$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json) Hash identifier: jEHPrA8Cb820EN1GTp7NRBp6XEwOS2+km4H4ELfBLZ0= Subject key identifier: 9A:3F:83:33:77:AF:40:A9:45:42:51:DA:52:BB:B4:EE:D3:19:87:C1 Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 4D6F19C6D339EF79710B75C0F6E953A10522591F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 05:38:28 +0000 Manifest this update: Thu 26 Mar 2026 05:33:28 +0000 Manifest next update: Fri 27 Mar 2026 07:22:28 +0000 Files and hashes: 1: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=) 2: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=) 3: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=) 4: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=) 5: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=) 6: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=) 7: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=) 8: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: K9qjg0hUj8oDI5YVKOGCvutUaoIJYRY84L//Vp7WH3E=) 9: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=) 10: 32372e302e3230372e302f32342d3234203d3e203633363739.roa (hash: FRkm9JB/rrai+gOwgOa3Nip6NXE5SBOt5jTPPdgIVnk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6f:19:c6:d3:39:ef:79:71:0b:75:c0:f6:e9:53:a1:05:22:59:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Mar 26 05:33:28 2026 GMT Not After : Mar 27 07:22:28 2026 GMT Subject: CN=9A3F833377AF40A9454251DA52BBB4EED31987C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:2f:ae:9d:50:d1:c6:c2:7c:39:a0:c8:5e: 23:48:12:92:e2:50:14:fe:e3:70:c4:43:94:e8:6f: 94:56:70:0f:ed:14:8c:12:73:db:1a:76:e7:4a:f8: ef:70:cc:61:44:26:34:9e:fe:7a:ed:52:95:9c:cd: a1:ba:fe:90:22:13:c6:c8:16:fe:3e:6e:76:95:b3: 49:37:78:b3:4d:4b:78:d2:53:c6:5e:93:16:c3:67: 52:0d:6b:34:65:3d:f6:a8:71:64:a2:fe:db:56:d3: c8:e3:cc:1b:71:8e:8a:81:92:f5:42:f4:97:3e:b5: b9:63:04:d2:7d:8c:6a:5c:83:99:8e:8c:d2:53:db: c7:c0:5d:87:aa:b9:6d:0b:2b:66:06:84:6e:45:fa: 25:14:cf:3c:dc:3d:68:b7:4f:0a:9d:ad:ae:d8:f0: 0b:a5:f1:a8:63:af:ee:dd:17:cd:aa:ed:6d:8f:3f: de:e3:d0:36:8e:38:0a:cc:53:9f:50:dd:d4:15:24: 75:42:be:6d:c1:0a:f0:e5:b4:39:83:46:74:d5:37: ad:e5:f1:e9:f3:3c:19:20:61:f7:2f:59:08:ea:f9: b1:23:d5:44:ba:3f:1c:83:cc:cf:86:12:22:b1:c3: 8b:32:6d:b2:f4:a7:4a:18:cd:75:69:7a:d4:6e:a4: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3F:83:33:77:AF:40:A9:45:42:51:DA:52:BB:B4:EE:D3:19:87:C1 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:72:6b:db:c8:20:74:82:fe:f5:52:8f:a9:e8:c2:2d:0b:03: 59:2e:22:09:bc:24:c8:ab:b3:5d:43:ca:c8:83:1e:2c:70:64: 42:c1:08:f8:ea:68:30:d6:ad:72:ac:cf:fe:ff:3b:c5:64:31: cd:f5:8e:c7:7e:ed:8f:d8:b0:74:66:4a:f8:7b:6e:a3:4c:28: df:c1:0b:e6:46:13:2b:59:91:a0:58:09:a0:45:e3:2e:7e:87: 43:cd:4c:3b:cf:77:ed:58:16:89:78:f6:17:e8:d9:c6:54:9f: ff:11:2e:30:2f:6b:90:e4:4a:2d:f5:ee:36:7e:e5:a2:83:fe: b6:43:9b:20:de:2c:82:1f:5e:ff:77:5f:8d:cf:81:e6:bc:2b: e5:4b:e5:8f:f7:37:e9:e1:87:4c:0a:4c:9f:70:cf:cf:92:fb: fa:ba:4e:34:56:ff:24:81:e8:92:5f:b7:6b:b6:85:47:a0:b5: 40:6e:cb:84:16:58:bf:aa:e1:30:de:e8:41:ff:b2:84:af:95: f0:9f:02:6b:19:fd:3b:c9:78:71:cd:98:1e:e0:b1:29:11:60: 09:c8:f0:c4:e1:13:44:c5:e0:53:3c:ed:b7:87:15:d1:3c:58: 99:2c:69:61:69:a6:b5:48:2c:c9:ae:99:19:f4:b8:de:50:76: 7e:0a:f0:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTW8ZxtM573lxC3XA9ulToQUiWR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjAzMjYwNTMzMjhaFw0yNjAzMjcwNzIyMjhaMDMxMTAvBgNV BAMTKDlBM0Y4MzMzNzdBRjQwQTk0NTQyNTFEQTUyQkJCNEVFRDMxOTg3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5y+unVDRxsJ8OaDIXiNIEpLi UBT+43DEQ5Tob5RWcA/tFIwSc9sadudK+O9wzGFEJjSe/nrtUpWczaG6/pAiE8bI Fv4+bnaVs0k3eLNNS3jSU8ZekxbDZ1INazRlPfaocWSi/ttW08jjzBtxjoqBkvVC 9Jc+tbljBNJ9jGpcg5mOjNJT28fAXYequW0LK2YGhG5F+iUUzzzcPWi3Twqdra7Y 8Aul8ahjr+7dF82q7W2PP97j0DaOOArMU59Q3dQVJHVCvm3BCvDltDmDRnTVN63l 8enzPBkgYfcvWQjq+bEj1US6PxyDzM+GEiKxw4sybbL0p0oYzXVpetRupOgvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmj+DM3evQKlFQlHaUru07tMZh8EwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3MjE4NTkvMC85QjIyQzE5RDg0MkU0 NUFBODQ0MzkzNjY2OTRFNEM4MjhDMzA5Q0VFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3Jr28ggdIL+ 9VKPqejCLQsDWS4iCbwkyKuzXUPKyIMeLHBkQsEI+OpoMNatcqzP/v87xWQxzfWO x37tj9iwdGZK+Htuo0wo38EL5kYTK1mRoFgJoEXjLn6HQ81MO8937VgWiXj2F+jZ xlSf/xEuMC9rkORKLfXuNn7looP+tkObIN4sgh9e/3dfjc+B5rwr5Uvlj/c36eGH TApMn3DPz5L7+rpONFb/JIHokl+3a7aFR6C1QG7LhBZYv6rhMN7oQf+yhK+V8J8C axn9O8l4cc2YHuCxKRFgCcjwxOETRMXgUzztt4cV0TxYmSxpYWmmtUgsya6ZGfS4 3lB2fgrwzQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:20 2026 by rpki-client