$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: TDQWmR+BxPYOFqEplaGCmIrY3EFI1T9VGb4Wpk98bi0= Subject key identifier: D1:43:04:0F:9A:70:62:F9:B9:41:24:0F:CA:63:81:23:7E:AE:45:A1 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 603AE6BA47936753C8EACEC2F62CE47DA0ED58E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 0113 Signing time: Fri 24 Jul 2026 13:11:15 +0000 Manifest this update: Fri 24 Jul 2026 13:06:15 +0000 Manifest next update: Sat 25 Jul 2026 14:56:15 +0000 Files and hashes: 1: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 2: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 3: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 4: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 5: AS59077.roa (hash: Q7nEwKbZKdVfMPg4eqPb4dhk0zI34xvIoyJ2oXjOr1E=) 6: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 7: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: LREJamGyudY4Kpy51NGjow6VokU1tReO+rjDSHP32Z0=) 8: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 9: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 10: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 11: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 12: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 13: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3a:e6:ba:47:93:67:53:c8:ea:ce:c2:f6:2c:e4:7d:a0:ed:58:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jul 24 13:06:15 2026 GMT Not After : Jul 25 14:56:15 2026 GMT Subject: CN=D143040F9A7062F9B941240FCA6381237EAE45A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:df:11:e3:71:78:f1:ed:f1:09:66:c6:de: 1d:c0:c7:48:2a:20:3a:dd:2a:84:81:dd:2d:ae:d3: 0a:42:98:9c:15:ee:02:e0:bc:5a:36:58:43:d7:47: e3:2f:83:13:bb:01:bc:d5:65:6a:31:90:1a:0f:30: 77:8f:b6:b1:25:1d:95:c2:8d:9a:99:4e:f5:65:4e: 92:2f:9e:e8:81:8b:61:ae:e5:c8:bb:40:b8:8a:fc: b0:56:36:36:e6:59:6d:65:d6:eb:2a:50:6c:6d:95: 50:ea:ba:32:12:a2:3e:13:1f:64:94:b3:1d:f3:1f: 6b:f9:ce:88:e1:30:dc:b8:dd:b2:34:5e:6a:ad:6b: 60:25:ba:a0:fd:91:6c:cb:b5:a9:1f:fa:1d:7e:23: 99:d5:36:93:d3:9b:c5:bb:de:72:f9:07:26:ed:cb: ab:97:34:80:c1:d3:03:70:bc:0a:cc:6d:50:86:da: 67:47:9f:6a:68:1d:b4:0e:79:f4:4c:82:bb:25:05: 76:17:97:4b:40:73:34:41:9c:a0:bb:96:9f:73:a3: 59:5b:0f:83:fe:c5:37:19:be:d4:b7:87:c7:87:e3: c5:86:d5:c2:a7:1b:2b:9f:6c:3c:8a:92:54:41:b6: 65:53:6d:0b:2e:8a:b1:78:8f:99:49:32:72:d2:56: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:04:0F:9A:70:62:F9:B9:41:24:0F:CA:63:81:23:7E:AE:45:A1 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:56:5a:f8:1a:8f:64:35:51:21:ce:5f:fc:b9:b9:f9:ea:64: 42:17:c7:a4:58:23:00:fa:02:96:8d:e8:a5:d4:22:5b:94:62: 0f:1f:81:6a:63:96:e9:65:48:00:b7:ce:b0:83:0e:42:95:1f: 27:1e:25:8d:e4:da:93:95:8b:0b:a0:06:4b:57:6e:43:76:f1: dc:92:61:32:e4:17:22:f7:63:d9:9f:5a:6f:4f:a7:e5:5b:59: 14:59:86:a3:f8:63:63:d6:78:be:d7:c1:4e:f1:9a:ee:cf:81: 63:7b:8d:36:bd:52:ac:69:9c:69:ce:08:f2:71:97:f6:b4:44: e5:dd:3e:1d:d1:b6:b5:0e:62:af:04:26:a4:36:a2:18:15:22: 08:4b:5c:0b:da:13:b1:30:17:05:8e:67:94:1b:e7:b2:e1:97: df:35:5f:57:ee:55:57:0e:ec:9d:61:da:69:ab:6d:d8:bc:06: b5:e4:fd:92:a1:93:62:ee:8c:26:ac:68:15:78:4e:4a:61:c7: f4:c1:ea:05:46:58:01:d4:0f:55:43:80:26:16:4b:8e:ff:33: e6:c8:d2:cb:e2:c7:49:f6:43:63:16:68:57:2a:ea:01:b0:5c: 4e:25:ef:59:b4:73:c7:fb:f0:eb:cf:b3:db:72:e8:7d:07:25: 75:d0:83:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYDrmukeTZ1PI6s7C9izkfaDtWOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA3MjQxMzA2MTVaFw0yNjA3MjUxNDU2MTVaMDMxMTAvBgNV BAMTKEQxNDMwNDBGOUE3MDYyRjlCOTQxMjQwRkNBNjM4MTIzN0VBRTQ1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Zd8R43F48e3xCWbG3h3Ax0gq IDrdKoSB3S2u0wpCmJwV7gLgvFo2WEPXR+MvgxO7AbzVZWoxkBoPMHePtrElHZXC jZqZTvVlTpIvnuiBi2Gu5ci7QLiK/LBWNjbmWW1l1usqUGxtlVDqujISoj4TH2SU sx3zH2v5zojhMNy43bI0Xmqta2AluqD9kWzLtakf+h1+I5nVNpPTm8W73nL5Bybt y6uXNIDB0wNwvArMbVCG2mdHn2poHbQOefRMgrslBXYXl0tAczRBnKC7lp9zo1lb D4P+xTcZvtS3h8eH48WG1cKnGyufbDyKklRBtmVTbQsuirF4j5lJMnLSVqeNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0UMED5pwYvm5QSQPymOBI36uRaEwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lZa+BqPZDVR Ic5f/Lm5+epkQhfHpFgjAPoClo3opdQiW5RiDx+BamOW6WVIALfOsIMOQpUfJx4l jeTak5WLC6AGS1duQ3bx3JJhMuQXIvdj2Z9ab0+n5VtZFFmGo/hjY9Z4vtfBTvGa 7s+BY3uNNr1SrGmcac4I8nGX9rRE5d0+HdG2tQ5irwQmpDaiGBUiCEtcC9oTsTAX BY5nlBvnsuGX3zVfV+5VVw7snWHaaatt2LwGteT9kqGTYu6MJqxoFXhOSmHH9MHq BUZYAdQPVUOAJhZLjv8z5sjSy+LHSfZDYxZoVyrqAbBcTiXvWbRzx/vw68+z23Lo fQclddCDUA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:14:12 2026 by rpki-client