$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: 8eGny9WAh05vsXYg/GEPlGLYSiH8lqpIWV0BFZnmaw4= Subject key identifier: 4F:1C:99:43:A1:88:58:1D:6C:83:34:FF:E4:B8:8D:9D:60:D4:0D:61 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 1863A6D13552814F99EE1B967B36F0DC8D86BF29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: CB Signing time: Fri 05 Jun 2026 19:16:23 +0000 Manifest this update: Fri 05 Jun 2026 19:11:23 +0000 Manifest next update: Sat 06 Jun 2026 21:37:23 +0000 Files and hashes: 1: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 2: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 3: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: OXf4IjMUHMbjmIkF8zo+nMA3vRsLQr7E1UYsdmU7QEs=) 4: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 5: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 6: AS58466.roa (hash: 607sAR2dbgCiNziTsqpXz6tGfv37/stPkOdP6bVEEO0=) 7: AS23724.roa (hash: bYuokEQIWh4Vsk4e3lXzUmB8evpzlN/0ohXz5GXDX90=) 8: AS4811.roa (hash: MQynOb4F+1b9ZkBoDwWt/L1FsSiE93o3VTtuHi8Pf84=) 9: AS59077.roa (hash: qKsY8VzCJUKMIixPEhz1UNngrkurGjIVkuy4wiYYkSw=) 10: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 11: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 12: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 21:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:63:a6:d1:35:52:81:4f:99:ee:1b:96:7b:36:f0:dc:8d:86:bf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jun 5 19:11:23 2026 GMT Not After : Jun 6 21:37:23 2026 GMT Subject: CN=4F1C9943A188581D6C8334FFE4B88D9D60D40D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:3a:e1:47:77:e8:1f:65:5f:f6:73:43:92: 73:bb:7b:9f:7d:3d:ea:11:66:cc:8e:11:21:a2:bd: 83:77:59:64:f6:31:73:e5:04:ac:c2:15:51:56:f6: 74:47:c9:bd:76:4d:37:2a:44:6a:a1:d9:1d:8e:02: ac:d7:53:fb:92:48:1c:50:c0:6c:b2:f3:5e:aa:29: 3d:34:55:88:39:cb:9d:d4:40:0e:d5:17:b5:60:4b: 4b:21:10:98:02:d1:d0:4e:23:03:8f:fa:a0:b2:7f: 15:fd:1f:e4:b8:2c:a8:ce:45:6a:46:7e:38:8f:1e: ba:bf:00:2a:60:30:b7:8d:3a:03:cd:87:75:fd:0c: cf:9a:66:2d:10:a6:27:ec:2e:55:b4:84:07:ad:de: 2d:cb:1a:5f:04:ca:5a:3c:6e:b6:13:74:bf:29:bd: 14:72:4f:19:b2:81:1e:3f:44:2d:6a:20:45:9c:86: 75:99:d8:b6:77:9e:82:e5:d0:45:96:71:fe:f8:0a: c1:00:6b:0d:a1:f8:c5:05:c0:32:b1:88:d9:b8:7b: 92:5c:3a:65:70:fc:be:ee:66:86:90:6e:94:dd:b7: 22:38:c3:5b:bc:ed:b0:1a:b0:5b:f6:85:c8:b3:6d: ca:54:d0:7d:c0:36:f0:71:e1:fb:ab:32:ef:2a:74: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:99:43:A1:88:58:1D:6C:83:34:FF:E4:B8:8D:9D:60:D4:0D:61 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:14:80:94:1f:78:9e:32:eb:c0:ce:35:a3:54:58:54:54:de: 06:e8:03:d8:ad:60:44:ed:5f:a6:ff:bf:76:db:ca:ec:e1:2d: c8:18:a2:68:e6:91:53:4c:ce:9c:51:c4:33:d4:02:c0:b9:c8: c4:e4:b2:ef:bb:b4:35:a8:71:71:e7:aa:c0:f0:08:09:d7:7e: 92:29:6e:ea:a9:10:de:fa:7e:a5:77:ac:1c:82:f4:4e:a3:ff: 21:88:21:14:0c:5d:6b:a7:9b:aa:a5:03:71:57:06:75:a3:58: 67:58:9b:0a:33:ce:22:14:e2:d1:4e:58:04:0b:9d:f7:a5:e6: b3:1f:1c:38:3d:2b:9c:d2:6d:76:df:75:d2:9b:4f:04:6f:7b: 6d:a1:dd:18:c8:10:37:a7:7f:1b:f4:b4:01:93:9d:e4:eb:5d: bd:5f:92:33:45:04:a1:fa:51:18:7b:49:a9:46:df:33:ea:db: 35:ff:8f:95:ab:dd:f1:50:07:48:4e:6d:e1:ba:a6:25:53:e0: d3:6b:c3:d6:17:a4:da:5c:b7:bc:ff:8f:f6:03:91:9b:9e:af: a5:a9:24:6a:e1:f4:e7:02:4c:ed:a5:f8:14:0c:09:7d:9a:53: c3:3e:87:9e:eb:27:1c:f0:5b:1c:1e:6c:29:d0:3e:0e:27:5a: c7:7b:5d:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGGOm0TVSgU+Z7huWezbw3I2GvykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA2MDUxOTExMjNaFw0yNjA2MDYyMTM3MjNaMDMxMTAvBgNV BAMTKDRGMUM5OTQzQTE4ODU4MUQ2QzgzMzRGRkU0Qjg4RDlENjBENDBENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvjrhR3foH2Vf9nNDknO7e599 PeoRZsyOESGivYN3WWT2MXPlBKzCFVFW9nRHyb12TTcqRGqh2R2OAqzXU/uSSBxQ wGyy816qKT00VYg5y53UQA7VF7VgS0shEJgC0dBOIwOP+qCyfxX9H+S4LKjORWpG fjiPHrq/ACpgMLeNOgPNh3X9DM+aZi0QpifsLlW0hAet3i3LGl8Eylo8brYTdL8p vRRyTxmygR4/RC1qIEWchnWZ2LZ3noLl0EWWcf74CsEAaw2h+MUFwDKxiNm4e5Jc OmVw/L7uZoaQbpTdtyI4w1u87bAasFv2hcizbcpU0H3ANvBx4furMu8qdMHhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTxyZQ6GIWB1sgzT/5LiNnWDUDWEwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxSAlB94njLr wM41o1RYVFTeBugD2K1gRO1fpv+/dtvK7OEtyBiiaOaRU0zOnFHEM9QCwLnIxOSy 77u0NahxceeqwPAICdd+kilu6qkQ3vp+pXesHIL0TqP/IYghFAxda6ebqqUDcVcG daNYZ1ibCjPOIhTi0U5YBAud96Xmsx8cOD0rnNJtdt910ptPBG97baHdGMgQN6d/ G/S0AZOd5OtdvV+SM0UEofpRGHtJqUbfM+rbNf+Plavd8VAHSE5t4bqmJVPg02vD 1hek2ly3vP+P9gORm56vpakkauH05wJM7aX4FAwJfZpTwz6HnusnHPBbHB5sKdA+ Didax3tddA== -----END CERTIFICATE-----Generated at Sat Jun 6 13:25:25 2026 by rpki-client