$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json) Hash identifier: 0MXDCy4N/3E+8TfR1jWrtW6sfUH6wFi9Vl59nS3lKdo= Subject key identifier: C9:8A:EE:96:30:8B:1A:34:4A:D8:82:C0:8B:27:E4:5C:E5:0D:B0:43 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 6061867C74C93802DA3126D7C6F2BAE838904B8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft Manifest number: 0114 Signing time: Thu 23 Jul 2026 21:39:37 +0000 Manifest this update: Thu 23 Jul 2026 21:34:37 +0000 Manifest next update: Fri 24 Jul 2026 22:21:37 +0000 Files and hashes: 1: AS63199.roa (hash: +6f3Db0v7UdfFgnilhc4THU/oUjV9kzQQnabdsDTgxM=) 2: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: g7H2UJfx8cNgUJDMFsfNrefmhxJQs4QgXc0tkANJk2E=) 3: AS4808.roa (hash: r1YzqYPHhI19/uHpS4NaWQswIOGB+ZeDlJxbRaVxEUY=) 4: AS56048.roa (hash: YfaXa5LhrWXkhY8UCjReQr0HVX4JGTwDymrmKM+DQf4=) 5: AS23724.roa (hash: VQZ0gm+tklRFSq2F/DXQqzcNJNGQWdb0huNHkgAfoME=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:61:86:7c:74:c9:38:02:da:31:26:d7:c6:f2:ba:e8:38:90:4b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Jul 23 21:34:37 2026 GMT Not After : Jul 24 22:21:37 2026 GMT Subject: CN=C98AEE96308B1A344AD882C08B27E45CE50DB043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:ad:3e:da:9a:2f:6c:5b:83:13:8d:b9:f4: b2:b9:bb:8c:d9:1e:6f:8d:65:8c:25:b4:c4:36:2f: fd:37:d9:10:a4:7f:bb:94:f3:db:2a:77:ad:b2:cc: 8f:09:4c:10:fc:2c:4e:19:d0:30:8c:5a:fb:d5:5f: 46:2d:54:e3:6c:7b:57:e7:ac:d2:c1:d9:6e:e5:c7: f5:f9:b1:f1:a6:01:2b:bb:71:47:f1:bb:f7:93:6c: ea:82:36:33:f0:aa:08:91:06:9d:4f:a0:df:b5:7d: 9e:e2:da:b7:9c:6d:34:2b:1f:1f:6e:7a:3f:eb:0e: d3:4b:3e:bb:8b:2c:07:60:12:58:2d:bb:59:6a:24: 2c:6d:c2:24:75:dc:08:b7:df:9a:08:c2:6b:95:e9: d0:5c:38:af:dc:5b:06:5f:bb:67:4e:11:1a:50:d4: 55:1d:58:1f:12:13:63:67:11:94:4a:93:9c:e4:a8: 89:45:b6:46:fd:d6:3d:3e:53:0e:6c:27:79:1a:d7: b7:0e:73:3b:68:32:68:86:5f:f1:02:9a:b6:39:e9: 95:8e:6e:53:15:bd:64:9b:15:d1:c5:3a:29:52:b5: b9:94:5e:5a:c5:1b:cd:38:50:47:60:99:8a:0d:11: ca:31:e3:55:f9:5f:7c:d9:04:c5:2b:b1:b1:f7:f1: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:EE:96:30:8B:1A:34:4A:D8:82:C0:8B:27:E4:5C:E5:0D:B0:43 X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:8a:0d:24:fc:6b:9b:95:3d:af:90:87:91:c1:79:a8:35: 37:1d:11:54:4f:d3:08:43:dd:37:10:40:fb:10:6d:7e:4a:62: 33:46:74:33:95:71:ed:09:50:95:79:da:b6:48:06:e6:0b:a6: ed:26:a0:9d:ce:bf:ea:b1:49:03:b4:8b:54:c5:98:34:6b:c0: 6f:aa:0e:56:6a:55:ba:f9:6e:92:11:4f:cc:20:5c:ac:9d:d7: d0:d0:56:50:79:b2:0f:6e:a6:c4:57:05:e2:bb:3c:00:41:30: a6:6c:2a:12:85:2a:f6:cb:d7:13:c3:23:80:54:1d:34:4e:bf: 88:28:ae:fe:55:51:32:dd:38:d1:fe:c2:69:82:a8:63:f1:40: f9:25:53:0c:9b:0b:2b:94:5a:93:52:5a:97:40:a6:32:bb:b3: 7d:33:78:a7:f5:ce:a4:b8:7e:3e:6d:0b:0e:3e:2c:b7:57:e8: 7c:de:b0:0f:9e:4e:9c:03:7d:4c:91:03:b0:8e:ff:0b:72:9c: bb:4b:38:26:4e:ee:ba:05:6d:17:97:62:48:32:43:7e:cf:52: 49:34:d2:34:06:bf:b7:97:11:a0:41:a6:00:29:af:1c:d5:73: 4f:c6:66:ba:36:44:1e:fa:bb:e2:1a:1a:0f:6c:50:39:0c:d4: ad:4a:6c:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYGGGfHTJOALaMSbXxvK66DiQS40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjA3MjMyMTM0MzdaFw0yNjA3MjQyMjIxMzdaMDMxMTAvBgNV BAMTKEM5OEFFRTk2MzA4QjFBMzQ0QUQ4ODJDMDhCMjdFNDVDRTUwREIwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT860+2povbFuDE4259LK5u4zZ Hm+NZYwltMQ2L/032RCkf7uU89sqd62yzI8JTBD8LE4Z0DCMWvvVX0YtVONse1fn rNLB2W7lx/X5sfGmASu7cUfxu/eTbOqCNjPwqgiRBp1PoN+1fZ7i2recbTQrHx9u ej/rDtNLPruLLAdgElgtu1lqJCxtwiR13Ai335oIwmuV6dBcOK/cWwZfu2dOERpQ 1FUdWB8SE2NnEZRKk5zkqIlFtkb91j0+Uw5sJ3ka17cOcztoMmiGX/ECmrY56ZWO blMVvWSbFdHFOilStbmUXlrFG804UEdgmYoNEcox41X5X3zZBMUrsbH38dtxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyYruljCLGjRK2ILAiyfkXOUNsEMwHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMC85RTA3QjAyRUYyNzRF MzM5QjNDNEIyMjU5ODU1RTUyQUZEMkMwMTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObGKDST8a5uV Pa+Qh5HBeag1Nx0RVE/TCEPdNxBA+xBtfkpiM0Z0M5Vx7QlQlXnatkgG5gum7Sag nc6/6rFJA7SLVMWYNGvAb6oOVmpVuvlukhFPzCBcrJ3X0NBWUHmyD26mxFcF4rs8 AEEwpmwqEoUq9svXE8MjgFQdNE6/iCiu/lVRMt040f7CaYKoY/FA+SVTDJsLK5Ra k1Jal0CmMruzfTN4p/XOpLh+Pm0LDj4st1fofN6wD55OnAN9TJEDsI7/C3Kcu0s4 Jk7uugVtF5diSDJDfs9SSTTSNAa/t5cRoEGmACmvHNVzT8ZmujZEHvq74hoaD2xQ OQzUrUpsqA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:06:24 2026 by rpki-client