$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: xg7hxZw8ExiaailIZVYsxQuRwz0bloo4Yqt3/NEGGOY= Subject key identifier: 4A:4F:3A:FC:3E:4E:D9:64:D1:A3:A6:65:AA:3D:06:4D:45:6E:39:D5 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 34451BDB9F032A3DDF34E33247894F2B33493B4F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 1D Signing time: Fri 29 May 2026 19:48:18 +0000 Manifest this update: Fri 29 May 2026 19:43:18 +0000 Manifest next update: Sat 30 May 2026 21:05:18 +0000 Files and hashes: 1: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 2: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 3: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 4: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) 5: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 6: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: Fq5x7DIl0LGmOdOf4x+WCTmUFxijoH2G5YSiCedMrig=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:45:1b:db:9f:03:2a:3d:df:34:e3:32:47:89:4f:2b:33:49:3b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: May 29 19:43:18 2026 GMT Not After : May 30 21:05:18 2026 GMT Subject: CN=4A4F3AFC3E4ED964D1A3A665AA3D064D456E39D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:f9:22:a5:4c:4b:a0:b7:b3:30:8b:85:a6: 3a:0d:e1:7e:3c:31:27:f2:55:ba:df:bb:c8:44:92: e1:99:eb:f3:f1:48:3b:3f:3a:3b:5a:5c:5c:ff:72: 63:cd:0b:02:f5:92:33:71:00:c5:ec:b2:77:5d:f4: 1d:c0:b8:fc:45:10:9a:51:87:46:96:ea:ef:63:9b: 91:bb:49:71:79:37:32:7e:63:45:67:c3:25:52:03: 1e:21:52:2c:2b:d3:8e:86:71:dd:81:f1:92:ce:ca: 11:df:e5:e4:07:ab:87:f2:48:d0:aa:a2:61:84:09: 7a:bf:1d:a3:0b:b0:91:17:b6:bc:5b:f4:79:7b:03: a4:b0:a7:64:89:b7:1a:3d:15:6a:44:38:49:88:58: 59:37:0d:e7:54:4b:0f:8b:73:31:bb:e8:b7:0f:9f: 75:0b:a1:02:1f:4a:8d:d0:1d:34:39:7d:0b:80:e7: d6:a0:c0:f2:06:55:b6:39:5b:e1:8c:e2:df:a6:1d: c1:15:e1:99:07:92:94:ac:ac:1c:72:94:ca:fd:16: 1c:55:ae:7b:39:f0:e4:c0:75:15:cc:ce:e8:f9:dd: 70:cb:fa:bd:dc:fd:eb:65:05:17:e7:6e:7a:9f:ce: 3c:55:d9:e4:53:4b:8b:a5:cb:17:4f:f6:49:0d:c6: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:3A:FC:3E:4E:D9:64:D1:A3:A6:65:AA:3D:06:4D:45:6E:39:D5 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c3:da:df:e2:e9:ef:d0:5e:3c:c0:98:ff:47:c4:a7:a9:db: 75:10:a9:80:23:6d:69:3d:91:16:58:53:d5:9f:85:2c:e7:5d: c0:67:fb:eb:39:78:d5:3f:a7:e4:62:b8:80:32:cc:e8:83:c0: 23:5e:16:51:58:39:b9:f3:f6:6e:74:20:da:f2:e8:e1:e6:5a: 32:f3:22:60:ac:4c:9e:3f:61:9f:82:b7:28:e0:50:68:80:49: 78:0e:75:e9:8e:30:4e:d2:99:23:64:c6:52:68:8d:52:16:18: 1f:f4:6a:eb:f0:7d:4f:b3:79:c8:ad:b2:75:c2:4b:f7:c0:5b: 11:91:eb:f9:fd:93:a2:48:7e:95:3b:d1:57:ce:b8:59:37:6d: f1:e8:5c:dd:92:87:8e:40:ac:b9:6f:78:03:9b:f5:d3:d0:3a: e5:51:8d:a6:a5:b5:c1:8c:d3:a9:ad:76:8b:4e:aa:99:59:25: b9:9f:04:00:e5:1d:d8:9b:7f:4f:5c:5b:c1:e4:ec:24:15:ac: 0d:95:12:14:78:7d:32:8f:cb:97:eb:8f:6c:e6:b0:84:28:90: 8a:49:d4:70:06:20:ba:79:2a:bc:ab:04:1b:a6:5f:62:54:6d: fb:12:b4:8f:2c:8f:8a:3e:b5:4a:fe:e0:30:11:f3:f1:cc:6a: f2:b2:f7:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNEUb258DKj3fNOMyR4lPKzNJO08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA1MjkxOTQzMThaFw0yNjA1MzAyMTA1MThaMDMxMTAvBgNV BAMTKDRBNEYzQUZDM0U0RUQ5NjREMUEzQTY2NUFBM0QwNjRENDU2RTM5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsv/kipUxLoLezMIuFpjoN4X48 MSfyVbrfu8hEkuGZ6/PxSDs/OjtaXFz/cmPNCwL1kjNxAMXssndd9B3AuPxFEJpR h0aW6u9jm5G7SXF5NzJ+Y0VnwyVSAx4hUiwr046Gcd2B8ZLOyhHf5eQHq4fySNCq omGECXq/HaMLsJEXtrxb9Hl7A6Swp2SJtxo9FWpEOEmIWFk3DedUSw+LczG76LcP n3ULoQIfSo3QHTQ5fQuA59agwPIGVbY5W+GM4t+mHcEV4ZkHkpSsrBxylMr9FhxV rns58OTAdRXMzuj53XDL+r3c/etlBRfnbnqfzjxV2eRTS4ulyxdP9kkNxom3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSk86/D5O2WTRo6Zlqj0GTUVuOdUwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsPa3+Lp79Be PMCY/0fEp6nbdRCpgCNtaT2RFlhT1Z+FLOddwGf76zl41T+n5GK4gDLM6IPAI14W UVg5ufP2bnQg2vLo4eZaMvMiYKxMnj9hn4K3KOBQaIBJeA516Y4wTtKZI2TGUmiN UhYYH/Rq6/B9T7N5yK2ydcJL98BbEZHr+f2Tokh+lTvRV864WTdt8ehc3ZKHjkCs uW94A5v109A65VGNpqW1wYzTqa12i06qmVkluZ8EAOUd2Jt/T1xbweTsJBWsDZUS FHh9Mo/Ll+uPbOawhCiQiknUcAYgunkqvKsEG6ZfYlRt+xK0jyyPij61Sv7gMBHz 8cxq8rL3Zg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client