$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft File: 9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json) Hash identifier: PDZ8+eRU2aeMMMB7el5+uq4BjVIMfHm9m0er3Ekf7VA= Subject key identifier: 8E:0F:7A:29:C6:69:E0:13:07:B1:7F:34:04:2A:48:64:7C:02:E4:65 Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 Certificate issuer: /CN=9FEF44F113313B4929575EF55ED937D41AA80334 Certificate serial: 241D39E01A7C92EBC2BAEB0F8D8D01CD97BF3FD7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft Manifest number: 89 Signing time: Fri 24 Jul 2026 01:30:00 +0000 Manifest this update: Fri 24 Jul 2026 01:25:00 +0000 Manifest next update: Sat 25 Jul 2026 04:48:00 +0000 Files and hashes: 1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: gj90FX+Z9t+IHJejWHHFaTuY8AOqZBEEIX37I6ZYVOo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1d:39:e0:1a:7c:92:eb:c2:ba:eb:0f:8d:8d:01:cd:97:bf:3f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334 Validity Not Before: Jul 24 01:25:00 2026 GMT Not After : Jul 25 04:48:00 2026 GMT Subject: CN=8E0F7A29C669E01307B17F34042A48647C02E465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:5a:88:dd:e6:29:34:1d:74:d3:1c:20:97: 8c:12:57:02:f8:42:51:59:98:36:9a:ca:c9:6c:5a: f4:64:54:72:a8:18:09:e4:54:9a:c3:86:77:1d:cf: 1e:94:71:55:b1:73:d4:c3:e9:a1:9f:6b:83:29:f2: 3a:f9:1f:dd:14:07:80:e1:15:7a:a7:32:da:71:27: 67:72:08:b0:12:4a:c3:d6:df:03:49:fb:26:fa:bd: 2b:53:1a:2a:2b:7c:26:27:17:b4:49:44:07:68:88: 85:a1:9f:64:ff:21:ca:2b:6b:0e:c4:89:c1:50:ce: b9:c1:22:9c:cd:bf:35:2c:86:3b:77:eb:c0:4b:a5: 1b:34:50:76:68:70:13:4d:ea:66:da:78:af:88:73: 47:df:c2:d5:4b:88:d8:86:4d:b9:c3:2f:db:ee:96: 17:2d:c9:dc:9c:c6:2d:2f:18:a9:6c:6d:70:81:59: f9:48:98:ca:71:a7:c9:85:0a:35:14:7d:fc:b5:7a: 02:c9:a1:a3:60:28:49:d1:17:1a:c8:e7:8a:ba:8c: 64:fa:f0:88:22:41:7d:25:7a:bd:2b:8e:76:27:ee: 74:d9:9c:49:d6:e0:90:31:3f:ad:31:d8:32:87:03: d6:21:97:7d:99:33:68:e0:d2:cf:71:70:cf:b6:08: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0F:7A:29:C6:69:E0:13:07:B1:7F:34:04:2A:48:64:7C:02:E4:65 X509v3 Authority Key Identifier: keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4d:dc:47:20:1e:be:89:57:cb:2e:c9:f3:1f:55:96:b2:f9: f4:13:bc:35:25:84:f4:bb:6c:ba:91:98:da:b7:be:bf:88:f1: a7:70:11:cf:a8:32:8d:1f:0f:c1:13:de:56:51:17:42:66:c6: b2:fc:1a:e8:ae:24:3a:e0:c4:26:2d:ca:0f:60:14:a4:38:63: 6b:55:0e:b8:7d:5b:b5:12:79:fc:13:9d:6f:3e:0a:8e:6f:3f: 59:52:60:69:ab:9d:8c:b9:19:2f:a4:0f:d1:36:65:ea:cc:7f: cd:a7:f8:79:ed:12:7c:4a:25:f2:15:a4:3e:db:b6:5b:82:86: 41:9a:6f:23:11:64:aa:b0:d9:b3:ac:d4:8c:79:af:c0:de:a8: a4:2e:5e:3c:1e:c9:d8:86:1b:d0:b9:27:3b:48:a7:cc:76:95: de:98:0f:00:be:f0:4f:cb:5a:d1:c8:09:31:24:bb:58:34:3e: d8:49:1f:ba:50:db:6f:40:7d:0e:c0:e4:9c:c3:36:32:bc:af: 1f:39:e8:6b:3a:cc:16:22:61:15:3e:54:4f:ab:40:0d:65:29: 14:5f:6a:71:53:4f:89:76:ef:98:0d:df:73:01:0f:d2:c9:0e: 96:0d:19:23:7d:c2:07:5b:64:b0:e5:de:59:7c:28:bc:db:58: af:2e:45:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJB054Bp8kuvCuusPjY0BzZe/P9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQx QUE4MDMzNDAeFw0yNjA3MjQwMTI1MDBaFw0yNjA3MjUwNDQ4MDBaMDMxMTAvBgNV BAMTKDhFMEY3QTI5QzY2OUUwMTMwN0IxN0YzNDA0MkE0ODY0N0MwMkU0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGFqI3eYpNB100xwgl4wSVwL4 QlFZmDaayslsWvRkVHKoGAnkVJrDhncdzx6UcVWxc9TD6aGfa4Mp8jr5H90UB4Dh FXqnMtpxJ2dyCLASSsPW3wNJ+yb6vStTGiorfCYnF7RJRAdoiIWhn2T/Icoraw7E icFQzrnBIpzNvzUshjt368BLpRs0UHZocBNN6mbaeK+Ic0ffwtVLiNiGTbnDL9vu lhctydycxi0vGKlsbXCBWflImMpxp8mFCjUUffy1egLJoaNgKEnRFxrI54q6jGT6 8IgiQX0ler0rjnYn7nTZnEnW4JAxP60x2DKHA9Yhl32ZM2jg0s9xcM+2CIVRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjg96KcZp4BMHsX80BCpIZHwC5GUwHwYDVR0j BBgwFoAUn+9E8RMxO0kpV171Xtk31BqoAzQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk5Nzg0Nzg3NjE0MTA1Ny8wLzlGRUY0NEYxMTMzMTNCNDkyOTU3NUVGNTVFRDkz N0Q0MUFBODAzMzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5OTc4NDc4NzYxNDEwNTcvMC85RkVGNDRGMTEzMzEz QjQ5Mjk1NzVFRjU1RUQ5MzdENDFBQTgwMzM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE3cRyAevolX yy7J8x9VlrL59BO8NSWE9LtsupGY2re+v4jxp3ARz6gyjR8PwRPeVlEXQmbGsvwa 6K4kOuDEJi3KD2AUpDhja1UOuH1btRJ5/BOdbz4Kjm8/WVJgaaudjLkZL6QP0TZl 6sx/zaf4ee0SfEol8hWkPtu2W4KGQZpvIxFkqrDZs6zUjHmvwN6opC5ePB7J2IYb 0LknO0inzHaV3pgPAL7wT8ta0cgJMSS7WDQ+2EkfulDbb0B9DsDknMM2MryvHzno azrMFiJhFT5UT6tADWUpFF9qcVNPiXbvmA3fcwEP0skOlg0ZI33CB1tksOXeWXwo vNtYry5FXQ== -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:27 2026 by rpki-client