$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: sdVeRR4lEAFKtzlsPpOKVR61DDkACuQJ+pPQNB8wBMg= Subject key identifier: 6A:4A:41:AD:CD:82:42:C8:D6:0D:BA:FD:6F:37:5E:0C:76:B3:31:7F Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 4ED7F8FDD47DFA86D7B5B8CF66589B95EB8485E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 96 Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 16:58:16 +0000 Files and hashes: 1: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 2: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 3: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 4: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 5: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) 6: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: 0JSqg/oNBs/GfDgE6N35KGP15SGREXZvLREkTpZa+mU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d7:f8:fd:d4:7d:fa:86:d7:b5:b8:cf:66:58:9b:95:eb:84:85:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 16:58:16 2026 GMT Subject: CN=6A4A41ADCD8242C8D60DBAFD6F375E0C76B3317F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:23:12:51:52:c0:88:9a:bf:aa:41:2b:57: 1a:04:12:25:2d:80:40:24:46:f0:0c:6d:4a:5c:31: 5a:75:38:af:0f:9b:eb:f1:77:e6:d7:f0:5e:51:e8: 88:17:ed:ff:1e:de:9a:69:cc:8e:a1:f8:fc:5f:e6: ad:2c:7d:ce:28:cb:61:43:62:61:8b:e1:1c:3e:d7: a2:44:17:b6:9e:53:8d:b6:78:7f:18:ee:c0:e9:5c: bf:f4:37:53:ce:23:43:d6:19:a7:ac:ac:a0:e3:98: 8a:f3:be:cb:1a:ed:47:3e:10:00:4d:48:a1:32:77: c2:95:01:86:f6:5e:0a:77:8c:88:57:25:d9:01:3d: fa:06:f3:67:c9:94:4f:d9:33:97:1d:1c:47:b8:dd: cb:cb:cd:16:e8:f7:6b:4d:41:b0:90:08:45:5c:5b: c1:3d:8f:3d:6b:80:93:69:7e:fb:63:cd:7e:97:04: 17:11:2c:b0:11:e1:6c:c4:40:99:a5:8a:31:60:da: 57:97:fa:23:72:85:d7:85:2a:32:4e:ac:21:ca:3b: 0a:66:ad:9c:ff:d5:43:46:20:e1:74:11:71:9d:55: 2a:c4:c4:52:78:82:10:f9:6d:d8:e6:a5:f2:5f:5b: 8d:dd:fa:d1:b8:e7:51:e5:29:0b:50:05:42:28:9f: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:41:AD:CD:82:42:C8:D6:0D:BA:FD:6F:37:5E:0C:76:B3:31:7F X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c6:6b:94:d1:8a:98:9f:37:bd:ee:af:ea:7b:a5:5b:c3:71: 61:71:50:b7:30:e2:61:6b:9d:3a:60:64:07:7c:bb:42:92:02: f5:47:2f:c7:bd:e1:76:d0:04:fa:f5:cf:5e:3b:dc:f1:37:4e: b2:d6:8a:da:82:b0:32:5d:94:0c:d2:b5:6c:5e:24:31:83:f5: 8b:f8:47:67:dc:60:98:64:47:e9:87:1f:bc:44:cb:10:9a:3b: 81:87:40:3a:e6:02:07:de:8e:2b:cc:ef:8f:39:61:6e:f8:22: c6:96:9f:17:9f:6b:9d:ed:04:47:63:fe:34:8b:e3:2e:b8:de: b6:dd:be:a1:3a:e6:96:af:d6:55:1d:3f:4b:7a:c3:28:20:ea: 60:05:6c:ae:d8:83:f0:0e:9f:4a:37:ee:0d:b9:c1:0e:63:a7: 77:f1:09:06:48:e8:9e:c9:67:b8:ff:41:69:86:5b:ab:fd:18: d1:f9:5e:ea:26:bc:3d:56:46:46:25:75:b5:50:64:d9:e4:ea: 14:4a:51:1d:dd:1d:cb:9d:60:70:ef:8c:5c:37:52:2e:f7:0e: 0e:ee:7b:06:06:5f:a2:9d:83:e8:ed:50:90:4c:0d:8a:6f:19: fa:bd:8d:b8:63:23:f4:a7:88:c6:44:57:d7:d2:08:48:49:6f: 28:2d:7e:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTtf4/dR9+obXtbjPZlibleuEhegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzExNjU4MTZaMDMxMTAvBgNV BAMTKDZBNEE0MUFEQ0Q4MjQyQzhENjBEQkFGRDZGMzc1RTBDNzZCMzMxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLCMSUVLAiJq/qkErVxoEEiUt gEAkRvAMbUpcMVp1OK8Pm+vxd+bX8F5R6IgX7f8e3pppzI6h+Pxf5q0sfc4oy2FD YmGL4Rw+16JEF7aeU422eH8Y7sDpXL/0N1POI0PWGaesrKDjmIrzvssa7Uc+EABN SKEyd8KVAYb2Xgp3jIhXJdkBPfoG82fJlE/ZM5cdHEe43cvLzRbo92tNQbCQCEVc W8E9jz1rgJNpfvtjzX6XBBcRLLAR4WzEQJmlijFg2leX+iNyhdeFKjJOrCHKOwpm rZz/1UNGIOF0EXGdVSrExFJ4ghD5bdjmpfJfW43d+tG451HlKQtQBUIon2S/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUakpBrc2CQsjWDbr9bzdeDHazMX8wHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisZrlNGKmJ83 ve6v6nulW8NxYXFQtzDiYWudOmBkB3y7QpIC9Ucvx73hdtAE+vXPXjvc8TdOstaK 2oKwMl2UDNK1bF4kMYP1i/hHZ9xgmGRH6YcfvETLEJo7gYdAOuYCB96OK8zvjzlh bvgixpafF59rne0ER2P+NIvjLrjett2+oTrmlq/WVR0/S3rDKCDqYAVsrtiD8A6f SjfuDbnBDmOnd/EJBkjonslnuP9BaYZbq/0Y0fle6ia8PVZGRiV1tVBk2eTqFEpR Hd0dy51gcO+MXDdSLvcODu57BgZfop2D6O1QkEwNim8Z+r2NuGMj9KeIxkRX19II SElvKC1+vw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:26 2026 by rpki-client