$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft File: AA39AE9FC417219D4A84D7759F82869F86905204.mft (raw, json) Hash identifier: GkMGsmKZsBQIqS5raVcZa1dcMFoc1Ej3E9CuhAcfR0Y= Subject key identifier: 91:6D:FB:14:2F:85:ED:02:C0:30:B2:9E:A6:2A:89:D0:78:00:27:2B Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 2A8C56583ADF890F9B592732BD12F7252511940B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 03:25:15 +0000 Manifest this update: Fri 24 Jul 2026 03:20:15 +0000 Manifest next update: Sat 25 Jul 2026 05:22:15 +0000 Files and hashes: 1: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (hash: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s=) 2: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (hash: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y=) 3: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (hash: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA=) 4: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (hash: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=) 5: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (hash: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=) 6: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (hash: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=) 7: 323430363a363130303a353030303a3a2f33362d3336203d3e203234313339.roa (hash: C6d2tt/JHqFwEp+CIe1fj6fwP2wy1hhZYhEeSVUzUjk=) 8: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (hash: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM=) 9: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (hash: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=) 10: 323430363a363130303a3a2f33322d3332203d3e203234313339.roa (hash: gCEI8a7rZnOPEvUyXP287SD6JhgKuVmWO2SvTJg86oU=) 11: 323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (hash: Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=) 12: 323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (hash: TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=) 13: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (hash: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=) 14: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (hash: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=) 15: 323430363a363130303a363030303a3a2f33362d3336203d3e203234313339.roa (hash: UMt0eG92riLUhT2wp1ct6ayH6yCz39YR/2h4dIcAXD8=) 16: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (hash: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=) 17: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (hash: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0=) 18: AA39AE9FC417219D4A84D7759F82869F86905204.crl (hash: VYYloWt97dR+/BxiRuGh0Ojm13M0sSWIQpPYmlppGhs=) 19: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (hash: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=) 20: 323430363a363130303a323030303a3a2f33362d3336203d3e203234313339.roa (hash: Om9Ul+tIE5T2JX51QQmc7zE+/WIdDQ4UiAdT/yJdWzg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8c:56:58:3a:df:89:0f:9b:59:27:32:bd:12:f7:25:25:11:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: Jul 24 03:20:15 2026 GMT Not After : Jul 25 05:22:15 2026 GMT Subject: CN=916DFB142F85ED02C030B29EA62A89D07800272B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:b6:f1:f0:f9:d3:64:ec:21:5f:79:4a:09: 10:2f:0a:a9:4b:b2:3c:0b:88:32:e4:db:45:f0:af: 0f:5b:1d:1c:3e:e1:60:b4:de:54:d0:eb:a4:3a:96: 28:d9:ac:23:12:48:a3:b3:f5:b9:ca:db:c2:4a:00: 7c:89:5a:6d:54:e3:97:fa:47:00:32:33:85:e0:f1: e0:84:ae:26:2b:d4:db:a9:0e:cb:10:87:4b:8f:a4: ec:42:4c:fc:6c:0f:4d:96:95:8a:7e:32:81:ee:55: 7e:fd:36:37:e4:17:a0:5a:48:95:0a:1c:e6:1f:11: 07:26:71:44:e3:c8:25:57:e4:71:d4:43:78:6f:b2: c6:5a:94:70:00:b0:34:96:68:a7:70:da:db:ed:09: d5:b0:61:23:f9:11:ae:6b:2d:58:a4:88:c3:eb:2e: 7a:02:0a:67:23:28:c7:23:ec:18:31:61:bb:b5:57: 78:41:22:5b:64:64:f3:3d:4a:24:6b:0d:f8:50:6a: d1:b9:fb:bd:e2:09:1e:60:51:8f:73:d4:a5:6f:26: 6f:90:bf:29:d1:b0:b2:22:21:c5:17:33:ce:7c:dd: 0c:00:2d:e7:b1:29:db:9e:f5:14:2f:2e:a0:e3:ae: 5e:a2:c0:da:fd:50:9c:ea:0d:4b:f5:87:83:b3:5c: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:FB:14:2F:85:ED:02:C0:30:B2:9E:A6:2A:89:D0:78:00:27:2B X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ec:2f:5e:68:da:f5:1b:65:e9:08:15:fa:26:6a:54:0e:48: 08:fe:fd:a6:05:8f:f0:be:97:6a:73:90:cc:a4:7e:ed:51:68: 44:19:2b:c7:50:89:93:4c:2b:22:3b:4a:c2:8b:f6:4a:cd:1c: 2c:a0:74:7d:07:dd:b8:a4:49:cf:5d:ff:f2:12:dd:46:45:a5: 2c:f0:63:11:0b:00:85:04:35:7e:6b:93:7e:dd:cb:ef:98:ef: 36:13:91:b5:af:73:a9:28:24:2d:7e:d3:e6:a0:9c:14:c0:e9: 94:bb:d6:15:ad:9a:70:6f:9c:65:1c:c4:55:75:d2:56:cf:d3: e1:1d:27:22:e1:68:25:6e:c5:44:ac:65:a4:71:df:34:ca:d7: 6e:98:80:11:25:03:b3:be:d8:e7:ce:ff:fe:68:a5:d4:31:3a: 79:0d:c2:bf:c5:4d:d6:42:55:4f:6f:79:16:8d:7d:46:41:85: fc:4a:1d:65:41:a9:dd:92:34:de:47:8d:fe:de:6c:2e:81:15: 2d:be:88:c3:de:bf:5e:0f:c0:66:17:0e:3e:f7:c9:a2:9f:29: ce:4f:7d:c7:24:cf:8c:2c:8d:22:e7:e5:3b:45:a0:cd:51:c8: 97:7b:e5:74:06:eb:b6:15:ca:d1:44:3b:4d:17:99:c7:9d:58: b1:7f:f5:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKoxWWDrfiQ+bWScyvRL3JSURlAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA3MjQwMzIwMTVaFw0yNjA3MjUwNTIyMTVaMDMxMTAvBgNV BAMTKDkxNkRGQjE0MkY4NUVEMDJDMDMwQjI5RUE2MkE4OUQwNzgwMDI3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMbbx8PnTZOwhX3lKCRAvCqlL sjwLiDLk20Xwrw9bHRw+4WC03lTQ66Q6lijZrCMSSKOz9bnK28JKAHyJWm1U45f6 RwAyM4Xg8eCEriYr1NupDssQh0uPpOxCTPxsD02WlYp+MoHuVX79NjfkF6BaSJUK HOYfEQcmcUTjyCVX5HHUQ3hvssZalHAAsDSWaKdw2tvtCdWwYSP5Ea5rLVikiMPr LnoCCmcjKMcj7BgxYbu1V3hBIltkZPM9SiRrDfhQatG5+73iCR5gUY9z1KVvJm+Q vynRsLIiIcUXM8583QwALeexKdue9RQvLqDjrl6iwNr9UJzqDUv1h4OzXGR/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkW37FC+F7QLAMLKepiqJ0HgAJyswHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY0NTMwOTkxMjU0MDc3NjMvMC9BQTM5QUU5RkM0MTcy MTlENEE4NEQ3NzU5RjgyODY5Rjg2OTA1MjA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOwvXmja9Rtl 6QgV+iZqVA5ICP79pgWP8L6XanOQzKR+7VFoRBkrx1CJk0wrIjtKwov2Ss0cLKB0 fQfduKRJz13/8hLdRkWlLPBjEQsAhQQ1fmuTft3L75jvNhORta9zqSgkLX7T5qCc FMDplLvWFa2acG+cZRzEVXXSVs/T4R0nIuFoJW7FRKxlpHHfNMrXbpiAESUDs77Y 587//mil1DE6eQ3Cv8VN1kJVT295Fo19RkGF/EodZUGp3ZI03keN/t5sLoEVLb6I w96/Xg/AZhcOPvfJop8pzk99xyTPjCyNIuflO0WgzVHIl3vldAbrthXK0UQ7TReZ x51YsX/1nA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:53 2026 by rpki-client