$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: 7T4IVUtX7HFIFT/7oEWz9qO3FTzPSTgkeaRJXFBkLsc= Subject key identifier: 50:3E:5E:E4:EA:9B:89:51:50:C9:03:F1:3D:E2:48:49:8C:3F:DF:53 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 23060B51500C20E2865D721C1EA8E2CEA6BE6607 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 16 Signing time: Mon 27 Apr 2026 01:18:38 +0000 Manifest this update: Mon 27 Apr 2026 01:13:38 +0000 Manifest next update: Tue 28 Apr 2026 04:52:38 +0000 Files and hashes: 1: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 2: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 3: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 4: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 5: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 6: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 7: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 8: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 9: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 10: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 11: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) 12: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 13: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 14: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: q7oeJ9eZXdMVTaOI1w7N/rjdVZG3SRK+dyFBIlulEsg=) 15: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 16: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 17: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 18: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 19: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 20: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:06:0b:51:50:0c:20:e2:86:5d:72:1c:1e:a8:e2:ce:a6:be:66:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 27 01:13:38 2026 GMT Not After : Apr 28 04:52:38 2026 GMT Subject: CN=503E5EE4EA9B895150C903F13DE248498C3FDF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:2f:9f:76:11:ea:23:22:03:a7:87:6c:9e: c0:e4:7b:1b:71:5a:ef:1f:65:25:f3:39:9e:8a:6c: 0d:10:26:e1:aa:21:b9:18:18:3c:cc:e5:a2:91:b3: a9:28:9d:58:37:ec:a2:88:37:75:d2:29:3d:16:02: 77:27:a6:7d:c6:09:18:05:19:5d:fd:82:73:82:21: ef:ad:da:7e:61:6c:64:be:28:e7:a0:df:01:f4:c0: 85:40:64:2d:e2:9c:76:db:4e:aa:89:cf:1c:ae:d8: b7:9a:4d:b8:1a:16:7f:46:bc:cd:41:a7:bd:47:9b: 51:6e:ea:cb:ca:b3:14:bf:ff:1f:dc:d3:44:de:07: 9f:9f:b6:6c:9d:6c:23:85:59:16:87:23:c5:a6:07: b9:9c:4d:78:cf:61:0a:a0:a9:77:73:77:cf:b3:d3: df:08:7e:65:85:0b:ec:dd:66:24:0b:2c:77:aa:e5: d1:4e:6f:7c:c4:9f:97:b0:a1:ea:ff:70:41:5a:6e: d9:c2:46:fe:a5:9c:3c:63:89:10:37:cb:b1:b4:e2: f8:1e:ec:41:2f:e3:1c:9f:cf:d7:20:e6:9e:6d:36: a1:79:4a:61:c7:cb:12:7d:82:3a:22:d4:a6:9b:09: 8e:32:00:f3:39:0f:0e:ec:0c:e6:cc:b3:a0:97:5d: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:5E:E4:EA:9B:89:51:50:C9:03:F1:3D:E2:48:49:8C:3F:DF:53 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c0:27:65:8d:cc:24:57:71:00:73:ae:e3:1c:b7:dd:27:f0: 23:f3:46:f2:7d:12:46:6c:38:44:81:0b:5e:68:a2:2a:0f:d0: e0:ca:92:49:f2:d6:4b:0e:eb:68:73:fd:90:d0:31:c4:2f:d6: 50:07:db:2c:91:cd:fc:de:20:30:08:6d:85:19:3f:20:dd:1f: 66:bb:7b:37:c1:a4:88:e0:06:0f:e9:59:a5:d7:31:09:c7:cd: 07:1b:a5:4a:73:ea:25:2c:36:bb:61:1f:1f:4a:be:2e:81:4d: 3c:24:c0:5a:26:08:e4:d2:85:f2:de:45:57:37:a6:65:10:80: a7:c3:22:e4:e3:93:fd:b3:20:4f:be:ba:41:55:0a:36:fe:d5: 06:8e:ad:79:ef:97:26:3c:ca:1a:68:fa:8e:ff:af:71:c3:f8: 6e:d4:4a:30:fa:fb:0d:8e:ee:0d:17:3f:94:bc:65:96:ea:63: 5b:51:b6:ed:3e:1e:c8:a2:fd:78:ee:c9:67:0f:8d:b0:3e:b2: ca:c5:56:68:4f:25:9b:90:d3:a6:c4:ea:a6:5a:ce:3f:67:43: 3f:56:10:9a:b5:1e:3f:a8:13:5b:86:cc:d3:fa:73:e6:9c:39: ef:88:33:a7:53:eb:64:82:58:9e:a4:ef:09:1d:14:f3:e1:ef: 8b:1d:db:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIwYLUVAMIOKGXXIcHqjizqa+ZgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjcwMTEzMzhaFw0yNjA0MjgwNDUyMzhaMDMxMTAvBgNV BAMTKDUwM0U1RUU0RUE5Qjg5NTE1MEM5MDNGMTNERTI0ODQ5OEMzRkRGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqC+fdhHqIyIDp4dsnsDkextx Wu8fZSXzOZ6KbA0QJuGqIbkYGDzM5aKRs6konVg37KKIN3XSKT0WAncnpn3GCRgF GV39gnOCIe+t2n5hbGS+KOeg3wH0wIVAZC3inHbbTqqJzxyu2LeaTbgaFn9GvM1B p71Hm1Fu6svKsxS//x/c00TeB5+ftmydbCOFWRaHI8WmB7mcTXjPYQqgqXdzd8+z 098IfmWFC+zdZiQLLHeq5dFOb3zEn5ewoer/cEFabtnCRv6lnDxjiRA3y7G04vge 7EEv4xyfz9cg5p5tNqF5SmHHyxJ9gjoi1KabCY4yAPM5Dw7sDObMs6CXXYvzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUD5e5OqbiVFQyQPxPeJISYw/31MwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcAnZY3MJFdx AHOu4xy33SfwI/NG8n0SRmw4RIELXmiiKg/Q4MqSSfLWSw7raHP9kNAxxC/WUAfb LJHN/N4gMAhthRk/IN0fZrt7N8GkiOAGD+lZpdcxCcfNBxulSnPqJSw2u2EfH0q+ LoFNPCTAWiYI5NKF8t5FVzemZRCAp8Mi5OOT/bMgT766QVUKNv7VBo6tee+XJjzK Gmj6jv+vccP4btRKMPr7DY7uDRc/lLxllupjW1G27T4eyKL9eO7JZw+NsD6yysVW aE8lm5DTpsTqplrOP2dDP1YQmrUeP6gTW4bM0/pz5pw574gzp1PrZIJYnqTvCR0U 8+Hvix3bUQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:37:11 2026 by rpki-client