$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json) Hash identifier: v+sSG2EmOD7+4n3HLfLwLOM1PM615IMm53bMHLJDjFk= Subject key identifier: BE:BC:F6:B1:0F:E9:32:D2:42:BD:B4:94:1C:CC:78:62:B6:E3:D0:AF Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 662659409DC394C359AD4C2027ADAFB7A39950C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft Manifest number: EE Signing time: Fri 28 Aug 2026 09:17:16 +0000 Manifest this update: Fri 28 Aug 2026 09:12:16 +0000 Manifest next update: Mon 31 Aug 2026 16:18:16 +0000 Files and hashes: 1: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=) 2: AS9808.roa (hash: t4WerZCYzTuir9tKvNEp3fsoBfQB4wPhTOUpMSZMOwM=) 3: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: sU5KCohsY3NkYPwR9rY2eh1e9QT9UWdjiSyoOVr+htQ=) 4: AS4808.roa (hash: ZewmzNIAwf8DhZ3J1AddFyjYjxEjzCT3WSYZ20AD6/U=) 5: AS23724.roa (hash: Gc82NepB5bIjSzsvQ/fYYkSHmUhl1ws8Wi6o2VJy4i8=) 6: AS23844.roa (hash: XWuWQzQzWF4m8rnsu7wvf249StKjXOQSZf2Pgb85QEY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:26:59:40:9d:c3:94:c3:59:ad:4c:20:27:ad:af:b7:a3:99:50:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Aug 28 09:12:16 2026 GMT Not After : Aug 31 16:18:16 2026 GMT Subject: CN=BEBCF6B10FE932D242BDB4941CCC7862B6E3D0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:da:d8:4c:d8:3b:3e:18:25:8b:1a:d5:ef: 98:33:71:cc:29:3a:26:4f:10:70:c2:f4:5f:b9:da: 92:64:e8:87:df:2a:de:31:11:44:3c:af:15:83:be: 26:44:56:03:68:b6:01:bf:26:cb:0f:59:59:d3:3b: 82:b7:5e:2d:a7:4d:1a:70:e5:25:fc:ec:59:58:3d: 25:f0:6d:e7:68:dd:72:28:ad:aa:37:8e:73:22:7f: fb:69:8f:59:1f:cd:29:66:85:fa:95:38:48:0f:a7: 7e:3f:40:a6:3c:2f:52:e9:00:cb:c7:fb:12:17:18: 43:fb:b8:f1:b0:ae:04:10:3f:e4:ee:af:6c:34:73: 7c:94:f3:91:21:2b:b7:cd:5a:de:cd:91:ff:2e:17: 6e:76:7b:6c:06:fc:65:ff:a2:b0:3d:93:61:0a:0a: 45:59:2a:e4:84:83:3e:f2:e6:12:43:4b:13:07:5f: 88:bf:34:6a:c2:26:b9:3d:43:69:39:92:b9:6a:a1: 28:f5:34:d7:a2:d6:db:01:7a:24:37:d2:b8:08:d3: 41:93:07:3c:a9:90:1d:07:65:4c:9b:87:29:15:56: c8:ec:8f:74:42:1c:bc:6f:e7:39:48:b2:8d:5d:88: b7:ec:c7:7e:83:71:ec:88:e1:3e:dc:45:af:d6:3b: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:F6:B1:0F:E9:32:D2:42:BD:B4:94:1C:CC:78:62:B6:E3:D0:AF X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:48:6a:84:e9:ad:62:a8:d2:56:3a:fd:fe:8c:17:a6:3c:99: 4e:c0:4c:79:4f:a4:0f:7d:76:07:9d:a9:b2:ac:a8:bf:17:67: 74:26:32:db:e5:9c:89:b1:a0:ef:70:1d:88:63:55:6d:19:b1: 67:c9:12:50:0a:a4:ea:4d:2f:f6:3b:9d:43:d7:74:19:c9:53: f3:dd:44:73:a9:f4:d8:0e:cc:4d:12:fe:67:dc:2e:ed:d6:8b: 01:c8:b7:72:7c:ea:e2:8a:f0:96:0b:e2:4a:0b:58:42:b6:0b: 15:e2:50:7a:29:66:da:9b:77:8c:3e:28:3e:c1:dc:0c:32:55: ad:ee:ee:dd:4b:6e:03:da:92:7d:3d:5c:7c:cc:70:7c:b3:29: 00:e3:84:4f:de:1c:7a:8f:d0:ca:5f:3e:80:76:21:3e:16:b3: c9:c6:b2:07:ab:0a:1d:74:ff:ac:0c:9c:01:75:67:18:be:a1: 6e:f8:75:0a:da:bf:d7:df:0f:f3:a4:f6:13:3c:89:df:a5:ea: 70:3d:8b:78:0d:e4:5a:f7:81:67:0e:ba:67:51:26:44:65:f2: fd:c0:70:2e:ba:3d:2b:98:5d:4c:21:a4:63:09:3f:f7:32:dd: b3:a6:ca:3f:da:ac:cd:06:f6:4c:17:df:94:9a:64:f6:e7:33: 1e:4c:ff:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZiZZQJ3DlMNZrUwgJ62vt6OZUMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA4MjgwOTEyMTZaFw0yNjA4MzExNjE4MTZaMDMxMTAvBgNV BAMTKEJFQkNGNkIxMEZFOTMyRDI0MkJEQjQ5NDFDQ0M3ODYyQjZFM0QwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9drYTNg7PhglixrV75gzccwp OiZPEHDC9F+52pJk6IffKt4xEUQ8rxWDviZEVgNotgG/JssPWVnTO4K3Xi2nTRpw 5SX87FlYPSXwbedo3XIorao3jnMif/tpj1kfzSlmhfqVOEgPp34/QKY8L1LpAMvH +xIXGEP7uPGwrgQQP+Tur2w0c3yU85EhK7fNWt7Nkf8uF252e2wG/GX/orA9k2EK CkVZKuSEgz7y5hJDSxMHX4i/NGrCJrk9Q2k5krlqoSj1NNei1tsBeiQ30rgI00GT BzypkB0HZUybhykVVsjsj3RCHLxv5zlIso1diLfsx36DceyI4T7cRa/WO1LHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvrz2sQ/pMtJCvbSUHMx4Yrbj0K8wHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS85RkY2NzlBNDhCREFC NTgyMDEzN0MyNTEzMzNDRTgzMUYyNzVCRDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEhqhOmtYqjS Vjr9/owXpjyZTsBMeU+kD312B52psqyovxdndCYy2+WcibGg73AdiGNVbRmxZ8kS UAqk6k0v9judQ9d0GclT891Ec6n02A7MTRL+Z9wu7daLAci3cnzq4orwlgviSgtY QrYLFeJQeilm2pt3jD4oPsHcDDJVre7u3UtuA9qSfT1cfMxwfLMpAOOET94ceo/Q yl8+gHYhPhazycayB6sKHXT/rAycAXVnGL6hbvh1Ctq/198P86T2EzyJ36XqcD2L eA3kWveBZw66Z1EmRGXy/cBwLro9K5hdTCGkYwk/9zLds6bKP9qszQb2TBfflJpk 9uczHkz/5g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:57 2026 by rpki-client