$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: qEstvvw6VYdGOMf3I2tLDqCi7jBryMnwomg/8vfOUxw= Subject key identifier: 41:A7:EE:17:24:9E:7A:FD:3D:FF:86:BE:51:45:7E:EA:D8:D7:8D:84 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 62D18F1F02B61D1AB2029A5248CF8A2190AF67D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: 8E Signing time: Thu 23 Jul 2026 21:54:40 +0000 Manifest this update: Thu 23 Jul 2026 21:49:40 +0000 Manifest next update: Fri 24 Jul 2026 22:49:40 +0000 Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=) 2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: PX0/3NK3fbV18aYVSHkkQbmIYSZx5XdraypYGHYJu6E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d1:8f:1f:02:b6:1d:1a:b2:02:9a:52:48:cf:8a:21:90:af:67:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Jul 23 21:49:40 2026 GMT Not After : Jul 24 22:49:40 2026 GMT Subject: CN=41A7EE17249E7AFD3DFF86BE51457EEAD8D78D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:62:79:07:14:6c:8e:a5:bd:5b:af:4b:be: da:75:27:64:d0:81:98:a9:e3:db:cd:54:0d:f7:52: 33:7c:3e:24:11:ec:44:66:91:6e:cb:60:c4:ce:36: 37:2e:31:c5:57:83:0d:8f:a9:fd:93:c6:05:ec:5a: 00:cf:2e:0c:18:41:0e:19:b1:0a:9f:9c:0c:fe:37: 27:c4:ac:60:a2:86:0d:2d:5b:49:e3:ac:e9:be:8d: c0:5e:7a:cf:82:3a:0f:15:d6:fc:a9:b5:23:90:c9: ac:c1:11:e3:d6:ae:f5:12:52:94:b9:0a:af:36:2f: 84:16:77:24:5b:ae:2f:32:b2:51:ce:6c:fb:e0:79: 06:5e:d9:9b:6d:45:78:8d:40:48:59:27:00:19:84: a2:99:53:dc:3e:1d:ca:11:fe:75:b3:3e:f8:f3:5e: 34:9e:e4:49:eb:7f:f2:df:b5:a9:bb:a8:6f:de:b7: b9:75:94:2d:ad:79:78:b7:7f:f5:f9:00:30:cb:de: 81:35:6d:c8:2a:a1:41:24:21:1d:50:00:d5:e7:eb: 6b:d4:e9:a2:40:73:09:bf:46:be:ea:b2:e6:29:b6: 91:7c:fe:a5:18:5b:d5:21:ed:28:4d:70:4d:1e:2c: 17:5f:85:d6:5a:84:ee:11:a8:94:4d:d8:eb:68:f8: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:EE:17:24:9E:7A:FD:3D:FF:86:BE:51:45:7E:EA:D8:D7:8D:84 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:67:f2:07:ed:ae:1b:63:e5:e8:84:d6:66:7a:97:af:55:ac: b4:bd:ae:30:91:eb:18:dc:5d:c7:30:25:21:0a:b5:55:d3:ef: 32:07:1c:a9:68:f3:5e:9e:37:bf:0f:15:ce:e2:04:d3:8c:f6: 2b:3b:a1:61:b1:11:46:57:bb:82:65:25:64:5e:85:55:3e:52: 7d:11:64:f8:01:fd:f0:a0:2a:97:78:d6:7f:fe:3c:d7:80:35: aa:68:12:8f:e0:19:d1:2c:65:67:07:17:00:d1:b0:b0:0f:dd: 2e:67:fc:f5:f2:6f:6f:a5:29:9f:04:80:df:ee:8c:12:3b:a8: 31:8d:66:05:7f:db:9c:a2:d9:ec:5c:a9:e0:0d:52:29:16:04: b8:61:07:75:dd:ea:25:2b:1d:a3:c4:01:3b:1c:35:c3:4a:8b: e7:23:ba:55:0b:9a:e4:5e:77:d7:b4:98:22:4e:bb:90:8f:7e: 93:51:e5:32:b5:55:0f:59:61:58:5e:2a:8a:8b:ad:f1:61:1b: 06:e5:4e:fc:62:32:b6:4c:de:63:ab:8d:fe:c3:be:ef:8d:52: 1b:65:b9:57:bc:58:d5:87:e7:c4:c4:37:fa:fd:11:5a:14:0a: 8b:e2:c1:58:44:20:dd:02:ec:9f:5c:8b:e4:41:87:35:52:2e: a7:ea:a7:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYtGPHwK2HRqyAppSSM+KIZCvZ9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA3MjMyMTQ5NDBaFw0yNjA3MjQyMjQ5NDBaMDMxMTAvBgNV BAMTKDQxQTdFRTE3MjQ5RTdBRkQzREZGODZCRTUxNDU3RUVBRDhENzhEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgGJ5BxRsjqW9W69Lvtp1J2TQ gZip49vNVA33UjN8PiQR7ERmkW7LYMTONjcuMcVXgw2Pqf2TxgXsWgDPLgwYQQ4Z sQqfnAz+NyfErGCihg0tW0njrOm+jcBees+COg8V1vyptSOQyazBEePWrvUSUpS5 Cq82L4QWdyRbri8yslHObPvgeQZe2ZttRXiNQEhZJwAZhKKZU9w+HcoR/nWzPvjz XjSe5Enrf/Lftam7qG/et7l1lC2teXi3f/X5ADDL3oE1bcgqoUEkIR1QANXn62vU 6aJAcwm/Rr7qsuYptpF8/qUYW9Uh7ShNcE0eLBdfhdZahO4RqJRN2Oto+IB1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQafuFySeev09/4a+UUV+6tjXjYQwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmfyB+2uG2Pl 6ITWZnqXr1WstL2uMJHrGNxdxzAlIQq1VdPvMgccqWjzXp43vw8VzuIE04z2Kzuh YbERRle7gmUlZF6FVT5SfRFk+AH98KAql3jWf/4814A1qmgSj+AZ0SxlZwcXANGw sA/dLmf89fJvb6UpnwSA3+6MEjuoMY1mBX/bnKLZ7Fyp4A1SKRYEuGEHdd3qJSsd o8QBOxw1w0qL5yO6VQua5F5317SYIk67kI9+k1HlMrVVD1lhWF4qiout8WEbBuVO /GIytkzeY6uN/sO+741SG2W5V7xY1YfnxMQ3+v0RWhQKi+LBWEQg3QLsn1yL5EGH NVIup+qnnQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:48:49 2026 by rpki-client