$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json) Hash identifier: dJQjz208z8Cv/Y31grQ+u/z5dWnJc9IAnm1V3GTvN7g= Subject key identifier: D0:21:3E:E9:F6:20:FB:FC:87:B4:84:08:2C:21:B9:DF:BE:5D:07:53 Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 0DECEA469203EC9E4DEC1139FFBBF53ED0722817 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft Manifest number: 0103 Signing time: Tue 13 Oct 2026 13:28:05 +0000 Manifest this update: Tue 13 Oct 2026 13:23:05 +0000 Manifest next update: Fri 16 Oct 2026 23:05:05 +0000 Files and hashes: 1: AS4808.roa (hash: ZewmzNIAwf8DhZ3J1AddFyjYjxEjzCT3WSYZ20AD6/U=) 2: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: 7ei6uivveFpg6uTtJbVDyD8CtK5mD92F5zgQ6XWRXyI=) 3: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=) 4: AS23844.roa (hash: z23MKEgtHnwCdg5zfAmp2eEWllJsIkDNB6WkVNbU4dk=) 5: AS23724.roa (hash: Gc82NepB5bIjSzsvQ/fYYkSHmUhl1ws8Wi6o2VJy4i8=) 6: AS9808.roa (hash: t4WerZCYzTuir9tKvNEp3fsoBfQB4wPhTOUpMSZMOwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ec:ea:46:92:03:ec:9e:4d:ec:11:39:ff:bb:f5:3e:d0:72:28:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Oct 13 13:23:05 2026 GMT Not After : Oct 16 23:05:05 2026 GMT Subject: CN=D0213EE9F620FBFC87B484082C21B9DFBE5D0753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:98:5b:e3:3f:34:ab:7a:89:51:13:cd:ce: 67:cd:78:f6:cb:e5:e6:0e:78:08:57:3e:9d:c8:e7: 23:64:75:05:55:f6:c7:74:29:d9:53:fd:65:21:58: 6d:6d:68:05:c5:4e:62:11:41:f4:01:2c:82:6b:30: 68:02:8b:3f:6b:96:56:65:95:01:02:54:6a:12:42: cd:9a:98:99:a3:2a:40:bc:58:a3:88:55:02:f5:9d: 12:05:e9:6b:1f:d0:bd:c1:14:ad:3a:fa:9a:65:5e: ad:95:81:02:9e:f9:44:26:a4:42:f5:f2:07:9b:6d: 8e:6e:29:16:c2:8b:4c:98:15:0a:71:ae:2c:6b:44: 2e:84:71:91:9e:1c:45:95:c6:5b:61:4c:d7:55:a0: ba:4c:22:cd:bc:78:01:cf:c3:34:9c:c6:f0:81:0e: 6e:13:86:c7:46:55:0b:2b:3d:3a:e8:19:a4:bd:b3: 4f:15:80:d4:c9:5f:35:85:30:7f:d9:25:ee:0a:d2: ea:e0:87:85:a3:39:b7:65:e4:3c:85:7a:c3:ec:b8: c6:c2:9b:a4:bb:fa:e3:68:a0:9b:b7:a3:84:9a:e6: 25:3d:56:3c:54:c2:76:e2:fa:0a:9a:32:3d:93:c8: aa:5e:09:47:a6:fb:73:67:58:a6:4c:8d:4b:ef:19: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:3E:E9:F6:20:FB:FC:87:B4:84:08:2C:21:B9:DF:BE:5D:07:53 X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:eb:ee:8a:94:33:44:75:0a:43:ac:3d:e6:a3:3c:e6:35:20: 93:5d:cc:4c:46:08:97:c4:2a:c8:13:4b:90:1e:b6:96:4a:b3: 24:b9:a7:cc:8e:6c:8e:b5:5b:b6:75:f0:8d:aa:8c:f7:1c:11: 75:0a:01:8a:17:93:01:16:60:35:ca:23:dc:f3:fc:02:18:d7: d3:d9:97:e0:46:17:ce:f6:e2:96:9b:5d:5a:74:37:7e:7e:0c: 0c:03:91:f2:d7:06:68:53:46:28:75:54:68:cc:2a:83:09:14: d0:bc:d3:79:b8:39:49:c2:7b:e4:e1:6f:0a:7d:7d:4c:2a:f9: 31:06:a9:05:70:77:b6:fb:3a:92:42:f1:46:4a:c3:af:76:5d: b2:6c:ec:a3:21:fc:33:57:42:f7:cc:be:3b:e1:33:3d:bd:f5: 94:e4:fe:36:86:e0:6c:c0:11:f8:5b:db:79:66:65:d8:f1:3b: 82:e5:e0:e7:76:b1:d7:b9:b0:ea:8f:54:a7:df:24:31:00:25: 53:9c:bf:21:49:8b:65:34:7b:ac:4b:df:70:d4:37:ba:02:c5: 5b:24:d9:f8:c5:1f:e4:ec:c3:cb:8a:a3:87:c1:66:ac:32:7a: ab:2c:d6:0e:35:87:f4:a7:43:eb:6c:e7:bd:23:5a:23:61:0f: 4c:4e:3d:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDezqRpID7J5N7BE5/7v1PtByKBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjEwMTMxMzIzMDVaFw0yNjEwMTYyMzA1MDVaMDMxMTAvBgNV BAMTKEQwMjEzRUU5RjYyMEZCRkM4N0I0ODQwODJDMjFCOURGQkU1RDA3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcZhb4z80q3qJURPNzmfNePbL 5eYOeAhXPp3I5yNkdQVV9sd0KdlT/WUhWG1taAXFTmIRQfQBLIJrMGgCiz9rllZl lQECVGoSQs2amJmjKkC8WKOIVQL1nRIF6Wsf0L3BFK06+pplXq2VgQKe+UQmpEL1 8gebbY5uKRbCi0yYFQpxrixrRC6EcZGeHEWVxlthTNdVoLpMIs28eAHPwzScxvCB Dm4ThsdGVQsrPTroGaS9s08VgNTJXzWFMH/ZJe4K0urgh4WjObdl5DyFesPsuMbC m6S7+uNooJu3o4Sa5iU9VjxUwnbi+gqaMj2TyKpeCUem+3NnWKZMjUvvGSnxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0CE+6fYg+/yHtIQILCG5375dB1MwHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS85RkY2NzlBNDhCREFC NTgyMDEzN0MyNTEzMzNDRTgzMUYyNzVCRDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwevuipQzRHUK Q6w95qM85jUgk13MTEYIl8QqyBNLkB62lkqzJLmnzI5sjrVbtnXwjaqM9xwRdQoB iheTARZgNcoj3PP8AhjX09mX4EYXzvbilptdWnQ3fn4MDAOR8tcGaFNGKHVUaMwq gwkU0LzTebg5ScJ75OFvCn19TCr5MQapBXB3tvs6kkLxRkrDr3ZdsmzsoyH8M1dC 98y+O+EzPb31lOT+NobgbMAR+FvbeWZl2PE7guXg53ax17mw6o9Up98kMQAlU5y/ IUmLZTR7rEvfcNQ3ugLFWyTZ+MUf5OzDy4qjh8FmrDJ6qyzWDjWH9KdD62znvSNa I2EPTE492w== -----END CERTIFICATE-----Generated at Tue Oct 13 18:47:28 2026 by rpki-client