$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft (raw, json) Hash identifier: F+RMahayQvJNkTYSHKsO5pyJgrKTXC11PikACbGGM8k= Subject key identifier: 2B:CD:69:8F:B9:60:FC:2B:D4:E6:14:F5:53:FD:CF:44:28:FB:C4:E4 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 749F918E78251819BC8CAACBA1524238A5FF733A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft Manifest number: 0119 Signing time: Wed 29 Jul 2026 00:53:02 +0000 Manifest this update: Wed 29 Jul 2026 00:48:02 +0000 Manifest next update: Thu 30 Jul 2026 03:53:02 +0000 Files and hashes: 1: AS59077.roa (hash: Q7nEwKbZKdVfMPg4eqPb4dhk0zI34xvIoyJ2oXjOr1E=) 2: AS17621.roa (hash: 19cVhI5Ma1k34oBBZ4gfIYstAQe/V4TWlWbIdY5N42k=) 3: AS23724.roa (hash: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c=) 4: AS136958.roa (hash: g3/UCa1hKvaLoK96bXMt0LUZiX9mlrFSQ2wwhF5xeiY=) 5: AS4808.roa (hash: ri934pa7TyG/AUYiQMniS7UtqXtwMDW/5/ucol4rfQY=) 6: AS9808.roa (hash: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4=) 7: AS135377.roa (hash: LAuAieSC7oF5AfM99aSF4QX3JKROSQixCaCeJIDhUxY=) 8: AS4811.roa (hash: swukAgfZCIYpusXfzVSX00k/NJSpgOfhmSmWmG6Yacw=) 9: AS139327.roa (hash: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y=) 10: AS58466.roa (hash: 3LqrOWuq5xX6p8/ZE7rz79EqjFPQYJzG66OzKI73tF0=) 11: AS142002.roa (hash: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4=) 12: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl (hash: dbaGwO8XGBfImNd0d9inlWjGFLtsHLpU9GPhHHMYvp4=) 13: AS4812.roa (hash: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9f:91:8e:78:25:18:19:bc:8c:aa:cb:a1:52:42:38:a5:ff:73:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jul 29 00:48:02 2026 GMT Not After : Jul 30 03:53:02 2026 GMT Subject: CN=2BCD698FB960FC2BD4E614F553FDCF4428FBC4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:3d:85:a0:90:82:68:24:29:ba:c3:15:23: 96:db:e6:a3:07:79:8c:eb:3d:4a:b1:c7:27:c5:9d: a1:f9:9d:b5:8a:48:fc:3e:aa:16:80:6d:18:fb:06: e4:54:db:a2:08:ad:7a:ec:51:f7:f6:a1:9c:a9:1d: dc:8a:0e:4c:62:d3:0b:0f:8b:db:ec:8f:95:00:b0: 9e:5d:56:58:ad:f0:c4:37:54:a1:54:07:87:8f:08: 16:64:6f:d2:8e:c7:11:0d:f8:e7:fd:81:63:fd:ef: 29:b6:1a:e3:d4:ab:94:d8:fe:71:aa:0d:fa:6f:3c: 67:71:f4:68:b6:70:d9:55:34:6b:6c:80:01:29:89: e8:94:3c:7c:ce:1c:6c:cf:32:5d:82:26:4d:5b:73: a1:6c:e6:3d:2c:ff:8e:9f:c4:b2:97:cb:d7:d6:fb: 65:72:b8:f2:3b:98:9b:f7:1a:88:44:7a:5b:b7:99: 3b:a1:68:f4:04:41:09:06:5f:99:31:73:a5:22:eb: c5:66:fa:c8:e5:cb:99:20:33:dc:58:d8:bc:46:39: cc:b7:54:42:05:1d:32:2c:3d:c3:53:be:29:09:f6: 3c:1f:44:19:a9:5c:19:f1:d2:07:05:c8:2c:72:69: 41:8f:17:a4:0d:5d:fc:96:ee:db:5d:14:54:ca:2c: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:69:8F:B9:60:FC:2B:D4:E6:14:F5:53:FD:CF:44:28:FB:C4:E4 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:37:ee:42:6a:4e:ec:39:85:5c:62:97:09:05:52:7e:da: a8:7a:b7:69:14:65:45:e9:71:c9:ef:27:6b:c2:95:71:ae:8d: a3:00:ab:9e:3e:a8:b3:20:4d:86:1b:62:06:60:7e:1b:71:98: a9:76:0b:c5:da:a9:e2:7b:cb:ac:b7:a7:ac:9c:b2:d2:b0:ff: 9f:da:02:89:5b:62:0a:f5:9c:10:a0:aa:c3:85:e8:79:35:f7: 94:08:05:ed:87:52:a7:e2:5d:b6:d8:fe:06:cd:85:30:27:11: 47:3f:76:cb:04:3e:ff:db:e4:fb:c7:d0:e0:25:e2:4a:0b:57: b3:14:1c:7d:a9:39:c4:02:59:ba:d9:44:9e:f6:bc:2f:ba:c8: 81:ec:c2:a7:0f:ea:66:6f:59:79:d2:d0:bc:67:9c:04:83:ee: 93:7f:b2:24:fa:54:08:24:ff:a1:cf:c4:c8:ee:a6:3f:1d:4b: 2d:73:6d:43:be:1e:66:63:48:a7:a0:1e:d6:78:dd:9f:38:f9: 61:ea:56:77:29:61:9d:cc:ab:60:9b:15:fa:bd:c4:8a:d7:7e: 16:ab:c7:32:65:ba:6d:0f:95:63:7b:c8:1a:a1:01:0d:72:4d: f0:bd:41:81:ac:e8:82:90:8a:78:d6:53:49:38:d0:15:ef:5d: 6c:ab:7d:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdJ+RjnglGBm8jKrLoVJCOKX/czowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA3MjkwMDQ4MDJaFw0yNjA3MzAwMzUzMDJaMDMxMTAvBgNV BAMTKDJCQ0Q2OThGQjk2MEZDMkJENEU2MTRGNTUzRkRDRjQ0MjhGQkM0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpj2FoJCCaCQpusMVI5bb5qMH eYzrPUqxxyfFnaH5nbWKSPw+qhaAbRj7BuRU26IIrXrsUff2oZypHdyKDkxi0wsP i9vsj5UAsJ5dVlit8MQ3VKFUB4ePCBZkb9KOxxEN+Of9gWP97ym2GuPUq5TY/nGq DfpvPGdx9Gi2cNlVNGtsgAEpieiUPHzOHGzPMl2CJk1bc6Fs5j0s/46fxLKXy9fW +2VyuPI7mJv3GohEelu3mTuhaPQEQQkGX5kxc6Ui68Vm+sjly5kgM9xY2LxGOcy3 VEIFHTIsPcNTvikJ9jwfRBmpXBnx0gcFyCxyaUGPF6QNXfyW7ttdFFTKLArzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK81pj7lg/CvU5hT1U/3PRCj7xOQwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC85QkYzNEIzODE3NzQ4 RDNFNjlDQzM4ODBGMTNBODM4M0E5QUEzQzJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyM37kJqTuw5 hVxilwkFUn7aqHq3aRRlRelxye8na8KVca6NowCrnj6osyBNhhtiBmB+G3GYqXYL xdqp4nvLrLenrJyy0rD/n9oCiVtiCvWcEKCqw4XoeTX3lAgF7YdSp+Jdttj+Bs2F MCcRRz92ywQ+/9vk+8fQ4CXiSgtXsxQcfak5xAJZutlEnva8L7rIgezCpw/qZm9Z edLQvGecBIPuk3+yJPpUCCT/oc/EyO6mPx1LLXNtQ74eZmNIp6Ae1njdnzj5YepW dylhncyrYJsV+r3Eitd+FqvHMmW6bQ+VY3vIGqEBDXJN8L1BgazogpCKeNZTSTjQ Fe9dbKt9CA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:18:57 2026 by rpki-client