$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: GOQWUgSWKR5noJ3GgYVwtTloRoThnPwU9v1mLn4Zb9I= Subject key identifier: EF:D7:D6:E6:F2:BC:DE:8E:F3:C8:9B:0D:2B:37:41:F2:3F:32:65:B1 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 6EC20394989245F1F68B8BE2EE88DC78C5903166 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: C0 Signing time: Fri 25 Sep 2026 08:07:31 +0000 Manifest this update: Fri 25 Sep 2026 08:02:31 +0000 Manifest next update: Mon 28 Sep 2026 16:09:31 +0000 Files and hashes: 1: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 2: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 3: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 4: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 5: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 6: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 7: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: manNnTL5z38QljdBS1XjSU+SbrJaV+S5WAkoQoACbBA=) 8: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 9: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 10: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c2:03:94:98:92:45:f1:f6:8b:8b:e2:ee:88:dc:78:c5:90:31:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Sep 25 08:02:31 2026 GMT Not After : Sep 28 16:09:31 2026 GMT Subject: CN=EFD7D6E6F2BCDE8EF3C89B0D2B3741F23F3265B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:73:05:76:ee:5c:a8:52:40:c0:98:93:d3: 64:a9:d3:a5:7d:d9:9b:ee:82:b2:7c:ae:4a:e3:1f: 76:10:c6:57:70:75:9b:04:b4:96:f0:44:88:75:09: 77:2f:ca:81:c2:0b:0d:a5:9d:1f:fa:5b:b0:02:58: e9:1d:79:c1:3f:36:b3:5f:72:ee:ca:e1:bf:ac:a9: b2:79:92:5e:20:43:37:48:74:ac:cd:c9:16:85:ab: 8f:a8:23:46:40:20:78:f6:ae:16:58:7b:88:a4:2e: 02:d1:29:a0:4f:8b:87:e9:2a:84:c1:1a:ae:49:2b: 89:d8:47:25:82:d5:95:f8:49:2f:06:59:a5:04:d6: 5b:1a:77:12:65:57:1f:c3:03:d8:68:9c:28:00:71: e3:15:b8:15:fe:aa:68:74:53:d1:57:65:ff:a5:b3: 57:3f:a1:50:03:92:a3:c8:09:93:8d:47:86:18:9a: af:63:80:9b:b4:1a:ca:2d:bc:4c:6e:bf:df:7c:9a: 84:0a:95:8a:c1:f4:95:67:d7:6d:e4:b1:c5:82:16: 70:61:e5:ac:2e:24:f6:a6:df:a6:46:63:6e:5b:2a: fd:ab:07:95:9b:f5:ac:d0:88:37:c1:3c:ec:29:19: 14:76:5a:fc:da:d7:23:10:00:f3:d0:54:b4:85:85: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D7:D6:E6:F2:BC:DE:8E:F3:C8:9B:0D:2B:37:41:F2:3F:32:65:B1 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:32:af:00:5f:7b:d9:24:bb:ce:c2:7e:f8:7a:aa:3e:12: 21:bc:12:88:50:2b:5c:e2:5e:81:94:74:34:4c:08:e6:6f:c1: 72:fe:ce:71:31:f1:8b:9d:b7:82:c7:15:f8:5c:77:0d:3c:09: d0:c9:36:ba:a7:69:88:e3:1a:23:53:63:5b:02:32:51:66:41: 4d:b7:4f:66:52:b3:6c:b9:6c:43:90:21:e0:c3:d0:0d:08:2e: 99:5e:b4:c4:2a:65:ff:1d:64:0d:b4:48:bd:0f:ce:fb:e6:cb: e5:5c:a1:64:14:9d:f4:c6:10:e8:20:b9:01:be:84:90:73:3a: ef:83:d3:6a:5f:bf:9e:50:05:59:a0:d1:a0:a4:14:af:2b:5b: 10:af:00:ed:43:cf:eb:a0:59:83:2b:e6:8f:ca:c8:1a:f4:a2: b5:8d:03:61:89:78:b8:4a:bc:2d:15:6e:26:19:a3:d5:73:76: 90:24:f1:d3:d0:62:df:1a:ec:21:48:e1:2d:9d:a8:7c:72:7f: d2:b6:b1:41:4f:64:64:06:29:c6:3a:d9:d1:4c:19:11:37:dc: 10:18:9b:7b:8b:d3:d5:8d:30:b7:fb:65:d8:90:1f:64:c1:34: 80:0c:b4:67:8f:27:56:8f:63:16:bb:68:21:47:14:e1:89:2c: 4e:ca:2a:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbsIDlJiSRfH2i4vi7ojceMWQMWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA5MjUwODAyMzFaFw0yNjA5MjgxNjA5MzFaMDMxMTAvBgNV BAMTKEVGRDdENkU2RjJCQ0RFOEVGM0M4OUIwRDJCMzc0MUYyM0YzMjY1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxx3MFdu5cqFJAwJiT02Sp06V9 2ZvugrJ8rkrjH3YQxldwdZsEtJbwRIh1CXcvyoHCCw2lnR/6W7ACWOkdecE/NrNf cu7K4b+sqbJ5kl4gQzdIdKzNyRaFq4+oI0ZAIHj2rhZYe4ikLgLRKaBPi4fpKoTB Gq5JK4nYRyWC1ZX4SS8GWaUE1lsadxJlVx/DA9honCgAceMVuBX+qmh0U9FXZf+l s1c/oVADkqPICZONR4YYmq9jgJu0GsotvExuv998moQKlYrB9JVn123kscWCFnBh 5awuJPam36ZGY25bKv2rB5Wb9azQiDfBPOwpGRR2Wvza1yMQAPPQVLSFhZvJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU79fW5vK83o7zyJsNKzdB8j8yZbEwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFEyrwBfe9kk u87Cfvh6qj4SIbwSiFArXOJegZR0NEwI5m/Bcv7OcTHxi523gscV+Fx3DTwJ0Mk2 uqdpiOMaI1NjWwIyUWZBTbdPZlKzbLlsQ5Ah4MPQDQgumV60xCpl/x1kDbRIvQ/O ++bL5VyhZBSd9MYQ6CC5Ab6EkHM674PTal+/nlAFWaDRoKQUrytbEK8A7UPP66BZ gyvmj8rIGvSitY0DYYl4uEq8LRVuJhmj1XN2kCTx09Bi3xrsIUjhLZ2ofHJ/0rax QU9kZAYpxjrZ0UwZETfcEBibe4vT1Y0wt/tl2JAfZME0gAy0Z48nVo9jFrtoIUcU 4YksTsoqpg== -----END CERTIFICATE-----Generated at Sat Sep 26 11:13:10 2026 by rpki-client