$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: 4vU4N6nA8gQrWNk0FjJMK3L75R5rhFjtwbQfizee6jg= Subject key identifier: 69:27:47:90:13:BF:D2:26:02:57:D0:3F:D9:09:A6:84:84:6B:4B:FF Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 6DF25E19B5937749175BEDE4C2DB9D176A4BCF06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: 08 Signing time: Thu 11 Jun 2026 15:44:24 +0000 Manifest this update: Thu 11 Jun 2026 15:39:24 +0000 Manifest next update: Fri 12 Jun 2026 18:07:24 +0000 Files and hashes: 1: 3130312e3233362e34302e302f32312d3231203d3e203539303235.roa (hash: 5/vJjoKhyTaUNDkqvXUFbsDnteGhnjbV66LozEdfSBY=) 2: 3130312e3233362e31362e302f32312d3231203d3e203233373234.roa (hash: QpcVk4ZthI7CaC3tu9yYL6OasO5QGi1daAwJP7XaLe8=) 3: 3130312e3233362e302e302f32312d3231203d3e203539303235.roa (hash: v5GC2LDG175o7vkFp/G4D9lS1VFwRcGEg2XmmnzmefA=) 4: 3130312e3233362e35362e302f32312d3231203d3e203233373234.roa (hash: VGm8riHXjhSy6E3Mwwdq3yaSLBlVWWUkYIjHtp5BOnc=) 5: 3130312e3233362e34302e302f32312d3231203d3e203233373234.roa (hash: 48TytT/h83gJvZNuzL9htKlPPfuyp0H7CiVdjQJbTA4=) 6: 3130312e3233362e33322e302f32312d3231203d3e203539303235.roa (hash: +l6HN3VoLCzBmjvxHqTueuc018rsAXi3n0RDYTqRyf0=) 7: 3130312e3233362e32342e302f32312d3231203d3e2034383038.roa (hash: 3n6x7NWzB8HU3wPMEIMzjgPnAXY1fRQdR7jySbwCgmU=) 8: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: d8RoyR+e0x4tOsUjMeL0fv0lUZZIgZpdu3d3bxMSaMg=) 9: 3130312e3233362e33322e302f32312d3231203d3e203233373234.roa (hash: NB9lpQhiI+MQlgBMiQIueQcvq0VsycT6eUWkQsj9Q4U=) 10: 3130312e3233362e34302e302f32312d3231203d3e2034383038.roa (hash: 8vI5GhaLGxlCOrBdMPXIOnk5Pe+WRa5V8TCJ/q1dUQ4=) 11: 3130312e3233362e34382e302f32312d3231203d3e2034383038.roa (hash: prqPvTh+23eAhjpspVtKpQ968g4BLwdVWC1u4NQFbAU=) 12: 3130312e3233362e32342e302f32312d3231203d3e203539303235.roa (hash: UoE4hxbKnFhibEw6vMQSkvP9s29yrsBD0cXein4VjV4=) 13: 3130312e3233362e34382e302f32312d3231203d3e203539303235.roa (hash: N4qIfafW+PlxIHhe6Oo/F9UtwfUHxLKpEQk/HFI6doM=) 14: 3130312e3233362e32342e302f32312d3231203d3e203233373234.roa (hash: b9alckf5tuNTkmbPLSB3fs9Bh2E/9IUgh8+hHawLaaY=) 15: 3130312e3233362e31362e302f32312d3231203d3e2034383038.roa (hash: QfSPaDbMD9yscIxbJuGaimlw0THaErLxw0nWY15ymjo=) 16: 3130312e3233362e35362e302f32312d3231203d3e203539303235.roa (hash: NlaLOQO6oAGdy7nMHiDi91vFSv5JxSNPBwiUgcrbYt0=) 17: 3130312e3233362e33322e302f32312d3231203d3e2034383038.roa (hash: kTjrtjs2Z6A1FbMsRCqlqWU+exXxUki4cQNSV8VWl68=) 18: 3130312e3233362e31362e302f32312d3231203d3e203539303235.roa (hash: 3mWiQgO1+3U7jYJYD3DS+Acv1HJZaFR2MPaAaa3Abgc=) 19: 3130312e3233362e35362e302f32312d3231203d3e2034383038.roa (hash: iKwwUu+3P1vUwEuZIyD79ap1OR2k3rCt8DF4jWa6PwU=) 20: 3130312e3233362e302e302f32312d3231203d3e203233373234.roa (hash: uDDn72EtUZKrP/TKvn8JYbCnpWxrkSCPpR3P9Oskx9w=) 21: 3130312e3233362e302e302f32312d3231203d3e2034383038.roa (hash: MqpfVlcAo4oVQqLCzMoxYGm8P1PyqA4Tfc7SljWlWbY=) 22: 3130312e3233362e34382e302f32312d3231203d3e203233373234.roa (hash: /UlTDjUUqCIb9MRSSI6OMHTTkK+abhyVqthCdTiRMcQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f2:5e:19:b5:93:77:49:17:5b:ed:e4:c2:db:9d:17:6a:4b:cf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 11 15:39:24 2026 GMT Not After : Jun 12 18:07:24 2026 GMT Subject: CN=6927479013BFD2260257D03FD909A684846B4BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:54:92:0f:f1:e7:60:92:73:79:7a:2f:0c: 81:06:af:a9:a6:41:9a:82:e7:3d:40:80:11:04:a3: 6d:ec:56:c9:4e:8b:9f:59:ee:25:89:f4:22:1f:56: e7:d4:d7:4d:e5:ee:ea:33:54:d7:9c:e7:3b:42:c5: f3:fe:44:bb:a5:3d:9e:07:c0:db:13:bc:33:10:eb: dc:eb:6e:91:56:f8:9c:7c:a8:a7:d9:c8:8b:de:38: fb:e1:fb:38:b6:4b:24:b7:ca:94:62:4f:83:0b:01: 48:bb:d6:4d:f7:64:c0:25:ed:cf:0c:9a:f4:85:78: f8:c9:d0:4c:7b:84:ea:a1:25:bf:42:f0:6d:cd:62: 3a:6b:3e:1c:a1:70:ce:ae:ec:01:58:c2:b7:52:6a: 02:c5:2b:1e:33:0d:d4:3e:bf:eb:d4:b4:cf:88:35: 3a:97:8c:6b:17:ee:62:f5:13:4a:71:30:00:5e:d9: a9:15:37:21:a9:66:42:68:e2:44:05:b8:98:70:03: ea:52:84:df:83:fa:ce:eb:a9:5e:8c:18:c6:da:7d: f5:26:6f:9d:ea:6a:b2:17:94:8f:9f:35:c8:7f:8c: 26:62:74:ca:53:de:54:07:a7:55:ab:b8:c7:0a:0d: cc:7a:c7:96:80:11:fe:cc:3b:a8:d5:11:62:67:e7: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:27:47:90:13:BF:D2:26:02:57:D0:3F:D9:09:A6:84:84:6B:4B:FF X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fa:d8:60:97:62:49:05:6a:14:86:90:5d:b2:76:a1:08:44: 42:07:50:de:05:52:c6:ce:65:9c:a5:f0:f5:0d:64:f9:98:1a: ee:39:45:89:d3:29:01:ca:73:60:6d:5a:af:04:f0:4a:ab:1b: a2:f3:3d:a4:4f:f1:ef:ba:47:69:f4:c9:2c:34:ce:4e:1c:c0: ed:95:fb:18:de:89:cf:b8:44:47:04:fc:0a:c2:f0:8f:f7:b9: 50:2e:d7:e2:14:06:4c:90:47:0a:a7:a9:04:5e:c4:96:ec:c7: 2a:7b:94:57:59:01:df:2c:24:75:f9:58:e1:b4:32:47:5a:3f: 18:c4:a9:74:a3:5d:7f:79:a0:a1:71:25:91:e9:9e:51:ca:aa: a2:4a:4c:71:81:f1:41:3b:c4:d5:f7:cf:56:e9:15:d5:30:78: fa:df:97:e7:64:cc:a9:a3:18:63:83:66:c5:f3:99:09:c2:5e: cb:07:d0:e3:fe:2e:cf:f8:ca:14:98:28:c3:a2:bd:c1:2e:bd: bf:bc:ef:3d:f4:45:6c:d9:31:04:50:1e:a2:62:82:93:51:a9: 97:d9:48:9c:b8:8b:c7:f7:81:fa:c5:30:86:7a:57:64:82:ed: 5d:e0:f1:8d:d8:5b:1e:03:83:6e:33:d8:52:87:34:f7:ca:17: ad:b5:b5:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbfJeGbWTd0kXW+3kwtudF2pLzwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MTExNTM5MjRaFw0yNjA2MTIxODA3MjRaMDMxMTAvBgNV BAMTKDY5Mjc0NzkwMTNCRkQyMjYwMjU3RDAzRkQ5MDlBNjg0ODQ2QjRCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvFSSD/HnYJJzeXovDIEGr6mm QZqC5z1AgBEEo23sVslOi59Z7iWJ9CIfVufU103l7uozVNec5ztCxfP+RLulPZ4H wNsTvDMQ69zrbpFW+Jx8qKfZyIveOPvh+zi2SyS3ypRiT4MLAUi71k33ZMAl7c8M mvSFePjJ0Ex7hOqhJb9C8G3NYjprPhyhcM6u7AFYwrdSagLFKx4zDdQ+v+vUtM+I NTqXjGsX7mL1E0pxMABe2akVNyGpZkJo4kQFuJhwA+pShN+D+s7rqV6MGMbaffUm b53qarIXlI+fNch/jCZidMpT3lQHp1WruMcKDcx6x5aAEf7MO6jVEWJn5wqtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaSdHkBO/0iYCV9A/2QmmhIRrS/8wHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvrYYJdiSQVq FIaQXbJ2oQhEQgdQ3gVSxs5lnKXw9Q1k+Zga7jlFidMpAcpzYG1arwTwSqsbovM9 pE/x77pHafTJLDTOThzA7ZX7GN6Jz7hERwT8CsLwj/e5UC7X4hQGTJBHCqepBF7E luzHKnuUV1kB3ywkdflY4bQyR1o/GMSpdKNdf3mgoXElkemeUcqqokpMcYHxQTvE 1ffPVukV1TB4+t+X52TMqaMYY4NmxfOZCcJeywfQ4/4uz/jKFJgow6K9wS69v7zv PfRFbNkxBFAeomKCk1Gpl9lInLiLx/eB+sUwhnpXZILtXeDxjdhbHgODbjPYUoc0 98oXrbW1jA== -----END CERTIFICATE-----Generated at Fri Jun 12 03:33:29 2026 by rpki-client