$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: E49P0l6t9iIO22esn5lRKlb+C8umEhhAvy9jp67T3dM= Subject key identifier: 14:3F:30:11:45:55:8E:71:C1:0C:C7:F1:F9:A9:03:80:21:7B:4B:B9 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 1F32F69465015F5E6ED1B17EE368729F80D0E85E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 19:17:37 +0000 Manifest this update: Tue 28 Jul 2026 19:12:37 +0000 Manifest next update: Wed 29 Jul 2026 20:09:37 +0000 Files and hashes: 1: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: MU4mz4A0jz1JfWDmX+6j9wO/VX/LXBBKJXf7RCCs3qw=) 2: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 3: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 4: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 5: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 6: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:32:f6:94:65:01:5f:5e:6e:d1:b1:7e:e3:68:72:9f:80:d0:e8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: Jul 28 19:12:37 2026 GMT Not After : Jul 29 20:09:37 2026 GMT Subject: CN=143F301145558E71C10CC7F1F9A90380217B4BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:72:d2:7c:78:29:b8:37:b9:f8:0e:5a:ec: 86:19:14:5c:8e:1a:aa:a2:ed:04:86:e4:3b:dd:05: dd:2a:2c:23:df:6e:34:07:b2:c7:62:c3:b2:ae:4a: bc:ab:ae:75:2c:e8:1f:e7:27:42:53:72:e0:ac:a0: 6e:c1:b3:af:1c:46:55:ae:a2:b8:54:12:08:c6:b2: d8:df:91:f1:33:91:a5:2a:5c:f5:bc:96:a1:3a:36: 4f:f0:c5:c4:a8:c7:d5:30:2d:66:d5:a7:70:30:3f: 0a:78:63:ca:1f:06:ac:b5:c9:0f:55:fa:c3:9f:79: df:bc:3b:eb:94:b9:38:71:4b:3b:8e:2b:6c:65:ea: 58:6b:44:8c:e7:9e:c4:67:40:af:85:b8:cd:df:49: 14:33:4c:d8:cc:02:3b:ad:d2:36:3c:1c:6d:67:7a: 04:01:69:63:af:df:25:de:d2:e9:67:79:4f:ea:56: dd:7c:49:50:4d:b6:c4:08:37:32:37:1c:65:a8:9a: 62:be:88:30:f1:52:71:f6:7e:89:38:8f:c8:b1:1d: 87:71:29:5d:1e:87:83:db:90:7e:59:64:01:d0:10: 28:e4:74:96:70:74:d0:56:fb:09:00:97:a0:05:aa: ef:50:42:6e:69:90:06:fc:d4:bf:f5:71:f7:c6:5d: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:30:11:45:55:8E:71:C1:0C:C7:F1:F9:A9:03:80:21:7B:4B:B9 X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:01:05:0a:1a:a0:7f:7f:45:b5:27:4e:79:a0:a0:7e:4c:f6: 61:a4:61:2c:0f:bd:8c:00:ee:d5:e8:35:90:03:df:23:76:bf: f6:fa:36:ac:78:28:3a:57:01:3d:18:c6:21:62:8a:91:fa:06: 24:72:d9:28:85:e2:56:10:24:06:8e:a1:9b:d8:3d:9e:1e:9a: 26:e7:cf:89:aa:8c:3c:2f:e0:69:48:c7:5f:b0:41:96:9d:60: 2b:b1:74:b0:04:be:7d:b8:1e:00:f6:3a:d9:10:9d:b0:f5:d3: 9f:8d:32:2f:dc:08:4e:ef:0b:c8:5a:74:50:71:5a:44:e0:81: 7c:02:78:c7:53:be:55:76:b5:9f:36:3b:35:ab:29:6d:c2:a9: ad:71:c7:60:a5:09:f1:86:29:91:ee:1b:e9:2d:ae:08:55:6e: 39:e4:6f:df:38:2c:9f:8c:18:31:a5:47:68:d0:45:d4:df:1a: 4a:db:bd:52:7c:c2:78:78:d2:82:b4:e0:0d:1f:a0:92:06:2c: 9b:ae:ff:cd:c7:2e:52:fa:1a:37:03:6a:c1:3c:9d:02:6f:0b: 1a:ea:bc:7d:f1:d3:6d:1e:54:d9:20:b2:0e:8e:2b:df:2d:67: 10:fb:5d:9e:02:df:0b:7c:83:fc:a6:52:dc:67:38:ac:e3:ca: a1:88:c1:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHzL2lGUBX15u0bF+42hyn4DQ6F4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA3MjgxOTEyMzdaFw0yNjA3MjkyMDA5MzdaMDMxMTAvBgNV BAMTKDE0M0YzMDExNDU1NThFNzFDMTBDQzdGMUY5QTkwMzgwMjE3QjRCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+3LSfHgpuDe5+A5a7IYZFFyO Gqqi7QSG5DvdBd0qLCPfbjQHssdiw7KuSryrrnUs6B/nJ0JTcuCsoG7Bs68cRlWu orhUEgjGstjfkfEzkaUqXPW8lqE6Nk/wxcSox9UwLWbVp3AwPwp4Y8ofBqy1yQ9V +sOfed+8O+uUuThxSzuOK2xl6lhrRIznnsRnQK+FuM3fSRQzTNjMAjut0jY8HG1n egQBaWOv3yXe0ulneU/qVt18SVBNtsQINzI3HGWommK+iDDxUnH2fok4j8ixHYdx KV0eh4PbkH5ZZAHQECjkdJZwdNBW+wkAl6AFqu9QQm5pkAb81L/1cffGXVn5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFD8wEUVVjnHBDMfx+akDgCF7S7kwHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQEFChqgf39F tSdOeaCgfkz2YaRhLA+9jADu1eg1kAPfI3a/9vo2rHgoOlcBPRjGIWKKkfoGJHLZ KIXiVhAkBo6hm9g9nh6aJufPiaqMPC/gaUjHX7BBlp1gK7F0sAS+fbgeAPY62RCd sPXTn40yL9wITu8LyFp0UHFaROCBfAJ4x1O+VXa1nzY7NaspbcKprXHHYKUJ8YYp ke4b6S2uCFVuOeRv3zgsn4wYMaVHaNBF1N8aStu9UnzCeHjSgrTgDR+gkgYsm67/ zccuUvoaNwNqwTydAm8LGuq8ffHTbR5U2SCyDo4r3y1nEPtdngLfC3yD/KZS3Gc4 rOPKoYjB1w== -----END CERTIFICATE-----Generated at Wed Jul 29 09:00:15 2026 by rpki-client