$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: PJiR4pafjFwC37xKgNMxR6+FKC9fI4epAN4APGe+N2A= Subject key identifier: B2:CE:57:98:A8:55:C8:C4:C3:A1:64:C9:3B:B3:5C:9E:3F:2E:D2:BC Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 316508B13B0A7CC49A3E17E5902625C0714ABF25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: AD Signing time: Fri 24 Jul 2026 03:45:17 +0000 Manifest this update: Fri 24 Jul 2026 03:40:17 +0000 Manifest next update: Sat 25 Jul 2026 03:47:17 +0000 Files and hashes: 1: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=) 2: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 3: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) 4: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 5: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=) 6: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=) 7: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=) 8: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: UbQjNns1MhHFmHtBh4m7kznVp2t11XUUmjUa4e3r9NA=) 9: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=) 10: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=) 11: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:65:08:b1:3b:0a:7c:c4:9a:3e:17:e5:90:26:25:c0:71:4a:bf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: Jul 24 03:40:17 2026 GMT Not After : Jul 25 03:47:17 2026 GMT Subject: CN=B2CE5798A855C8C4C3A164C93BB35C9E3F2ED2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:a8:db:00:9a:18:f4:88:b7:78:e9:38:f0: 4f:95:79:5d:e8:71:e5:91:d2:f5:7f:e0:77:60:fe: 91:97:ff:ef:c0:e0:75:b0:95:de:ef:24:99:72:a7: 5c:e6:66:97:16:91:f6:8d:90:28:1c:98:8e:df:0c: 67:b0:de:44:e7:f2:07:7f:5d:b4:d7:1f:6f:aa:0d: f0:84:63:7e:e5:83:43:8b:3f:fa:ce:9d:da:1d:0d: 96:5d:cc:36:89:5e:21:05:66:21:67:3e:9d:48:d7: 19:28:1d:26:70:57:4c:8a:1c:cc:54:70:84:fe:b0: 68:b3:f3:1f:15:e2:69:01:4c:ef:34:e4:ae:bf:b9: 6d:84:e8:3b:bc:c8:35:71:c9:9c:d3:fc:8d:a4:80: 23:c0:15:26:2d:68:ac:b1:1e:c3:28:6f:b6:9b:85: c8:a2:2e:ec:f2:d5:aa:45:89:49:b2:c3:a4:a8:03: 1d:97:7e:d0:42:b4:2a:84:9f:78:33:ea:92:14:93: 1c:6c:3f:a3:9e:83:1e:c7:bc:3e:2a:b5:f8:16:4e: ce:ef:83:08:22:1b:b2:45:6c:9c:a8:36:e4:bb:29: df:65:87:c6:eb:d6:27:0e:eb:16:d2:37:f9:90:b6: df:8d:ba:7b:c5:db:22:57:68:dc:23:fe:35:58:f8: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:57:98:A8:55:C8:C4:C3:A1:64:C9:3B:B3:5C:9E:3F:2E:D2:BC X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8f:de:27:41:3b:0b:63:45:18:f3:32:5b:8f:92:dc:58:38: cc:48:ec:3e:47:ff:cb:d8:73:22:63:73:64:d9:d8:4e:30:f4: 10:4b:7a:b6:93:a5:4c:a1:0e:cb:e8:1b:2c:ea:02:c6:67:1b: d0:64:59:4c:83:88:ec:60:66:37:2a:9e:dc:84:5d:4a:b3:18: 6d:d7:91:a9:a2:3c:b4:c3:a7:38:8a:e1:8f:3e:d4:cf:2f:bd: 65:d2:5f:80:94:c6:60:80:ea:3b:5e:5a:47:f5:a2:bc:89:63: 24:7d:60:1e:e6:e7:99:05:1a:6c:0b:a2:12:a1:fb:34:93:85: ef:cc:ae:fc:03:69:0e:7c:1f:b6:f6:6a:55:92:e6:7c:17:26: c6:eb:85:90:85:b8:75:21:e3:4e:39:cb:70:bc:1e:4e:6b:9f: bb:99:1a:28:40:37:a9:2d:f4:db:de:c5:65:37:dd:ec:08:56: bd:03:00:e7:e1:df:ea:2c:48:03:62:8f:c8:6c:e9:69:9d:4b: be:72:ba:67:6e:ff:b7:10:d6:ae:1f:d4:9b:82:5c:8d:59:f3: c2:55:a6:7b:41:d3:dc:75:e0:15:1c:a9:06:af:2f:12:fd:9b: 9e:31:da:01:09:19:57:6e:c9:94:59:0b:be:30:dd:a1:33:7d: b4:46:fb:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMWUIsTsKfMSaPhflkCYlwHFKvyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA3MjQwMzQwMTdaFw0yNjA3MjUwMzQ3MTdaMDMxMTAvBgNV BAMTKEIyQ0U1Nzk4QTg1NUM4QzRDM0ExNjRDOTNCQjM1QzlFM0YyRUQyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DqjbAJoY9Ii3eOk48E+VeV3o ceWR0vV/4Hdg/pGX/+/A4HWwld7vJJlyp1zmZpcWkfaNkCgcmI7fDGew3kTn8gd/ XbTXH2+qDfCEY37lg0OLP/rOndodDZZdzDaJXiEFZiFnPp1I1xkoHSZwV0yKHMxU cIT+sGiz8x8V4mkBTO805K6/uW2E6Du8yDVxyZzT/I2kgCPAFSYtaKyxHsMob7ab hciiLuzy1apFiUmyw6SoAx2XftBCtCqEn3gz6pIUkxxsP6Oegx7HvD4qtfgWTs7v gwgiG7JFbJyoNuS7Kd9lh8br1icO6xbSN/mQtt+NunvF2yJXaNwj/jVY+MlBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUss5XmKhVyMTDoWTJO7Ncnj8u0rwwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAso/eJ0E7C2NF GPMyW4+S3Fg4zEjsPkf/y9hzImNzZNnYTjD0EEt6tpOlTKEOy+gbLOoCxmcb0GRZ TIOI7GBmNyqe3IRdSrMYbdeRqaI8tMOnOIrhjz7Uzy+9ZdJfgJTGYIDqO15aR/Wi vIljJH1gHubnmQUabAuiEqH7NJOF78yu/ANpDnwftvZqVZLmfBcmxuuFkIW4dSHj TjnLcLweTmufu5kaKEA3qS30297FZTfd7AhWvQMA5+Hf6ixIA2KPyGzpaZ1LvnK6 Z27/txDWrh/Um4JcjVnzwlWme0HT3HXgFRypBq8vEv2bnjHaAQkZV27JlFkLvjDd oTN9tEb7zQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:38 2026 by rpki-client