$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: +lUtAQwraYROd+P05jSeCqK39obovWv9abN1WmylYPw= Subject key identifier: 91:1A:84:65:66:2F:3E:AF:B9:D5:5B:D5:1C:58:BD:60:E7:1E:58:CE Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 36EA9B89B57D6ECE1ACA022C788621AD218C1CC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 53 Signing time: Thu 11 Jun 2026 11:43:44 +0000 Manifest this update: Thu 11 Jun 2026 11:38:44 +0000 Manifest next update: Fri 12 Jun 2026 13:33:44 +0000 Files and hashes: 1: 3230332e3136362e3136352e302f32342d3234203d3e20313338343231.roa (hash: 3edwUZcx4xVEyYiBLeffA6+bSkvvkeLPADHbe6Flqic=) 2: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: tAsffVMaf2QX/8kWYKHsxYHeu+c6FfUM8WGPcNmSwvs=) 3: 3230332e3136362e3138382e302f32342d3234203d3e20313338343231.roa (hash: WvFgghg9fFFyAy3Jy7S8A3EQMAWQl7P4hb8z9hnB24Y=) 4: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (hash: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E=) 5: 3231312e3135322e33322e302f32312d3234203d3e2034383131.roa (hash: 2bd41DISwd6rDwCCs/zqXh+rpw2EVXaoNJO0JrXJNaw=) 6: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (hash: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8=) 7: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (hash: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=) 8: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (hash: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY=) 9: 3230332e3136362e3138372e302f32342d3234203d3e20313338343231.roa (hash: DmPzkj2ONNmY/aE+/swnRzAMwTlM99eK/2yhU8YPFwM=) 10: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (hash: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE=) 11: 3131392e33372e302e302f31372d3137203d3e2030.roa (hash: QIsmtWVa85r+w+bRB8pFOOwuyvhvK76NaD6lFd7t69Q=) 12: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (hash: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40=) 13: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (hash: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8=) 14: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (hash: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8=) 15: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (hash: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0=) 16: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (hash: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU=) 17: 3231312e3135322e34382e302f32302d3234203d3e2034383131.roa (hash: lIT9UA7MUbbh6lzw2U/Rp15uopsKMqSEt9PAKzZABR8=) 18: 3131392e33372e302e302f32332d3233203d3e2034383131.roa (hash: ZWvPfn+2QH2S19QjYss/KIYl6JEoNec5El8+pViX1gE=) 19: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (hash: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg=) 20: 3131392e33372e3132382e302f31382d3138203d3e203539333434.roa (hash: yFn/E8ZBW/Rl0wOhDWWXbydhJyP5junLbg5kKEBNU2k=) 21: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (hash: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg=) 22: 3230332e3136362e3137322e302f32342d3234203d3e20313338343231.roa (hash: m+QXVVRq+pnGZVYYxBadcn/jh4lkl6Fil80uFXW8zDE=) 23: 3230332e3136362e3136312e302f32342d3234203d3e20313338343231.roa (hash: +ZUvV31m6HWJsQhb7Hj/dahoq9brtrbMO+TGlvGeU9A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 13:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ea:9b:89:b5:7d:6e:ce:1a:ca:02:2c:78:86:21:ad:21:8c:1c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jun 11 11:38:44 2026 GMT Not After : Jun 12 13:33:44 2026 GMT Subject: CN=911A8465662F3EAFB9D55BD51C58BD60E71E58CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:b9:96:e9:93:14:15:92:03:74:e3:e1:a3: b3:4f:28:2e:ba:ca:7d:31:68:c2:2b:a8:4c:43:38: 43:77:c9:fa:33:2b:2e:b7:b7:3f:f9:0c:b8:8f:a4: 77:90:92:dd:3e:b3:46:17:c7:f1:3c:40:f3:8d:3e: 5b:76:a9:f6:49:16:ea:cd:0b:9b:05:f3:f9:89:40: 64:5c:9f:dc:36:ba:3a:2f:f4:f9:75:41:0b:07:08: 7e:de:99:8e:6b:2c:f7:67:29:15:de:9e:73:6f:f9: 4e:68:46:90:8c:85:3e:b0:38:91:2b:a1:01:14:52: e7:42:80:64:3b:cb:d8:1c:42:c8:98:69:a3:ba:df: 2e:47:85:8e:56:f8:91:af:b9:2e:3d:a1:fe:25:c2: 16:19:22:0b:66:fb:40:bf:27:e0:80:f4:4a:1e:4a: 09:55:3d:75:cd:42:c3:3d:de:11:40:80:66:d1:9c: d5:07:f3:61:c7:67:89:4b:21:1a:1c:8e:6e:ac:d8: 0b:b3:80:b3:a5:96:2a:18:fd:6e:55:53:cf:90:f3: bb:33:6f:e6:e7:33:87:ae:00:9d:78:2f:0f:05:8e: 07:c0:ef:b9:83:de:38:33:a4:83:14:b6:48:f6:73: db:2e:e9:b1:82:10:43:40:95:32:33:b8:19:cc:3a: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:84:65:66:2F:3E:AF:B9:D5:5B:D5:1C:58:BD:60:E7:1E:58:CE X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:3f:99:6b:cb:2f:8b:45:a0:95:27:c7:02:07:ac:04:01: 26:43:94:63:c0:44:bd:72:5d:a9:15:ed:05:57:2b:27:7c:77: 00:73:32:9c:3d:34:1a:5e:37:eb:43:6d:3b:17:d7:02:75:04: 1a:c5:36:23:51:05:77:0c:cc:8e:e4:e6:ba:c1:91:c5:6a:59: 73:cb:29:ec:ef:7c:b3:f0:9b:2f:49:86:70:9d:e2:7e:13:f0: 6f:97:46:c2:eb:7b:d0:0c:7c:d1:db:0e:ff:5c:ff:5c:fe:7a: a2:e9:39:5d:3e:8b:8a:96:fd:d4:d7:c3:5e:3f:ba:73:28:4c: 30:bd:9c:61:d4:6c:f8:02:ab:d2:6c:59:eb:0c:c3:93:c8:c5: e9:a1:58:6a:42:97:c2:2a:0b:cb:06:33:9a:43:25:33:1c:e3: d7:97:84:d4:af:ed:7c:79:77:3d:60:11:44:e1:b1:e5:c9:79: 28:90:2a:46:9a:0c:bf:d6:54:50:eb:48:c5:84:79:4d:ac:db: 9b:e6:04:76:5d:d2:c5:bb:b2:fa:bf:ea:be:3b:78:02:4f:55: 08:05:e4:cd:f8:83:78:ba:c5:e3:20:ba:28:e1:d4:f5:70:b6: 4b:ab:6c:b9:33:df:8d:ed:71:cf:0e:a5:c6:a1:ed:87:e2:f3: 81:a8:1d:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNuqbibV9bs4aygIseIYhrSGMHMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA2MTExMTM4NDRaFw0yNjA2MTIxMzMzNDRaMDMxMTAvBgNV BAMTKDkxMUE4NDY1NjYyRjNFQUZCOUQ1NUJENTFDNThCRDYwRTcxRTU4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZrmW6ZMUFZIDdOPho7NPKC66 yn0xaMIrqExDOEN3yfozKy63tz/5DLiPpHeQkt0+s0YXx/E8QPONPlt2qfZJFurN C5sF8/mJQGRcn9w2ujov9Pl1QQsHCH7emY5rLPdnKRXennNv+U5oRpCMhT6wOJEr oQEUUudCgGQ7y9gcQsiYaaO63y5HhY5W+JGvuS49of4lwhYZIgtm+0C/J+CA9Eoe SglVPXXNQsM93hFAgGbRnNUH82HHZ4lLIRocjm6s2AuzgLOllioY/W5VU8+Q87sz b+bnM4euAJ14Lw8FjgfA77mD3jgzpIMUtkj2c9su6bGCEENAlTIzuBnMOsp7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkRqEZWYvPq+51VvVHFi9YOceWM4wHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp30/mWvLL4tF oJUnxwIHrAQBJkOUY8BEvXJdqRXtBVcrJ3x3AHMynD00Gl4360NtOxfXAnUEGsU2 I1EFdwzMjuTmusGRxWpZc8sp7O98s/CbL0mGcJ3ifhPwb5dGwut70Ax80dsO/1z/ XP56ouk5XT6Lipb91NfDXj+6cyhMML2cYdRs+AKr0mxZ6wzDk8jF6aFYakKXwioL ywYzmkMlMxzj15eE1K/tfHl3PWARROGx5cl5KJAqRpoMv9ZUUOtIxYR5Tazbm+YE dl3Sxbuy+r/qvjt4Ak9VCAXkzfiDeLrF4yC6KOHU9XC2S6tsuTPfje1xzw6lxqHt h+LzgagdsA== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:19 2026 by rpki-client