$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: zM9aKmvsDujnNuQ1tY+bNXiSQAkTS3ze4xoOaEtq+tw= Subject key identifier: 7F:46:45:E4:EB:3B:6C:21:08:04:70:E4:2E:08:CD:65:65:42:DA:35 Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 25AF095F8F6CC79CD933DE6ECC217BBD5E24E797 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: B4 Signing time: Wed 29 Jul 2026 04:13:23 +0000 Manifest this update: Wed 29 Jul 2026 04:08:23 +0000 Manifest next update: Thu 30 Jul 2026 04:13:23 +0000 Files and hashes: 1: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=) 2: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=) 3: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=) 4: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 5: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 6: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) 7: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=) 8: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=) 9: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: CHFavaikAB0zKtA+QBGnrr0KH/+BIgLjS3MqVTVwzS4=) 10: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=) 11: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:af:09:5f:8f:6c:c7:9c:d9:33:de:6e:cc:21:7b:bd:5e:24:e7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: Jul 29 04:08:23 2026 GMT Not After : Jul 30 04:13:23 2026 GMT Subject: CN=7F4645E4EB3B6C21080470E42E08CD656542DA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:52:af:49:a3:30:9f:8a:b3:cd:92:ca:a1: aa:50:0f:a9:50:5b:2f:dc:c1:71:d2:72:d8:30:50: 3f:c4:3e:df:47:14:73:9d:c1:27:a3:0b:87:c3:98: 3d:b7:2c:c9:8e:04:9f:26:bd:53:43:b8:8d:dd:37: 47:a3:c4:85:21:e6:74:f9:51:22:af:8b:0a:4d:3f: 96:d4:43:c7:b6:09:da:18:ac:d6:a8:92:40:e6:75: 82:2f:b2:ed:95:00:02:d4:ef:c2:0c:6e:3d:93:7d: 42:77:48:32:c6:75:9d:0b:bd:6c:30:9c:88:74:18: 1e:6f:b8:98:d1:ea:f9:08:2d:17:c2:4d:fc:4c:ba: 72:1a:ab:6e:9e:55:68:b3:33:a5:87:6c:29:d1:39: 30:98:8a:19:e8:d2:36:9c:13:eb:5e:08:7f:da:c2: 06:68:c1:c9:fc:2b:54:31:eb:39:0e:34:90:b0:4f: fb:ba:71:a5:9a:5d:4e:ef:07:56:07:6d:1c:ac:e2: 0b:89:ed:5b:de:31:21:89:07:11:1d:4f:0a:dc:1e: 9b:5d:b8:80:62:c5:48:5e:52:6c:b1:09:e0:4e:b6: 60:71:47:4c:b4:e8:30:9c:14:8d:af:7d:00:39:c9: 10:c4:95:db:66:12:96:ea:44:db:e7:ae:3f:f2:69: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:45:E4:EB:3B:6C:21:08:04:70:E4:2E:08:CD:65:65:42:DA:35 X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c3:e6:06:7b:dd:00:66:22:b1:48:63:99:9a:ee:4f:e6:c9: 15:aa:18:38:5e:b1:06:b3:8f:9e:e8:b7:e0:fa:30:0f:d4:ef: a1:55:d7:e1:57:da:93:af:9e:5a:1f:22:8d:a9:21:f5:e9:a7: 48:bd:3a:b7:68:12:dd:20:c6:aa:60:d5:0b:12:64:1d:b4:77: 4a:f5:3c:94:cc:46:c1:17:18:50:dd:95:0f:d9:9b:70:fb:6a: 23:40:02:7d:29:37:06:ec:7c:74:42:17:1f:fd:48:4f:b0:e8: 12:f4:55:35:1c:62:c1:0c:8a:50:9a:2b:55:22:27:2a:5a:66: 69:d2:c5:a6:79:35:94:7c:bc:d7:ee:e7:6d:d3:c9:2a:5f:16: 46:ed:6a:35:44:25:c4:46:82:12:ea:f4:03:de:ca:d9:48:7b: 31:d7:4a:ac:5a:75:68:fc:95:b9:04:57:12:13:b9:42:4e:20: ef:7f:00:fe:7e:60:3a:3d:02:62:8b:3c:13:44:cc:f6:ed:bf: 5f:14:76:df:f2:c5:c1:29:7b:9c:b3:b9:6a:50:e8:fb:71:b2: 8c:ce:37:de:be:2f:ee:f2:63:9f:06:17:0b:45:20:10:61:ee: a7:c6:35:d8:57:e2:58:99:24:9d:88:a5:7c:6c:6e:02:24:76: bb:50:fb:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJa8JX49sx5zZM95uzCF7vV4k55cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA3MjkwNDA4MjNaFw0yNjA3MzAwNDEzMjNaMDMxMTAvBgNV BAMTKDdGNDY0NUU0RUIzQjZDMjEwODA0NzBFNDJFMDhDRDY1NjU0MkRBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSzlKvSaMwn4qzzZLKoapQD6lQ Wy/cwXHSctgwUD/EPt9HFHOdwSejC4fDmD23LMmOBJ8mvVNDuI3dN0ejxIUh5nT5 USKviwpNP5bUQ8e2CdoYrNaokkDmdYIvsu2VAALU78IMbj2TfUJ3SDLGdZ0LvWww nIh0GB5vuJjR6vkILRfCTfxMunIaq26eVWizM6WHbCnROTCYihno0jacE+teCH/a wgZowcn8K1Qx6zkONJCwT/u6caWaXU7vB1YHbRys4guJ7VveMSGJBxEdTwrcHptd uIBixUheUmyxCeBOtmBxR0y06DCcFI2vfQA5yRDEldtmEpbqRNvnrj/yaZ1TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf0ZF5Os7bCEIBHDkLgjNZWVC2jUwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucPmBnvdAGYi sUhjmZruT+bJFaoYOF6xBrOPnui34PowD9TvoVXX4Vfak6+eWh8ijakh9emnSL06 t2gS3SDGqmDVCxJkHbR3SvU8lMxGwRcYUN2VD9mbcPtqI0ACfSk3Bux8dEIXH/1I T7DoEvRVNRxiwQyKUJorVSInKlpmadLFpnk1lHy81+7nbdPJKl8WRu1qNUQlxEaC Eur0A97K2Uh7MddKrFp1aPyVuQRXEhO5Qk4g738A/n5gOj0CYos8E0TM9u2/XxR2 3/LFwSl7nLO5alDo+3GyjM433r4v7vJjnwYXC0UgEGHup8Y12FfiWJkknYilfGxu AiR2u1D7Kw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:44:28 2026 by rpki-client