$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: meCg7R7SgmotUuSHJ7YAHqwfA/ifXZKUMl30cAxHI4U= Subject key identifier: EE:49:B4:88:DC:4B:62:A9:E9:83:E0:2B:65:3F:D8:D7:FE:72:E4:A2 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 1FFE71688565845B0B67CC719388BDC1A0AA560D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: 12 Signing time: Mon 27 Apr 2026 14:53:47 +0000 Manifest this update: Mon 27 Apr 2026 14:48:47 +0000 Manifest next update: Tue 28 Apr 2026 18:28:47 +0000 Files and hashes: 1: 32372e35302e3133332e302f32342d3234203d3e2030.roa (hash: HlhozveWgPOiNPsMsqsd754Fhtmj0sLvf7MUs3W/fdI=) 2: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: 8yfv7fhnL6HsxNVysWvbW/du7mr/RCEdFEmW2euMdUU=) 3: 32372e35302e3136302e302f31392d3139203d3e2030.roa (hash: XUJ0r7P+ioJawumRdY6EAZqogznSukLGZLg//JZTnM0=) 4: 32372e35302e3139322e302f31382d3138203d3e2030.roa (hash: MBb7AzieE/TA+26kXDcbcXdRl3K8Ikq6r5KvdQDFoiY=) 5: 32372e35302e3132382e302f32322d3232203d3e2030.roa (hash: x6i24AwJJsQi1lgr8WLwt4l7GV0ZS3/lO7FLLrNvE18=) 6: 32372e35302e3134342e302f32302d3230203d3e2030.roa (hash: f6/1rN/k+RxrEp288MaxcleNJOjavS0msZKkyP9Jhb0=) 7: 32372e35302e3133362e302f32312d3231203d3e2030.roa (hash: 8yvBpZdPwghm09OameVYGOgErD7A05NEiOdwISfxHPw=) 8: 32372e35302e3133342e302f32332d3233203d3e2030.roa (hash: IsUhBWt4jf7sLKyNbMOzbGiRoHIEXUUXqamC964pVAs=) 9: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 10: 32372e35302e3133322e302f32342d3234203d3e2034383337.roa (hash: lpdXlsHf2B/uACTtIHS07JASWjS1/rFnxuCFfq2OVw0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fe:71:68:85:65:84:5b:0b:67:cc:71:93:88:bd:c1:a0:aa:56:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Apr 27 14:48:47 2026 GMT Not After : Apr 28 18:28:47 2026 GMT Subject: CN=EE49B488DC4B62A9E983E02B653FD8D7FE72E4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:43:f2:11:2b:57:c4:2e:10:7f:eb:45:27: 04:ac:5b:e9:3b:bb:f8:9c:37:b0:9c:0b:06:9a:41: 84:51:5a:07:fc:81:10:6f:b6:34:95:e6:5d:61:33: 0b:e1:1a:08:80:5e:b0:90:09:ff:da:84:30:e5:3a: c4:f8:f9:05:b7:56:03:09:26:97:22:72:7b:06:82: 4e:cd:91:33:14:b8:b3:bb:94:28:8a:11:f1:3e:7f: 28:f8:5d:74:b6:16:1d:13:10:5a:c6:8d:4c:cc:3e: 4c:78:64:de:51:06:38:8b:4b:bd:b7:fa:7e:fc:71: 68:4e:8b:0f:39:03:e0:2d:13:b7:3a:ef:d1:f1:de: 71:aa:48:d1:d2:f4:89:d3:95:66:6f:9b:bb:06:59: 7e:3e:0f:43:0e:9b:5b:0f:b2:9e:e4:dc:1f:65:5f: b6:b5:30:98:15:e7:cc:19:64:4c:bf:af:63:64:d6: d8:33:73:6c:d9:32:88:72:d1:f7:74:f3:fb:94:05: 63:52:a5:9f:f2:46:1b:76:42:ed:e7:09:f1:45:e9: 91:60:43:24:eb:1c:e5:e0:5b:0e:ae:3f:b7:72:c1: 8f:79:fb:c6:39:4f:d9:b1:82:29:40:a8:3a:2d:11: 6c:65:fe:52:c5:fa:09:55:b3:bf:d7:92:96:dc:a0: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:B4:88:DC:4B:62:A9:E9:83:E0:2B:65:3F:D8:D7:FE:72:E4:A2 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ba:99:86:d5:0e:d4:ce:bf:b5:2a:46:5d:a0:0e:7a:32:fb: cb:fa:9f:47:92:b3:2d:24:df:de:77:06:01:38:f0:6c:51:d5: c6:c9:23:fc:02:2a:d2:a6:59:b9:97:12:41:e6:62:68:f1:f5: 7d:eb:38:5f:44:b9:fd:61:45:c2:4d:2a:fa:44:8e:97:28:6d: 57:b0:15:14:af:6e:d3:87:95:0c:f4:c2:21:6f:78:4d:8a:ea: 69:a6:61:79:cf:cc:0a:ad:1b:27:c4:b7:0f:bd:3e:97:bb:a5: 48:3b:74:52:b2:b8:34:59:ab:a0:c7:1c:d4:d3:79:87:01:83: a0:c3:75:e2:75:3a:bb:ac:d9:b8:57:fc:c0:e1:cc:2c:cd:72: ca:c0:d0:f7:e8:95:2e:7b:6a:48:9b:ed:37:74:b4:70:ec:42: 90:01:71:6b:98:12:c5:d3:a8:fe:2d:5d:a8:48:02:64:6b:78: 63:a6:a0:7e:28:be:ed:57:d0:99:c7:fc:86:ad:26:7b:ec:2b: 51:ab:db:14:e2:48:18:26:03:98:9d:f4:55:4e:3b:99:5e:23: 54:43:2f:56:7d:86:2c:7a:63:e5:3d:c9:7d:87:78:a9:e8:d4: e9:1b:05:30:b2:ce:6f:de:02:21:8f:cc:9a:01:ce:6f:8b:ad: 7c:c4:e8:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH/5xaIVlhFsLZ8xxk4i9waCqVg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA0MjcxNDQ4NDdaFw0yNjA0MjgxODI4NDdaMDMxMTAvBgNV BAMTKEVFNDlCNDg4REM0QjYyQTlFOTgzRTAyQjY1M0ZEOEQ3RkU3MkU0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMUPyEStXxC4Qf+tFJwSsW+k7 u/icN7CcCwaaQYRRWgf8gRBvtjSV5l1hMwvhGgiAXrCQCf/ahDDlOsT4+QW3VgMJ JpcicnsGgk7NkTMUuLO7lCiKEfE+fyj4XXS2Fh0TEFrGjUzMPkx4ZN5RBjiLS723 +n78cWhOiw85A+AtE7c679Hx3nGqSNHS9InTlWZvm7sGWX4+D0MOm1sPsp7k3B9l X7a1MJgV58wZZEy/r2Nk1tgzc2zZMohy0fd08/uUBWNSpZ/yRht2Qu3nCfFF6ZFg QyTrHOXgWw6uP7dywY95+8Y5T9mxgilAqDotEWxl/lLF+glVs7/XkpbcoCEzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7km0iNxLYqnpg+ArZT/Y1/5y5KIwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbqZhtUO1M6/ tSpGXaAOejL7y/qfR5KzLSTf3ncGATjwbFHVxskj/AIq0qZZuZcSQeZiaPH1fes4 X0S5/WFFwk0q+kSOlyhtV7AVFK9u04eVDPTCIW94TYrqaaZhec/MCq0bJ8S3D70+ l7ulSDt0UrK4NFmroMcc1NN5hwGDoMN14nU6u6zZuFf8wOHMLM1yysDQ9+iVLntq SJvtN3S0cOxCkAFxa5gSxdOo/i1dqEgCZGt4Y6agfii+7VfQmcf8hq0me+wrUavb FOJIGCYDmJ30VU47mV4jVEMvVn2GLHpj5T3JfYd4qejU6RsFMLLOb94CIY/MmgHO b4utfMToFA== -----END CERTIFICATE-----Generated at Mon Apr 27 21:55:29 2026 by rpki-client