b3:7e:b8:37:05:f4:4a:eb:55:be:8a:dc: b6:23:72:f4:16:a5:1e:cb:c4:a9:f3:62:7c:37:e0:db:34:7d: a0:6b:6c:f1:ac:f1:1b:5a:a7:ac:c3:f7:f1:46:49:60:07:ef: 93:69:d6:94:f0:25:97:b8:68:da:1b:50:c0:13:aa:eb:14:34: af:d2:f0:99:cc:b3:7d:c9:2d:4b:1f:bb:20:35:db:81:f3:55: e0:83:fa:05:f4:84:92:82:29:47:1f:55:98:cf:04:05:be:33: 4b:94:f4:d9:41:dc:66:70:ce:ef:37:6f:38:aa:ec:9f:dd:39: c3:d5:53:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdf2iGWDYB+F1rZSgtJP7LdloiPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjEwMTQxMTQ5MDRaFw0yNjEwMTcyMTE2MDRaMDMxMTAvBgNV BAMTKDkyQUVEQjEyN0IxRjlFQzdEQThGQjk0NEE0QjRGMjYwRkVEQkVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vxiViRJKL0AM2GspkQlAHWZw paCvOTtXDI7AsYNTcXo5x45PTxfLqqa7Wkgihn8c6YCOr5NaaeDKms2Zh8wYU+P4 DYTkV3zm/EHvHwNygC4FXChktI4iduhp7SPi0ziAUfx3SKh9p9jfK5VwCFnzpjBd AR5uFAmmAV5GDOXRVmh6TSBc02Z9cp0x/M3FjLphoW3qiaFamUhXNRpr0zieTq3l GT363YVPMjyVcc3kGABb8nRITxYZDTy+qrIA0bM/B8G86ZvA6ioywZGwhuuEh853 syjCWmyvERf6a0C9RzuRTfeuZir9oCiCPoAkyd1YWx9xN0nAuynVr8jqvpqXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkq7bEnsfnsfaj7lEpLTyYP7b7IAwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn9FpJiyTnR8 mPOQDF33J+4XI5mnckA/v2d/H5JjbP2kJ4TCQq0IQfiFxg9Mgtgp1Pj94ZyXBqXS 0JKCfxuqQAxs8pdWsAKrFPbffgoQCmS/SircndOL3D4bxl/XKJ6vDygMqrDZiu+n 5Wg3Toc09s6O5KFt9yNHVtxX4M1kD3rD/8Xrs364NwX0SutVvorctiNy9BalHsvE qfNifDfg2zR9oGts8azxG1qnrMP38UZJYAfvk2nWlPAll7ho2htQwBOq6xQ0r9Lw mcyzfcktSx+7IDXbgfNV4IP6BfSEkoIpRx9VmM8EBb4zS5T02UHcZnDO7zdvOKrs n905w9VTmg== -----END CERTIFICATE-----Generated at Thu Oct 15 06:02:46 2026 by rpki-client