$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: 8e7rrfwbr+xvwWVN7XpSm9+bxhOlu99RtAbyIrMpvko= Subject key identifier: 4F:5A:7E:22:EC:DC:45:24:BF:DE:24:B2:5C:57:84:E0:6F:6E:43:CB Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 24CEAFCF4BA73656143DCCA2B745EF489C2E64BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: 6B Signing time: Sun 26 Jul 2026 19:07:19 +0000 Manifest this update: Sun 26 Jul 2026 19:02:19 +0000 Manifest next update: Mon 27 Jul 2026 20:32:19 +0000 Files and hashes: 1: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 2: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 3: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) 4: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 5: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 6: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) 7: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 8: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 9: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) 10: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: Q3DpbwdOy/WAxd/1GgLLUg4Py+vLDWLTHGSD6+gyeqc=) 11: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ce:af:cf:4b:a7:36:56:14:3d:cc:a2:b7:45:ef:48:9c:2e:64:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jul 26 19:02:19 2026 GMT Not After : Jul 27 20:32:19 2026 GMT Subject: CN=4F5A7E22ECDC4524BFDE24B25C5784E06F6E43CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:b1:c4:97:18:7e:bb:e0:c4:a3:bd:5b:17: 77:d5:b6:14:1f:b1:8f:6f:2b:09:54:72:52:23:a9: 71:aa:9d:b1:ac:d4:43:00:9b:ab:79:ed:df:91:47: a0:13:f7:69:f8:48:77:ef:91:ab:90:90:ba:a8:b8: 46:cb:eb:3d:56:cf:b4:5d:46:e9:40:13:90:34:2f: 84:36:41:3d:d2:18:b7:94:98:f4:cd:82:84:25:c3: fd:2e:4a:64:c7:77:f2:8a:f1:89:17:cd:6c:65:c6: ec:89:66:b2:b2:66:be:3d:58:06:2d:b4:97:68:29: e0:a3:1f:3d:58:9c:f4:90:c6:f9:bb:6f:5d:50:84: 99:db:e8:9d:f4:43:9b:c1:07:c3:28:cf:24:cb:50: 03:b7:ac:16:06:b1:b3:d0:98:ae:07:6c:23:f6:71: 85:f3:6e:ad:b9:1d:3b:04:35:83:f1:2d:90:f8:71: 7e:04:60:93:91:56:28:9b:95:c3:72:06:4e:7d:9f: a4:92:3b:59:a1:20:7b:e2:b9:77:b3:b3:34:f6:da: c4:d8:06:dd:82:59:d8:69:80:f7:35:53:9d:1a:2d: e6:8d:f3:8e:b4:e2:bd:88:f4:ff:87:b6:fd:3a:94: 27:48:85:6e:3a:25:69:5a:9e:03:af:e6:38:43:38: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:7E:22:EC:DC:45:24:BF:DE:24:B2:5C:57:84:E0:6F:6E:43:CB X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d8:a6:ea:05:69:ee:72:e2:22:84:6b:e8:61:9c:8e:7d:fd: a5:59:db:53:32:eb:fc:ba:03:78:b9:94:d8:90:f7:fe:dc:ea: 9a:d4:bc:13:f9:45:ec:64:b4:f7:87:00:d5:f3:5a:eb:ab:43: 74:25:b9:9d:41:c6:99:98:da:a6:49:88:50:7d:1c:63:ac:0b: 28:8d:d2:3a:12:64:7a:75:6c:e3:74:47:86:dc:98:58:33:90: 2a:68:be:d4:a9:84:77:f8:77:b7:44:4e:27:bc:e8:15:c5:ff: 0e:85:6c:17:f2:da:a7:63:2e:aa:da:f3:7f:dd:2e:9f:3b:be: 74:ad:26:6d:9e:5c:44:98:2a:8f:a9:f5:cb:f3:69:91:a5:4c: 74:c4:09:05:ad:ed:f4:50:f0:15:56:9e:ac:7e:33:ac:8c:8d: db:51:c3:43:7c:5c:d3:90:0b:dd:f2:76:22:e4:b6:a6:40:18: 63:d4:f2:cd:06:ea:d4:d7:a8:6b:f7:90:0c:21:01:fc:97:1a: 32:0a:e9:7a:37:05:a7:76:92:c3:74:80:d2:c2:4a:1c:21:c6: 73:bb:4a:02:25:e0:db:79:71:69:ef:63:b8:61:db:d3:a9:c7: 32:19:7c:98:4d:aa:46:ab:30:58:c5:4d:8e:ef:68:b5:10:ef: fd:1e:fa:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJM6vz0unNlYUPcyit0XvSJwuZLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA3MjYxOTAyMTlaFw0yNjA3MjcyMDMyMTlaMDMxMTAvBgNV BAMTKDRGNUE3RTIyRUNEQzQ1MjRCRkRFMjRCMjVDNTc4NEUwNkY2RTQzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVvLHElxh+u+DEo71bF3fVthQf sY9vKwlUclIjqXGqnbGs1EMAm6t57d+RR6AT92n4SHfvkauQkLqouEbL6z1Wz7Rd RulAE5A0L4Q2QT3SGLeUmPTNgoQlw/0uSmTHd/KK8YkXzWxlxuyJZrKyZr49WAYt tJdoKeCjHz1YnPSQxvm7b11QhJnb6J30Q5vBB8MozyTLUAO3rBYGsbPQmK4HbCP2 cYXzbq25HTsENYPxLZD4cX4EYJORViiblcNyBk59n6SSO1mhIHviuXezszT22sTY Bt2CWdhpgPc1U50aLeaN84604r2I9P+Htv06lCdIhW46JWlangOv5jhDOJVVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT1p+IuzcRSS/3iSyXFeE4G9uQ8swHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtim6gVp7nLi IoRr6GGcjn39pVnbUzLr/LoDeLmU2JD3/tzqmtS8E/lF7GS094cA1fNa66tDdCW5 nUHGmZjapkmIUH0cY6wLKI3SOhJkenVs43RHhtyYWDOQKmi+1KmEd/h3t0ROJ7zo FcX/DoVsF/Lap2Muqtrzf90unzu+dK0mbZ5cRJgqj6n1y/NpkaVMdMQJBa3t9FDw FVaerH4zrIyN21HDQ3xc05AL3fJ2IuS2pkAYY9TyzQbq1Neoa/eQDCEB/JcaMgrp ejcFp3aSw3SA0sJKHCHGc7tKAiXg23lxae9juGHb06nHMhl8mE2qRqswWMVNju9o tRDv/R76cQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:11:30 2026 by rpki-client