$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: KegfrpLDajG30P4DqZPoC3k81HZ0tjbFatQA6TyJ92Y= Subject key identifier: D8:17:A9:CD:CD:A3:2B:ED:C0:16:40:CD:E5:F6:E4:6F:0B:E0:D3:A7 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 08689798927EF45B3179F93F560885A52B0A72DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 2B Signing time: Tue 12 May 2026 19:50:42 +0000 Manifest this update: Tue 12 May 2026 19:45:42 +0000 Manifest next update: Wed 13 May 2026 23:24:42 +0000 Files and hashes: 1: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 2: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 3: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 4: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: MYBEBWCSGQhP1Vn/MU0oyO3h6wQoSY9ahNxSMNTPzhU=) 5: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 6: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 7: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 8: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 9: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 10: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 11: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 12: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 13: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 14: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 15: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 16: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 17: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 18: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 19: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 20: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:68:97:98:92:7e:f4:5b:31:79:f9:3f:56:08:85:a5:2b:0a:72:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: May 12 19:45:42 2026 GMT Not After : May 13 23:24:42 2026 GMT Subject: CN=D817A9CDCDA32BEDC01640CDE5F6E46F0BE0D3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:83:7a:bd:76:1f:e6:41:af:e9:48:8e:c5: b5:85:be:fc:db:1f:7c:a7:52:d9:57:f7:0c:da:c4: dd:d1:3b:50:0b:41:f1:73:46:49:0e:7a:27:cd:c5: 96:ad:f4:fa:55:23:f3:b4:9e:3b:6d:14:f0:5a:e1: 2d:3b:c2:37:ac:fe:2a:7e:43:91:38:d9:18:72:bd: 5b:e4:b4:7f:b8:92:68:a1:10:ff:64:fd:53:41:3a: ec:ce:7f:3a:13:2d:c0:1b:cc:8e:fd:64:59:90:ed: dc:ae:a4:0a:9f:c4:16:06:db:7d:c5:f8:29:bd:8e: 38:36:95:a1:4a:2c:8e:5a:d5:70:af:ba:6e:e9:52: 37:3e:88:4d:fa:24:be:95:cc:9a:22:b0:51:39:c6: 92:ee:b0:e3:36:5a:b8:4a:27:b9:e3:34:1d:7d:d4: bf:26:e5:e5:72:4d:d3:d6:65:a9:e2:df:2b:40:d9: e7:1d:76:0c:3a:88:f4:ca:26:3d:aa:a7:e4:87:ee: e2:5b:a6:eb:9b:a6:a5:dd:b8:d4:b8:da:a1:e2:ac: b8:25:f7:e4:c9:77:7e:15:86:ac:5b:3b:3b:7a:cf: 2d:db:0a:1b:86:40:f8:9b:c4:9b:3e:15:d4:28:cf: 13:3b:0b:bf:41:75:90:ea:b6:99:90:18:64:d0:42: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:A9:CD:CD:A3:2B:ED:C0:16:40:CD:E5:F6:E4:6F:0B:E0:D3:A7 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8c:c1:69:90:4e:63:42:ea:56:3b:fc:ab:68:b7:f8:db:25: c7:e8:38:62:a3:c7:df:04:c0:28:8f:af:fa:94:0e:3b:1a:81: 6a:28:2b:af:72:7f:62:7a:46:47:03:d0:8e:13:04:bc:1c:d3: 88:ed:51:2f:b8:0a:f4:62:d9:1b:43:31:4e:22:26:ec:2a:ff: ce:4e:c8:20:30:dc:ee:ed:5f:4d:11:44:00:43:1e:f5:81:f4: fa:b5:77:ca:da:07:e0:ae:26:fe:51:4f:27:d5:e8:2f:44:e9: b9:13:2a:7a:f2:74:04:8f:6e:bd:56:da:d6:c3:65:7b:13:5c: bb:8b:9e:12:b3:cf:8b:af:c9:f5:c7:44:57:40:f4:28:57:68: 53:9b:9a:c8:52:30:7f:f3:88:ae:63:23:89:85:b0:c3:a5:d8: cc:a4:30:ab:83:f1:aa:a2:05:38:98:dc:4f:e1:79:fe:a3:cb: 5f:40:f6:83:0d:4a:3c:d1:bb:a4:1c:00:18:ea:d9:51:e2:3c: 1f:fd:0c:db:34:37:49:1c:99:9b:4f:b6:76:d5:61:64:cf:de: b5:11:c7:d0:e6:b8:73:3b:7c:f3:8f:06:f2:6f:c4:be:a5:ed: 77:22:a1:61:25:ed:fc:ea:c4:8d:82:3f:77:27:b2:1b:8a:bb: c6:8a:56:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGiXmJJ+9Fsxefk/VgiFpSsKctswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA1MTIxOTQ1NDJaFw0yNjA1MTMyMzI0NDJaMDMxMTAvBgNV BAMTKEQ4MTdBOUNEQ0RBMzJCRURDMDE2NDBDREU1RjZFNDZGMEJFMEQzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85IN6vXYf5kGv6UiOxbWFvvzb H3ynUtlX9wzaxN3RO1ALQfFzRkkOeifNxZat9PpVI/O0njttFPBa4S07wjes/ip+ Q5E42RhyvVvktH+4kmihEP9k/VNBOuzOfzoTLcAbzI79ZFmQ7dyupAqfxBYG233F +Cm9jjg2laFKLI5a1XCvum7pUjc+iE36JL6VzJoisFE5xpLusOM2WrhKJ7njNB19 1L8m5eVyTdPWZani3ytA2ecddgw6iPTKJj2qp+SH7uJbpuubpqXduNS42qHirLgl 9+TJd34VhqxbOzt6zy3bChuGQPibxJs+FdQozxM7C79BdZDqtpmQGGTQQlepAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2Bepzc2jK+3AFkDN5fbkbwvg06cwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYzBaZBOY0Lq Vjv8q2i3+Nslx+g4YqPH3wTAKI+v+pQOOxqBaigrr3J/YnpGRwPQjhMEvBzTiO1R L7gK9GLZG0MxTiIm7Cr/zk7IIDDc7u1fTRFEAEMe9YH0+rV3ytoH4K4m/lFPJ9Xo L0TpuRMqevJ0BI9uvVba1sNlexNcu4ueErPPi6/J9cdEV0D0KFdoU5uayFIwf/OI rmMjiYWww6XYzKQwq4PxqqIFOJjcT+F5/qPLX0D2gw1KPNG7pBwAGOrZUeI8H/0M 2zQ3SRyZm0+2dtVhZM/etRHH0Oa4czt8848G8m/EvqXtdyKhYSXt/OrEjYI/dyey G4q7xopW9g== -----END CERTIFICATE-----Generated at Wed May 13 13:48:13 2026 by rpki-client