$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: ko0yGFp09fobAwGUSvcJ+UxMfBvznmOhMNxYdfni7Os= Subject key identifier: 63:D4:09:AE:B9:96:80:63:48:69:BA:31:A8:17:CB:21:1B:2C:DF:FF Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 3C3B7AFACE31679BF1904C30E009A23C3C87B549 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: D5 Signing time: Mon 26 Oct 2026 01:48:09 +0000 Manifest this update: Mon 26 Oct 2026 01:43:09 +0000 Manifest next update: Thu 29 Oct 2026 08:38:09 +0000 Files and hashes: 1: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 2: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 3: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 4: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 5: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 6: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 7: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 8: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 9: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 10: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 11: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: 41Jagr83PCzn89/NYxU2TyAe4twejG3MSfcNGu+GiG0=) 12: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 13: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 14: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 15: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 16: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 17: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 18: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 19: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 20: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 21: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 22: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 23: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 08:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:7a:fa:ce:31:67:9b:f1:90:4c:30:e0:09:a2:3c:3c:87:b5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Oct 26 01:43:09 2026 GMT Not After : Oct 29 08:38:09 2026 GMT Subject: CN=63D409AEB99680634869BA31A817CB211B2CDFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:0f:28:38:a4:13:79:31:3b:43:9a:0b:2b: b2:5c:e6:32:8f:66:44:6f:0d:ee:3e:e1:17:72:07: 25:2c:80:e5:f1:99:ec:d3:0d:e9:96:6b:9d:e7:53: a1:14:ae:c8:e2:16:33:64:59:2a:99:c7:7b:d3:8c: 9a:d4:3f:cf:53:80:de:74:08:25:45:67:1e:3b:76: 61:95:b6:19:64:07:6d:5d:83:c8:ed:a2:2d:37:c6: 4d:b0:e5:84:4c:a2:5b:60:eb:72:86:ac:b3:86:98: 7a:fa:0f:d7:6f:44:f2:2c:d5:7b:a9:40:67:37:ba: 16:cb:00:9c:26:d3:0e:57:92:22:92:74:49:60:a6: 2a:d2:6c:a1:24:19:2c:ea:72:76:57:dc:d6:e9:68: 84:d1:2a:cf:2c:ce:a2:53:95:7f:0c:3f:13:ab:9c: 7d:0d:45:58:a8:50:d0:bd:f3:c8:fb:38:52:c7:fd: d8:f6:3a:2e:5a:71:1b:9f:5b:e9:f0:19:ca:f1:70: 98:97:72:33:1b:4c:65:39:8d:14:2b:6b:92:9b:71: c5:95:42:fa:09:22:79:63:02:3d:ce:0f:9a:d3:d6: e0:82:be:61:87:24:34:95:37:77:eb:ef:dc:87:6b: 3d:04:d4:52:4f:56:03:0c:2a:81:9c:2f:15:35:e4: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:09:AE:B9:96:80:63:48:69:BA:31:A8:17:CB:21:1B:2C:DF:FF X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:dc:bb:df:77:ad:88:7f:b0:a1:fc:f6:16:0f:dd:c1:31: 89:0d:bd:15:1b:79:27:58:e1:61:90:e8:ee:35:41:c7:c7:27: 83:34:70:0a:00:70:ee:e8:de:f1:ed:71:e1:17:e9:0f:5b:c8: 2a:62:17:dd:dd:14:9e:98:98:5b:f9:72:92:a1:e7:d8:05:82: e0:4e:98:14:2b:cf:a4:f7:54:40:cf:30:c2:f0:64:0b:e4:52: 03:69:66:f0:fc:aa:ba:43:3a:f3:39:29:86:6e:93:d0:7d:4b: ab:12:77:13:f9:89:8c:fe:24:e5:ad:47:34:11:cb:68:1c:18: be:8b:88:3a:d9:a6:4c:e6:f8:a9:37:ff:e6:22:2a:11:0b:4d: 65:95:07:87:1b:19:df:e7:f2:3c:a2:20:19:59:c5:8d:b1:d8: 36:8f:fb:e8:2a:38:e8:dc:e6:de:eb:c4:d0:ec:bd:72:36:dd: 16:a2:05:b8:0d:71:6f:76:32:04:6b:0a:da:29:d1:54:99:5f: 80:64:e1:fc:68:cf:17:8f:f4:b8:c8:54:6e:c3:32:16:80:02: 07:06:ae:f4:d9:22:1f:46:45:3c:85:03:2f:6c:d7:0e:c3:b1: a3:20:91:45:20:7a:dd:9a:f1:9b:51:ea:48:47:b2:6e:85:67: ae:7c:5f:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPDt6+s4xZ5vxkEww4AmiPDyHtUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjEwMjYwMTQzMDlaFw0yNjEwMjkwODM4MDlaMDMxMTAvBgNV BAMTKDYzRDQwOUFFQjk5NjgwNjM0ODY5QkEzMUE4MTdDQjIxMUIyQ0RGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nw8oOKQTeTE7Q5oLK7Jc5jKP ZkRvDe4+4RdyByUsgOXxmezTDemWa53nU6EUrsjiFjNkWSqZx3vTjJrUP89TgN50 CCVFZx47dmGVthlkB21dg8jtoi03xk2w5YRMoltg63KGrLOGmHr6D9dvRPIs1Xup QGc3uhbLAJwm0w5XkiKSdElgpirSbKEkGSzqcnZX3NbpaITRKs8szqJTlX8MPxOr nH0NRVioUNC988j7OFLH/dj2Oi5acRufW+nwGcrxcJiXcjMbTGU5jRQra5KbccWV QvoJInljAj3OD5rT1uCCvmGHJDSVN3fr79yHaz0E1FJPVgMMKoGcLxU15Au9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY9QJrrmWgGNIaboxqBfLIRss3/8wHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxzcu993rYh/ sKH89hYP3cExiQ29FRt5J1jhYZDo7jVBx8cngzRwCgBw7uje8e1x4RfpD1vIKmIX 3d0UnpiYW/lykqHn2AWC4E6YFCvPpPdUQM8wwvBkC+RSA2lm8PyqukM68zkphm6T 0H1LqxJ3E/mJjP4k5a1HNBHLaBwYvouIOtmmTOb4qTf/5iIqEQtNZZUHhxsZ3+fy PKIgGVnFjbHYNo/76Co46Nzm3uvE0Oy9cjbdFqIFuA1xb3YyBGsK2inRVJlfgGTh /GjPF4/0uMhUbsMyFoACBwau9NkiH0ZFPIUDL2zXDsOxoyCRRSB63Zrxm1HqSEey boVnrnxfiw== -----END CERTIFICATE-----Generated at Wed Oct 28 10:14:01 2026 by rpki-client