$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: e5WuWX0yE3cLJc1NiYuv/aKTIT6RiruVYjruX/cAsTc= Subject key identifier: 78:D3:AA:90:C4:A1:92:49:CB:72:C9:68:6E:E0:C5:E2:C5:B9:8B:05 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 7CC948D0884796DFB51C69AE037C686C65C540CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 015D Signing time: Sun 25 Oct 2026 08:42:24 +0000 Manifest this update: Sun 25 Oct 2026 08:37:24 +0000 Manifest next update: Wed 28 Oct 2026 14:21:24 +0000 Files and hashes: 1: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 2: AS135377.roa (hash: 0TgUONzFV8lNd0jopT12jgLwNazd/6SepxXD+2igQdM=) 3: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 4: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 5: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 6: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 7: AS59077.roa (hash: jqEAS4vl3v8Scmg4fltQNIqu4A4F1urMvQwrsEz6fzQ=) 8: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 9: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: CJ4W4WQ/HlrmQkeeOx6lj9KNmHFuIK6ptTHzr1GUQb8=) 10: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 11: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 12: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 13: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 14:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c9:48:d0:88:47:96:df:b5:1c:69:ae:03:7c:68:6c:65:c5:40:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Oct 25 08:37:24 2026 GMT Not After : Oct 28 14:21:24 2026 GMT Subject: CN=78D3AA90C4A19249CB72C9686EE0C5E2C5B98B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:e3:10:2c:f3:88:25:38:fd:55:11:b1:56: 53:86:87:33:1b:51:25:62:72:20:0e:9b:51:85:97: 43:29:5b:68:49:e6:9f:43:b9:37:8e:b5:55:f7:5e: bb:3f:fa:c1:3d:c4:54:b4:48:8c:c7:8f:89:2b:02: 8a:7b:34:0e:a6:9c:8b:8c:50:00:96:00:1b:54:8d: 56:46:75:eb:ba:50:de:5b:2d:da:eb:9e:46:db:0f: 34:d0:b5:09:af:a2:82:e3:1f:1e:32:74:1b:ed:7a: c3:cc:be:a0:90:21:7e:5e:df:86:56:0b:7f:15:a1: 1a:c4:a3:37:47:a3:f0:14:cb:22:61:45:d6:50:5b: 47:dc:5b:81:40:2d:ce:2e:be:62:d6:c7:26:52:d5: e4:eb:4d:fd:24:d4:33:53:eb:9c:79:5f:e7:33:d3: 5e:43:e6:bb:82:76:88:83:5c:40:4e:19:56:6b:20: 15:c0:65:3a:99:17:2a:e7:88:b6:37:8e:40:88:de: cb:78:0a:c5:3d:40:98:8f:69:8c:b8:59:1e:51:33: 9e:26:e7:70:40:f2:8d:df:9d:c7:06:eb:1d:b9:c1: 18:bf:cd:22:fe:2a:1a:b5:d7:8d:9a:58:b8:70:35: 18:1c:ff:f2:26:31:ca:03:21:cc:8f:c2:5f:e5:01: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:AA:90:C4:A1:92:49:CB:72:C9:68:6E:E0:C5:E2:C5:B9:8B:05 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:a9:4a:a4:ce:a6:3c:94:9b:86:f7:07:a0:4d:12:53:d0: b2:94:e7:33:c6:85:ec:ed:8f:8d:90:22:34:17:49:e0:fd:7d: c5:b0:73:8b:d9:7c:19:10:d6:87:64:47:fa:eb:08:0a:4e:58: bd:e1:50:43:32:1a:05:8c:7b:1d:a5:2c:33:d0:2e:32:69:ac: ca:30:7f:6d:0d:92:55:fe:d6:c8:32:c2:07:8b:a8:10:69:11: e3:89:8f:18:d1:3a:13:de:43:a6:65:d9:14:83:ac:0b:5f:0c: 19:26:04:9c:a4:9f:dc:10:18:25:1a:77:f3:9d:a1:63:24:42: 1e:75:0e:95:bd:2b:41:d9:9a:87:78:7d:f5:15:ad:aa:6e:7f: 04:9b:05:9f:2f:80:d6:89:c7:59:8d:1c:fc:a2:f8:d9:a0:a2: bd:ef:e0:8f:f9:f1:c4:f3:ba:fc:0f:83:9b:f3:81:25:95:29: d5:e2:ac:24:d2:ad:4f:fb:b2:26:0c:1a:b4:74:c0:70:2a:34: 66:2d:28:41:7f:80:62:84:e5:82:12:d0:7e:a5:48:f4:30:7e: ac:7c:2b:9a:61:a5:e2:a3:0b:44:c5:93:52:64:e6:a2:6c:ed: 13:a0:3b:68:0f:e2:03:fc:3f:e3:32:ee:b7:b5:fe:3b:41:71: a1:df:ae:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfMlI0IhHlt+1HGmuA3xobGXFQM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjEwMjUwODM3MjRaFw0yNjEwMjgxNDIxMjRaMDMxMTAvBgNV BAMTKDc4RDNBQTkwQzRBMTkyNDlDQjcyQzk2ODZFRTBDNUUyQzVCOThCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEOMQLPOIJTj9VRGxVlOGhzMb USViciAOm1GFl0MpW2hJ5p9DuTeOtVX3Xrs/+sE9xFS0SIzHj4krAop7NA6mnIuM UACWABtUjVZGdeu6UN5bLdrrnkbbDzTQtQmvooLjHx4ydBvtesPMvqCQIX5e34ZW C38VoRrEozdHo/AUyyJhRdZQW0fcW4FALc4uvmLWxyZS1eTrTf0k1DNT65x5X+cz 015D5ruCdoiDXEBOGVZrIBXAZTqZFyrniLY3jkCI3st4CsU9QJiPaYy4WR5RM54m 53BA8o3fnccG6x25wRi/zSL+Khq1142aWLhwNRgc//ImMcoDIcyPwl/lAfWXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeNOqkMShkknLcslobuDF4sW5iwUwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMapSqTOpjyU m4b3B6BNElPQspTnM8aF7O2PjZAiNBdJ4P19xbBzi9l8GRDWh2RH+usICk5YveFQ QzIaBYx7HaUsM9AuMmmsyjB/bQ2SVf7WyDLCB4uoEGkR44mPGNE6E95DpmXZFIOs C18MGSYEnKSf3BAYJRp3852hYyRCHnUOlb0rQdmah3h99RWtqm5/BJsFny+A1onH WY0c/KL42aCive/gj/nxxPO6/A+Dm/OBJZUp1eKsJNKtT/uyJgwatHTAcCo0Zi0o QX+AYoTlghLQfqVI9DB+rHwrmmGl4qMLRMWTUmTmomztE6A7aA/iA/w/4zLut7X+ O0Fxod+u7A== -----END CERTIFICATE-----Generated at Mon Oct 26 11:42:55 2026 by rpki-client