$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: oTU+QC5mZybgFlpCH0s29ysp0yM6MiU/Dz7AuPBjF+0= Subject key identifier: 35:41:49:28:B8:96:C6:7B:DD:3E:B0:C3:2D:14:E2:D1:8C:49:0D:96 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 17D2996C4121671D7FF1D8967D358803434F147D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: AC Signing time: Wed 13 May 2026 07:58:53 +0000 Manifest this update: Wed 13 May 2026 07:53:53 +0000 Manifest next update: Thu 14 May 2026 11:41:53 +0000 Files and hashes: 1: AS58466.roa (hash: 607sAR2dbgCiNziTsqpXz6tGfv37/stPkOdP6bVEEO0=) 2: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 3: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 4: AS23724.roa (hash: bYuokEQIWh4Vsk4e3lXzUmB8evpzlN/0ohXz5GXDX90=) 5: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: b3zPNETSsAXLMwL4kg5dH+VUPC5bNr8C4EMV4nRuHf4=) 6: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 7: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 8: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 9: AS59077.roa (hash: qKsY8VzCJUKMIixPEhz1UNngrkurGjIVkuy4wiYYkSw=) 10: AS4811.roa (hash: MQynOb4F+1b9ZkBoDwWt/L1FsSiE93o3VTtuHi8Pf84=) 11: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 12: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d2:99:6c:41:21:67:1d:7f:f1:d8:96:7d:35:88:03:43:4f:14:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 13 07:53:53 2026 GMT Not After : May 14 11:41:53 2026 GMT Subject: CN=35414928B896C67BDD3EB0C32D14E2D18C490D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:2c:d7:13:64:68:bf:83:18:3d:d7:1f:60: 43:22:a6:6b:d7:df:ba:14:ef:c6:8e:fe:f6:5f:19: d3:8f:be:68:99:11:ae:7c:06:f5:b2:55:c0:b7:80: cc:c9:b1:63:3d:69:51:5b:4a:89:2e:35:4f:fc:3a: 54:06:96:ac:c2:07:05:b1:5e:bb:11:a5:38:58:55: 73:f9:7e:ae:19:5f:15:28:bf:51:18:e6:eb:bc:08: f9:0a:67:72:54:68:34:2a:13:4f:11:9c:2f:00:3b: 21:2b:2b:0f:37:ca:ae:cd:30:8d:07:06:20:15:6a: 82:20:b7:85:10:95:ff:d7:6e:8e:2b:09:f5:50:22: 64:1d:93:58:17:d7:34:80:23:48:b3:6b:47:82:0d: c3:48:0b:e9:59:e8:c3:8e:1a:7b:59:37:6d:15:b7: 66:2b:70:49:14:f8:75:ea:03:37:f7:47:f7:e3:ba: 41:38:e6:df:cf:0c:9a:36:dc:fa:3b:d8:1c:14:c1: 46:eb:13:ac:cb:14:99:0d:4d:a6:bb:86:82:f5:ca: 66:15:94:7c:55:93:d5:37:54:2f:e4:68:b2:8b:c9: 34:9f:27:96:1b:f2:2d:0f:73:87:e5:d8:0f:c0:d2: 21:8a:8e:1b:4f:1d:20:95:ce:f4:06:59:24:15:42: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:49:28:B8:96:C6:7B:DD:3E:B0:C3:2D:14:E2:D1:8C:49:0D:96 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b8:9e:14:d9:57:63:ef:4b:cf:1b:67:1a:db:7d:6f:0f:f7: b8:39:72:a4:34:1a:23:49:ad:1a:0a:dc:cd:c3:13:c0:af:df: 98:fc:4e:d5:1f:be:f0:8e:c8:4a:37:35:f9:4d:3e:33:3e:05: ba:aa:92:50:20:f6:eb:3f:1e:5e:71:e1:65:c2:c5:09:8f:05: f7:1a:b3:38:3b:83:00:85:11:57:a2:a0:9f:b6:17:af:54:ae: ef:24:cf:f1:a1:28:fa:69:71:8c:10:ae:f9:5d:f2:29:61:5e: a1:c7:36:f2:d0:d4:04:d5:b9:d0:38:6f:b0:75:32:dd:67:da: 36:6b:07:d6:21:55:42:b4:fc:42:e1:87:bf:1c:d5:2f:de:43: f2:46:ac:a3:36:65:85:18:61:0d:86:8c:62:11:58:0c:3c:0f: df:1d:cc:aa:f3:bf:7d:a9:81:cf:c3:60:c4:88:bd:bb:2d:ba: eb:83:25:e8:12:39:f4:0b:9f:9d:a0:58:a2:9e:59:40:95:65: b6:ab:0d:f9:aa:28:6f:e3:e5:04:35:6d:fa:06:e0:be:25:2e: 1e:88:a6:77:ec:e7:82:60:a7:80:f9:c7:86:0e:a6:f7:a3:d7: 3e:b3:b4:61:9c:cf:99:c6:70:0f:8c:7b:0e:67:04:18:ac:e2: f5:b8:32:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF9KZbEEhZx1/8diWfTWIA0NPFH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTMwNzUzNTNaFw0yNjA1MTQxMTQxNTNaMDMxMTAvBgNV BAMTKDM1NDE0OTI4Qjg5NkM2N0JERDNFQjBDMzJEMTRFMkQxOEM0OTBEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHizXE2Rov4MYPdcfYEMipmvX 37oU78aO/vZfGdOPvmiZEa58BvWyVcC3gMzJsWM9aVFbSokuNU/8OlQGlqzCBwWx XrsRpThYVXP5fq4ZXxUov1EY5uu8CPkKZ3JUaDQqE08RnC8AOyErKw83yq7NMI0H BiAVaoIgt4UQlf/Xbo4rCfVQImQdk1gX1zSAI0iza0eCDcNIC+lZ6MOOGntZN20V t2YrcEkU+HXqAzf3R/fjukE45t/PDJo23Po72BwUwUbrE6zLFJkNTaa7hoL1ymYV lHxVk9U3VC/kaLKLyTSfJ5Yb8i0Pc4fl2A/A0iGKjhtPHSCVzvQGWSQVQuL5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNUFJKLiWxnvdPrDDLRTi0YxJDZYwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbieFNlXY+9L zxtnGtt9bw/3uDlypDQaI0mtGgrczcMTwK/fmPxO1R++8I7ISjc1+U0+Mz4FuqqS UCD26z8eXnHhZcLFCY8F9xqzODuDAIURV6Kgn7YXr1Su7yTP8aEo+mlxjBCu+V3y KWFeocc28tDUBNW50DhvsHUy3WfaNmsH1iFVQrT8QuGHvxzVL95D8kasozZlhRhh DYaMYhFYDDwP3x3MqvO/famBz8NgxIi9uy2664Ml6BI59AufnaBYop5ZQJVltqsN +aoob+PlBDVt+gbgviUuHoimd+zngmCngPnHhg6m96PXPrO0YZzPmcZwD4x7DmcE GKzi9bgy6w== -----END CERTIFICATE-----Generated at Wed May 13 13:35:07 2026 by rpki-client