$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: nd/71XXZm55WZ2BwSrbCEaTrMPAdlzL7k/VPP9FUtHU= Subject key identifier: EF:8E:01:98:64:C1:99:B1:F4:DE:0B:19:40:71:50:08:D5:FF:42:09 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 2F2D86C6FCF6372BFB2060E5AD6C4313EAB2AD4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: AB Signing time: Fri 21 Aug 2026 12:29:38 +0000 Manifest this update: Fri 21 Aug 2026 12:24:38 +0000 Manifest next update: Sat 22 Aug 2026 13:44:38 +0000 Files and hashes: 1: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 2: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 3: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 4: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 5: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 6: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) 7: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 8: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 9: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: oZh/WIHFlKSkkJe1wLLR3/gNxM8eneZRqY5J+rp6dps=) 10: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 13:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2d:86:c6:fc:f6:37:2b:fb:20:60:e5:ad:6c:43:13:ea:b2:ad:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Aug 21 12:24:38 2026 GMT Not After : Aug 22 13:44:38 2026 GMT Subject: CN=EF8E019864C199B1F4DE0B1940715008D5FF4209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:e9:51:e6:aa:c1:a1:cb:ec:ca:32:c3:59: 66:cb:52:b0:28:b3:78:94:9f:a4:1f:59:7d:69:bb: fe:b7:c5:cf:61:20:26:7a:f2:5d:c4:94:12:92:08: 76:b8:ac:f1:04:36:94:f3:43:81:73:81:39:31:77: 4e:60:bf:43:fe:be:2c:e9:0f:37:04:17:18:4a:84: 5f:16:29:3f:1d:6c:38:ad:68:dc:a8:7b:3d:a9:82: 44:d8:0b:ff:81:12:47:60:dd:58:7b:3f:80:3d:4a: 1b:d0:89:a3:71:d0:21:5c:d7:32:74:a0:a6:92:e9: 7e:23:c7:b8:2d:cb:a7:fe:10:ce:7a:ca:d4:97:8b: 46:b0:7f:5c:7a:9d:e5:23:d0:cf:01:a8:09:ec:59: c6:af:ac:c9:0d:b3:e8:ef:f8:b0:42:c8:59:92:d2: b4:a7:17:34:5d:4b:18:a6:ee:86:77:c5:a2:33:ce: 75:d3:f9:46:e0:60:77:f7:29:78:3f:5c:44:b4:f7: 27:bb:03:5b:b7:09:7c:45:b8:b3:42:0c:f2:97:6a: 40:76:7b:30:2f:99:52:94:d3:d2:d8:46:e8:71:8a: ca:f4:d9:18:59:95:39:82:8d:71:45:d1:a0:2b:bc: 74:cb:23:92:1c:98:bc:f5:e5:37:43:33:83:03:f8: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:01:98:64:C1:99:B1:F4:DE:0B:19:40:71:50:08:D5:FF:42:09 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:76:3e:98:50:34:4e:35:0d:61:b0:40:0c:63:c8:dc:90:5d: 4f:ff:bc:dc:b9:b0:03:d0:0c:07:f5:55:8f:b7:00:d8:f7:7c: 7b:b7:dc:9b:72:c6:ea:20:db:ec:85:2e:4a:21:df:94:64:4a: 87:cc:c4:3d:b3:f0:d9:32:d4:f5:fb:11:a8:86:b8:8f:a6:3b: f0:c4:47:3f:be:e8:39:9e:dd:41:b2:60:dd:f3:83:1a:ac:9f: d9:97:fe:0d:40:2e:66:44:60:82:c9:d0:ed:83:f6:dd:b3:64: 43:90:78:79:d7:7a:0d:ff:0c:fc:70:bf:48:40:ce:13:13:95: c2:e5:d3:b8:86:02:17:4b:eb:d7:6f:0d:c5:e0:63:98:5b:f6: 4e:1f:5a:11:b3:34:d1:7b:a9:b3:0a:47:bd:e6:77:c0:23:4c: 3d:5d:9a:48:ed:b6:64:fa:75:5f:6f:8b:98:8e:9b:3b:9f:72: c1:e4:11:29:23:64:7b:47:0e:c2:0a:11:51:b9:c5:02:f7:c6: bf:c9:1c:6e:15:e3:31:1f:7b:8b:72:d2:f6:bd:66:f0:56:12: cb:01:07:d1:5f:11:dd:40:9b:46:ef:e1:f7:02:e1:06:25:ac: d7:fb:5b:98:ee:dd:d5:c9:87:14:0b:aa:81:41:44:e2:01:91: 52:9e:35:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULy2Gxvz2Nyv7IGDlrWxDE+qyrUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA4MjExMjI0MzhaFw0yNjA4MjIxMzQ0MzhaMDMxMTAvBgNV BAMTKEVGOEUwMTk4NjRDMTk5QjFGNERFMEIxOTQwNzE1MDA4RDVGRjQyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3+lR5qrBocvsyjLDWWbLUrAo s3iUn6QfWX1pu/63xc9hICZ68l3ElBKSCHa4rPEENpTzQ4FzgTkxd05gv0P+vizp DzcEFxhKhF8WKT8dbDitaNyoez2pgkTYC/+BEkdg3Vh7P4A9ShvQiaNx0CFc1zJ0 oKaS6X4jx7gty6f+EM56ytSXi0awf1x6neUj0M8BqAnsWcavrMkNs+jv+LBCyFmS 0rSnFzRdSxim7oZ3xaIzznXT+UbgYHf3KXg/XES09ye7A1u3CXxFuLNCDPKXakB2 ezAvmVKU09LYRuhxisr02RhZlTmCjXFF0aArvHTLI5IcmLz15TdDM4MD+AI9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU744BmGTBmbH03gsZQHFQCNX/QgkwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3Y+mFA0TjUN YbBADGPI3JBdT/+83LmwA9AMB/VVj7cA2Pd8e7fcm3LG6iDb7IUuSiHflGRKh8zE PbPw2TLU9fsRqIa4j6Y78MRHP77oOZ7dQbJg3fODGqyf2Zf+DUAuZkRggsnQ7YP2 3bNkQ5B4edd6Df8M/HC/SEDOExOVwuXTuIYCF0vr128NxeBjmFv2Th9aEbM00Xup swpHveZ3wCNMPV2aSO22ZPp1X2+LmI6bO59yweQRKSNke0cOwgoRUbnFAvfGv8kc bhXjMR97i3LS9r1m8FYSywEH0V8R3UCbRu/h9wLhBiWs1/tbmO7d1cmHFAuqgUFE 4gGRUp41rA== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:10 2026 by rpki-client