$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: 0QsJMEG8x3YoQQxX3gw41GzGCOryMVWvgMLApVWRYUw= Subject key identifier: 1F:3B:0C:FF:0F:D8:EF:1F:3E:0C:D5:44:11:DB:C1:7B:FE:94:F4:61 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 5F0A3E90C496B584AD1249BA4E3DD447F4944600 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: B1 Signing time: Sat 24 Oct 2026 22:57:01 +0000 Manifest this update: Sat 24 Oct 2026 22:52:01 +0000 Manifest next update: Wed 28 Oct 2026 02:29:01 +0000 Files and hashes: 1: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 2: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 3: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 4: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 5: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) 6: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) 7: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 8: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 9: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) 10: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: V0v0Xey1h1CpRIFjjqvExSxUDtkSdqExPousZMFCS0E=) 11: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0a:3e:90:c4:96:b5:84:ad:12:49:ba:4e:3d:d4:47:f4:94:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Oct 24 22:52:01 2026 GMT Not After : Oct 28 02:29:01 2026 GMT Subject: CN=1F3B0CFF0FD8EF1F3E0CD54411DBC17BFE94F461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:ac:cb:78:52:00:23:64:f2:6c:3a:8a:91: 00:74:4b:96:83:00:27:44:f9:d9:51:7e:7e:12:0c: 65:83:30:ec:67:03:7b:13:43:00:a8:b1:23:79:b9: 64:0a:2f:68:ef:0b:28:4e:9a:1b:1c:99:0c:8b:12: 15:c7:88:71:e1:11:89:92:ed:10:ef:e9:ce:95:0e: 04:c7:3b:b6:c7:2f:5a:2f:42:63:94:9e:ad:50:c7: 14:ea:3d:7d:42:b8:ab:10:80:52:6b:47:74:a9:78: c9:51:2e:fc:c0:20:c7:cb:62:be:1d:3b:d0:a2:48: 17:cf:41:ac:2d:a3:eb:f5:40:71:11:15:26:10:81: 50:59:c5:d2:5b:80:d1:c2:f8:c2:e3:58:db:92:65: 7f:29:e5:25:91:f5:19:e1:47:90:03:5c:a0:23:12: c7:05:b5:f0:7b:cb:ce:b1:de:2a:a2:09:6e:cd:2b: ba:52:51:ed:e2:70:ad:ee:b6:68:de:b4:87:1a:7d: 90:2a:3f:69:e4:c9:65:e5:4e:3b:7b:e5:3b:e4:8e: 58:eb:4d:66:be:a5:1d:e3:36:66:a1:b5:80:21:b2: 8b:c5:cd:89:87:58:bd:0f:3a:b2:be:c3:c9:f0:d4: 28:79:d3:00:f2:5d:49:9a:1c:9f:32:bc:94:d0:a9: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3B:0C:FF:0F:D8:EF:1F:3E:0C:D5:44:11:DB:C1:7B:FE:94:F4:61 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:33:9e:d8:92:7a:42:55:0f:f1:3e:b9:86:25:ce:64:1e:73: 7f:b9:dc:e7:11:ea:1e:47:eb:c9:74:fc:d2:64:59:96:a8:1f: d2:b8:78:fd:e2:cd:0f:b3:bb:a6:09:4b:e9:25:c2:23:d6:dc: 31:4a:51:12:dc:65:fd:98:f7:92:76:06:05:d0:83:0d:ac:aa: e6:1c:73:dc:5e:c7:7a:b2:20:ca:94:87:d5:3b:71:ee:64:fd: 31:f4:ff:c4:ef:c5:3c:97:9f:f1:69:6b:84:18:e9:d5:90:2b: 2c:cd:24:b7:11:fc:58:b0:18:29:4a:5f:b0:f4:17:90:ca:33: 59:29:ea:38:90:b5:f2:c2:c0:97:ef:69:17:0b:14:bd:cc:9d: e4:ed:38:6a:32:78:1c:6d:5b:71:5b:91:4b:61:cb:79:1a:a2: 79:a6:5f:89:ee:f3:76:bc:af:d8:2f:e3:6f:8e:ed:0c:d7:1e: 2c:5c:0a:2b:74:4f:fa:1f:65:5a:3c:68:b7:99:c2:9b:a5:a2: 06:83:71:3d:4c:b9:0f:0a:b3:6f:aa:e0:22:ab:9c:e6:30:12: a1:75:15:6d:03:9c:fc:f5:36:67:37:9f:15:b0:aa:c2:cc:6c: e5:37:67:10:94:a2:ad:df:28:80:bd:ca:8c:ae:6e:ab:73:37: 95:0d:44:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXwo+kMSWtYStEkm6Tj3UR/SURgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjEwMjQyMjUyMDFaFw0yNjEwMjgwMjI5MDFaMDMxMTAvBgNV BAMTKDFGM0IwQ0ZGMEZEOEVGMUYzRTBDRDU0NDExREJDMTdCRkU5NEY0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvqzLeFIAI2TybDqKkQB0S5aD ACdE+dlRfn4SDGWDMOxnA3sTQwCosSN5uWQKL2jvCyhOmhscmQyLEhXHiHHhEYmS 7RDv6c6VDgTHO7bHL1ovQmOUnq1QxxTqPX1CuKsQgFJrR3SpeMlRLvzAIMfLYr4d O9CiSBfPQawto+v1QHERFSYQgVBZxdJbgNHC+MLjWNuSZX8p5SWR9RnhR5ADXKAj EscFtfB7y86x3iqiCW7NK7pSUe3icK3utmjetIcafZAqP2nkyWXlTjt75Tvkjljr TWa+pR3jNmahtYAhsovFzYmHWL0POrK+w8nw1Ch50wDyXUmaHJ8yvJTQqdDBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHzsM/w/Y7x8+DNVEEdvBe/6U9GEwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzOe2JJ6QlUP 8T65hiXOZB5zf7nc5xHqHkfryXT80mRZlqgf0rh4/eLND7O7pglL6SXCI9bcMUpR Etxl/Zj3knYGBdCDDayq5hxz3F7HerIgypSH1Ttx7mT9MfT/xO/FPJef8WlrhBjp 1ZArLM0ktxH8WLAYKUpfsPQXkMozWSnqOJC18sLAl+9pFwsUvcyd5O04ajJ4HG1b cVuRS2HLeRqieaZfie7zdryv2C/jb47tDNceLFwKK3RP+h9lWjxot5nCm6WiBoNx PUy5Dwqzb6rgIquc5jASoXUVbQOc/PU2ZzefFbCqwsxs5TdnEJSird8ogL3KjK5u q3M3lQ1EwA== -----END CERTIFICATE-----Generated at Mon Oct 26 12:48:02 2026 by rpki-client