$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: QvcKCHxssAlUOUsZWa55Cw0LQnMJZWjIbUxxXANgbjw= Subject key identifier: 0A:B3:9E:CB:EA:3E:23:D5:67:CE:5C:91:97:26:A4:54:97:A6:5A:95 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 6F66E845809F4DEDF003C5F6C76CA40088CB9A4F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 010F Signing time: Tue 21 Jul 2026 11:03:37 +0000 Manifest this update: Tue 21 Jul 2026 10:58:37 +0000 Manifest next update: Wed 22 Jul 2026 14:30:37 +0000 Files and hashes: 1: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: BNzj+AlxVOHCmBA1A2XDOQLID4bhZATSTFR4+dFybPw=) 2: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 3: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 4: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 5: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 6: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 7: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 8: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 9: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 10: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 11: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 12: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 13: AS59077.roa (hash: Q7nEwKbZKdVfMPg4eqPb4dhk0zI34xvIoyJ2oXjOr1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:66:e8:45:80:9f:4d:ed:f0:03:c5:f6:c7:6c:a4:00:88:cb:9a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jul 21 10:58:37 2026 GMT Not After : Jul 22 14:30:37 2026 GMT Subject: CN=0AB39ECBEA3E23D567CE5C919726A45497A65A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:b2:87:48:13:d3:03:81:c9:10:48:db:1d: fc:69:de:e5:55:7f:5c:5c:50:52:de:96:6b:72:a6: 41:4a:ab:33:e3:c3:aa:c6:da:fb:d2:1a:52:18:33: ec:70:d0:9a:92:b6:e1:90:97:ad:30:a5:9b:c3:00: d7:34:59:34:3e:97:76:35:ac:d7:ff:5a:fc:11:cc: 76:cc:69:02:9e:93:19:74:a0:14:20:7b:32:89:66: 81:94:ca:b8:84:37:92:58:80:9b:57:bc:b2:76:69: 29:e6:06:7f:ec:94:4d:63:82:03:2c:a2:34:5b:77: 6c:99:37:8f:06:58:b3:51:60:45:96:7a:82:a7:aa: f0:a7:37:8c:d8:3e:47:d9:1f:91:69:7c:20:4e:21: 05:a0:be:72:ea:d1:b4:5c:12:bb:5f:98:bc:5c:2f: 90:45:b5:b2:72:0b:63:fe:8e:05:77:4b:d4:90:7f: a1:9d:87:d7:2a:51:81:eb:ff:bb:0f:8d:4f:64:18: 3e:84:b1:f5:11:1c:4a:84:9e:ce:59:92:8d:5b:d0: 10:04:02:0f:11:30:45:d1:1d:9a:39:eb:0f:98:d4: 71:23:d0:f6:b3:f5:84:fa:2d:44:18:79:43:0f:f6: 94:97:c0:f8:a3:44:e6:e3:9b:cf:07:a4:dd:90:df: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B3:9E:CB:EA:3E:23:D5:67:CE:5C:91:97:26:A4:54:97:A6:5A:95 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fa:7e:c9:a6:84:d7:38:ba:a7:47:7b:2b:34:33:a4:ec:e1: 5b:9a:65:b8:3a:1d:f3:c9:8f:a5:33:b6:10:83:c4:63:a3:90: 7e:98:9a:4f:b2:ae:24:68:ae:af:62:cd:4e:05:41:54:2f:63: 68:39:91:76:fd:59:5c:aa:ab:e6:77:9d:0e:fd:ed:22:7b:3a: af:56:62:36:eb:7f:3f:9f:9a:21:ca:57:f6:f9:ba:ab:3d:58: 60:17:56:2e:ba:13:6d:9f:7e:74:5c:fe:07:6d:37:e6:36:eb: d1:c9:43:99:a1:37:8f:73:89:c3:e7:86:d1:57:04:de:45:7a: bb:56:2a:34:00:e4:77:6d:c8:0c:00:12:ec:35:6a:c1:68:fb: 46:f0:3d:1a:1d:40:6f:55:c2:34:1c:5a:06:c3:b9:2f:0c:ec: 87:ab:cf:d0:38:0e:6f:24:a5:da:d6:9a:89:8c:ce:3c:c1:62: fa:41:e8:ca:e2:88:e9:46:b4:9b:e7:52:91:9d:d3:c9:01:60: 53:91:a5:c4:d9:54:fb:58:1f:50:f7:29:91:e9:ea:f1:50:ba: 21:d6:62:04:af:f8:43:91:f8:fd:b3:f1:aa:c2:53:57:02:67: de:82:b0:98:ed:42:59:33:dd:94:1f:3a:2e:34:9a:04:84:de: 7a:4e:20:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb2boRYCfTe3wA8X2x2ykAIjLmk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA3MjExMDU4MzdaFw0yNjA3MjIxNDMwMzdaMDMxMTAvBgNV BAMTKDBBQjM5RUNCRUEzRTIzRDU2N0NFNUM5MTk3MjZBNDU0OTdBNjVBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJrKHSBPTA4HJEEjbHfxp3uVV f1xcUFLelmtypkFKqzPjw6rG2vvSGlIYM+xw0JqStuGQl60wpZvDANc0WTQ+l3Y1 rNf/WvwRzHbMaQKekxl0oBQgezKJZoGUyriEN5JYgJtXvLJ2aSnmBn/slE1jggMs ojRbd2yZN48GWLNRYEWWeoKnqvCnN4zYPkfZH5FpfCBOIQWgvnLq0bRcErtfmLxc L5BFtbJyC2P+jgV3S9SQf6Gdh9cqUYHr/7sPjU9kGD6EsfURHEqEns5Zko1b0BAE Ag8RMEXRHZo56w+Y1HEj0Paz9YT6LUQYeUMP9pSXwPijRObjm88HpN2Q38+XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCrOey+o+I9VnzlyRlyakVJemWpUwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/p+yaaE1zi6 p0d7KzQzpOzhW5pluDod88mPpTO2EIPEY6OQfpiaT7KuJGiur2LNTgVBVC9jaDmR dv1ZXKqr5nedDv3tIns6r1ZiNut/P5+aIcpX9vm6qz1YYBdWLroTbZ9+dFz+B203 5jbr0clDmaE3j3OJw+eG0VcE3kV6u1YqNADkd23IDAAS7DVqwWj7RvA9Gh1Ab1XC NBxaBsO5Lwzsh6vP0DgObySl2taaiYzOPMFi+kHoyuKI6Ua0m+dSkZ3TyQFgU5Gl xNlU+1gfUPcpkenq8VC6IdZiBK/4Q5H4/bPxqsJTVwJn3oKwmO1CWTPdlB86LjSa BITeek4gRw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:03 2026 by rpki-client