$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: 39xDcEGQThe71kVeGKbq6ZmWcHJ2UIGR+lhMJq6pCmc= Subject key identifier: 00:60:02:42:C3:9E:8F:C0:96:B5:30:7C:4E:5E:4B:76:16:62:07:A7 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 6FC4CC49A8410BCD5D7EFBC832DE93E0F0D1E4F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: C0 Signing time: Tue 08 Sep 2026 19:59:58 +0000 Manifest this update: Tue 08 Sep 2026 19:54:58 +0000 Manifest next update: Sat 12 Sep 2026 02:46:58 +0000 Files and hashes: 1: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 2: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 3: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 4: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 5: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 6: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 7: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 8: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 9: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 10: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 11: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 12: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: iuJEzwgP9+3z7OB+5mg6BdApwP4K4i/A9/vDkaho74M=) 13: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 14: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 15: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 16: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 17: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 18: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 19: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 20: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 21: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 22: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 23: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c4:cc:49:a8:41:0b:cd:5d:7e:fb:c8:32:de:93:e0:f0:d1:e4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Sep 8 19:54:58 2026 GMT Not After : Sep 12 02:46:58 2026 GMT Subject: CN=00600242C39E8FC096B5307C4E5E4B76166207A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:7a:d4:64:90:3a:7d:ed:b0:e9:73:d9:33: c3:a0:e6:4c:a8:60:1a:79:2c:7e:a2:81:74:55:a7: 69:0d:40:86:bb:f2:5b:ad:b7:a4:04:99:f6:25:0a: e6:0c:4a:29:29:53:25:6e:c2:ea:43:df:34:d3:47: 98:a0:b7:fa:0f:15:69:6e:b2:f1:1c:86:d0:2b:18: 39:4d:92:64:4f:0d:a6:ad:74:17:5a:62:83:22:a2: 52:64:60:ac:c0:9d:f0:5c:cf:d4:1f:86:f2:36:5a: 25:21:79:49:65:6e:c2:e1:ed:29:4b:da:7e:31:31: eb:eb:d2:c9:68:b5:20:a6:1c:4c:db:c9:ef:0a:48: 77:14:fb:74:90:c1:5f:44:30:ec:49:1e:9c:4d:35: 25:fc:0b:e4:36:41:e3:c3:85:65:47:9a:27:65:50: ff:c6:94:ee:2a:21:1e:e9:06:2b:81:00:18:4b:21: f9:49:1f:10:18:f2:09:49:5e:80:06:bf:f0:83:ca: 02:f6:c2:e0:35:34:80:d5:11:82:34:eb:8a:99:5c: c1:99:5b:cc:07:66:5e:2f:9e:30:c6:79:10:ea:69: c3:85:36:36:c9:2a:84:42:6f:38:42:a8:76:f1:d7: bf:7b:50:f5:65:53:09:3b:d9:6e:66:16:e9:24:05: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:02:42:C3:9E:8F:C0:96:B5:30:7C:4E:5E:4B:76:16:62:07:A7 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:92:4c:7e:da:ef:d9:42:89:2e:a2:81:e0:3e:4e:ce:01:3a: d7:cf:97:56:f3:4d:33:40:48:f8:2a:6f:86:a3:04:9b:1f:7f: cb:09:db:f9:e7:c6:96:9f:55:d1:52:8d:a5:56:4f:eb:dd:b1: 80:cb:6c:9e:04:d0:ab:47:02:95:60:1f:88:cd:61:be:65:94: 38:4e:4d:7d:01:fe:6a:64:e6:32:30:d0:b1:5d:ea:aa:b6:f0: 08:12:0d:00:79:5e:30:ff:01:ee:dd:72:df:92:19:9c:52:26: bc:ef:c1:7f:24:20:37:c2:91:ac:6b:d6:04:1e:36:df:fb:d3: 2e:5e:5c:b6:2a:c1:70:c2:f8:5d:fd:f7:94:87:14:fc:fc:4c: 66:ce:03:89:bf:34:85:b8:e0:c1:a8:d0:cb:94:1c:2a:e0:ec: 1d:3f:af:c0:c8:4a:4d:cb:0f:49:84:ea:94:00:4e:de:75:90: 4c:96:15:24:5f:96:e1:40:4a:92:2c:a0:59:88:45:ee:fd:6b: f6:51:31:ef:08:7b:53:c8:b5:e3:e3:fb:ac:8b:ac:14:4e:a9: c7:36:61:a8:46:a0:e9:22:46:bd:ef:1c:c4:fa:ee:d0:0f:4c: 95:67:d8:66:5f:8c:c3:db:3c:6c:ee:68:9b:a3:ff:a5:b0:85: b8:70:ee:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb8TMSahBC81dfvvIMt6T4PDR5PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA5MDgxOTU0NThaFw0yNjA5MTIwMjQ2NThaMDMxMTAvBgNV BAMTKDAwNjAwMjQyQzM5RThGQzA5NkI1MzA3QzRFNUU0Qjc2MTY2MjA3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSnrUZJA6fe2w6XPZM8Og5kyo YBp5LH6igXRVp2kNQIa78lutt6QEmfYlCuYMSikpUyVuwupD3zTTR5igt/oPFWlu svEchtArGDlNkmRPDaatdBdaYoMiolJkYKzAnfBcz9QfhvI2WiUheUllbsLh7SlL 2n4xMevr0slotSCmHEzbye8KSHcU+3SQwV9EMOxJHpxNNSX8C+Q2QePDhWVHmidl UP/GlO4qIR7pBiuBABhLIflJHxAY8glJXoAGv/CDygL2wuA1NIDVEYI064qZXMGZ W8wHZl4vnjDGeRDqacOFNjbJKoRCbzhCqHbx1797UPVlUwk72W5mFukkBf3hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAGACQsOej8CWtTB8Tl5LdhZiB6cwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5JMftrv2UKJ LqKB4D5OzgE618+XVvNNM0BI+CpvhqMEmx9/ywnb+efGlp9V0VKNpVZP692xgMts ngTQq0cClWAfiM1hvmWUOE5NfQH+amTmMjDQsV3qqrbwCBINAHleMP8B7t1y35IZ nFImvO/BfyQgN8KRrGvWBB423/vTLl5ctirBcML4Xf33lIcU/PxMZs4Dib80hbjg wajQy5QcKuDsHT+vwMhKTcsPSYTqlABO3nWQTJYVJF+W4UBKkiygWYhF7v1r9lEx 7wh7U8i14+P7rIusFE6pxzZhqEag6SJGve8cxPru0A9MlWfYZl+Mw9s8bO5om6P/ pbCFuHDu6Q== -----END CERTIFICATE-----Generated at Thu Sep 10 12:47:16 2026 by rpki-client