$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: wLjS+2R1/3oS/n1kAj+fb231v4iLAqDvUtBhYNhsPlM= Subject key identifier: 1F:FE:C8:FC:25:16:08:57:88:70:70:96:93:80:4D:19:CF:67:7E:8C Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 77918040780C046A1FFB1F70EA996EF2D6775D73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 06:05:33 +0000 Manifest this update: Fri 24 Jul 2026 06:00:33 +0000 Manifest next update: Sat 25 Jul 2026 10:01:33 +0000 Files and hashes: 1: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 2: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 3: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 4: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 5: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 6: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 7: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 8: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 9: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 10: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 11: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 12: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 13: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 14: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 15: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 16: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: Dzb19qNYoOsRmh7NYLt8sxHl2O8Ejcey+KUGxltXVMc=) 17: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 18: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 19: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 20: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 21: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 22: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 23: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:91:80:40:78:0c:04:6a:1f:fb:1f:70:ea:99:6e:f2:d6:77:5d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jul 24 06:00:33 2026 GMT Not After : Jul 25 10:01:33 2026 GMT Subject: CN=1FFEC8FC251608578870709693804D19CF677E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:3e:a2:fa:07:22:51:9a:a4:a3:da:fb:02: 1a:59:8a:64:28:13:28:4c:4c:a7:2b:62:b8:f3:41: f6:ee:39:cb:38:4d:bc:a2:96:a1:ef:27:80:eb:3d: a0:13:3e:db:40:5c:0d:59:86:fa:1c:bd:b2:0a:09: a9:50:d9:47:2f:e6:10:b1:03:09:cf:d1:1e:8f:7e: 3b:35:ab:bd:e7:af:35:85:99:86:28:aa:2f:66:17: e2:32:50:25:4e:d9:8b:98:fa:d4:6e:20:68:39:58: a8:d8:c9:82:39:63:03:41:f9:ed:6c:2a:fe:8a:da: d8:30:01:88:cd:5b:b3:62:36:44:00:70:ca:38:03: 40:84:a5:d8:33:96:17:a2:e6:e3:fe:08:7e:cc:7d: 7e:9d:50:52:db:6f:b6:b4:7d:70:c2:b9:af:6a:ed: 59:16:08:58:6b:d0:96:5d:3d:3c:f3:9d:55:56:88: 4e:5c:11:a3:2a:51:ef:5d:ae:f7:5e:88:4e:c1:d2: 85:b4:f0:96:49:2d:45:0a:83:e3:4b:c8:0a:52:84: 06:3b:70:5b:8e:5c:a0:42:6f:25:c8:18:65:57:d7: 1e:e4:27:27:c8:5a:c9:4c:b9:59:54:d3:2a:c0:13: 23:e7:7a:07:93:a4:a1:73:39:4b:4d:30:77:21:a8: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:C8:FC:25:16:08:57:88:70:70:96:93:80:4D:19:CF:67:7E:8C X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:55:10:9f:c8:2f:1d:7a:b9:84:f9:3c:ef:ac:33:ac:f9:36: ae:c2:7b:a7:7f:57:5a:02:9f:01:1d:f3:06:2f:a6:77:b1:81: c0:c4:13:a1:35:3a:4a:c6:93:62:bc:df:5f:8e:66:7d:c4:cc: 66:29:7a:7f:a8:e6:f2:3e:d0:eb:20:17:0d:84:95:8d:5d:1d: f0:83:f5:ce:d6:d4:e9:2e:cd:3e:ae:21:38:00:83:46:3f:c1: fb:00:39:4e:45:6a:5b:16:a3:9b:0a:b8:7b:dc:39:8d:fb:4b: 76:18:b0:85:1e:86:c4:20:b8:58:d1:41:28:be:b2:f2:74:de: ce:77:6f:56:e3:57:b4:46:82:16:4f:89:81:00:64:3b:c8:83: 4c:6b:c5:89:e9:1a:bc:eb:da:b9:d2:6f:f1:0b:98:a5:70:fd: f8:bf:b3:93:6a:42:43:78:3d:6e:cd:49:d9:e0:c3:26:3d:8d: 4d:76:71:12:64:b0:78:74:06:2a:b3:ea:39:da:57:65:01:98: 6f:0a:4f:b2:5a:d3:96:2e:d3:ed:0a:08:8a:c1:6d:03:54:ca: f6:62:67:ed:1c:a8:fe:1f:6e:f6:a4:bc:a9:d5:ec:74:fb:8a: 9d:0c:1e:08:4c:35:b9:18:fa:a6:4f:48:f3:12:26:ea:38:b9: 27:60:64:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd5GAQHgMBGof+x9w6plu8tZ3XXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA3MjQwNjAwMzNaFw0yNjA3MjUxMDAxMzNaMDMxMTAvBgNV BAMTKDFGRkVDOEZDMjUxNjA4NTc4ODcwNzA5NjkzODA0RDE5Q0Y2NzdFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tj6i+gciUZqko9r7AhpZimQo EyhMTKcrYrjzQfbuOcs4TbyilqHvJ4DrPaATPttAXA1ZhvocvbIKCalQ2Ucv5hCx AwnP0R6Pfjs1q73nrzWFmYYoqi9mF+IyUCVO2YuY+tRuIGg5WKjYyYI5YwNB+e1s Kv6K2tgwAYjNW7NiNkQAcMo4A0CEpdgzlhei5uP+CH7MfX6dUFLbb7a0fXDCua9q 7VkWCFhr0JZdPTzznVVWiE5cEaMqUe9drvdeiE7B0oW08JZJLUUKg+NLyApShAY7 cFuOXKBCbyXIGGVX1x7kJyfIWslMuVlU0yrAEyPnegeTpKFzOUtNMHchqI59AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH/7I/CUWCFeIcHCWk4BNGc9nfowwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVUQn8gvHXq5 hPk876wzrPk2rsJ7p39XWgKfAR3zBi+md7GBwMQToTU6SsaTYrzfX45mfcTMZil6 f6jm8j7Q6yAXDYSVjV0d8IP1ztbU6S7NPq4hOACDRj/B+wA5TkVqWxajmwq4e9w5 jftLdhiwhR6GxCC4WNFBKL6y8nTezndvVuNXtEaCFk+JgQBkO8iDTGvFiekavOva udJv8QuYpXD9+L+zk2pCQ3g9bs1J2eDDJj2NTXZxEmSweHQGKrPqOdpXZQGYbwpP slrTli7T7QoIisFtA1TK9mJn7Ryo/h9u9qS8qdXsdPuKnQweCEw1uRj6pk9I8xIm 6ji5J2BkxQ== -----END CERTIFICATE-----Generated at Sat Jul 25 00:51:43 2026 by rpki-client