$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: BHnV27h6bMNnL82KD0BdmlY+x8t0jf/+1jYMO6GVCa4= Subject key identifier: BA:F6:9F:AA:7C:C9:D7:CD:F2:83:7F:BA:CE:A1:F8:93:7C:78:60:CE Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 0F8CAB014D060D9D081D2B09C8464654F074A151 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 8F Signing time: Sun 26 Jul 2026 13:26:40 +0000 Manifest this update: Sun 26 Jul 2026 13:21:40 +0000 Manifest next update: Mon 27 Jul 2026 16:08:40 +0000 Files and hashes: 1: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 2: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 3: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 4: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 5: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 6: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 7: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 8: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 9: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 10: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 11: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 12: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 13: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 14: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 15: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 16: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 17: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 18: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 19: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 20: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 21: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 22: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 23: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: +aU+5J1X3DHaQ7eXZxiQpMPXr0B+6PV9VnY1LiCAEUA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8c:ab:01:4d:06:0d:9d:08:1d:2b:09:c8:46:46:54:f0:74:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jul 26 13:21:40 2026 GMT Not After : Jul 27 16:08:40 2026 GMT Subject: CN=BAF69FAA7CC9D7CDF2837FBACEA1F8937C7860CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:07:9b:60:25:fd:9f:a8:20:34:73:bb:23: 38:53:1f:7f:6e:7c:e6:64:e0:db:15:17:0d:b3:75: b1:6c:6b:e4:c4:44:88:a9:54:c3:fa:c9:25:1d:67: 04:66:d3:4c:a8:45:fd:78:e6:46:d9:f2:e7:d4:c0: 81:8c:f5:9a:c3:26:d3:97:11:0c:8e:1e:4d:de:c5: 73:55:e9:bd:23:03:eb:fd:ad:d7:67:39:1a:6a:af: 7b:97:12:c8:d8:f5:66:79:21:d3:f2:b0:36:5e:ea: 7f:35:98:7a:3d:df:5c:4f:a4:06:c8:33:a5:cc:83: 26:c1:de:77:d3:b7:c1:88:4a:51:71:83:54:91:3c: db:48:65:df:14:8d:ec:2d:8f:bf:50:cf:fc:75:9b: da:fb:45:e2:a0:d8:c5:1d:0f:f3:1d:a2:d3:fb:5c: 8d:46:7e:18:36:5a:af:0d:89:c3:24:b7:af:08:ce: 9e:6c:68:ea:a3:d0:29:e0:14:42:90:d6:70:9b:2a: c7:b0:0e:fc:e3:8d:85:a0:2a:ca:de:c9:09:8a:51: 54:e5:90:b5:c7:c5:02:4a:40:31:e2:64:ce:f4:e7: a6:70:50:e6:1d:8c:f8:29:43:38:29:2f:ae:c7:b6: 52:e6:90:4d:da:8e:8c:23:45:ed:b5:1f:31:bd:78: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:9F:AA:7C:C9:D7:CD:F2:83:7F:BA:CE:A1:F8:93:7C:78:60:CE X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:99:0a:e7:7a:c9:cd:2e:61:13:ae:ef:98:49:d0:b9:b6:31: 39:9d:9e:6a:d2:fe:28:ee:1a:80:9f:9b:92:e7:cb:15:00:a2: 09:58:7e:e9:3a:8c:0c:be:2d:f3:10:d0:98:fe:82:2a:00:4d: cf:fc:0e:77:0f:bc:ad:22:b7:c7:72:4e:f3:39:e5:5a:23:6f: 72:22:e3:18:31:e2:13:90:7b:b9:9b:3e:64:e1:21:3d:38:b6: 44:9e:9f:c9:df:54:e6:27:89:47:9b:3a:60:4e:3c:a6:4d:44: 46:a4:cb:2c:83:76:6e:c8:ab:66:aa:44:f2:0f:45:42:47:08: 79:74:f5:1e:0b:9c:dc:e1:c9:6d:51:9f:04:0c:42:9b:b9:1c: e1:13:19:d5:be:f9:99:76:38:2a:b0:30:fc:d1:b2:9f:90:33: 44:2e:d8:71:55:0b:4a:be:32:dd:e8:7a:dd:59:46:09:52:ea: d9:29:86:cb:4c:94:8f:7f:4d:86:78:21:31:82:f9:75:c9:f7: 09:c0:fe:68:af:09:1f:22:0a:7d:70:42:07:1b:02:9c:83:ce: 6d:21:3d:bf:3d:7d:08:65:2b:25:4e:6c:95:bb:41:b7:30:07: 16:05:32:68:49:a7:00:2e:0f:32:be:b7:9b:a8:74:2b:1e:c9: 8d:16:15:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD4yrAU0GDZ0IHSsJyEZGVPB0oVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA3MjYxMzIxNDBaFw0yNjA3MjcxNjA4NDBaMDMxMTAvBgNV BAMTKEJBRjY5RkFBN0NDOUQ3Q0RGMjgzN0ZCQUNFQTFGODkzN0M3ODYwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOhQebYCX9n6ggNHO7IzhTH39u fOZk4NsVFw2zdbFsa+TERIipVMP6ySUdZwRm00yoRf145kbZ8ufUwIGM9ZrDJtOX EQyOHk3exXNV6b0jA+v9rddnORpqr3uXEsjY9WZ5IdPysDZe6n81mHo931xPpAbI M6XMgybB3nfTt8GISlFxg1SRPNtIZd8Ujewtj79Qz/x1m9r7ReKg2MUdD/MdotP7 XI1Gfhg2Wq8NicMkt68Izp5saOqj0CngFEKQ1nCbKsewDvzjjYWgKsreyQmKUVTl kLXHxQJKQDHiZM7056ZwUOYdjPgpQzgpL67HtlLmkE3ajowjRe21HzG9eAQzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuvafqnzJ183yg3+6zqH4k3x4YM4wHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppkK53rJzS5h E67vmEnQubYxOZ2eatL+KO4agJ+bkufLFQCiCVh+6TqMDL4t8xDQmP6CKgBNz/wO dw+8rSK3x3JO8znlWiNvciLjGDHiE5B7uZs+ZOEhPTi2RJ6fyd9U5ieJR5s6YE48 pk1ERqTLLIN2bsirZqpE8g9FQkcIeXT1Hguc3OHJbVGfBAxCm7kc4RMZ1b75mXY4 KrAw/NGyn5AzRC7YcVULSr4y3eh63VlGCVLq2SmGy0yUj39NhnghMYL5dcn3CcD+ aK8JHyIKfXBCBxsCnIPObSE9vz19CGUrJU5slbtBtzAHFgUyaEmnAC4PMr63m6h0 Kx7JjRYVig== -----END CERTIFICATE-----Generated at Mon Jul 27 06:53:55 2026 by rpki-client