$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: TOKgGUnH5iveKeDzdDs3ikFqNBWE2f7jt6xcbqltfIQ= Subject key identifier: 87:3C:CE:ED:3C:FD:A4:95:99:F6:A5:2A:13:91:6F:41:3F:DC:5B:FD Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 799C8BC6448CACE58950EB6EA3DCD8BFE13B9310 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: EB Signing time: Tue 14 Jul 2026 04:35:27 +0000 Manifest this update: Tue 14 Jul 2026 04:30:27 +0000 Manifest next update: Wed 15 Jul 2026 07:38:27 +0000 Files and hashes: 1: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) 2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: v5DVmMPYWaOIuOFVVEiIBVsHuk4GpMq9xDzzWbMF12I=) 3: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9c:8b:c6:44:8c:ac:e5:89:50:eb:6e:a3:dc:d8:bf:e1:3b:93:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Jul 14 04:30:27 2026 GMT Not After : Jul 15 07:38:27 2026 GMT Subject: CN=873CCEED3CFDA49599F6A52A13916F413FDC5BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:a5:e4:13:7a:0d:78:46:44:1a:5c:9d:d3: e8:9c:ee:23:2c:b9:80:be:74:56:fb:5c:17:f0:6b: 2d:27:ce:dd:61:1a:7c:1a:20:b2:93:02:ce:59:35: 8b:e3:a4:ff:58:e5:0c:5e:3a:ab:a2:84:49:58:12: fe:23:62:16:2e:88:27:64:c9:c8:6d:a3:9f:7d:bb: a5:e4:e6:eb:c1:5c:42:21:55:71:04:58:0f:b0:56: 9b:eb:ad:5a:8c:12:3a:b0:ed:03:58:7b:c2:20:ca: 8a:25:e8:c7:58:9d:c1:1d:e4:b8:95:25:12:0d:6f: ce:dd:0f:32:07:c8:59:2d:dc:61:98:2a:f7:d0:19: 88:4b:1c:6e:2c:ea:a8:e0:12:f7:dd:6f:2d:7c:ab: 0d:f7:9f:b5:af:1f:d6:96:da:f0:ae:22:0b:11:05: e3:49:ee:a8:54:78:0a:11:16:e8:e8:d7:3f:92:17: 78:f5:f9:77:67:ea:a1:37:c9:34:37:64:56:af:bb: 21:45:e0:dd:fc:b2:45:cd:0a:06:d8:2e:44:12:10: fa:58:d9:90:59:5b:24:1b:1d:66:21:46:ba:44:cc: e7:0a:b9:80:c7:43:ce:31:6e:77:29:b1:28:db:54: d6:de:31:e2:25:ce:7c:bf:8e:c6:38:d1:e8:cc:77: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3C:CE:ED:3C:FD:A4:95:99:F6:A5:2A:13:91:6F:41:3F:DC:5B:FD X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:54:35:97:d3:89:53:3a:b6:d2:5e:de:03:04:73:98:78:50: 60:b9:b2:2a:85:72:54:b7:1a:9f:f6:4e:26:89:82:03:35:0f: 4a:7c:88:0e:83:ed:4c:da:5c:1a:f2:54:8c:92:e4:a8:51:1f: 2e:5b:54:83:10:34:8a:ed:5e:39:0c:5e:c3:cd:ad:c6:75:99: d9:a6:5b:e8:ef:ad:07:27:57:6c:4e:7d:3d:16:3d:98:d1:e2: 17:27:52:22:dc:e9:66:92:84:23:5f:cb:4f:bc:ac:32:a7:19: 62:c4:97:76:6e:da:2e:fc:e7:e5:df:cf:78:1a:fc:d3:ad:36: a7:fd:e0:43:12:01:3b:64:2c:a9:dc:f7:61:61:2f:67:50:6c: d4:13:b1:7c:ea:1e:ef:91:85:78:16:d7:15:2a:c4:d3:01:48: ad:06:a8:74:b9:d6:4c:dd:47:6c:f5:25:fc:91:cc:38:92:c9: 83:4e:58:6e:2d:f5:e6:aa:b8:a7:ee:42:2a:79:85:ca:59:a3: 5b:60:ff:2c:07:88:6f:a6:6b:67:ad:51:7d:1c:39:2e:75:0a: b7:37:a9:7b:42:ae:9c:ce:61:71:d2:6a:c9:59:08:54:f3:dd: 62:d7:41:be:7e:c0:8b:94:86:52:1c:ff:62:76:67:23:83:4e: 67:de:ce:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeZyLxkSMrOWJUOtuo9zYv+E7kxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA3MTQwNDMwMjdaFw0yNjA3MTUwNzM4MjdaMDMxMTAvBgNV BAMTKDg3M0NDRUVEM0NGREE0OTU5OUY2QTUyQTEzOTE2RjQxM0ZEQzVCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbaXkE3oNeEZEGlyd0+ic7iMs uYC+dFb7XBfway0nzt1hGnwaILKTAs5ZNYvjpP9Y5QxeOquihElYEv4jYhYuiCdk ychto599u6Xk5uvBXEIhVXEEWA+wVpvrrVqMEjqw7QNYe8Igyool6MdYncEd5LiV JRINb87dDzIHyFkt3GGYKvfQGYhLHG4s6qjgEvfdby18qw33n7WvH9aW2vCuIgsR BeNJ7qhUeAoRFujo1z+SF3j1+Xdn6qE3yTQ3ZFavuyFF4N38skXNCgbYLkQSEPpY 2ZBZWyQbHWYhRrpEzOcKuYDHQ84xbncpsSjbVNbeMeIlzny/jsY40ejMdwwpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhzzO7Tz9pJWZ9qUqE5FvQT/cW/0wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1Q1l9OJUzq2 0l7eAwRzmHhQYLmyKoVyVLcan/ZOJomCAzUPSnyIDoPtTNpcGvJUjJLkqFEfLltU gxA0iu1eOQxew82txnWZ2aZb6O+tBydXbE59PRY9mNHiFydSItzpZpKEI1/LT7ys MqcZYsSXdm7aLvzn5d/PeBr80602p/3gQxIBO2Qsqdz3YWEvZ1Bs1BOxfOoe75GF eBbXFSrE0wFIrQaodLnWTN1HbPUl/JHMOJLJg05Ybi315qq4p+5CKnmFylmjW2D/ LAeIb6ZrZ61RfRw5LnUKtzepe0KunM5hcdJqyVkIVPPdYtdBvn7Ai5SGUhz/YnZn I4NOZ97OMQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:06 2026 by rpki-client