$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: BHKVxBte0MENKwuXOviFTr4qXFNhe8avlcoBBNbPCFI= Subject key identifier: C0:EE:82:49:0B:19:F4:67:9F:C4:9E:C4:4E:A2:81:AD:D4:88:A9:C3 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 2AD6FF71D69CD2B31ABEBCE487DEBDB3BBED1916 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: 27 Signing time: Wed 13 May 2026 09:26:03 +0000 Manifest this update: Wed 13 May 2026 09:21:03 +0000 Manifest next update: Thu 14 May 2026 12:29:03 +0000 Files and hashes: 1: 32372e35302e3136302e302f31392d3139203d3e2030.roa (hash: XUJ0r7P+ioJawumRdY6EAZqogznSukLGZLg//JZTnM0=) 2: 32372e35302e3133332e302f32342d3234203d3e2030.roa (hash: HlhozveWgPOiNPsMsqsd754Fhtmj0sLvf7MUs3W/fdI=) 3: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 4: 32372e35302e3133322e302f32342d3234203d3e2034383337.roa (hash: lpdXlsHf2B/uACTtIHS07JASWjS1/rFnxuCFfq2OVw0=) 5: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: zLlemwm5gbQDlYfKTwYy/OWCQtHbBaNzocPafCWL24w=) 6: 32372e35302e3133362e302f32312d3231203d3e2030.roa (hash: 8yvBpZdPwghm09OameVYGOgErD7A05NEiOdwISfxHPw=) 7: 32372e35302e3133342e302f32332d3233203d3e2030.roa (hash: IsUhBWt4jf7sLKyNbMOzbGiRoHIEXUUXqamC964pVAs=) 8: 32372e35302e3134342e302f32302d3230203d3e2030.roa (hash: f6/1rN/k+RxrEp288MaxcleNJOjavS0msZKkyP9Jhb0=) 9: 32372e35302e3132382e302f32322d3232203d3e2030.roa (hash: x6i24AwJJsQi1lgr8WLwt4l7GV0ZS3/lO7FLLrNvE18=) 10: 32372e35302e3139322e302f31382d3138203d3e2030.roa (hash: MBb7AzieE/TA+26kXDcbcXdRl3K8Ikq6r5KvdQDFoiY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d6:ff:71:d6:9c:d2:b3:1a:be:bc:e4:87:de:bd:b3:bb:ed:19:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: May 13 09:21:03 2026 GMT Not After : May 14 12:29:03 2026 GMT Subject: CN=C0EE82490B19F4679FC49EC44EA281ADD488A9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:76:f9:37:e1:21:69:44:41:83:e8:bc:96: 63:35:39:49:ee:34:95:ba:26:a4:75:5b:05:39:3e: 7d:8f:20:e7:a9:c0:9f:fc:5d:8a:33:3f:1c:3e:49: 95:34:05:d4:d8:73:22:42:df:e0:cf:ef:58:8e:98: 4a:ba:6c:f3:72:9f:b9:a0:41:54:3e:fc:47:0f:bd: c0:b9:4b:6e:a0:0a:b7:ba:74:c2:e3:0c:88:ec:2f: b9:c7:03:d6:f0:53:8f:40:bf:58:71:71:1c:8b:8f: 61:40:7e:85:97:31:8b:bb:1d:1a:a8:0e:73:cb:b9: 87:1e:8e:15:91:ff:9c:ba:7b:48:96:58:56:85:5d: 80:da:22:da:11:3a:a8:4f:0a:6c:d7:0e:b6:41:10: a1:b6:22:a3:44:96:ae:f7:00:2a:74:53:d1:c3:f4: b6:5a:29:36:a8:e5:81:ba:3a:8a:b1:71:d7:d0:fb: 26:b6:d1:6f:0f:cb:cf:97:45:82:b7:e8:f7:f6:b4: 6c:e5:ab:27:cf:ef:de:65:6c:ec:b4:5b:91:74:31: 99:d3:ce:3d:ae:49:e1:19:bf:f3:c5:a4:79:60:61: a9:28:a1:48:3d:7f:cc:25:ef:f5:21:c2:b7:46:3d: de:b2:76:2c:fd:a7:db:31:f2:cc:df:f6:3d:54:d1: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:82:49:0B:19:F4:67:9F:C4:9E:C4:4E:A2:81:AD:D4:88:A9:C3 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e2:18:6b:a3:59:c0:62:83:1e:61:77:c6:f5:bd:63:3a:18: 4b:4c:59:cf:ac:53:75:f9:a4:21:2c:b3:9a:d6:02:b5:de:31: 34:6d:1b:0a:51:21:25:76:18:9d:6b:88:76:00:d7:0d:39:07: 4e:31:58:ea:82:be:3c:50:3f:29:54:a3:6f:73:e1:83:04:c2: 02:21:0e:f3:89:9e:1b:de:e9:a5:25:17:b8:9a:09:9a:d0:92: d8:7f:bc:6b:35:fa:3a:82:b8:ea:ff:ad:48:a3:ed:ec:ed:6c: 77:5a:11:51:0c:ad:1d:81:85:06:4a:db:95:2a:c9:b1:a9:29: ad:04:8e:a6:12:4a:5b:9c:a3:e0:83:e8:1e:8a:09:61:81:ec: 3f:cc:07:04:34:b9:86:5f:10:e6:2e:e3:b0:f5:81:bb:91:fc: b9:d3:31:61:ac:93:99:2e:71:68:1a:ea:e5:44:f0:80:da:50: 63:25:ab:1a:0d:96:6b:8e:65:f8:be:27:34:7d:53:4c:1a:8d: 94:31:85:66:ab:51:ee:f3:15:f2:df:ae:f2:c0:f0:27:4e:7c: 73:74:7e:f8:89:1f:70:d1:db:ae:8b:24:c5:2c:4f:37:71:84: ad:3e:b0:34:c6:98:50:81:c8:f9:27:90:b1:74:3b:ae:4d:76: 09:e9:23:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKtb/cdac0rMavrzkh969s7vtGRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA1MTMwOTIxMDNaFw0yNjA1MTQxMjI5MDNaMDMxMTAvBgNV BAMTKEMwRUU4MjQ5MEIxOUY0Njc5RkM0OUVDNDRFQTI4MUFERDQ4OEE5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcw3b5N+EhaURBg+i8lmM1OUnu NJW6JqR1WwU5Pn2PIOepwJ/8XYozPxw+SZU0BdTYcyJC3+DP71iOmEq6bPNyn7mg QVQ+/EcPvcC5S26gCre6dMLjDIjsL7nHA9bwU49Av1hxcRyLj2FAfoWXMYu7HRqo DnPLuYcejhWR/5y6e0iWWFaFXYDaItoROqhPCmzXDrZBEKG2IqNElq73ACp0U9HD 9LZaKTao5YG6OoqxcdfQ+ya20W8Py8+XRYK36Pf2tGzlqyfP795lbOy0W5F0MZnT zj2uSeEZv/PFpHlgYakooUg9f8wl7/UhwrdGPd6ydiz9p9sx8szf9j1U0RutAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwO6CSQsZ9GefxJ7ETqKBrdSIqcMwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+IYa6NZwGKD HmF3xvW9YzoYS0xZz6xTdfmkISyzmtYCtd4xNG0bClEhJXYYnWuIdgDXDTkHTjFY 6oK+PFA/KVSjb3PhgwTCAiEO84meG97ppSUXuJoJmtCS2H+8azX6OoK46v+tSKPt 7O1sd1oRUQytHYGFBkrblSrJsakprQSOphJKW5yj4IPoHooJYYHsP8wHBDS5hl8Q 5i7jsPWBu5H8udMxYayTmS5xaBrq5UTwgNpQYyWrGg2Wa45l+L4nNH1TTBqNlDGF ZqtR7vMV8t+u8sDwJ058c3R++IkfcNHbroskxSxPN3GErT6wNMaYUIHI+SeQsXQ7 rk12CekjCw== -----END CERTIFICATE-----Generated at Wed May 13 11:35:39 2026 by rpki-client