$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: fQ2dDjkV/3WOyRubMHjOysJ6/zDwVtulXvAZSptmnU4= Subject key identifier: 5D:E0:A8:26:6C:6D:39:F6:4A:C1:91:59:4B:F7:9A:57:D9:4D:7C:56 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 27E9A4B1BA0D10593CD43422AC9741BBFD5445F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 85 Signing time: Thu 23 Jul 2026 23:34:50 +0000 Manifest this update: Thu 23 Jul 2026 23:29:50 +0000 Manifest next update: Sat 25 Jul 2026 00:44:50 +0000 Files and hashes: 1: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 2: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 3: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 4: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 5: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: 5c9OXKM5MsO4AcerHMRzyBWNa2x2VTKHaPHGwFquxBA=) 6: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 7: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 8: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 9: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 10: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e9:a4:b1:ba:0d:10:59:3c:d4:34:22:ac:97:41:bb:fd:54:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Jul 23 23:29:50 2026 GMT Not After : Jul 25 00:44:50 2026 GMT Subject: CN=5DE0A8266C6D39F64AC191594BF79A57D94D7C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:d1:ea:1c:a3:40:9d:94:16:4e:31:0e:75: 7b:59:51:a1:25:a8:41:32:70:b8:7b:e7:e3:87:13: 7c:00:8f:ba:6f:f6:31:cd:06:4f:95:1e:5e:05:a7: 12:f6:dc:e0:00:fc:35:f8:c5:1a:66:d0:56:07:ff: 12:e1:51:34:3d:38:c9:16:ad:24:81:8a:7e:0a:5d: d1:3c:e9:88:3f:68:81:02:60:97:d9:83:d4:49:ec: 7b:77:53:93:7c:4f:91:68:f5:e1:3a:4b:fe:f6:18: 1e:a6:3b:6d:14:c9:55:ec:49:68:ba:ce:dd:be:9f: b1:9d:a4:3e:03:11:50:99:6a:1d:ef:5a:9c:27:82: 46:14:40:19:4a:6d:5b:8c:3f:2f:bd:06:3b:bc:aa: 8e:2f:f9:68:04:a3:e4:8a:c7:2c:1e:c0:32:ce:04: bf:b8:1b:bc:e9:be:9e:e0:9b:07:07:88:d7:25:3b: 48:a5:40:c6:9c:1f:d4:84:bf:78:43:c5:e4:61:0f: 4f:18:88:e3:fb:86:30:ab:78:56:8a:51:3f:92:c6: c4:72:9b:38:ca:da:88:4a:26:51:a0:5f:38:66:63: f2:ed:e4:50:60:d2:39:60:0a:e1:5f:a8:d7:a5:87: b3:4c:5d:81:bf:e7:54:a6:7e:15:3f:94:55:d2:fd: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E0:A8:26:6C:6D:39:F6:4A:C1:91:59:4B:F7:9A:57:D9:4D:7C:56 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ec:d1:b5:e9:8c:78:12:d3:2a:30:2c:cb:02:bf:aa:df:1c: f2:32:c3:9d:12:db:1e:4e:79:45:8d:9a:b2:d1:15:61:32:eb: e9:9c:77:dd:a3:a3:a5:96:01:82:51:28:c0:bf:34:0b:c1:2f: 3d:67:cc:44:b8:ad:39:09:d1:3c:db:4c:bc:38:19:df:99:cc: 6c:28:0b:e1:86:4b:87:c1:60:56:af:43:d4:b7:81:7c:de:d8: 11:07:4b:0c:86:a3:3e:c6:45:8d:9f:f7:ca:0d:f2:95:75:cc: 35:c3:42:ce:64:da:22:05:b8:60:8d:68:aa:0b:dd:08:64:df: 95:48:de:dd:4a:cf:8b:2f:33:7c:3d:ee:c5:4e:b5:06:89:d3: b0:50:1e:1f:e1:7d:9c:2f:68:dd:20:ad:7c:de:29:81:c1:93: b1:cb:8a:f6:19:9f:fb:b3:a2:68:f5:30:11:d7:b2:21:1e:af: 7c:d7:bc:ba:37:a6:da:42:05:35:99:3b:5c:d4:83:21:c1:8a: 33:46:e5:9c:91:6e:63:16:75:d1:7a:f5:df:18:b6:73:ae:9b: 04:96:6f:d8:df:e9:e0:b4:00:11:19:bb:23:37:c2:e2:d9:34: 2b:d4:78:36:a9:c2:9d:15:77:b1:a7:79:73:43:e5:98:33:3f: e2:15:94:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ+mksboNEFk81DQirJdBu/1URfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA3MjMyMzI5NTBaFw0yNjA3MjUwMDQ0NTBaMDMxMTAvBgNV BAMTKDVERTBBODI2NkM2RDM5RjY0QUMxOTE1OTRCRjc5QTU3RDk0RDdDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7B9HqHKNAnZQWTjEOdXtZUaEl qEEycLh75+OHE3wAj7pv9jHNBk+VHl4FpxL23OAA/DX4xRpm0FYH/xLhUTQ9OMkW rSSBin4KXdE86Yg/aIECYJfZg9RJ7Ht3U5N8T5Fo9eE6S/72GB6mO20UyVXsSWi6 zt2+n7GdpD4DEVCZah3vWpwngkYUQBlKbVuMPy+9Bju8qo4v+WgEo+SKxywewDLO BL+4G7zpvp7gmwcHiNclO0ilQMacH9SEv3hDxeRhD08YiOP7hjCreFaKUT+SxsRy mzjK2ohKJlGgXzhmY/Lt5FBg0jlgCuFfqNelh7NMXYG/51SmfhU/lFXS/Qc1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXeCoJmxtOfZKwZFZS/eaV9lNfFYwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuzRtemMeBLT KjAsywK/qt8c8jLDnRLbHk55RY2astEVYTLr6Zx33aOjpZYBglEowL80C8EvPWfM RLitOQnRPNtMvDgZ35nMbCgL4YZLh8FgVq9D1LeBfN7YEQdLDIajPsZFjZ/3yg3y lXXMNcNCzmTaIgW4YI1oqgvdCGTflUje3UrPiy8zfD3uxU61BonTsFAeH+F9nC9o 3SCtfN4pgcGTscuK9hmf+7OiaPUwEdeyIR6vfNe8ujem2kIFNZk7XNSDIcGKM0bl nJFuYxZ10Xr13xi2c66bBJZv2N/p4LQAERm7IzfC4tk0K9R4NqnCnRV3sad5c0Pl mDM/4hWUIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:15 2026 by rpki-client