$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: qqpcD6lEyxwxqdtVAAHUkITqIQt2RjmHpcpNceMMw6s= Subject key identifier: C2:45:FD:DB:AA:40:85:47:1F:19:39:6F:4E:0A:65:29:14:75:9F:FA Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 357B2EC07E633244ACCA8FD365F401C59083736B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 15:36:34 +0000 Manifest this update: Fri 24 Jul 2026 15:31:34 +0000 Manifest next update: Sat 25 Jul 2026 17:02:34 +0000 Files and hashes: 1: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: b7nAKfR/x3jEODPGksWiBSMJ9G8awVbqsWsshZwgkwo=) 2: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) 3: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7b:2e:c0:7e:63:32:44:ac:ca:8f:d3:65:f4:01:c5:90:83:73:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Jul 24 15:31:34 2026 GMT Not After : Jul 25 17:02:34 2026 GMT Subject: CN=C245FDDBAA4085471F19396F4E0A652914759FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:4a:bc:a2:71:3a:c6:1e:58:61:13:2a:fd: 3c:b5:d8:d8:f7:68:c2:b5:72:dd:3e:3c:a4:c5:11: f9:24:0f:4a:fd:37:0e:b9:d4:b1:bf:29:e7:e4:b0: 0c:b6:6d:82:2b:50:1a:d4:30:af:d7:5f:cf:d1:42: 60:b0:bc:dd:46:53:44:a4:1d:22:d5:82:1e:39:a4: 81:8d:49:c9:51:37:10:26:11:ce:30:6f:be:40:d7: 0d:3e:a4:45:43:ad:35:2f:19:4d:7a:49:1e:a2:e4: 53:ec:bb:75:0d:b2:49:06:d0:df:97:9e:a4:67:b6: a1:74:f7:a6:e4:d1:c2:6c:0b:5d:6d:fc:78:1e:73: 84:f5:4b:54:fb:84:02:e4:71:db:d9:ec:18:ae:0d: b6:3c:d6:a2:a3:c5:61:80:a7:98:b1:93:b7:f1:f8: 00:7c:62:59:ad:62:ee:3f:31:16:c9:19:79:70:0f: ae:e6:62:e7:a4:f3:8c:1f:86:3d:64:59:35:f3:e1: d7:51:26:4d:c4:fb:b3:7c:6c:66:b6:21:52:e5:5b: bf:53:a7:fd:e4:28:5f:98:54:0c:28:d0:75:1c:0a: 14:89:7c:0a:37:a9:ef:7b:20:c3:54:69:0a:67:10: f3:70:2a:7c:63:8d:c8:39:74:77:9a:57:b8:2a:d1: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:FD:DB:AA:40:85:47:1F:19:39:6F:4E:0A:65:29:14:75:9F:FA X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a0:55:db:28:fa:5e:45:0a:40:fb:a8:4b:ee:b2:c8:84:ce: c2:60:2e:2c:52:75:7c:ec:41:73:27:aa:09:cd:83:5b:86:d4: fa:b9:fe:92:09:1b:4f:8b:0a:16:d1:74:57:e0:74:f1:49:5f: 5c:26:34:45:c1:1f:b8:41:5f:ba:08:31:4a:af:4e:57:b9:03: 68:ea:f7:4e:91:e2:a2:2b:49:03:99:d6:92:0a:46:21:8f:0e: 47:b9:ae:f3:92:5e:e6:f6:69:32:a2:8e:43:87:a2:00:e0:9e: 57:df:21:b8:94:84:1d:3b:f2:b2:0e:a7:e7:55:04:c8:c0:4b: e3:5d:07:7a:21:b4:b6:58:32:e0:25:c5:57:3d:72:22:1b:f0: a0:53:7f:0c:00:6f:f9:e2:bf:35:03:79:54:03:fd:92:45:46: a4:c2:2d:aa:03:63:9b:17:71:43:1e:da:d6:64:a4:5f:b0:60: ef:51:42:5a:46:63:bb:d3:58:f2:d1:d3:a8:94:40:2b:47:30: ac:3c:cd:bd:1d:d4:e0:da:3f:ed:af:11:3c:d5:f9:a9:d3:06: 33:47:6a:80:c0:16:a5:9f:4b:2f:07:c3:fa:d1:95:e7:0b:68: 98:1e:aa:58:79:71:19:95:36:aa:3e:a6:ae:9d:4e:52:d4:35: 92:20:85:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNXsuwH5jMkSsyo/TZfQBxZCDc2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA3MjQxNTMxMzRaFw0yNjA3MjUxNzAyMzRaMDMxMTAvBgNV BAMTKEMyNDVGRERCQUE0MDg1NDcxRjE5Mzk2RjRFMEE2NTI5MTQ3NTlGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uEq8onE6xh5YYRMq/Ty12Nj3 aMK1ct0+PKTFEfkkD0r9Nw651LG/KefksAy2bYIrUBrUMK/XX8/RQmCwvN1GU0Sk HSLVgh45pIGNSclRNxAmEc4wb75A1w0+pEVDrTUvGU16SR6i5FPsu3UNskkG0N+X nqRntqF096bk0cJsC11t/Hgec4T1S1T7hALkcdvZ7BiuDbY81qKjxWGAp5ixk7fx +AB8YlmtYu4/MRbJGXlwD67mYuek84wfhj1kWTXz4ddRJk3E+7N8bGa2IVLlW79T p/3kKF+YVAwo0HUcChSJfAo3qe97IMNUaQpnEPNwKnxjjcg5dHeaV7gq0WyjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwkX926pAhUcfGTlvTgplKRR1n/owHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaBV2yj6XkUK QPuoS+6yyITOwmAuLFJ1fOxBcyeqCc2DW4bU+rn+kgkbT4sKFtF0V+B08UlfXCY0 RcEfuEFfuggxSq9OV7kDaOr3TpHioitJA5nWkgpGIY8OR7mu85Je5vZpMqKOQ4ei AOCeV98huJSEHTvysg6n51UEyMBL410HeiG0tlgy4CXFVz1yIhvwoFN/DABv+eK/ NQN5VAP9kkVGpMItqgNjmxdxQx7a1mSkX7Bg71FCWkZju9NY8tHTqJRAK0cwrDzN vR3U4No/7a8RPNX5qdMGM0dqgMAWpZ9LLwfD+tGV5wtomB6qWHlxGZU2qj6mrp1O UtQ1kiCFbw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:03:55 2026 by rpki-client