$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json) Hash identifier: 7wrgRDZlJMqjCY57BSWqqAsNoSpzVNONpm7Gzo5FjBM= Subject key identifier: 76:61:DB:9C:1B:4F:4C:B1:17:C9:A4:CE:91:3A:38:42:E5:80:12:F7 Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 659C755B07414B1C55502A1952B972E722BDF610 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft Manifest number: 60 Signing time: Fri 29 May 2026 14:17:55 +0000 Manifest this update: Fri 29 May 2026 14:12:55 +0000 Manifest next update: Sat 30 May 2026 15:42:55 +0000 Files and hashes: 1: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=) 2: AS4808.roa (hash: zrnyfTGaceFvRsRNBf1L4VJmv/kF/kkf/DS1RaoLOQM=) 3: AS23844.roa (hash: XWuWQzQzWF4m8rnsu7wvf249StKjXOQSZf2Pgb85QEY=) 4: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: 7RW+gtHpsrx+BcRgZSQgyz3/+UsPOqxurc72/+IyCx8=) 5: AS23724.roa (hash: JNw3gmBXj10Ma6OX0dfnotuXirnfdeZgLErqyBLrKM4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9c:75:5b:07:41:4b:1c:55:50:2a:19:52:b9:72:e7:22:bd:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: May 29 14:12:55 2026 GMT Not After : May 30 15:42:55 2026 GMT Subject: CN=7661DB9C1B4F4CB117C9A4CE913A3842E58012F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:df:5a:fb:41:24:c6:8f:e2:6d:d5:1d:e7: a9:9e:7b:34:0a:5d:5c:2d:dd:9b:48:8f:94:46:91: 0a:4d:a5:5b:3e:2c:47:22:11:0f:93:a1:1d:12:7b: b0:57:4a:b0:1e:5f:a6:35:46:81:66:92:52:6f:91: 9d:10:d7:6a:59:ca:f0:9e:60:9f:65:d8:21:d2:b7: eb:ed:cd:5d:5a:fc:a8:61:95:68:d4:5b:3d:70:0d: be:f2:c1:cb:4d:eb:8f:0a:7b:09:84:96:e5:85:61: 88:42:c0:c6:51:47:f4:97:ee:44:ad:ab:6d:80:81: f4:3e:0d:8b:ad:52:55:3f:fe:3c:8f:b8:37:e4:4d: d6:e1:89:14:86:b4:ca:1b:23:23:94:42:52:32:8a: a4:41:49:43:d5:04:75:a8:c0:ff:24:15:a6:c1:ba: 27:13:92:27:b9:31:7d:5c:6e:7e:98:a9:aa:80:a5: 44:7d:c0:76:66:7e:9f:10:4e:2c:ce:32:f5:52:b7: ab:29:19:bd:d6:d7:67:1d:a9:a0:c6:64:18:6d:48: 93:ee:ba:7b:f5:3e:32:0a:3b:60:8a:46:f0:b1:04: 16:ff:30:de:09:e9:5f:a3:1e:60:15:13:70:e8:f5: c2:2c:c0:11:64:c8:f0:2d:1e:b7:17:91:83:fd:a5: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:61:DB:9C:1B:4F:4C:B1:17:C9:A4:CE:91:3A:38:42:E5:80:12:F7 X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ef:63:09:4f:7a:ae:fa:7c:e1:a9:d8:31:76:e0:aa:0b:2d: 7d:c2:8d:ed:c1:0d:1e:0e:63:94:ba:31:2f:72:86:43:92:79: d1:fa:13:00:43:a0:9f:10:3e:b0:50:8b:4f:9a:58:73:2d:ee: 1b:e3:09:12:e8:66:38:81:ad:15:c5:9d:d2:9b:7d:7b:c7:eb: 49:8d:44:e7:16:0d:4d:11:ed:8c:49:fa:7b:98:b5:8d:fa:73: 68:79:99:77:24:17:b0:d8:1c:e6:07:a9:58:86:37:c5:52:f1: 8c:cf:c6:50:bf:f1:35:97:d0:03:10:c5:52:18:97:f8:50:15: b0:45:c5:9e:12:1e:d6:a4:b2:29:e6:36:36:e9:41:b6:28:aa: fb:e0:1f:cf:9b:12:7e:1c:79:44:f7:56:3e:c7:f7:60:62:80: 47:ef:45:6e:3e:31:5f:0b:d7:b4:3a:44:67:51:e6:db:ee:4c: 0a:d0:cd:29:9e:fd:36:93:ae:10:9b:e4:33:5e:19:7c:a5:8a: ef:88:5b:70:f6:49:95:d5:16:52:26:ce:ad:80:c0:69:3c:71: 12:ff:07:ea:f0:a6:5d:c6:dc:42:9b:6b:0a:d4:8a:1b:dd:02: b4:4c:08:e7:7b:12:52:1f:8b:4a:ff:5b:82:64:9c:39:ad:f0: c8:ad:71:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZZx1WwdBSxxVUCoZUrly5yK99hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA1MjkxNDEyNTVaFw0yNjA1MzAxNTQyNTVaMDMxMTAvBgNV BAMTKDc2NjFEQjlDMUI0RjRDQjExN0M5QTRDRTkxM0EzODQyRTU4MDEyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/99a+0Ekxo/ibdUd56meezQK XVwt3ZtIj5RGkQpNpVs+LEciEQ+ToR0Se7BXSrAeX6Y1RoFmklJvkZ0Q12pZyvCe YJ9l2CHSt+vtzV1a/KhhlWjUWz1wDb7ywctN648KewmEluWFYYhCwMZRR/SX7kSt q22AgfQ+DYutUlU//jyPuDfkTdbhiRSGtMobIyOUQlIyiqRBSUPVBHWowP8kFabB uicTkie5MX1cbn6YqaqApUR9wHZmfp8QTizOMvVSt6spGb3W12cdqaDGZBhtSJPu unv1PjIKO2CKRvCxBBb/MN4J6V+jHmAVE3Do9cIswBFkyPAtHrcXkYP9pRL7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdmHbnBtPTLEXyaTOkTo4QuWAEvcwHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS85RkY2NzlBNDhCREFC NTgyMDEzN0MyNTEzMzNDRTgzMUYyNzVCRDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEu9jCU96rvp8 4anYMXbgqgstfcKN7cENHg5jlLoxL3KGQ5J50foTAEOgnxA+sFCLT5pYcy3uG+MJ EuhmOIGtFcWd0pt9e8frSY1E5xYNTRHtjEn6e5i1jfpzaHmZdyQXsNgc5gepWIY3 xVLxjM/GUL/xNZfQAxDFUhiX+FAVsEXFnhIe1qSyKeY2NulBtiiq++Afz5sSfhx5 RPdWPsf3YGKAR+9Fbj4xXwvXtDpEZ1Hm2+5MCtDNKZ79NpOuEJvkM14ZfKWK74hb cPZJldUWUibOrYDAaTxxEv8H6vCmXcbcQptrCtSKG90CtEwI53sSUh+LSv9bgmSc Oa3wyK1xsA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:53 2026 by rpki-client