$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: m7t+sD/KKZw7jvPXLH1xaid39a4fO0ORUexzGPoOspM= Subject key identifier: B5:75:94:D6:A6:EB:47:3E:0C:D5:FD:F1:DB:83:7C:A0:A8:E1:B3:70 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 78B031A2758FD28BDB1CEFD10E3BA135986EAC6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: 9D Signing time: Thu 10 Sep 2026 09:36:09 +0000 Manifest this update: Thu 10 Sep 2026 09:31:09 +0000 Manifest next update: Sun 13 Sep 2026 11:55:09 +0000 Files and hashes: 1: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 2: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 3: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 4: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: kbKVQxU0awg4ziafaRy0fXrHTbEMFb9nbOB9bKhWJjk=) 5: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) 6: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 7: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) 8: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 9: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) 10: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 11: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:31:a2:75:8f:d2:8b:db:1c:ef:d1:0e:3b:a1:35:98:6e:ac:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Sep 10 09:31:09 2026 GMT Not After : Sep 13 11:55:09 2026 GMT Subject: CN=B57594D6A6EB473E0CD5FDF1DB837CA0A8E1B370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:4a:93:f2:b2:42:38:8c:3a:17:04:8b:17: 2f:73:3b:1a:23:ba:ec:2e:d6:17:f5:cf:aa:0e:a7: 16:8a:be:d6:16:bb:ec:33:2e:8f:f8:38:1d:e2:14: c1:b8:97:81:9c:2c:1e:6b:e7:ef:c4:b4:bd:75:41: a5:d9:ed:c7:01:be:bb:ba:5b:02:01:f7:d0:97:78: 21:f9:de:80:6a:ef:af:0b:af:9e:03:c9:d8:fb:10: e1:21:63:79:72:aa:f2:0f:df:85:18:91:21:3a:16: 2c:69:6e:95:b3:6e:45:77:2b:d8:be:d9:d3:82:55: 07:2b:bf:d4:55:ab:cd:31:f1:5b:96:ab:ad:19:fd: 9f:c2:28:3c:c7:7b:53:e7:8e:d1:fc:49:9e:cd:10: f2:e4:7e:41:e1:fa:7f:0c:d9:ec:d5:32:bb:2c:7a: 9b:48:aa:b7:41:23:ab:71:0a:6f:ed:96:b9:0f:22: 68:ea:7c:94:fb:e1:75:39:92:03:b9:84:17:28:3f: 0f:ad:d2:49:56:1e:50:12:d4:1a:02:6d:7a:5b:00: 6b:f1:9c:ba:06:4f:10:63:d7:aa:8f:d7:6c:15:07: e0:29:39:4a:c1:94:3e:52:b0:31:17:05:06:66:06: 6b:c5:7c:a2:35:29:74:6d:3b:17:76:79:0d:9a:ad: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:75:94:D6:A6:EB:47:3E:0C:D5:FD:F1:DB:83:7C:A0:A8:E1:B3:70 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b4:9a:da:f7:d2:17:3c:f8:f0:45:78:cd:87:b9:73:52:3b: 84:e3:52:16:22:d5:d3:56:65:91:c4:33:35:30:20:eb:ce:04: bb:2c:a8:b2:2c:c5:7e:13:ad:9a:4f:35:58:73:43:57:1d:e1: b6:8f:39:4e:ab:0c:ff:b3:c0:6e:2f:2c:1a:ed:d8:f1:58:1f: 52:1b:73:5d:0e:45:f9:bd:1e:c2:8f:1d:d3:5f:12:02:18:b2: 6b:84:9e:45:e1:a7:8d:f7:8a:f2:a9:33:f8:de:fa:77:e5:3a: fb:a8:96:2c:2d:8d:67:95:46:ab:82:b0:cb:e2:99:a5:6e:8e: d5:23:3d:4b:5a:e4:08:7d:0a:da:93:94:68:f0:e3:6c:49:fa: 76:83:85:b8:7f:8c:d1:4a:3e:74:0d:74:3a:69:6c:ae:87:61: 94:ca:bf:e1:e9:27:cc:05:7c:15:87:92:70:6e:5c:cf:27:46: b0:df:a5:41:90:ba:a7:1c:4c:90:79:25:3c:44:00:ff:75:4b: 53:80:a5:50:0b:73:20:bb:5a:cc:74:18:72:e6:73:32:fd:3b: 99:fd:7f:75:29:71:05:c3:e3:c8:6e:25:cc:2d:4c:5e:05:29: 06:94:ac:24:58:5a:d8:82:31:cc:cb:03:9a:44:58:c9:ed:ca: 80:78:5e:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeLAxonWP0ovbHO/RDjuhNZhurGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA5MTAwOTMxMDlaFw0yNjA5MTMxMTU1MDlaMDMxMTAvBgNV BAMTKEI1NzU5NEQ2QTZFQjQ3M0UwQ0Q1RkRGMURCODM3Q0EwQThFMUIzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEUqT8rJCOIw6FwSLFy9zOxoj uuwu1hf1z6oOpxaKvtYWu+wzLo/4OB3iFMG4l4GcLB5r5+/EtL11QaXZ7ccBvru6 WwIB99CXeCH53oBq768Lr54Dydj7EOEhY3lyqvIP34UYkSE6FixpbpWzbkV3K9i+ 2dOCVQcrv9RVq80x8VuWq60Z/Z/CKDzHe1PnjtH8SZ7NEPLkfkHh+n8M2ezVMrss eptIqrdBI6txCm/tlrkPImjqfJT74XU5kgO5hBcoPw+t0klWHlAS1BoCbXpbAGvx nLoGTxBj16qP12wVB+ApOUrBlD5SsDEXBQZmBmvFfKI1KXRtOxd2eQ2arU5NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtXWU1qbrRz4M1f3x24N8oKjhs3AwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrSa2vfSFzz4 8EV4zYe5c1I7hONSFiLV01ZlkcQzNTAg684EuyyosizFfhOtmk81WHNDVx3hto85 TqsM/7PAbi8sGu3Y8VgfUhtzXQ5F+b0ewo8d018SAhiya4SeReGnjfeK8qkz+N76 d+U6+6iWLC2NZ5VGq4Kwy+KZpW6O1SM9S1rkCH0K2pOUaPDjbEn6doOFuH+M0Uo+ dA10OmlsrodhlMq/4eknzAV8FYeScG5czydGsN+lQZC6pxxMkHklPEQA/3VLU4Cl UAtzILtazHQYcuZzMv07mf1/dSlxBcPjyG4lzC1MXgUpBpSsJFha2IIxzMsDmkRY ye3KgHhePA== -----END CERTIFICATE-----Generated at Thu Sep 10 13:14:19 2026 by rpki-client