$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json) Hash identifier: APVTAhFQBarhheaVU99zLgEOOaUyJ+zOjENQ+1BcUfY= Subject key identifier: D4:06:74:E4:6E:DB:A4:8A:A3:77:60:58:8B:47:5C:D5:35:63:99:AF Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 5B092B3026F64AD261F3C2A2A73C5D71906AFD78 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft Manifest number: 31 Signing time: Thu 21 May 2026 01:11:05 +0000 Manifest this update: Thu 21 May 2026 01:06:05 +0000 Manifest next update: Fri 22 May 2026 04:58:05 +0000 Files and hashes: 1: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=) 2: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=) 3: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=) 4: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: ecx6OGUK06L6lULQrzagVnw6CowmPECSrcb4/16FlmU=) 5: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=) 6: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=) 7: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=) 8: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=) 9: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=) 10: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 04:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:09:2b:30:26:f6:4a:d2:61:f3:c2:a2:a7:3c:5d:71:90:6a:fd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: May 21 01:06:05 2026 GMT Not After : May 22 04:58:05 2026 GMT Subject: CN=D40674E46EDBA48AA37760588B475CD5356399AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:08:a0:87:78:f8:ec:c8:3e:d6:d6:9d:5b: 2a:eb:5f:4d:cf:de:83:d4:f9:3e:0d:14:da:db:15: 8d:a3:91:09:cd:d4:fa:f0:24:61:95:07:47:a1:60: 3c:77:72:c3:98:7e:4b:88:6b:ea:1e:3c:69:9b:5a: 70:e5:25:14:c1:76:50:d1:b4:3e:f7:31:0d:8e:02: 57:b1:0e:b8:b5:6b:fe:5f:ef:0f:6f:53:10:c7:ae: 40:18:06:e2:b5:16:d0:5e:88:0b:ff:5d:9b:3e:a6: 4d:25:7e:4c:06:30:76:7a:02:b2:fb:08:94:de:d9: 00:a1:33:39:b0:4e:04:a5:44:e3:9e:c4:67:46:28: 93:e2:a1:79:25:5d:55:6a:6e:44:3b:35:eb:f5:8a: 76:1f:f7:b2:3c:0b:30:da:28:48:56:2a:2e:c1:89: 3d:8b:b6:a7:f1:c4:33:58:6e:e1:9f:ff:97:4c:e5: 67:97:01:34:f9:d2:f9:9f:11:01:4e:34:5a:9c:20: 83:7a:b8:b7:f5:6a:8e:8b:15:20:fb:11:9a:26:1b: 18:dc:c2:a7:67:2d:9c:0b:3e:2b:eb:2f:33:de:ea: ea:77:9b:22:a6:01:65:43:c8:81:3e:30:a1:60:c6: cc:4e:cb:70:18:f5:80:e8:3c:9b:2f:44:8c:19:fc: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:74:E4:6E:DB:A4:8A:A3:77:60:58:8B:47:5C:D5:35:63:99:AF X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f2:cb:dc:c8:1c:f9:11:b6:8e:5f:82:74:45:76:0d:89:83: f0:35:2e:d8:15:d7:78:ad:4f:da:ae:f8:2f:46:9a:7f:62:01: 45:94:cc:2b:d4:d1:ef:67:99:83:cf:89:0e:fd:de:a2:ea:a8: 5b:ef:f1:bf:74:07:7f:d9:85:89:c7:c7:19:2b:cf:3a:8e:90: ef:f5:88:42:e5:10:a2:ff:97:a5:15:cc:bb:0f:47:05:5f:ad: 92:88:e8:1f:87:38:71:d7:d6:76:08:25:75:0f:e6:36:b9:b0: 3e:ff:17:0b:6a:9e:8f:85:40:f6:75:0e:ca:f9:ed:2e:aa:35: d4:80:81:d5:fa:df:a9:4a:c2:af:5d:14:ff:f3:74:af:f8:47: 82:ae:8f:04:88:03:a1:0d:38:b5:93:66:d4:a6:11:72:68:51: 1e:fa:04:9b:3c:ca:dc:a6:f9:3e:7e:57:36:71:54:39:d5:28: 77:01:f6:ee:12:29:d2:ef:fd:64:73:c3:ac:36:3f:97:10:92: 21:da:3f:9a:67:e6:71:81:14:1b:28:8b:7c:1f:31:ac:ef:5c: 0b:a5:25:50:d3:1c:bf:2b:b7:b3:4f:25:9d:fa:78:99:2b:90: 4a:b9:f0:fe:97:27:95:ba:45:88:bc:68:ef:26:e0:fe:f5:3e: 1c:1e:15:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWwkrMCb2StJh88KipzxdcZBq/XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA1MjEwMTA2MDVaFw0yNjA1MjIwNDU4MDVaMDMxMTAvBgNV BAMTKEQ0MDY3NEU0NkVEQkE0OEFBMzc3NjA1ODhCNDc1Q0Q1MzU2Mzk5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4Aigh3j47Mg+1tadWyrrX03P 3oPU+T4NFNrbFY2jkQnN1PrwJGGVB0ehYDx3csOYfkuIa+oePGmbWnDlJRTBdlDR tD73MQ2OAlexDri1a/5f7w9vUxDHrkAYBuK1FtBeiAv/XZs+pk0lfkwGMHZ6ArL7 CJTe2QChMzmwTgSlROOexGdGKJPioXklXVVqbkQ7Nev1inYf97I8CzDaKEhWKi7B iT2LtqfxxDNYbuGf/5dM5WeXATT50vmfEQFONFqcIIN6uLf1ao6LFSD7EZomGxjc wqdnLZwLPivrLzPe6up3myKmAWVDyIE+MKFgxsxOy3AY9YDoPJsvRIwZ/OfXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1AZ05G7bpIqjd2BYi0dc1TVjma8wHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzYxMjQwMzcwNTQ0NjYvMC85QTJDREFBOTY2RkQ5 NkNCRUNDQzQwQkNGQzNERTFCMjIzMjYzQzIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvLL3Mgc+RG2 jl+CdEV2DYmD8DUu2BXXeK1P2q74L0aaf2IBRZTMK9TR72eZg8+JDv3eouqoW+/x v3QHf9mFicfHGSvPOo6Q7/WIQuUQov+XpRXMuw9HBV+tkojoH4c4cdfWdggldQ/m NrmwPv8XC2qej4VA9nUOyvntLqo11ICB1frfqUrCr10U//N0r/hHgq6PBIgDoQ04 tZNm1KYRcmhRHvoEmzzK3Kb5Pn5XNnFUOdUodwH27hIp0u/9ZHPDrDY/lxCSIdo/ mmfmcYEUGyiLfB8xrO9cC6UlUNMcvyu3s08lnfp4mSuQSrnw/pcnlbpFiLxo7ybg /vU+HB4VrQ== -----END CERTIFICATE-----Generated at Thu May 21 12:32:42 2026 by rpki-client