$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: JS8rWwCqchJUzPRM+8ekG8pDMywWi4p7F1AlHlbDYwo= Subject key identifier: E8:DD:D2:77:80:44:DF:4B:59:F9:E1:AB:5F:B9:57:3D:F3:6D:E9:65 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 5EF3CFD69E4AB761FBC2F86728B02CDAC0A23698 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: 93 Signing time: Mon 27 Jul 2026 12:54:05 +0000 Manifest this update: Mon 27 Jul 2026 12:49:05 +0000 Manifest next update: Tue 28 Jul 2026 15:01:05 +0000 Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=) 2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: RWewRGTcxyE0UAxNKJufG9WbeOF4ZtGvKEwh5zjbeAY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:cf:d6:9e:4a:b7:61:fb:c2:f8:67:28:b0:2c:da:c0:a2:36:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Jul 27 12:49:05 2026 GMT Not After : Jul 28 15:01:05 2026 GMT Subject: CN=E8DDD2778044DF4B59F9E1AB5FB9573DF36DE965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:2c:90:49:6e:18:03:de:0a:28:1c:97:36: 3c:8d:eb:89:c7:57:25:98:70:d0:85:de:61:61:5b: 54:a5:20:1d:cd:73:cb:a4:37:e1:14:02:e7:a7:2f: 04:7c:44:aa:4f:10:53:71:57:4a:ba:4c:a8:b0:1c: 1d:2e:48:60:a0:81:f5:db:dd:60:71:ef:3d:a6:04: 12:91:ca:4d:59:f1:18:d8:54:c3:2e:f3:21:e7:09: 77:87:f5:97:1b:fe:e5:bf:99:8d:78:64:8e:df:17: 3e:63:38:a8:a9:4f:de:91:f6:fb:04:f4:d5:62:c7: 22:35:c3:be:17:d8:a1:3f:1e:68:6e:dd:a1:fa:a3: 01:b5:ec:97:21:db:c8:8e:45:8c:f0:37:a1:f3:20: 84:6d:94:3c:f6:28:b4:22:b2:51:57:33:83:b6:e4: 17:42:57:44:42:d6:c6:3f:fb:88:1c:e9:04:21:b1: 76:96:4a:ee:1f:23:8f:ea:88:12:15:d6:b7:ee:fc: a0:68:8b:d5:3c:f8:ac:1d:97:03:1c:f2:86:67:a0: dd:45:0e:c4:3c:90:d4:19:db:de:50:e4:07:43:63: 26:7f:bd:07:85:42:7a:f5:71:80:0e:18:0c:4d:14: d3:05:03:c9:72:a8:a8:c9:62:86:ad:d3:b0:af:75: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DD:D2:77:80:44:DF:4B:59:F9:E1:AB:5F:B9:57:3D:F3:6D:E9:65 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e4:62:4a:08:f1:5b:06:c8:7e:24:6b:68:41:40:d5:33:2d: e2:ea:5e:b0:be:66:78:94:54:f6:39:46:01:c5:43:5c:a3:fe: 2d:d9:4a:ca:73:a5:74:94:49:7f:71:b9:84:69:56:4b:a8:03: 49:99:1f:af:52:4b:c7:25:5b:73:3f:e9:31:a7:9b:3b:88:09: 6c:ec:39:6c:a4:20:dc:ec:8f:45:95:3d:9d:7f:6d:05:1d:45: e4:fe:96:2d:8b:6a:51:c8:3f:ad:4f:f0:2e:07:11:df:1b:7f: 9e:1a:9e:3c:a1:c0:9d:72:7b:8d:37:cf:5a:5f:39:a4:fa:c5: 6e:3c:be:b1:75:7f:b3:ce:ed:5a:68:ac:5e:24:b6:d5:fa:0f: c8:e8:38:11:c8:97:88:73:26:24:5d:76:e8:24:59:be:2c:50: 73:7b:18:a1:9d:23:2f:f4:b9:1b:fe:a7:bd:6c:12:d4:a6:90: 01:82:1b:a1:c8:67:e0:dd:32:8c:82:e9:fa:3e:f3:97:7c:f2: 49:78:4e:e1:56:fa:90:ff:2d:14:7c:d9:20:c5:43:a4:87:76: 53:e8:a5:e3:66:e5:e3:69:2f:e7:fb:9e:30:10:d1:59:b5:db: 8e:74:e7:f0:22:04:32:4c:a6:48:b1:62:e9:2b:20:ba:12:22: 24:e4:ff:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXvPP1p5Kt2H7wvhnKLAs2sCiNpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA3MjcxMjQ5MDVaFw0yNjA3MjgxNTAxMDVaMDMxMTAvBgNV BAMTKEU4REREMjc3ODA0NERGNEI1OUY5RTFBQjVGQjk1NzNERjM2REU5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHSyQSW4YA94KKByXNjyN64nH VyWYcNCF3mFhW1SlIB3Nc8ukN+EUAuenLwR8RKpPEFNxV0q6TKiwHB0uSGCggfXb 3WBx7z2mBBKRyk1Z8RjYVMMu8yHnCXeH9Zcb/uW/mY14ZI7fFz5jOKipT96R9vsE 9NVixyI1w74X2KE/Hmhu3aH6owG17Jch28iORYzwN6HzIIRtlDz2KLQislFXM4O2 5BdCV0RC1sY/+4gc6QQhsXaWSu4fI4/qiBIV1rfu/KBoi9U8+KwdlwMc8oZnoN1F DsQ8kNQZ295Q5AdDYyZ/vQeFQnr1cYAOGAxNFNMFA8lyqKjJYoat07CvdTSbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6N3Sd4BE30tZ+eGrX7lXPfNt6WUwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfORiSgjxWwbI fiRraEFA1TMt4upesL5meJRU9jlGAcVDXKP+LdlKynOldJRJf3G5hGlWS6gDSZkf r1JLxyVbcz/pMaebO4gJbOw5bKQg3OyPRZU9nX9tBR1F5P6WLYtqUcg/rU/wLgcR 3xt/nhqePKHAnXJ7jTfPWl85pPrFbjy+sXV/s87tWmisXiS21foPyOg4EciXiHMm JF126CRZvixQc3sYoZ0jL/S5G/6nvWwS1KaQAYIbochn4N0yjILp+j7zl3zySXhO 4Vb6kP8tFHzZIMVDpId2U+il42bl42kv5/ueMBDRWbXbjnTn8CIEMkymSLFi6Ssg uhIiJOT/XA== -----END CERTIFICATE-----Generated at Mon Jul 27 15:44:55 2026 by rpki-client