$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json) Hash identifier: KsWueZsTAZGsFk2vLOpTaTY0WRoTHp2baC0gioTJmxo= Subject key identifier: 22:32:9E:E2:AE:6A:3E:3B:A8:A0:C7:50:D0:E4:A2:D4:51:6E:8F:07 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 3A6AAFC6D5DBF1974AFA43DCD67B0B2FC7DCF413 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft Manifest number: C4 Signing time: Thu 10 Sep 2026 16:26:52 +0000 Manifest this update: Thu 10 Sep 2026 16:21:52 +0000 Manifest next update: Sun 13 Sep 2026 19:47:52 +0000 Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=) 2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=) 3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: CIKbADeRFisSwivbX3H9qlXKGyerC76XdOIGU4eTKSk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:af:c6:d5:db:f1:97:4a:fa:43:dc:d6:7b:0b:2f:c7:dc:f4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Sep 10 16:21:52 2026 GMT Not After : Sep 13 19:47:52 2026 GMT Subject: CN=22329EE2AE6A3E3BA8A0C750D0E4A2D4516E8F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:bb:2f:18:25:76:8f:5f:4e:30:17:26:45: d3:1b:da:37:a8:47:f5:97:07:62:4a:d9:99:7b:f1: 2a:05:f8:ca:6d:17:22:f2:b9:f5:8c:43:d7:1a:51: 01:ba:ec:b5:8e:f7:b2:52:7b:0e:3f:70:24:6c:80: 2b:4e:57:9a:7c:42:a2:97:69:2b:5f:d2:2a:b9:14: 51:a8:60:78:0b:93:24:8a:bc:78:8b:40:c6:bb:4f: ac:a5:af:6a:97:55:d5:79:72:06:be:3a:aa:0c:54: a1:04:f1:a9:3f:9d:26:f6:93:b0:94:63:f5:96:69: ea:20:37:99:c4:30:ba:ab:68:29:02:50:6e:5b:fb: 60:d7:be:7a:cc:a6:b3:6e:08:80:ae:b3:31:46:71: e5:8f:b3:91:c9:78:5b:9c:4e:04:3e:0d:28:fc:8e: 25:c1:54:52:3d:e9:21:dc:f3:26:1e:73:eb:fc:23: 81:2b:b0:8d:dd:13:99:ec:d7:3a:a1:1a:79:77:56: 0b:fa:c8:35:0c:6a:ef:3f:cc:26:a6:36:09:d4:de: 64:4a:a5:cf:eb:2c:4b:f1:63:56:fa:30:0e:8d:6b: ed:e7:69:df:a3:77:5e:2f:34:73:66:22:fd:3d:58: 07:b9:b3:0e:d9:dc:30:29:4f:ac:ce:8d:75:d5:7a: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:9E:E2:AE:6A:3E:3B:A8:A0:C7:50:D0:E4:A2:D4:51:6E:8F:07 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0b:ad:7c:15:6a:0d:31:8c:80:9d:d9:90:7f:bf:81:fc:01: 9b:e6:68:f3:53:6d:e5:56:a8:a9:f8:31:ca:ba:42:34:fb:af: cb:fa:fa:14:68:02:66:d4:da:bd:50:3d:d8:83:ff:9c:60:b4: e4:62:57:8d:04:48:cf:02:dc:a2:7b:37:f0:0a:38:44:3a:e2: f3:4d:d7:41:27:7c:0d:03:92:3f:2e:d7:6e:88:34:1b:d2:cc: d5:47:31:30:75:81:3a:c2:4a:4e:95:8b:52:29:3d:36:16:26: 9f:8b:6d:73:c7:03:f2:6a:b6:35:e2:3b:85:8b:d0:35:5a:0f: 2b:a0:fa:60:30:15:04:45:f3:81:c5:14:98:09:6a:68:55:be: c1:75:26:cc:4d:37:17:b7:a3:8c:a2:c9:0e:7a:32:c2:ba:bc: 08:d3:99:5d:f8:11:24:3d:4a:e2:e9:bf:25:e8:c6:9e:8c:74: f3:54:f7:dd:07:88:ca:98:cb:00:49:c0:67:88:bf:e5:15:88: 86:8e:1f:57:78:34:35:7e:86:7a:26:81:8b:ab:35:4a:b9:7d: 47:ee:6f:e9:72:d8:7b:01:ed:a0:0e:00:4e:c7:c8:a0:48:60: 13:ad:8c:13:6e:b4:da:b8:83:75:1f:e8:01:33:85:fd:25:65: 3e:24:21:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOmqvxtXb8ZdK+kPc1nsLL8fc9BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA5MTAxNjIxNTJaFw0yNjA5MTMxOTQ3NTJaMDMxMTAvBgNV BAMTKDIyMzI5RUUyQUU2QTNFM0JBOEEwQzc1MEQwRTRBMkQ0NTE2RThGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC7svGCV2j19OMBcmRdMb2jeo R/WXB2JK2Zl78SoF+MptFyLyufWMQ9caUQG67LWO97JSew4/cCRsgCtOV5p8QqKX aStf0iq5FFGoYHgLkySKvHiLQMa7T6ylr2qXVdV5cga+OqoMVKEE8ak/nSb2k7CU Y/WWaeogN5nEMLqraCkCUG5b+2DXvnrMprNuCICuszFGceWPs5HJeFucTgQ+DSj8 jiXBVFI96SHc8yYec+v8I4ErsI3dE5ns1zqhGnl3Vgv6yDUMau8/zCamNgnU3mRK pc/rLEvxY1b6MA6Na+3nad+jd14vNHNmIv09WAe5sw7Z3DApT6zOjXXVevmxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIjKe4q5qPjuooMdQ0OSi1FFujwcwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1 NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQutfBVqDTGM gJ3ZkH+/gfwBm+Zo81Nt5VaoqfgxyrpCNPuvy/r6FGgCZtTavVA92IP/nGC05GJX jQRIzwLcons38Ao4RDri803XQSd8DQOSPy7Xbog0G9LM1UcxMHWBOsJKTpWLUik9 NhYmn4ttc8cD8mq2NeI7hYvQNVoPK6D6YDAVBEXzgcUUmAlqaFW+wXUmzE03F7ej jKLJDnoywrq8CNOZXfgRJD1K4um/JejGnox081T33QeIypjLAEnAZ4i/5RWIho4f V3g0NX6GeiaBi6s1Srl9R+5v6XLYewHtoA4ATsfIoEhgE62ME2602riDdR/oATOF /SVlPiQhvg== -----END CERTIFICATE-----Generated at Thu Sep 10 19:57:22 2026 by rpki-client