$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: Ms9yXrCbkBmN2mkWl0fECS8DBHGZLD9upeXjcgnbhaY= Subject key identifier: 27:8A:3F:F2:B0:0D:01:5F:8E:86:BF:FD:72:07:BF:A2:84:98:0F:D4 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 531B5F759C419C3ABE9EFE8D4E5FAC80EA9EC3FC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 0145 Signing time: Fri 04 Sep 2026 00:09:22 +0000 Manifest this update: Fri 04 Sep 2026 00:04:22 +0000 Manifest next update: Mon 07 Sep 2026 04:17:22 +0000 Files and hashes: 1: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 2: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: pYa65JhanQQ72JkZwjFZs8hticcen3KnrVX7zUiWl0c=) 3: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 4: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 5: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 6: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 7: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 8: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 9: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 10: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 11: AS59077.roa (hash: jqEAS4vl3v8Scmg4fltQNIqu4A4F1urMvQwrsEz6fzQ=) 12: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 13: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1b:5f:75:9c:41:9c:3a:be:9e:fe:8d:4e:5f:ac:80:ea:9e:c3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Sep 4 00:04:22 2026 GMT Not After : Sep 7 04:17:22 2026 GMT Subject: CN=278A3FF2B00D015F8E86BFFD7207BFA284980FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:4d:3c:15:b3:41:db:44:8a:af:25:97:6e: 04:4a:e0:67:5f:25:70:01:38:af:ba:ac:30:50:f5: 8b:c2:7c:70:cd:5d:63:b0:8b:e4:2e:ca:b6:99:f2: 32:ca:4b:dd:41:7a:99:32:04:14:75:66:a7:d3:25: cf:7e:1a:eb:93:ad:f5:4b:cf:45:77:49:94:a0:63: 00:7a:d5:78:fc:4f:5c:e6:f6:af:74:ee:c9:81:19: 30:4f:5f:ca:11:5f:93:af:c6:aa:92:00:7f:24:d9: 18:aa:1f:94:4e:36:2a:b4:94:f5:89:10:06:0b:9a: 36:6b:28:b0:35:5a:92:d5:f6:fa:20:88:03:fe:c4: cb:dd:7a:26:56:e7:62:54:ef:24:90:d9:47:dc:8e: 18:88:86:7d:5b:bc:2a:9d:14:f1:cf:f2:79:ca:50: f4:95:d0:1e:34:60:16:82:9b:89:29:2c:ee:6f:13: c0:9b:73:ba:96:c7:39:4f:e1:fa:03:00:f9:70:99: d7:91:46:6b:27:ac:e5:9a:97:4a:ec:68:5c:5f:ef: 6d:d3:f8:f3:f0:ea:34:06:e7:b8:b1:bb:a2:02:50: 27:a8:74:0c:08:61:45:9b:36:ae:0a:2c:c9:26:9b: ad:51:84:34:07:0a:f1:b6:49:15:f3:6e:68:03:65: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:3F:F2:B0:0D:01:5F:8E:86:BF:FD:72:07:BF:A2:84:98:0F:D4 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:6f:0a:ad:52:f9:96:f6:29:48:6e:f9:20:c9:7c:e4:60: 1a:10:ff:05:29:8c:a1:87:ae:a0:f3:d6:81:e8:7c:d2:66:df: 09:15:ef:a4:50:94:ec:c4:ff:6c:55:d5:e8:22:e7:82:c2:6d: 14:5c:66:25:46:03:91:ee:60:cf:f9:1a:a4:23:87:a8:88:17: 0d:e7:d2:a2:bc:4a:04:d9:7e:40:16:0f:03:ec:72:c6:25:49: 85:15:d6:d1:fc:66:c4:0c:6b:8b:e1:11:e9:fa:3b:c2:6e:33: 99:ed:1d:b4:61:97:22:c5:d5:28:13:c7:0e:79:7e:29:49:5c: ab:0b:0d:e5:93:44:4a:6d:28:fa:21:82:e4:5d:df:4e:5e:9c: 4a:73:33:e6:c3:e4:37:36:a4:2b:60:54:e8:c5:81:ef:f3:b8: b1:1c:6f:75:ca:9d:9f:68:43:60:15:60:f2:89:a9:2f:28:1d: 87:06:11:e3:d0:14:d1:6a:ca:44:40:e7:e9:a2:4e:5b:13:ef: aa:a5:0f:fa:d6:33:82:c3:8e:b2:73:49:cb:1c:a6:7f:fa:cd: 43:6a:ea:78:72:a3:30:dd:66:fb:f1:da:66:87:1c:9b:bb:3f: 7f:05:80:94:0c:ab:5e:62:4d:a4:5c:df:65:55:70:17:ec:77: 9f:7d:96:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUxtfdZxBnDq+nv6NTl+sgOqew/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA5MDQwMDA0MjJaFw0yNjA5MDcwNDE3MjJaMDMxMTAvBgNV BAMTKDI3OEEzRkYyQjAwRDAxNUY4RTg2QkZGRDcyMDdCRkEyODQ5ODBGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIk08FbNB20SKryWXbgRK4Gdf JXABOK+6rDBQ9YvCfHDNXWOwi+QuyraZ8jLKS91BepkyBBR1ZqfTJc9+GuuTrfVL z0V3SZSgYwB61Xj8T1zm9q907smBGTBPX8oRX5OvxqqSAH8k2RiqH5RONiq0lPWJ EAYLmjZrKLA1WpLV9vogiAP+xMvdeiZW52JU7ySQ2UfcjhiIhn1bvCqdFPHP8nnK UPSV0B40YBaCm4kpLO5vE8Cbc7qWxzlP4foDAPlwmdeRRmsnrOWal0rsaFxf723T +PPw6jQG57ixu6ICUCeodAwIYUWbNq4KLMkmm61RhDQHCvG2SRXzbmgDZZjzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ4o/8rANAV+Ohr/9cge/ooSYD9QwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZFvCq1S+Zb2 KUhu+SDJfORgGhD/BSmMoYeuoPPWgeh80mbfCRXvpFCU7MT/bFXV6CLngsJtFFxm JUYDke5gz/kapCOHqIgXDefSorxKBNl+QBYPA+xyxiVJhRXW0fxmxAxri+ER6fo7 wm4zme0dtGGXIsXVKBPHDnl+KUlcqwsN5ZNESm0o+iGC5F3fTl6cSnMz5sPkNzak K2BU6MWB7/O4sRxvdcqdn2hDYBVg8ompLygdhwYR49AU0WrKREDn6aJOWxPvqqUP +tYzgsOOsnNJyxymf/rNQ2rqeHKjMN1m+/HaZoccm7s/fwWAlAyrXmJNpFzfZVVw F+x3n32WrA== -----END CERTIFICATE-----Generated at Sat Sep 5 03:13:12 2026 by rpki-client