$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: jTdfbJuxjrwtis9//EnauetEabzuPYC1YBAm4mi1Aao= Subject key identifier: 81:01:14:D7:DA:9E:52:8D:B3:63:10:44:E3:9B:F5:31:CD:EB:46:3A Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 60A0226E9E89E24EFAA0FC2FDC250C7C82102D94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 0156 Signing time: Fri 09 Oct 2026 17:53:39 +0000 Manifest this update: Fri 09 Oct 2026 17:48:39 +0000 Manifest next update: Mon 12 Oct 2026 18:26:39 +0000 Files and hashes: 1: AS59077.roa (hash: jqEAS4vl3v8Scmg4fltQNIqu4A4F1urMvQwrsEz6fzQ=) 2: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 3: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 4: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 5: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 6: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 7: AS135377.roa (hash: 0TgUONzFV8lNd0jopT12jgLwNazd/6SepxXD+2igQdM=) 8: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 9: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: EWnMOZnqNZlzZQSu3m8Bp0Cx2WaTex/fr/oFD14rrJE=) 10: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 11: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 12: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 13: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 18:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a0:22:6e:9e:89:e2:4e:fa:a0:fc:2f:dc:25:0c:7c:82:10:2d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Oct 9 17:48:39 2026 GMT Not After : Oct 12 18:26:39 2026 GMT Subject: CN=810114D7DA9E528DB3631044E39BF531CDEB463A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:bc:db:59:0a:3d:b8:c4:7c:17:a1:75:e3: 8d:99:46:f7:54:0c:bc:78:bc:29:58:41:f2:e8:d6: 66:fc:51:2b:6c:be:39:bc:30:0c:42:0a:31:54:6a: e5:63:69:7b:47:11:a0:0f:04:54:3f:12:4e:49:dd: 4d:31:89:94:aa:03:9d:9d:6f:04:c7:3f:ca:b9:d9: 1b:b2:6e:86:66:5f:84:a3:5a:f2:cf:0c:f3:93:3d: e7:48:b9:0d:55:b6:27:80:9d:80:1a:03:21:93:15: 36:9a:95:a8:57:da:0a:48:66:5d:96:98:06:69:1f: 46:38:5b:03:29:51:22:ea:bb:a8:11:bd:01:04:48: a1:17:81:ef:19:d0:88:be:e7:cc:47:89:cf:92:df: 3a:9e:0e:8c:e6:00:5b:1c:a8:6e:04:24:35:26:91: ea:87:2b:9a:8b:ba:0b:ec:2b:b2:f3:e4:03:78:95: 05:dc:fd:1f:1f:77:2d:88:c1:1a:ab:0b:08:91:9d: 4c:9e:ed:c7:b4:68:53:ae:4a:80:c2:07:51:89:1e: d1:a0:d1:1c:43:7c:35:5a:a6:19:24:ca:b4:e0:62: 27:69:b4:f0:1e:da:7b:c9:b3:5d:04:e7:a9:74:92: 4d:70:7f:34:be:b4:73:b3:8c:03:8c:aa:5c:de:8b: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:01:14:D7:DA:9E:52:8D:B3:63:10:44:E3:9B:F5:31:CD:EB:46:3A X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5d:b4:f2:bd:47:ef:bd:d8:80:e2:1b:93:0a:72:e3:77:78: dc:9b:fb:f4:2b:47:c9:cb:3c:30:68:14:25:43:a3:41:ab:0a: 67:2e:1c:19:18:02:6c:9f:a0:fc:48:8e:2a:cc:69:9c:fd:14: 41:46:8d:f2:1a:67:3d:59:73:3a:a5:51:ee:a9:d6:8d:5b:6a: 38:c4:97:6c:f1:91:35:4f:84:cc:ba:f0:8d:d9:c5:17:73:d0: 0b:f1:3b:a1:d1:50:46:87:13:4f:ea:ea:e5:d2:ab:d5:86:48: 30:37:10:1d:d3:f1:ea:74:ca:ab:a4:4a:7b:04:cd:89:9d:bc: 3d:4b:89:97:f6:4e:18:cd:94:ce:78:b5:13:a1:2e:89:41:62: ff:a1:bc:69:93:ae:d4:79:5e:9a:a0:85:71:88:ac:5b:e3:4e: 68:ce:ed:4a:09:02:86:72:79:d3:0d:88:94:fb:49:ac:d5:e2: e0:d7:e2:29:be:bb:fc:6a:13:3a:8e:bd:19:04:8e:d6:e7:cb: b7:40:ba:30:d8:83:25:81:8e:8a:86:a4:5d:f0:3b:44:45:51: 97:c6:e0:3a:24:db:5e:8a:6b:78:75:35:f7:60:cc:17:71:3f: 1f:3b:02:14:2a:cb:22:d4:43:05:53:45:7b:d1:8f:c9:f5:12: 59:89:60:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYKAibp6J4k76oPwv3CUMfIIQLZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjEwMDkxNzQ4MzlaFw0yNjEwMTIxODI2MzlaMDMxMTAvBgNV BAMTKDgxMDExNEQ3REE5RTUyOERCMzYzMTA0NEUzOUJGNTMxQ0RFQjQ2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeLzbWQo9uMR8F6F1442ZRvdU DLx4vClYQfLo1mb8UStsvjm8MAxCCjFUauVjaXtHEaAPBFQ/Ek5J3U0xiZSqA52d bwTHP8q52RuyboZmX4SjWvLPDPOTPedIuQ1VtieAnYAaAyGTFTaalahX2gpIZl2W mAZpH0Y4WwMpUSLqu6gRvQEESKEXge8Z0Ii+58xHic+S3zqeDozmAFscqG4EJDUm keqHK5qLugvsK7Lz5AN4lQXc/R8fdy2IwRqrCwiRnUye7ce0aFOuSoDCB1GJHtGg 0RxDfDVaphkkyrTgYidptPAe2nvJs10E56l0kk1wfzS+tHOzjAOMqlzeiysxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgQEU19qeUo2zYxBE45v1Mc3rRjowHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl208r1H773Y gOIbkwpy43d43Jv79CtHycs8MGgUJUOjQasKZy4cGRgCbJ+g/EiOKsxpnP0UQUaN 8hpnPVlzOqVR7qnWjVtqOMSXbPGRNU+EzLrwjdnFF3PQC/E7odFQRocTT+rq5dKr 1YZIMDcQHdPx6nTKq6RKewTNiZ28PUuJl/ZOGM2Uzni1E6EuiUFi/6G8aZOu1Hle mqCFcYisW+NOaM7tSgkChnJ50w2IlPtJrNXi4NfiKb67/GoTOo69GQSO1ufLt0C6 MNiDJYGOioakXfA7REVRl8bgOiTbXopreHU192DMF3E/HzsCFCrLItRDBVNFe9GP yfUSWYlgWw== -----END CERTIFICATE-----Generated at Sat Oct 10 17:03:10 2026 by rpki-client