$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft (raw, json) Hash identifier: /F++KDFm6kGaLv8Fcw6d4Sc6LAIe0L7uyL7GVR7v934= Subject key identifier: 8A:77:AB:D8:6A:30:F7:ED:66:E7:7F:87:93:20:4B:4D:A4:02:9E:16 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 3F2DB163B1A2C679CA89DFB3973E19EA7FC69131 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 02:20:07 +0000 Manifest this update: Fri 24 Jul 2026 02:15:07 +0000 Manifest next update: Sat 25 Jul 2026 05:43:07 +0000 Files and hashes: 1: 3131342e3131312e3137392e302f32342d3234203d3e20313436373632.roa (hash: C5mjk+1CG6r0bzt4b18un9KgRI/Xnp9P0cDH3RA0Hy4=) 2: 3131342e3131312e3139312e302f32342d3234203d3e2034383132.roa (hash: 0Tz94FSnf8noh/jg+K+xGNe+oMRaQWPqA1KdljfT0sI=) 3: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (hash: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I=) 4: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (hash: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk=) 5: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (hash: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI=) 6: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (hash: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY=) 7: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (hash: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU=) 8: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (hash: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=) 9: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (hash: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30=) 10: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (hash: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI=) 11: 323430303a356636303a3a2f33322d3332203d3e20313436373631.roa (hash: DyboZUW+ZsHiG0TQ2QlXg9N1Udo8DukmD2LIGfkwL6w=) 12: 3131342e3131312e3137362e302f32302d3230203d3e20313436373632.roa (hash: eoYlD0RAPkGnyRtlK8iXT60W+N/fDNkGjE7hNOcXIoA=) 13: 3131342e3131312e3138332e302f32342d3234203d3e20313436373632.roa (hash: EI1qa8y78SWxMil8dnhbXcjeLjq6LDygLF5SIMrC0BA=) 14: 3130332e3138332e32362e302f32332d3233203d3e20313436373631.roa (hash: n2yJFDGxv025XpKqavpDIa1XF9Rdfe1uA9zzY9nQ+sg=) 15: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (hash: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs=) 16: 3131342e3131312e3138362e302f32342d3234203d3e20313436373632.roa (hash: 14KdTLxuOOqp83g/G/Ys/4m/YS+CsQCpCaT1Ppveym0=) 17: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (hash: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM=) 18: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl (hash: 4NHnjrhEOMlRKvD1RjZQ00R+b4RO0gf5KvMMMwtTyMk=) 19: 3130332e322e3135362e302f32342d3234203d3e20313436373632.roa (hash: ZT6T2FjjqBr9ft4J2Y3eyVRDUROWQVDrmyy7K6YoBoI=) 20: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (hash: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw=) 21: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (hash: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE=) 22: 323430303a356636303a3a2f33322d3332203d3e20313436373632.roa (hash: 2zf8ptIuNWz/ytNogvE5KsEgpil1bYy9wjHUWvs6PfU=) 23: 3131342e3131312e3137382e302f32342d3234203d3e20313436373632.roa (hash: KonUV/ojd1MNml5rROTSxf3fIHa2czkDZZNwNKw8A44=) 24: 3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (hash: euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=) 25: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (hash: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2d:b1:63:b1:a2:c6:79:ca:89:df:b3:97:3e:19:ea:7f:c6:91:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jul 24 02:15:07 2026 GMT Not After : Jul 25 05:43:07 2026 GMT Subject: CN=8A77ABD86A30F7ED66E77F8793204B4DA4029E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:32:fd:10:ed:82:b5:9b:e6:5e:e7:25:e3: 77:df:4a:f0:e6:cd:89:94:f6:61:26:9f:2c:16:33: 4a:01:a7:bc:dd:85:fb:79:2e:dc:5e:31:85:ed:83: 82:3e:59:9b:37:90:e6:55:05:a7:1b:89:a1:63:76: 17:70:fb:ae:0d:f7:dc:bf:47:4c:08:78:90:20:7a: f9:98:75:76:cc:55:70:33:c8:d2:10:03:14:0d:04: 31:4f:5a:b0:a6:02:30:80:dc:34:41:7d:6f:86:92: 87:f1:86:50:aa:b6:c1:c3:fe:4f:03:ef:55:94:7c: 7f:0b:fb:47:3d:fd:1e:1b:3e:5e:13:36:c9:ab:0a: 0c:d5:6d:6d:ab:99:db:fe:d8:fc:36:e2:29:84:08: 19:f7:05:6d:22:34:a8:2f:aa:fc:c3:85:d3:48:ee: 67:ae:0d:81:6b:ae:f5:c1:50:f0:b2:cf:f5:fe:b6: 89:72:83:10:a9:67:29:99:71:56:3e:60:49:7f:84: 20:44:8d:47:4d:55:00:ad:de:48:ae:95:d7:fa:29: 89:8c:1f:08:01:d7:2b:64:22:97:56:cb:b4:ac:39: 03:41:de:bc:74:71:4f:20:7c:41:81:1f:cb:a7:aa: f1:55:9c:79:45:6c:4a:6e:97:19:11:63:f9:46:e3: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:AB:D8:6A:30:F7:ED:66:E7:7F:87:93:20:4B:4D:A4:02:9E:16 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bb:f2:14:40:42:28:d3:29:41:b9:e0:a5:24:ab:da:3e:58: aa:29:33:e5:3d:5b:a4:f7:0d:c6:9b:aa:e2:f9:1c:4a:9a:e7: ad:4d:c3:95:c3:ef:f5:a0:d4:36:b3:b3:6d:14:a7:70:50:48: 57:7c:a7:3e:7b:4b:0c:01:14:75:9b:0d:e3:9e:94:08:69:5c: d1:d9:91:53:2f:aa:e7:b2:61:8f:39:a0:f1:5b:ca:8d:08:5d: 1f:ad:8a:36:9a:c3:a6:c3:cc:15:8a:75:a3:43:36:d6:6e:be: 41:6e:42:40:48:66:4c:df:d9:a9:eb:63:f4:29:85:68:91:21: c7:51:53:87:16:23:e2:94:3a:1d:60:b0:db:7f:e5:25:62:dc: ef:bc:36:35:20:2f:7d:26:93:9e:f2:2b:7c:77:ac:00:be:f3: ce:dd:62:1a:22:fb:ea:f6:78:c0:81:79:d2:4b:e3:df:4f:f0: 6f:bc:7a:bd:5e:10:ec:64:50:a6:11:26:bc:a5:f2:7b:27:4b: d4:ce:ee:52:c9:72:61:f5:34:22:38:5f:68:52:44:c6:98:2e: 49:d9:f0:3a:81:a8:81:3a:5f:da:f2:b9:6a:3c:f0:12:fc:c3: de:92:d9:c6:7a:14:58:ab:f6:4e:52:a1:c3:24:83:2f:36:5a: 4f:a1:86:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPy2xY7GixnnKid+zlz4Z6n/GkTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjA3MjQwMjE1MDdaFw0yNjA3MjUwNTQzMDdaMDMxMTAvBgNV BAMTKDhBNzdBQkQ4NkEzMEY3RUQ2NkU3N0Y4NzkzMjA0QjREQTQwMjlFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZDL9EO2CtZvmXucl43ffSvDm zYmU9mEmnywWM0oBp7zdhft5LtxeMYXtg4I+WZs3kOZVBacbiaFjdhdw+64N99y/ R0wIeJAgevmYdXbMVXAzyNIQAxQNBDFPWrCmAjCA3DRBfW+GkofxhlCqtsHD/k8D 71WUfH8L+0c9/R4bPl4TNsmrCgzVbW2rmdv+2Pw24imECBn3BW0iNKgvqvzDhdNI 7meuDYFrrvXBUPCyz/X+tolygxCpZymZcVY+YEl/hCBEjUdNVQCt3kiuldf6KYmM HwgB1ytkIpdWy7SsOQNB3rx0cU8gfEGBH8unqvFVnHlFbEpulxkRY/lG43ajAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiner2Gow9+1m53+HkyBLTaQCnhYwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczMjQwMzUvMC9EMzVGOTBEOEE3M0ZG QzE2MEEzMTBBOTZCQzAwQkVBQjdEQTI5MTFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibvyFEBCKNMp QbngpSSr2j5Yqikz5T1bpPcNxpuq4vkcSprnrU3DlcPv9aDUNrOzbRSncFBIV3yn PntLDAEUdZsN456UCGlc0dmRUy+q57Jhjzmg8VvKjQhdH62KNprDpsPMFYp1o0M2 1m6+QW5CQEhmTN/Zqetj9CmFaJEhx1FThxYj4pQ6HWCw23/lJWLc77w2NSAvfSaT nvIrfHesAL7zzt1iGiL76vZ4wIF50kvj30/wb7x6vV4Q7GRQphEmvKXyeydL1M7u UslyYfU0IjhfaFJExpguSdnwOoGogTpf2vK5ajzwEvzD3pLZxnoUWKv2TlKhwySD LzZaT6GGXA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:52:05 2026 by rpki-client