$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: zBmkscrnY1w5HQskssboGwl+Hbl8ee7WteZY4KxPiMQ= Subject key identifier: 27:34:F1:26:C4:CA:07:C4:CA:B9:A6:15:99:ED:A5:51:3E:24:79:B7 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 3B6629F6C4A650FC9DD52D77796B5BCFB4F21A72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 0153 Signing time: Sat 03 Oct 2026 09:41:47 +0000 Manifest this update: Sat 03 Oct 2026 09:36:47 +0000 Manifest next update: Tue 06 Oct 2026 12:57:47 +0000 Files and hashes: 1: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 2: AS59077.roa (hash: jqEAS4vl3v8Scmg4fltQNIqu4A4F1urMvQwrsEz6fzQ=) 3: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 4: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: sqnuoiWMiQsztvErcidpQHsFrWMf/6rWbZfeHvSRyPY=) 5: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 6: AS135377.roa (hash: 0TgUONzFV8lNd0jopT12jgLwNazd/6SepxXD+2igQdM=) 7: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 8: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 9: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 10: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 11: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 12: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 13: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:29:f6:c4:a6:50:fc:9d:d5:2d:77:79:6b:5b:cf:b4:f2:1a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Oct 3 09:36:47 2026 GMT Not After : Oct 6 12:57:47 2026 GMT Subject: CN=2734F126C4CA07C4CAB9A61599EDA5513E2479B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e9:71:d1:f1:8c:e2:2c:52:52:c4:bc:6b:65: 37:df:f5:04:99:09:70:94:ae:93:c1:27:96:8f:e7: 9c:b3:60:57:0b:a7:2b:af:07:30:dd:50:d1:e5:15: c3:29:bd:55:17:6f:eb:f8:db:89:5b:b6:2c:bc:4e: 9e:55:5a:89:be:23:d4:ee:0f:6d:ef:7b:99:48:10: 7d:60:07:30:93:61:b7:e0:d3:06:57:3e:57:15:e8: 3b:66:f3:7b:2a:c4:93:35:29:eb:1a:1f:f2:38:79: 89:9d:b3:8e:5c:48:a1:61:96:b4:b1:49:65:1e:c8: 00:37:52:d8:c4:4f:4e:d3:24:bc:e4:9d:ce:1a:69: 22:0c:3c:6f:1b:9f:65:68:db:4c:5a:f6:ef:a7:02: 47:dc:cf:77:25:a5:bb:e8:56:87:61:d6:5c:e5:de: f1:57:0a:7f:fd:b8:b6:15:f2:ef:32:af:3e:4f:62: aa:43:2f:7f:83:9b:bd:ae:ed:39:8c:4c:4e:53:7d: 98:23:58:20:53:d6:5a:26:34:1f:ae:ef:21:02:bb: e3:fb:fe:d1:48:99:5f:e2:62:ea:69:f9:18:b2:96: 7f:e4:fa:84:e5:73:45:80:d9:36:2a:a9:95:94:1e: 2a:80:b1:f2:25:e0:b9:39:24:f3:7d:ff:ae:72:f1: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:34:F1:26:C4:CA:07:C4:CA:B9:A6:15:99:ED:A5:51:3E:24:79:B7 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:70:4a:cb:24:0b:19:e0:a8:3d:88:c1:02:bd:21:50:a1:61: 30:24:71:1c:6c:90:25:5b:0d:0e:87:62:8b:44:3c:61:d3:35: b5:c8:e9:df:7b:05:77:64:76:70:01:d1:c6:da:14:fc:56:81: f3:54:2f:8f:00:78:42:68:d9:76:da:f3:b8:23:d9:85:82:d4: 8d:67:60:11:a5:e9:59:3c:f7:3a:ce:51:f5:6b:64:1d:8c:79: 63:8f:52:11:1b:84:0e:01:e1:63:f5:88:39:1c:fc:bb:bf:7f: 93:a1:36:9a:61:c0:2c:b4:db:f1:2a:fd:ef:08:10:b1:97:a8: b5:2b:33:4c:ff:d4:00:87:6b:81:c9:06:64:f3:9f:1c:7c:da: e3:3c:f8:7a:29:35:26:21:16:b7:45:28:cc:b7:95:89:ad:10: 8a:15:70:3f:13:77:c7:cf:1f:8c:ca:aa:c4:4b:51:d5:54:96: a3:eb:82:11:1c:c4:81:0b:5a:44:29:42:ff:15:6b:48:41:f6: 1e:59:0d:3e:e1:f2:09:b1:46:59:fe:a5:4c:69:36:aa:81:65: 0c:8a:03:f8:85:1a:f7:22:b6:d7:68:c4:0e:0e:6c:43:2a:43: cf:43:1e:80:18:1b:d9:2e:6a:71:80:3b:63:36:97:ac:39:73: 90:90:e6:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO2Yp9sSmUPyd1S13eWtbz7TyGnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjEwMDMwOTM2NDdaFw0yNjEwMDYxMjU3NDdaMDMxMTAvBgNV BAMTKDI3MzRGMTI2QzRDQTA3QzRDQUI5QTYxNTk5RURBNTUxM0UyNDc5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6XHR8YziLFJSxLxrZTff9QSZ CXCUrpPBJ5aP55yzYFcLpyuvBzDdUNHlFcMpvVUXb+v424lbtiy8Tp5VWom+I9Tu D23ve5lIEH1gBzCTYbfg0wZXPlcV6Dtm83sqxJM1KesaH/I4eYmds45cSKFhlrSx SWUeyAA3UtjET07TJLzknc4aaSIMPG8bn2Vo20xa9u+nAkfcz3clpbvoVodh1lzl 3vFXCn/9uLYV8u8yrz5PYqpDL3+Dm72u7TmMTE5TfZgjWCBT1lomNB+u7yECu+P7 /tFImV/iYupp+Riyln/k+oTlc0WA2TYqqZWUHiqAsfIl4Lk5JPN9/65y8To9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJzTxJsTKB8TKuaYVme2lUT4kebcwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnBKyyQLGeCo PYjBAr0hUKFhMCRxHGyQJVsNDodii0Q8YdM1tcjp33sFd2R2cAHRxtoU/FaB81Qv jwB4QmjZdtrzuCPZhYLUjWdgEaXpWTz3Os5R9WtkHYx5Y49SERuEDgHhY/WIORz8 u79/k6E2mmHALLTb8Sr97wgQsZeotSszTP/UAIdrgckGZPOfHHza4zz4eik1JiEW t0UozLeVia0QihVwPxN3x88fjMqqxEtR1VSWo+uCERzEgQtaRClC/xVrSEH2HlkN PuHyCbFGWf6lTGk2qoFlDIoD+IUa9yK212jEDg5sQypDz0MegBgb2S5qcYA7YzaX rDlzkJDmwQ== -----END CERTIFICATE-----Generated at Sun Oct 4 01:53:46 2026 by rpki-client