$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft File: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json) Hash identifier: NVPz636OTfw5FcmN2YmGSvkdn+9DuTiIJxZmag1n4Hs= Subject key identifier: D0:F7:D7:F5:01:55:83:C1:19:DD:94:49:06:D2:75:B1:A1:B6:42:D0 Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Certificate serial: 599C418BF7FB78CABC6FB659E0C02A118EA75217 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft Manifest number: 5D Signing time: Fri 21 Aug 2026 08:54:15 +0000 Manifest this update: Fri 21 Aug 2026 08:49:15 +0000 Manifest next update: Sat 22 Aug 2026 11:31:15 +0000 Files and hashes: 1: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=) 2: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=) 3: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: sejY+UwcxriM3c8zow0+tMsa2XtUYNH6gGLsZvieeAo=) 4: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=) 5: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=) 6: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=) 7: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=) 8: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=) 9: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=) 10: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=) 11: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=) 12: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=) 13: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 11:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9c:41:8b:f7:fb:78:ca:bc:6f:b6:59:e0:c0:2a:11:8e:a7:52:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Validity Not Before: Aug 21 08:49:15 2026 GMT Not After : Aug 22 11:31:15 2026 GMT Subject: CN=D0F7D7F5015583C119DD944906D275B1A1B642D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:70:28:67:23:6c:46:f9:82:93:c5:32:a9: c5:b9:e8:ca:4b:2b:87:e1:72:b8:7c:d9:28:a0:af: 3c:5f:37:06:31:61:2c:2e:03:7d:51:9a:6b:cd:d4: 2e:29:4c:a3:c3:fc:5f:2d:20:4b:ca:ee:c1:b6:69: 80:4e:cb:d7:ef:eb:98:2f:be:34:c4:a6:61:49:0f: 37:fb:48:fc:72:95:3a:d5:0d:ac:46:a1:1b:f7:43: 2b:36:5f:74:c6:68:7d:ae:28:86:85:1b:8b:d4:2d: ae:51:d9:08:ce:7e:18:32:5b:3f:bd:f9:ab:5e:30: cb:e1:98:81:8e:07:9c:89:b2:55:8d:6e:3b:1b:b9: 68:59:63:b3:f7:78:2b:cf:72:33:bd:77:ed:c8:c5: d1:c7:f4:5a:7b:a7:a2:05:88:88:3b:fb:2b:76:b6: fb:91:dc:85:84:2c:b6:f1:69:11:3d:90:d0:7c:34: b4:69:b5:b7:b8:e1:d3:ba:03:d2:95:7a:01:67:6e: 9f:15:9c:23:65:25:d9:10:5f:06:34:8b:01:75:37: da:96:a2:81:c6:a3:9d:f4:d2:f3:7f:d7:aa:de:5f: d3:aa:01:a2:82:7d:9e:51:2f:e9:9c:2c:82:01:5a: bc:3c:55:62:ed:ba:3d:6b:08:3c:9f:7a:5f:a4:4d: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:D7:F5:01:55:83:C1:19:DD:94:49:06:D2:75:B1:A1:B6:42:D0 X509v3 Authority Key Identifier: keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c4:87:df:37:90:75:01:53:32:10:1f:ac:fd:b0:4e:5e:0c: 19:f1:03:f9:f8:a3:8c:9d:d8:34:24:f0:b5:f8:58:76:f0:16: a7:a9:89:32:23:b6:3b:b4:69:57:d3:0b:b7:81:6a:2d:d7:3c: 4e:25:33:47:b1:32:a8:4c:24:88:8d:03:ff:12:26:7d:d5:d5: 97:fe:8a:50:37:a4:59:84:8a:8f:61:59:aa:9e:0c:d2:ad:9b: 7b:7c:4d:0b:85:f1:04:d2:65:4b:79:39:cc:03:2e:1c:8f:26: 00:29:ee:45:cb:bc:20:2c:c6:de:42:88:94:93:8e:a4:84:1e: 69:98:aa:ef:d0:e7:7e:f8:1e:dc:52:54:58:2f:bf:a7:87:ea: 73:1c:97:d5:b3:22:4e:c0:fd:e2:7e:a2:cf:f3:6a:42:53:7b: af:a2:55:50:93:f9:dd:e1:d3:89:d9:f9:7c:0c:79:b9:e8:09: 1d:4f:54:43:bc:93:a8:5e:8c:c6:c4:0e:f0:36:9c:d7:fd:90: 90:b6:e9:a0:96:82:b0:f1:3d:79:76:bd:05:8c:59:24:6b:97: af:3f:51:1a:87:2a:6c:58:aa:a8:79:1f:03:11:0f:da:1d:eb: 1e:69:40:a8:c4:46:59:7b:0b:50:df:ec:6b:41:30:bf:04:51: 5b:5a:77:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWZxBi/f7eMq8b7ZZ4MAqEY6nUhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw QjYwRDA0QTAeFw0yNjA4MjEwODQ5MTVaFw0yNjA4MjIxMTMxMTVaMDMxMTAvBgNV BAMTKEQwRjdEN0Y1MDE1NTgzQzExOUREOTQ0OTA2RDI3NUIxQTFCNjQyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUXAoZyNsRvmCk8UyqcW56MpL K4fhcrh82SigrzxfNwYxYSwuA31RmmvN1C4pTKPD/F8tIEvK7sG2aYBOy9fv65gv vjTEpmFJDzf7SPxylTrVDaxGoRv3Qys2X3TGaH2uKIaFG4vULa5R2QjOfhgyWz+9 +ateMMvhmIGOB5yJslWNbjsbuWhZY7P3eCvPcjO9d+3IxdHH9Fp7p6IFiIg7+yt2 tvuR3IWELLbxaRE9kNB8NLRptbe44dO6A9KVegFnbp8VnCNlJdkQXwY0iwF1N9qW ooHGo5300vN/16reX9OqAaKCfZ5RL+mcLIIBWrw8VWLtuj1rCDyfel+kTa5xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0PfX9QFVg8EZ3ZRJBtJ1saG2QtAwHwYDVR0j BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Mjg3MjAyNjYzNjI5MDcvMC85REZBNUQ0NENGNTBF REY1NkU5M0JCN0ZBRjg2M0VCNjBCNjBEMDRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMSH3zeQdQFT MhAfrP2wTl4MGfED+fijjJ3YNCTwtfhYdvAWp6mJMiO2O7RpV9MLt4FqLdc8TiUz R7EyqEwkiI0D/xImfdXVl/6KUDekWYSKj2FZqp4M0q2be3xNC4XxBNJlS3k5zAMu HI8mACnuRcu8ICzG3kKIlJOOpIQeaZiq79Dnfvge3FJUWC+/p4fqcxyX1bMiTsD9 4n6iz/NqQlN7r6JVUJP53eHTidn5fAx5uegJHU9UQ7yTqF6MxsQO8Dac1/2QkLbp oJaCsPE9eXa9BYxZJGuXrz9RGocqbFiqqHkfAxEP2h3rHmlAqMRGWXsLUN/sa0Ew vwRRW1p3ag== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:35 2026 by rpki-client