$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json) Hash identifier: Eh4HtawBBf7Am1YTI35+7OPGfo48cywL9lexSF0yrUs= Subject key identifier: A4:94:5E:97:0B:3E:51:71:CE:50:C8:AC:B9:4F:FC:3F:08:C5:09:EF Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 17EB67335A02D010D4FC31DB907BF6162345C637 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft Manifest number: 02AA Signing time: Thu 23 Jul 2026 17:31:27 +0000 Manifest this update: Thu 23 Jul 2026 17:26:27 +0000 Manifest next update: Fri 24 Jul 2026 18:12:27 +0000 Files and hashes: 1: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=) 2: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=) 3: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=) 4: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=) 5: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=) 6: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=) 7: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=) 8: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=) 9: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=) 10: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=) 11: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=) 12: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=) 13: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=) 14: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=) 15: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=) 16: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: qMfDVO5LvttGNwhdr+EWy1qiepIbtLYRl4jh8PPqqck=) 17: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=) 18: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:eb:67:33:5a:02:d0:10:d4:fc:31:db:90:7b:f6:16:23:45:c6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jul 23 17:26:27 2026 GMT Not After : Jul 24 18:12:27 2026 GMT Subject: CN=A4945E970B3E5171CE50C8ACB94FFC3F08C509EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:3b:af:c1:7c:0f:1e:04:56:df:f4:6f:bd: 52:16:13:56:4e:1f:a1:7c:0d:ce:70:68:e0:d6:d2: 44:7f:5c:fd:a7:41:28:20:a6:2a:cf:f2:a0:04:39: bb:b6:31:24:67:b1:ad:ec:c5:4a:7a:0a:96:01:76: 2b:39:6c:10:66:f7:89:f5:e1:c6:b8:b6:80:97:e8: 7a:34:5e:8a:00:47:8f:d7:c3:4c:73:bb:8c:bb:a7: a1:77:45:bc:f0:06:fb:2b:3f:eb:11:d0:98:2b:59: 4d:a8:0c:6d:a0:5d:b6:ea:d9:34:6c:85:d1:8f:0e: 93:70:59:2f:e6:0f:58:4a:58:da:54:26:89:7e:63: 82:80:e8:ee:25:bb:66:3d:b9:34:74:72:27:61:ba: c2:94:0d:c5:4d:1d:5e:42:be:dc:b6:07:c7:1f:cf: 60:d1:8b:e4:01:86:eb:06:f4:26:92:df:76:46:6a: 16:45:67:9f:c5:82:d8:5b:cc:84:a1:a5:6a:14:e3: cf:67:db:08:c7:9d:02:7a:65:94:47:f5:e2:68:df: 73:02:b6:3c:15:50:9b:77:64:a5:ec:63:d4:53:ab: 4e:af:fe:70:24:e4:a6:f5:bb:93:26:23:86:02:8a: 46:ea:fe:ed:b5:78:c1:f4:0a:bb:9b:75:2a:d6:0b: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:94:5E:97:0B:3E:51:71:CE:50:C8:AC:B9:4F:FC:3F:08:C5:09:EF X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0b:67:fe:83:76:88:b3:11:53:63:df:18:ea:21:96:2b:5b: 0d:43:f4:1c:2d:76:a9:80:1c:1d:10:47:91:9e:7b:09:15:76: f8:34:82:d8:2b:fc:07:3e:06:24:6e:72:b4:e2:07:b1:ec:56: 48:aa:13:82:6c:cb:d5:3d:9b:6c:be:6c:86:31:b4:c1:9d:4c: 64:05:b4:c4:c5:2a:98:49:85:bf:ee:c3:d3:2e:64:6e:01:e5: d6:56:12:5f:ed:0c:47:3b:9e:92:02:f7:45:b5:0d:20:30:3e: 60:bf:d2:8f:ea:64:1f:ef:54:1b:6e:5d:ab:8e:1b:18:d0:79: 06:8e:53:88:e7:60:83:fc:5d:e7:ef:2f:fb:93:32:39:84:0a: a5:ed:06:b0:0b:d1:ed:71:a6:c9:d1:01:23:45:67:18:0c:89: ea:ad:f6:46:51:0f:c7:15:56:48:45:fa:79:07:08:0c:e6:7c: 98:2b:95:90:87:15:62:15:60:40:30:a6:c2:43:3f:e7:c5:bf: cd:bf:d8:45:9a:06:65:b5:96:3c:1e:4b:4a:b4:15:e4:b8:7e: 5d:f2:61:54:13:38:7f:71:ae:6e:5b:c2:a6:18:5e:37:cd:30: b4:f0:e5:13:01:49:ee:75:8c:f2:da:33:4f:7f:af:aa:25:9a: 30:27:97:78 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF+tnM1oC0BDU/DHbkHv2FiNFxjcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDcyMzE3MjYyN1oX DTI2MDcyNDE4MTIyN1owMzExMC8GA1UEAxMoQTQ5NDVFOTcwQjNFNTE3MUNFNTBD OEFDQjk0RkZDM0YwOEM1MDlFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuEO6/BfA8eBFbf9G+9UhYTVk4foXwNznBo4NbSRH9c/adBKCCmKs/yoAQ5 u7YxJGexrezFSnoKlgF2KzlsEGb3ifXhxri2gJfoejReigBHj9fDTHO7jLunoXdF vPAG+ys/6xHQmCtZTagMbaBdturZNGyF0Y8Ok3BZL+YPWEpY2lQmiX5jgoDo7iW7 Zj25NHRyJ2G6wpQNxU0dXkK+3LYHxx/PYNGL5AGG6wb0JpLfdkZqFkVnn8WC2FvM hKGlahTjz2fbCMedAnpllEf14mjfcwK2PBVQm3dkpexj1FOrTq/+cCTkpvW7kyYj hgKKRur+7bV4wfQKu5t1KtYL820CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSklF6X Cz5Rcc5QyKy5T/w/CMUJ7zAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8wLzM5MDlDQ0Y2OUQ3RjFBMTdEQ0EwMTg3OEZBRTA2RUMzOUIzOEUz QkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBXC2f+g3aIsxFTY98Y6iGWK1sNQ/QcLXapgBwdEEeRnnsJ FXb4NILYK/wHPgYkbnK04gex7FZIqhOCbMvVPZtsvmyGMbTBnUxkBbTExSqYSYW/ 7sPTLmRuAeXWVhJf7QxHO56SAvdFtQ0gMD5gv9KP6mQf71Qbbl2rjhsY0HkGjlOI 52CD/F3n7y/7kzI5hAql7QawC9HtcabJ0QEjRWcYDInqrfZGUQ/HFVZIRfp5BwgM 5nyYK5WQhxViFWBAMKbCQz/nxb/Nv9hFmgZltZY8HktKtBXkuH5d8mFUEzh/ca5u W8KmGF43zTC08OUTAUnudYzy2jNPf6+qJZowJ5d4 -----END CERTIFICATE-----Generated at Fri Jul 24 09:59:39 2026 by rpki-client