$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json) Hash identifier: eM0y3ZjzhlyqSthcmvI7KsnbGeRb2byKzE0gp6IS5Sk= Subject key identifier: D5:DB:F7:72:94:BD:F0:16:9A:88:AC:A8:D6:8F:4F:1E:81:0E:9D:7D Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 65132C86EB3A2D9938A6183727B499FE14783103 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft Manifest number: B0 Signing time: Wed 29 Jul 2026 02:38:12 +0000 Manifest this update: Wed 29 Jul 2026 02:33:12 +0000 Manifest next update: Thu 30 Jul 2026 03:42:12 +0000 Files and hashes: 1: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: QoQPGY53uNIrXx9commiImOmzLDenbQrMAVlvmCvf20=) 2: AS4808.roa (hash: zrnyfTGaceFvRsRNBf1L4VJmv/kF/kkf/DS1RaoLOQM=) 3: AS23844.roa (hash: XWuWQzQzWF4m8rnsu7wvf249StKjXOQSZf2Pgb85QEY=) 4: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=) 5: AS23724.roa (hash: JNw3gmBXj10Ma6OX0dfnotuXirnfdeZgLErqyBLrKM4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:13:2c:86:eb:3a:2d:99:38:a6:18:37:27:b4:99:fe:14:78:31:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Jul 29 02:33:12 2026 GMT Not After : Jul 30 03:42:12 2026 GMT Subject: CN=D5DBF77294BDF0169A88ACA8D68F4F1E810E9D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:8a:1d:62:8f:f3:ad:db:6a:8a:6e:95:a1: 1c:b8:e1:43:b0:6a:63:68:63:f4:16:8f:7b:fb:20: e9:02:01:d4:6f:bc:b9:7b:be:81:2d:fe:3d:d3:17: 80:b5:71:01:db:16:e2:b4:f0:11:f4:73:47:fd:20: 3e:81:eb:4d:aa:14:65:fd:6e:71:cf:5e:e4:dc:aa: b9:3e:17:4f:5d:5f:e2:cd:a6:8a:cf:0e:b1:5a:83: 71:8d:c7:d8:51:a6:ef:fd:11:f5:c1:1e:37:1f:a7: 9c:3a:2b:6c:8b:6f:fa:aa:3f:71:7b:35:1d:fb:6c: a9:6d:3c:c4:fd:55:6e:0c:d2:6d:f3:b4:1f:bb:d6: 3b:45:e2:c1:ab:24:61:0c:a9:62:49:19:f6:ad:b4: 8a:c4:96:50:68:b0:6a:85:d3:59:7d:c9:91:2f:1c: ac:56:d6:36:05:f4:29:c6:8d:e9:2a:93:cf:f1:b7: 55:da:8d:dc:28:b3:a9:20:c5:9c:98:fc:8c:c1:0a: 9e:49:fe:e8:b3:21:23:d0:d2:d1:c0:db:82:47:9e: 0a:af:90:89:00:99:8b:8e:a9:97:17:03:42:1d:4f: 1c:8f:f2:3a:d8:fa:21:ac:19:e2:78:fb:71:74:e5: a4:8d:4f:67:41:8c:ab:ad:c7:b5:d7:d8:63:d0:00: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:F7:72:94:BD:F0:16:9A:88:AC:A8:D6:8F:4F:1E:81:0E:9D:7D X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:87:51:df:b0:b0:da:ad:e7:c8:b8:a5:fe:28:7f:fc:01:07: 3d:0d:99:42:5f:a2:95:b7:09:2a:e9:46:5c:ab:21:35:09:fa: 54:b1:09:08:4c:01:d5:24:7c:91:40:16:dc:9d:f7:54:b2:bb: ca:bd:9c:cf:3d:38:f8:b1:3f:20:6f:74:e4:6e:14:2e:d8:40: 60:49:a4:34:ed:2e:a4:82:20:53:9e:43:cd:28:2a:85:25:e9: 56:96:cf:9b:b2:f4:ee:ce:65:7d:49:fb:12:e4:28:7b:9f:a1: f5:42:88:c3:6c:36:10:49:08:60:34:ca:17:c4:93:9b:71:6f: 2a:5a:c5:05:e0:dc:af:4d:5d:1d:dc:6c:fc:76:2e:ed:da:38: 5e:41:66:2a:50:e7:a9:82:62:21:e0:43:07:e0:7a:95:0e:73: e8:7a:d0:97:bc:9d:fc:7f:f8:d3:0b:3e:81:49:28:a8:c8:9f: ce:41:52:84:78:42:20:10:ef:a8:83:58:90:5f:76:1d:f1:64: 82:f9:9e:44:61:bd:02:e8:9c:dd:86:18:76:9a:e7:f3:b5:3a: f7:e3:71:3f:db:b9:0a:ce:9a:79:78:12:6a:25:0a:17:fa:d9: 86:7c:1a:9d:f4:5a:74:ec:c4:24:25:88:eb:11:07:31:6c:f2: 96:10:75:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZRMshus6LZk4phg3J7SZ/hR4MQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA3MjkwMjMzMTJaFw0yNjA3MzAwMzQyMTJaMDMxMTAvBgNV BAMTKEQ1REJGNzcyOTRCREYwMTY5QTg4QUNBOEQ2OEY0RjFFODEwRTlEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiioodYo/zrdtqim6VoRy44UOw amNoY/QWj3v7IOkCAdRvvLl7voEt/j3TF4C1cQHbFuK08BH0c0f9ID6B602qFGX9 bnHPXuTcqrk+F09dX+LNporPDrFag3GNx9hRpu/9EfXBHjcfp5w6K2yLb/qqP3F7 NR37bKltPMT9VW4M0m3ztB+71jtF4sGrJGEMqWJJGfattIrEllBosGqF01l9yZEv HKxW1jYF9CnGjekqk8/xt1Xajdwos6kgxZyY/IzBCp5J/uizISPQ0tHA24JHngqv kIkAmYuOqZcXA0IdTxyP8jrY+iGsGeJ4+3F05aSNT2dBjKutx7XX2GPQAOLxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1dv3cpS98BaaiKyo1o9PHoEOnX0wHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS85RkY2NzlBNDhCREFC NTgyMDEzN0MyNTEzMzNDRTgzMUYyNzVCRDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYdR37Cw2q3n yLil/ih//AEHPQ2ZQl+ilbcJKulGXKshNQn6VLEJCEwB1SR8kUAW3J33VLK7yr2c zz04+LE/IG905G4ULthAYEmkNO0upIIgU55DzSgqhSXpVpbPm7L07s5lfUn7EuQo e5+h9UKIw2w2EEkIYDTKF8STm3FvKlrFBeDcr01dHdxs/HYu7do4XkFmKlDnqYJi IeBDB+B6lQ5z6HrQl7yd/H/40ws+gUkoqMifzkFShHhCIBDvqINYkF92HfFkgvme RGG9Auic3YYYdprn87U69+NxP9u5Cs6aeXgSaiUKF/rZhnwanfRadOzEJCWI6xEH MWzylhB15g== -----END CERTIFICATE-----Generated at Wed Jul 29 12:54:40 2026 by rpki-client