$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: g0l3rXe3eNMDxIxeyFuvMhuUjeuQy5ze3pZLS9feLrQ= Subject key identifier: DE:5B:53:FD:1B:B3:2C:0B:08:2E:EB:65:E7:A6:13:4D:14:16:50:A0 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 1965BCD3FDF1458E088B8E8380EF74C4B2297B0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 56 Signing time: Sat 13 Jun 2026 17:41:59 +0000 Manifest this update: Sat 13 Jun 2026 17:36:59 +0000 Manifest next update: Sun 14 Jun 2026 20:00:59 +0000 Files and hashes: 1: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 2: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 3: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 4: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 5: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 6: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 7: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 8: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 9: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 10: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 11: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 12: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: ha4mTNJedP7eGIoVxjCpPbbfwYTvRbg51CUzLMTWaI0=) 13: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 14: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 15: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 16: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 17: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 18: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 19: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 20: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 21: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 22: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 23: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:65:bc:d3:fd:f1:45:8e:08:8b:8e:83:80:ef:74:c4:b2:29:7b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jun 13 17:36:59 2026 GMT Not After : Jun 14 20:00:59 2026 GMT Subject: CN=DE5B53FD1BB32C0B082EEB65E7A6134D141650A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:27:47:be:cd:17:e7:b8:75:66:11:74:ef: 92:26:d9:4a:81:8f:8b:07:1c:ac:1d:da:a6:fa:7a: 49:73:f6:19:31:16:8c:4f:40:54:fc:da:44:4b:0e: 44:7c:2c:a5:ac:77:5b:65:ee:af:a0:47:5e:dd:2e: 76:96:2f:2e:8b:3d:ea:98:85:42:b6:03:7b:06:8d: 7d:f8:6d:93:51:e1:e5:a3:f1:9a:6c:5f:c6:46:39: a1:a0:8b:06:81:d5:18:44:42:91:f3:a0:a7:fb:7d: 5e:b2:b4:47:09:e5:58:83:3e:ab:90:75:f9:ff:43: ab:d5:f8:39:d6:bc:fe:92:57:16:81:48:b4:44:37: 0b:ea:f4:b4:34:76:b7:45:e6:34:ab:d5:bb:8e:8f: 1b:39:e7:99:0e:87:60:c9:63:e3:92:83:42:05:04: c9:33:e9:d3:6d:e9:40:f3:07:74:bb:8f:dd:d3:29: bb:fc:1c:95:76:9c:3c:28:2d:3b:70:6c:d2:b5:52: c8:9d:fe:af:fc:20:62:91:d4:0c:bb:bd:0a:71:2e: a4:08:a6:dc:ee:63:38:f9:d0:d0:33:4b:34:ee:20: e7:76:67:b6:53:cb:ab:28:c4:77:c8:70:81:97:45: 57:c0:2a:f4:d6:5a:91:00:99:27:46:04:dc:0e:7c: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:53:FD:1B:B3:2C:0B:08:2E:EB:65:E7:A6:13:4D:14:16:50:A0 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:42:ba:f9:a5:05:5f:89:8e:15:a6:2d:a2:2a:2b:ac:33: e3:5f:5e:99:7b:be:7b:41:46:75:af:35:d7:f0:da:cc:95:8b: a3:0c:0b:96:cd:7c:07:08:85:0b:22:9a:cb:a8:57:fb:af:3c: a3:dd:6a:f3:cd:0f:69:ab:ab:19:1b:45:29:0d:70:62:c6:b6: 79:d3:42:f9:23:e2:a8:1f:c1:e1:46:92:3d:56:79:62:6b:62: 9d:3f:b6:c9:1f:cc:ea:ca:1b:14:78:02:52:06:99:12:52:82: 9a:bb:e0:9b:81:c1:1a:b8:4f:54:9e:1b:bd:7b:52:c5:11:c2: bb:ed:9e:a8:8c:24:18:09:31:0b:77:68:3d:97:2e:7a:77:41: 41:0d:f4:e8:23:31:31:6e:eb:58:7c:71:20:17:9a:a8:6f:fe: 89:5c:71:d8:9b:db:ff:97:12:60:5b:a4:0a:3a:2e:de:1c:1d: b1:09:67:a9:e3:47:02:95:e1:15:ae:51:13:c0:cf:af:dc:30: 5c:82:c5:a8:4d:64:d1:21:26:b5:f6:5e:0e:55:99:a6:bf:4f: 20:55:57:b0:8f:ad:b3:0e:ea:3c:ad:06:f3:f3:e6:a7:45:35: ea:2d:ed:da:39:ff:a1:96:a8:6d:b1:4b:03:85:93:ef:90:87: d0:b1:b0:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGWW80/3xRY4Ii46DgO90xLIpew4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA2MTMxNzM2NTlaFw0yNjA2MTQyMDAwNTlaMDMxMTAvBgNV BAMTKERFNUI1M0ZEMUJCMzJDMEIwODJFRUI2NUU3QTYxMzREMTQxNjUwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9CdHvs0X57h1ZhF075Im2UqB j4sHHKwd2qb6eklz9hkxFoxPQFT82kRLDkR8LKWsd1tl7q+gR17dLnaWLy6LPeqY hUK2A3sGjX34bZNR4eWj8ZpsX8ZGOaGgiwaB1RhEQpHzoKf7fV6ytEcJ5ViDPquQ dfn/Q6vV+DnWvP6SVxaBSLRENwvq9LQ0drdF5jSr1buOjxs555kOh2DJY+OSg0IF BMkz6dNt6UDzB3S7j93TKbv8HJV2nDwoLTtwbNK1Usid/q/8IGKR1Ay7vQpxLqQI ptzuYzj50NAzSzTuIOd2Z7ZTy6soxHfIcIGXRVfAKvTWWpEAmSdGBNwOfOUtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3ltT/RuzLAsILutl56YTTRQWUKAwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgZCuvmlBV+J jhWmLaIqK6wz419emXu+e0FGda811/DazJWLowwLls18BwiFCyKay6hX+688o91q 880PaaurGRtFKQ1wYsa2edNC+SPiqB/B4UaSPVZ5YmtinT+2yR/M6sobFHgCUgaZ ElKCmrvgm4HBGrhPVJ4bvXtSxRHCu+2eqIwkGAkxC3doPZcuendBQQ306CMxMW7r WHxxIBeaqG/+iVxx2Jvb/5cSYFukCjou3hwdsQlnqeNHApXhFa5RE8DPr9wwXILF qE1k0SEmtfZeDlWZpr9PIFVXsI+tsw7qPK0G8/Pmp0U16i3t2jn/oZaobbFLA4WT 75CH0LGw4A== -----END CERTIFICATE-----Generated at Sun Jun 14 01:09:57 2026 by rpki-client