$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: ri5W7JB4I90RAZQ/ctRhy0ykDemz+tSivEY6L6KTsTg= Subject key identifier: 0F:30:F3:F5:CA:0F:95:D8:30:C8:05:19:53:97:35:4B:A3:4E:78:82 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 7A6767C2E201E2FD02C7950B58C6562205933EC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 05:50:31 +0000 Manifest this update: Fri 24 Jul 2026 05:45:31 +0000 Manifest next update: Sat 25 Jul 2026 09:39:31 +0000 Files and hashes: 1: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 2: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: PvZiMZdQY0ZtJ+wCscpHIFPvyO6NvoQxYxrhkTee0Lc=) 3: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 4: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 5: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 6: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:67:67:c2:e2:01:e2:fd:02:c7:95:0b:58:c6:56:22:05:93:3e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Jul 24 05:45:31 2026 GMT Not After : Jul 25 09:39:31 2026 GMT Subject: CN=0F30F3F5CA0F95D830C805195397354BA34E7882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:7c:7e:2a:6a:4d:75:dd:32:2c:16:8f:83: af:e7:22:24:82:47:48:73:0a:96:e4:3a:51:af:93: f8:24:d4:d0:31:9f:ec:23:96:8d:52:e4:34:03:10: af:8a:fc:5b:6a:8b:6d:8d:9a:d0:bb:22:05:a6:2e: a1:f5:e9:3b:61:68:f0:76:b4:fa:3d:18:8f:a6:24: 2c:45:ad:b2:39:c2:73:4d:23:3a:5f:43:d7:ee:8c: a5:0b:7a:9c:69:e8:b3:f2:34:ab:57:3f:32:80:a2: 62:f9:50:86:94:0f:f4:8e:19:58:89:8d:2e:2e:11: ad:79:12:12:5f:a8:7d:be:5a:b8:24:78:60:0c:46: b2:8d:42:27:18:f3:b1:99:fd:66:d6:6d:6c:95:24: 4c:c8:81:ff:ea:04:10:26:b6:43:de:74:6c:8f:57: 74:d9:3e:58:03:77:96:2b:41:40:00:10:dd:2c:32: 53:6e:54:de:79:cf:88:f3:91:fb:29:0d:66:e8:90: aa:68:22:ed:63:e7:4e:38:68:d1:e3:91:bc:38:27: 0d:4d:a5:3b:8c:e7:9f:32:df:ad:13:7c:01:0f:4b: 3d:3c:47:89:ea:73:b3:3a:9c:d9:c0:fc:69:d0:72: 1d:f3:68:e6:d2:f0:f5:9d:5c:29:68:18:10:ac:56: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:30:F3:F5:CA:0F:95:D8:30:C8:05:19:53:97:35:4B:A3:4E:78:82 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:68:12:88:57:17:55:b6:7a:ab:58:2a:fc:73:0d:f4:9e:64: b5:96:ec:a9:8d:e6:19:27:3f:d2:1d:58:37:a8:31:54:ff:8c: 9f:c5:2e:9f:5d:c4:87:b7:ca:ab:52:fe:ae:e3:0a:8e:8a:e4: db:62:e7:69:f6:4b:c7:5a:92:9a:f9:65:70:4d:9b:d2:cb:44: 6f:14:76:e9:cf:ac:d8:e7:f6:31:10:14:ed:06:4d:91:19:cb: b0:e0:e4:f5:ec:49:c0:e8:ee:09:47:c9:b0:66:87:5d:19:c7: 86:86:78:bc:7c:96:78:91:90:30:ae:3a:21:9d:1f:21:d7:3c: bb:14:a8:b0:e8:d4:a2:24:b9:aa:85:33:46:78:7d:cf:25:e1: 24:0d:54:56:65:2d:cd:76:29:16:cf:94:c1:83:4f:23:2b:33: e3:e9:39:23:07:03:da:bf:52:54:87:8d:9e:2c:b5:32:20:74: 69:fd:7f:26:cc:50:38:ce:cb:f8:98:c5:76:74:4b:0e:35:8e: 7e:38:25:68:53:e7:db:66:8b:d8:6f:8e:31:db:93:d3:bf:35: 1a:45:6f:03:77:78:03:47:1a:f6:25:52:93:16:51:4f:0a:02: 8e:6f:50:3b:62:dd:c2:07:02:78:fd:dd:db:9a:0f:98:30:e2: bd:b6:ff:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUemdnwuIB4v0Cx5ULWMZWIgWTPskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA3MjQwNTQ1MzFaFw0yNjA3MjUwOTM5MzFaMDMxMTAvBgNV BAMTKDBGMzBGM0Y1Q0EwRjk1RDgzMEM4MDUxOTUzOTczNTRCQTM0RTc4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSHx+KmpNdd0yLBaPg6/nIiSC R0hzCpbkOlGvk/gk1NAxn+wjlo1S5DQDEK+K/Ftqi22NmtC7IgWmLqH16TthaPB2 tPo9GI+mJCxFrbI5wnNNIzpfQ9fujKULepxp6LPyNKtXPzKAomL5UIaUD/SOGViJ jS4uEa15EhJfqH2+WrgkeGAMRrKNQicY87GZ/WbWbWyVJEzIgf/qBBAmtkPedGyP V3TZPlgDd5YrQUAAEN0sMlNuVN55z4jzkfspDWbokKpoIu1j5044aNHjkbw4Jw1N pTuM558y360TfAEPSz08R4nqc7M6nNnA/GnQch3zaObS8PWdXCloGBCsVkL7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDzDz9coPldgwyAUZU5c1S6NOeIIwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWgSiFcXVbZ6 q1gq/HMN9J5ktZbsqY3mGSc/0h1YN6gxVP+Mn8Uun13Eh7fKq1L+ruMKjork22Ln afZLx1qSmvllcE2b0stEbxR26c+s2Of2MRAU7QZNkRnLsODk9exJwOjuCUfJsGaH XRnHhoZ4vHyWeJGQMK46IZ0fIdc8uxSosOjUoiS5qoUzRnh9zyXhJA1UVmUtzXYp Fs+UwYNPIysz4+k5IwcD2r9SVIeNniy1MiB0af1/JsxQOM7L+JjFdnRLDjWOfjgl aFPn22aL2G+OMduT0781GkVvA3d4A0ca9iVSkxZRTwoCjm9QO2LdwgcCeP3d25oP mDDivbb/ug== -----END CERTIFICATE-----Generated at Fri Jul 24 12:08:56 2026 by rpki-client