$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json) Hash identifier: gSmXlzcnuyzV1Lgt06JcnHSwdVJSIe5btNDfvd95U8o= Subject key identifier: DB:DA:9F:5B:F7:CB:F7:A7:B1:7A:C0:7A:FE:30:E7:17:F1:EE:E2:3C Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 702D1C8601FEBF2D065EAF9A68E0323928D99BAB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft Manifest number: 9C Signing time: Tue 14 Jul 2026 06:40:36 +0000 Manifest this update: Tue 14 Jul 2026 06:35:36 +0000 Manifest next update: Wed 15 Jul 2026 07:12:36 +0000 Files and hashes: 1: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=) 2: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: E1O2o2ErY8F3wxXSIMPUaPYXCQVxCTfMlvIIumSJkH4=) 3: AS23844.roa (hash: XWuWQzQzWF4m8rnsu7wvf249StKjXOQSZf2Pgb85QEY=) 4: AS23724.roa (hash: JNw3gmBXj10Ma6OX0dfnotuXirnfdeZgLErqyBLrKM4=) 5: AS4808.roa (hash: zrnyfTGaceFvRsRNBf1L4VJmv/kF/kkf/DS1RaoLOQM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2d:1c:86:01:fe:bf:2d:06:5e:af:9a:68:e0:32:39:28:d9:9b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Jul 14 06:35:36 2026 GMT Not After : Jul 15 07:12:36 2026 GMT Subject: CN=DBDA9F5BF7CBF7A7B17AC07AFE30E717F1EEE23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:ef:7f:79:32:2a:54:59:d5:32:ff:73:13: c0:86:40:36:b5:a6:1f:4f:38:d3:f7:1d:5f:a2:6f: bc:29:89:f7:54:78:66:43:1c:2e:ce:72:92:85:b8: 14:b1:57:74:50:9e:80:53:f4:d6:f9:58:59:8e:a5: e4:3f:4d:94:e4:3b:3b:4e:50:74:9c:5f:cf:1b:1a: e7:d1:95:b3:7b:f4:c9:54:dc:7d:f9:85:bb:5e:bd: 2a:8d:ec:e7:68:a4:b4:33:89:cb:8d:c3:7a:a0:75: a4:bd:30:f1:97:02:2f:72:68:0b:13:51:df:4b:37: 70:88:ae:8f:de:46:eb:86:c8:68:b6:e1:25:51:c3: df:aa:db:e8:0d:3a:d6:82:0a:e8:0e:d9:ef:b7:6d: 2b:b2:45:af:dc:43:75:c7:b1:47:b1:55:97:07:13: a7:c6:b2:97:6e:24:94:48:3b:23:12:18:2c:1c:a3: 50:bc:c7:29:a1:0d:20:7a:24:e4:db:f9:8a:6d:79: 0e:4f:a3:6c:7b:9f:ae:11:f6:f8:f2:34:1f:69:4a: 0e:b1:95:cb:f1:6a:50:af:e1:41:c2:fb:47:a0:84: 75:a8:26:f6:61:2e:3c:6b:e8:37:72:f4:62:e8:7b: 58:c1:dc:ab:19:27:1c:a7:5f:ad:aa:ff:0d:09:5b: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DA:9F:5B:F7:CB:F7:A7:B1:7A:C0:7A:FE:30:E7:17:F1:EE:E2:3C X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:37:85:96:5a:c3:c9:51:0b:69:bb:0e:4d:7e:8c:9e:3c:51: f1:c6:22:0a:f7:ec:bf:fa:ca:1a:0b:1e:2f:22:71:5a:f4:e2: 7b:3f:6a:6c:33:44:f3:e8:94:b8:e7:25:6f:92:93:bc:cd:ff: 98:4d:b6:4d:84:e0:73:50:1d:6f:04:47:30:d3:db:6e:48:cd: a6:6c:fd:9c:37:21:91:f8:25:09:61:29:15:a9:89:36:02:ff: 2b:8c:70:7e:a5:9f:04:5f:78:32:74:4d:02:62:88:fd:04:e3: b0:8f:26:2f:2d:7e:1c:96:f0:06:1a:af:94:53:fb:e9:ac:b3: 95:63:d2:16:3c:f3:e4:cf:6f:0a:ce:c1:7b:c6:c2:cc:00:73: 1e:4a:53:36:29:2e:b4:91:51:3f:48:58:43:73:12:51:55:b2: a3:ed:24:06:79:bd:e3:be:b3:13:78:81:fb:bb:86:44:4e:0e: f5:cc:05:25:9b:0f:b8:ee:ef:52:6a:98:dd:54:66:15:e2:3a: e6:39:14:e5:a4:b3:ea:4c:9b:25:6c:49:66:37:40:f1:12:e0: 80:d8:c4:fd:02:b6:d9:64:bf:a8:22:e3:14:e1:08:f1:e6:82: 17:e1:b6:c0:f6:da:46:0a:48:18:ae:c3:c4:39:eb:5b:b0:cc: 92:a1:f9:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcC0chgH+vy0GXq+aaOAyOSjZm6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA3MTQwNjM1MzZaFw0yNjA3MTUwNzEyMzZaMDMxMTAvBgNV BAMTKERCREE5RjVCRjdDQkY3QTdCMTdBQzA3QUZFMzBFNzE3RjFFRUUyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0+9/eTIqVFnVMv9zE8CGQDa1 ph9PONP3HV+ib7wpifdUeGZDHC7OcpKFuBSxV3RQnoBT9Nb5WFmOpeQ/TZTkOztO UHScX88bGufRlbN79MlU3H35hbtevSqN7OdopLQzicuNw3qgdaS9MPGXAi9yaAsT Ud9LN3CIro/eRuuGyGi24SVRw9+q2+gNOtaCCugO2e+3bSuyRa/cQ3XHsUexVZcH E6fGspduJJRIOyMSGCwco1C8xymhDSB6JOTb+YpteQ5Po2x7n64R9vjyNB9pSg6x lcvxalCv4UHC+0eghHWoJvZhLjxr6Ddy9GLoe1jB3KsZJxynX62q/w0JW255AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU29qfW/fL96exesB6/jDnF/Hu4jwwHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS85RkY2NzlBNDhCREFC NTgyMDEzN0MyNTEzMzNDRTgzMUYyNzVCRDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDeFllrDyVEL absOTX6MnjxR8cYiCvfsv/rKGgseLyJxWvTiez9qbDNE8+iUuOclb5KTvM3/mE22 TYTgc1AdbwRHMNPbbkjNpmz9nDchkfglCWEpFamJNgL/K4xwfqWfBF94MnRNAmKI /QTjsI8mLy1+HJbwBhqvlFP76ayzlWPSFjzz5M9vCs7Be8bCzABzHkpTNikutJFR P0hYQ3MSUVWyo+0kBnm9476zE3iB+7uGRE4O9cwFJZsPuO7vUmqY3VRmFeI65jkU 5aSz6kybJWxJZjdA8RLggNjE/QK22WS/qCLjFOEI8eaCF+G2wPbaRgpIGK7DxDnr W7DMkqH5bg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:00 2026 by rpki-client