$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: mlfqUyy1sskf0kvAs6dN4ReyXbITKGJUy1p9Hv+/f0U= Subject key identifier: 95:4E:7A:DC:E9:27:D4:A7:30:A8:E0:50:3D:48:C5:24:4B:B6:04:E8 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 717CBF990C093AA85B36D10E0922CAE85CF132EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 17:39:14 +0000 Manifest this update: Thu 23 Jul 2026 17:34:14 +0000 Manifest next update: Fri 24 Jul 2026 20:24:14 +0000 Files and hashes: 1: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 2: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: aUMB9pwDI6tFZONtwyfX9WjVQCgh2HXm58FCescAlcQ=) 3: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 4: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 5: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 6: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 7: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 8: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) 9: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) 10: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) 11: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7c:bf:99:0c:09:3a:a8:5b:36:d1:0e:09:22:ca:e8:5c:f1:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jul 23 17:34:14 2026 GMT Not After : Jul 24 20:24:14 2026 GMT Subject: CN=954E7ADCE927D4A730A8E0503D48C5244BB604E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:5a:43:75:c2:cc:3c:25:d3:8c:5c:dd:62: 4d:96:7c:b8:a3:f8:5b:9c:79:47:52:37:87:10:bf: d3:b5:b9:7c:23:4c:b9:bf:b4:1b:9b:c0:42:95:16: 82:e8:4b:1d:a3:ec:6d:2f:73:a0:cb:fc:1f:67:d2: 32:cd:f0:9a:41:e8:9f:dc:38:3f:a0:4d:67:2a:d3: 36:79:64:02:94:97:64:c4:ac:60:1d:27:f0:3e:0b: b2:5b:af:12:28:69:30:a3:fa:9d:cd:bb:af:d7:ce: da:00:cc:48:22:2e:76:48:92:04:94:fd:3e:26:11: 09:39:54:01:4f:24:6f:2e:0a:cb:f4:5c:e5:7c:70: 7c:7c:32:e2:5a:26:4c:2c:6d:a9:94:af:48:7b:bf: 13:2d:d9:7a:09:ab:72:ec:c4:7c:a8:ce:02:dd:28: 0a:db:da:13:1c:61:ae:f9:0f:1c:db:6e:fd:3e:5a: 88:64:bd:ac:e6:b8:e9:07:58:21:12:99:e2:22:24: 70:0b:ae:1b:1d:05:df:4f:4e:96:ba:8c:3e:ea:fa: 74:58:6a:6c:0d:e7:f5:ea:71:b6:0c:59:2e:05:b9: a5:bd:bf:00:75:aa:31:d0:7f:07:e0:1d:61:62:14: 34:df:7a:9a:01:89:4a:13:af:bf:7b:28:46:0b:75: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4E:7A:DC:E9:27:D4:A7:30:A8:E0:50:3D:48:C5:24:4B:B6:04:E8 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:15:3e:63:cc:22:40:a1:e1:c6:cd:22:d3:c0:f2:4d:1d:29: be:95:68:b6:fa:1b:2a:bd:c0:7f:c3:bb:f2:6e:a6:fe:76:81: c4:03:5d:35:0e:2d:a9:32:7d:d0:86:cc:dd:e6:83:db:72:0d: 0e:2a:1a:b4:a9:23:15:f4:ab:a6:4f:de:45:e6:5a:b8:5f:36: 6d:87:5b:15:b9:99:65:7d:b4:35:7c:4c:fd:0f:92:e2:a7:e7: 4b:47:7a:82:18:28:f8:9a:91:58:ac:51:06:d1:20:80:9e:d6: 47:67:10:03:50:eb:83:d2:39:73:c0:fe:88:90:69:7c:78:d5: 64:ff:67:5e:5c:86:9e:c8:5e:d0:eb:a1:3c:f4:3a:8e:5c:20: 4d:f9:0a:ad:6f:ab:9f:90:5e:60:48:13:b7:9e:ee:66:b7:56: 20:4e:54:2f:98:6d:46:39:85:09:38:14:bc:1a:32:32:e4:18: 72:a5:d3:86:e8:55:0a:85:20:03:67:f8:cf:35:c1:16:7f:95: 54:7d:d3:b0:e0:4c:34:32:2e:48:67:b4:87:9c:38:c4:5b:22: a9:e6:72:60:dd:c9:33:33:1d:c1:16:27:5e:45:e3:5d:54:e3: ee:df:85:90:f5:85:6d:47:0b:c3:a9:3b:44:e5:c0:c6:4e:30: 4f:bf:74:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcXy/mQwJOqhbNtEOCSLK6FzxMu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA3MjMxNzM0MTRaFw0yNjA3MjQyMDI0MTRaMDMxMTAvBgNV BAMTKDk1NEU3QURDRTkyN0Q0QTczMEE4RTA1MDNENDhDNTI0NEJCNjA0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsVpDdcLMPCXTjFzdYk2WfLij +FuceUdSN4cQv9O1uXwjTLm/tBubwEKVFoLoSx2j7G0vc6DL/B9n0jLN8JpB6J/c OD+gTWcq0zZ5ZAKUl2TErGAdJ/A+C7JbrxIoaTCj+p3Nu6/XztoAzEgiLnZIkgSU /T4mEQk5VAFPJG8uCsv0XOV8cHx8MuJaJkwsbamUr0h7vxMt2XoJq3LsxHyozgLd KArb2hMcYa75Dxzbbv0+WohkvazmuOkHWCESmeIiJHALrhsdBd9PTpa6jD7q+nRY amwN5/XqcbYMWS4FuaW9vwB1qjHQfwfgHWFiFDTfepoBiUoTr797KEYLdVWdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlU563Okn1KcwqOBQPUjFJEu2BOgwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphU+Y8wiQKHh xs0i08DyTR0pvpVotvobKr3Af8O78m6m/naBxANdNQ4tqTJ90IbM3eaD23INDioa tKkjFfSrpk/eReZauF82bYdbFbmZZX20NXxM/Q+S4qfnS0d6ghgo+JqRWKxRBtEg gJ7WR2cQA1Drg9I5c8D+iJBpfHjVZP9nXlyGnshe0OuhPPQ6jlwgTfkKrW+rn5Be YEgTt57uZrdWIE5UL5htRjmFCTgUvBoyMuQYcqXThuhVCoUgA2f4zzXBFn+VVH3T sOBMNDIuSGe0h5w4xFsiqeZyYN3JMzMdwRYnXkXjXVTj7t+FkPWFbUcLw6k7ROXA xk4wT790Gw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:29:07 2026 by rpki-client