$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: +oSdKlbllR7UKGqHEyfAq2tuX8duIb2CBJO/AkCH6Ps= Subject key identifier: B4:C7:EE:53:41:40:8A:83:8A:47:66:5F:1A:C5:64:91:45:39:EA:40 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 0B0255254FFD6896AC6EDFAC3D159274CF60386A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: DA Signing time: Sat 13 Jun 2026 08:01:32 +0000 Manifest this update: Sat 13 Jun 2026 07:56:32 +0000 Manifest next update: Sun 14 Jun 2026 09:45:32 +0000 Files and hashes: 1: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: BpXh7GVKrDSfExmCqTUfA2ObA5mEkRtlnkNCbIoh6uk=) 2: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) 3: AS59077.roa (hash: Q7nEwKbZKdVfMPg4eqPb4dhk0zI34xvIoyJ2oXjOr1E=) 4: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 5: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 6: AS9808.roa (hash: HDXyF2fIRHbd1sKuB2KiR2jS0LHxe5eAxe8lR3Xit+c=) 7: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 8: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 9: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 10: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 11: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 12: AS4811.roa (hash: MV2i73Dh57bX+Yb8coisjlsaF+JOu0C1UkUcY2Cxymc=) 13: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:02:55:25:4f:fd:68:96:ac:6e:df:ac:3d:15:92:74:cf:60:38:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jun 13 07:56:32 2026 GMT Not After : Jun 14 09:45:32 2026 GMT Subject: CN=B4C7EE5341408A838A47665F1AC564914539EA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:9c:31:76:03:f8:8c:34:a6:bf:5a:fb:6b: 9b:7a:13:17:70:be:c3:8f:b4:f0:f4:f3:33:a2:f9: 42:23:60:96:4b:ff:cf:d1:88:a5:94:a6:d2:4b:3b: 7e:eb:ff:2b:0c:89:e9:d8:bc:2a:89:23:55:6f:ea: ba:85:90:35:5d:2b:0d:17:eb:e3:1b:fc:6f:40:bd: 01:57:1d:16:ed:cf:12:37:33:39:79:bd:ff:3e:fc: fe:6d:1e:bf:20:2d:54:29:68:af:84:be:a9:dc:52: 10:96:3d:44:6b:95:64:c7:ce:9f:f7:0a:5f:bc:90: d5:c7:d6:a3:be:52:1d:b6:fb:73:fb:f0:93:97:e9: eb:b7:9b:39:87:50:eb:8e:15:9d:47:a1:1c:e1:b3: 20:20:60:a0:7b:54:17:9d:c7:ac:b2:97:0c:b4:12: 37:30:78:c7:ed:d3:fe:42:5e:ae:6a:5b:5e:96:87: e7:34:75:c5:d5:4a:ed:72:b6:e7:9a:49:24:5c:c1: 84:ea:13:5b:64:38:52:4f:04:4f:92:8a:89:db:e4: 19:98:a9:99:2d:a7:ea:cf:d3:a7:d8:de:3a:8b:65: e2:dc:ad:7f:16:9b:ac:b9:7c:75:ed:70:fe:47:90: 58:12:cc:76:03:4d:3a:7f:84:8c:72:ec:9d:fd:e5: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C7:EE:53:41:40:8A:83:8A:47:66:5F:1A:C5:64:91:45:39:EA:40 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9d:10:3e:63:f7:08:f0:f0:eb:fd:8c:50:dc:aa:aa:4d:a1: 8d:b5:82:4e:48:49:67:5b:5e:10:c0:27:c2:18:6a:07:74:6d: af:0a:49:35:f9:ec:87:28:3e:69:c0:e8:7c:2d:4d:65:d0:80: 0c:10:6c:68:14:56:db:f7:58:fa:89:25:e4:40:97:f3:19:cf: 90:40:92:98:63:61:98:8a:86:c8:43:b7:2c:3f:12:11:d7:f8: a9:7a:67:c7:94:82:ad:c4:72:f7:26:ad:58:b4:a5:52:6c:a4: 6f:be:6d:3b:31:44:b8:de:28:55:fa:f7:2e:27:e5:90:8d:da: 9f:29:4e:64:f7:96:c2:58:51:5e:a6:db:66:7f:eb:d8:22:4b: 6e:ce:78:e0:c4:90:e7:ba:05:bd:ce:3a:bb:8a:a0:63:41:f7: ce:8e:2f:f0:57:21:0c:7c:7d:1a:7f:eb:e7:92:ec:04:a1:35: 44:c1:08:00:ad:c4:10:90:a7:64:10:6a:5a:be:8b:a4:74:9e: fb:c8:53:f7:1f:fc:67:20:f8:38:89:98:a2:e2:70:cd:e7:14: e4:ae:d7:2c:5e:a0:76:0f:d5:59:59:31:bf:d3:bf:ee:b0:74: dc:69:17:96:83:c2:ec:e6:e2:fc:48:d0:a4:b0:a3:9e:2f:d5: d6:d5:ad:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCwJVJU/9aJasbt+sPRWSdM9gOGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA2MTMwNzU2MzJaFw0yNjA2MTQwOTQ1MzJaMDMxMTAvBgNV BAMTKEI0QzdFRTUzNDE0MDhBODM4QTQ3NjY1RjFBQzU2NDkxNDUzOUVBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpJwxdgP4jDSmv1r7a5t6Exdw vsOPtPD08zOi+UIjYJZL/8/RiKWUptJLO37r/ysMienYvCqJI1Vv6rqFkDVdKw0X 6+Mb/G9AvQFXHRbtzxI3Mzl5vf8+/P5tHr8gLVQpaK+EvqncUhCWPURrlWTHzp/3 Cl+8kNXH1qO+Uh22+3P78JOX6eu3mzmHUOuOFZ1HoRzhsyAgYKB7VBedx6yylwy0 EjcweMft0/5CXq5qW16Wh+c0dcXVSu1ytueaSSRcwYTqE1tkOFJPBE+Sionb5BmY qZktp+rP06fY3jqLZeLcrX8Wm6y5fHXtcP5HkFgSzHYDTTp/hIxy7J395Wf5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtMfuU0FAioOKR2ZfGsVkkUU56kAwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ0QPmP3CPDw 6/2MUNyqqk2hjbWCTkhJZ1teEMAnwhhqB3RtrwpJNfnshyg+acDofC1NZdCADBBs aBRW2/dY+okl5ECX8xnPkECSmGNhmIqGyEO3LD8SEdf4qXpnx5SCrcRy9yatWLSl Umykb75tOzFEuN4oVfr3LiflkI3anylOZPeWwlhRXqbbZn/r2CJLbs544MSQ57oF vc46u4qgY0H3zo4v8FchDHx9Gn/r55LsBKE1RMEIAK3EEJCnZBBqWr6LpHSe+8hT 9x/8ZyD4OImYouJwzecU5K7XLF6gdg/VWVkxv9O/7rB03GkXloPC7Obi/EjQpLCj ni/V1tWtyw== -----END CERTIFICATE-----Generated at Sun Jun 14 03:42:18 2026 by rpki-client