$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: P5/eIQkeEtNhHywlqAgGUyaY10GnJy6GKNyK5bVRPxo= Subject key identifier: 2E:E0:29:BF:2A:95:1B:D8:7E:B6:B9:BF:1A:7A:BD:6E:0C:A5:F6:B1 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 623D13B07F4094A73355B1C833661E4C7F88F3D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 5A Signing time: Tue 14 Jul 2026 09:20:57 +0000 Manifest this update: Tue 14 Jul 2026 09:15:57 +0000 Manifest next update: Wed 15 Jul 2026 09:58:57 +0000 Files and hashes: 1: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 2: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: 3s0qfREnGvlkPalyF7YqXn1PmK8SHfFZuhpM61Y0v34=) 3: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 4: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 5: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 6: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3d:13:b0:7f:40:94:a7:33:55:b1:c8:33:66:1e:4c:7f:88:f3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Jul 14 09:15:57 2026 GMT Not After : Jul 15 09:58:57 2026 GMT Subject: CN=2EE029BF2A951BD87EB6B9BF1A7ABD6E0CA5F6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:1c:89:c5:8f:05:0f:98:22:aa:c4:68:8e: 62:62:7b:df:3c:8d:b6:83:01:75:e9:92:2d:6a:6e: 19:24:dd:4f:18:6d:95:63:34:70:84:20:38:66:91: 67:09:e1:8a:7c:57:fb:84:d9:eb:43:6e:de:54:31: d4:bb:b7:d7:ab:d4:2b:ed:35:05:36:ed:5f:f7:b3: 33:5d:14:d0:ab:ac:18:59:f9:b0:ca:83:c0:10:bc: 04:c2:0a:63:3c:08:88:d6:41:e4:9f:e4:1b:31:fb: ec:cc:57:ad:eb:ef:97:c6:9b:87:2a:1e:6d:22:46: ed:7d:a5:40:ca:cc:04:40:08:f6:e7:cf:89:5d:20: 7b:9c:e3:c7:29:f6:6b:09:34:fd:17:51:c0:5a:74: f2:22:6b:c0:65:d6:a1:6b:aa:79:96:02:7b:24:5e: 1a:8f:78:e4:31:6f:40:76:db:98:cf:e7:4c:74:ca: ca:8d:4b:23:8c:1f:d8:42:f1:7a:99:20:a6:1b:fc: 24:d6:e3:79:30:71:62:e8:6c:00:e8:07:63:b1:06: 43:b2:0c:ed:8d:e8:50:41:62:2a:62:e8:d8:65:2c: fd:ce:a5:d4:ab:22:87:27:b4:eb:21:5d:8e:53:27: 0d:1f:22:39:f9:d5:37:c6:23:98:75:80:66:1a:f9: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:29:BF:2A:95:1B:D8:7E:B6:B9:BF:1A:7A:BD:6E:0C:A5:F6:B1 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:24:70:cd:5b:25:84:fa:bb:0a:db:32:c2:31:83:48:0a:01: 87:9b:73:95:6c:d9:f0:b1:54:0e:1c:1f:0b:df:68:2d:c9:91: d3:db:07:74:d0:dd:2d:88:d9:ee:4e:ac:74:8b:1e:20:bf:b7: cc:fe:f2:3e:70:93:09:ac:50:15:f8:67:ce:97:c9:ca:a6:20: 00:d7:bf:38:8d:8d:10:12:4a:7d:18:3a:d6:e5:66:64:fd:63: 94:0c:c1:e1:f1:fa:fb:4d:99:10:5d:4b:ac:99:72:74:d8:3f: a7:05:fc:71:db:e9:4c:be:da:a4:f3:e7:d0:b1:e6:80:ae:db: 7f:a9:5e:33:bf:c5:cf:de:c7:46:84:5c:3e:c7:73:4f:f2:7a: 31:ef:7e:60:6f:5e:fc:21:5f:46:75:0f:b3:05:b7:10:49:96: 37:8e:4d:b8:68:50:8f:46:a5:b3:08:cc:1f:63:de:c0:c8:9b: ca:8a:38:4c:87:87:e6:ff:11:7a:a0:50:e4:78:aa:b4:51:35: 99:61:58:d3:df:cd:c3:1a:95:16:ee:25:6e:9f:bb:78:49:8d: 41:d7:2a:04:8c:d4:76:21:24:44:5a:c4:61:45:1e:6f:e8:5f: b3:f6:ec:1c:43:d0:3b:3b:0b:77:31:6e:96:bc:91:ef:d1:86: 78:2e:06:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYj0TsH9AlKczVbHIM2YeTH+I89gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA3MTQwOTE1NTdaFw0yNjA3MTUwOTU4NTdaMDMxMTAvBgNV BAMTKDJFRTAyOUJGMkE5NTFCRDg3RUI2QjlCRjFBN0FCRDZFMENBNUY2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jhyJxY8FD5giqsRojmJie988 jbaDAXXpki1qbhkk3U8YbZVjNHCEIDhmkWcJ4Yp8V/uE2etDbt5UMdS7t9er1Cvt NQU27V/3szNdFNCrrBhZ+bDKg8AQvATCCmM8CIjWQeSf5Bsx++zMV63r75fGm4cq Hm0iRu19pUDKzARACPbnz4ldIHuc48cp9msJNP0XUcBadPIia8Bl1qFrqnmWAnsk XhqPeOQxb0B225jP50x0ysqNSyOMH9hC8XqZIKYb/CTW43kwcWLobADoB2OxBkOy DO2N6FBBYipi6NhlLP3OpdSrIocntOshXY5TJw0fIjn51TfGI5h1gGYa+bZFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULuApvyqVG9h+trm/Gnq9bgyl9rEwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCRwzVslhPq7 CtsywjGDSAoBh5tzlWzZ8LFUDhwfC99oLcmR09sHdNDdLYjZ7k6sdIseIL+3zP7y PnCTCaxQFfhnzpfJyqYgANe/OI2NEBJKfRg61uVmZP1jlAzB4fH6+02ZEF1LrJly dNg/pwX8cdvpTL7apPPn0LHmgK7bf6leM7/Fz97HRoRcPsdzT/J6Me9+YG9e/CFf RnUPswW3EEmWN45NuGhQj0alswjMH2PewMibyoo4TIeH5v8ReqBQ5HiqtFE1mWFY 09/NwxqVFu4lbp+7eEmNQdcqBIzUdiEkRFrEYUUeb+hfs/bsHEPQOzsLdzFulryR 79GGeC4GwA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:59 2026 by rpki-client