$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: ios9r14rNMQC7JgPcgUbNOG+Ut0n9aD4gUHD030Potc= Subject key identifier: 89:D4:E7:98:B8:EB:ED:EE:85:47:98:30:BE:98:90:1A:2C:DB:B8:53 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 426A7F4182EB1B10933A6FDE0F09C18DC1C620A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 26 Signing time: Wed 13 May 2026 02:05:52 +0000 Manifest this update: Wed 13 May 2026 02:00:52 +0000 Manifest next update: Thu 14 May 2026 03:49:52 +0000 Files and hashes: 1: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 2: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 3: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 4: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 5: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 6: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 7: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 8: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 9: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 10: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: rBSrJroCVyR7sjLeyww81tBJC3uEXqI+3YMyzSQmu5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6a:7f:41:82:eb:1b:10:93:3a:6f:de:0f:09:c1:8d:c1:c6:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: May 13 02:00:52 2026 GMT Not After : May 14 03:49:52 2026 GMT Subject: CN=89D4E798B8EBEDEE85479830BE98901A2CDBB853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:80:93:29:96:1a:45:59:1e:20:3a:a6:8f: de:91:96:66:60:83:a9:50:eb:31:f4:f0:8f:b3:1f: 0e:43:c8:8d:90:a7:e1:de:39:93:58:a5:57:54:26: 9f:38:e2:8e:e1:d2:84:1e:93:e8:9f:ac:06:e6:b7: 7e:f3:74:a6:f2:b2:c4:b4:21:08:af:07:28:d2:3b: 9f:7b:62:85:74:59:8f:9d:74:03:35:23:2c:fe:20: a2:35:67:25:95:c3:8c:6c:7f:8a:8a:3e:90:bb:59: cf:ce:ed:e7:fe:d8:a4:4a:2c:ca:9e:35:20:33:07: e7:5b:80:34:06:62:2b:b1:93:70:b1:b3:7c:b4:0a: 49:d5:fa:c3:1f:eb:72:b2:f1:06:b5:e2:41:1f:17: cc:f1:f3:91:da:d6:3b:41:0c:e6:23:31:48:3d:06: 13:8f:95:fd:24:35:36:26:96:4c:68:41:e1:9b:e7: 07:58:e1:63:7e:c4:a1:73:8f:9d:0b:5e:37:d9:ca: d0:f5:3b:fa:86:d3:a3:c5:28:bb:ca:e9:90:f7:de: fc:91:44:fd:04:7a:f8:76:76:e3:51:b6:cb:a1:57: df:5a:63:82:83:66:1e:09:78:8d:06:cf:c6:48:8b: cf:a0:9a:66:3a:4d:2f:c6:10:12:a7:1c:b1:08:4b: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:E7:98:B8:EB:ED:EE:85:47:98:30:BE:98:90:1A:2C:DB:B8:53 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bc:70:4d:02:51:8d:b6:3f:56:f1:07:52:91:d8:14:70:f9: 30:78:71:2d:b0:32:2c:0d:0e:d7:9a:7e:dc:84:56:90:59:d8: cc:53:68:b8:08:3a:26:fa:19:3e:23:24:4a:90:7e:01:71:7e: ee:77:7a:96:54:87:d0:1a:a2:b7:51:55:69:c2:24:1a:ab:02: 32:23:89:29:5e:95:95:82:b0:e3:35:73:42:f2:a1:f1:be:3e: 5d:0e:61:c6:df:73:bd:23:c5:21:45:61:a9:a7:df:f6:25:61: 73:8e:28:32:5b:b1:20:54:cc:52:cf:d3:9d:02:6d:4c:ad:a1: 11:71:d8:7d:60:95:af:e3:d4:17:5a:31:aa:6b:7e:2b:f7:78: db:52:5a:61:c0:c1:e6:e3:64:f5:f1:65:f1:2c:28:c2:7d:d9: c9:38:ec:4c:c5:09:fa:a7:4b:3d:f4:3f:5b:97:ad:b3:26:85: cd:79:b0:54:4e:5e:72:c4:6c:be:62:a4:cb:cf:ff:d4:ef:d6: 9a:8e:19:0a:3d:d7:75:f0:d0:78:f3:87:d9:10:a0:05:a6:24: 2e:04:12:ab:d0:6a:2a:18:d6:e5:4c:cd:4b:18:57:c4:da:06: bc:46:e5:58:58:c4:ce:6d:e5:57:61:4c:71:9a:73:22:29:57: d5:a2:fa:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQmp/QYLrGxCTOm/eDwnBjcHGIKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA1MTMwMjAwNTJaFw0yNjA1MTQwMzQ5NTJaMDMxMTAvBgNV BAMTKDg5RDRFNzk4QjhFQkVERUU4NTQ3OTgzMEJFOTg5MDFBMkNEQkI4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtYCTKZYaRVkeIDqmj96RlmZg g6lQ6zH08I+zHw5DyI2Qp+HeOZNYpVdUJp844o7h0oQek+ifrAbmt37zdKbyssS0 IQivByjSO597YoV0WY+ddAM1Iyz+IKI1ZyWVw4xsf4qKPpC7Wc/O7ef+2KRKLMqe NSAzB+dbgDQGYiuxk3Cxs3y0CknV+sMf63Ky8Qa14kEfF8zx85Ha1jtBDOYjMUg9 BhOPlf0kNTYmlkxoQeGb5wdY4WN+xKFzj50LXjfZytD1O/qG06PFKLvK6ZD33vyR RP0Eevh2duNRtsuhV99aY4KDZh4JeI0Gz8ZIi8+gmmY6TS/GEBKnHLEIS7n9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUidTnmLjr7e6FR5gwvpiQGizbuFMwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLxwTQJRjbY/ VvEHUpHYFHD5MHhxLbAyLA0O15p+3IRWkFnYzFNouAg6JvoZPiMkSpB+AXF+7nd6 llSH0Bqit1FVacIkGqsCMiOJKV6VlYKw4zVzQvKh8b4+XQ5hxt9zvSPFIUVhqaff 9iVhc44oMluxIFTMUs/TnQJtTK2hEXHYfWCVr+PUF1oxqmt+K/d421JaYcDB5uNk 9fFl8Swown3ZyTjsTMUJ+qdLPfQ/W5etsyaFzXmwVE5ecsRsvmKky8//1O/Wmo4Z Cj3XdfDQePOH2RCgBaYkLgQSq9BqKhjW5UzNSxhXxNoGvEblWFjEzm3lV2FMcZpz IilX1aL6KA== -----END CERTIFICATE-----Generated at Wed May 13 09:15:10 2026 by rpki-client