$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: oh5ohQDviVYgEtBofIFKK5PeCGDSMNo+zBKeyswsRok= Subject key identifier: 88:6B:EC:DE:A0:5C:29:E3:1B:80:82:59:E8:DC:45:42:1C:22:90:81 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 70997CEFD00902ED750004F3F120C8A16BFB08E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: 6E Signing time: Wed 29 Jul 2026 02:38:12 +0000 Manifest this update: Wed 29 Jul 2026 02:33:12 +0000 Manifest next update: Thu 30 Jul 2026 06:22:12 +0000 Files and hashes: 1: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 2: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: LDD9QAdVUby/N0eJSufQLnqZ6aI1VpDjN8Zilm1UyqI=) 3: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 4: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 5: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 6: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) 7: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 8: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 9: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) 10: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) 11: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:7c:ef:d0:09:02:ed:75:00:04:f3:f1:20:c8:a1:6b:fb:08:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jul 29 02:33:12 2026 GMT Not After : Jul 30 06:22:12 2026 GMT Subject: CN=886BECDEA05C29E31B808259E8DC45421C229081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:f8:a0:a8:c0:ea:1f:6d:76:03:c9:c1:a5: b3:f5:cd:c4:d1:fa:d7:b6:ac:17:08:ae:66:d8:d3: fc:55:1a:f3:33:97:a0:84:7e:6a:92:22:1c:f9:45: 9d:28:99:a3:6e:ca:b9:d4:bc:73:1d:a1:c2:d9:5b: c7:b7:fe:7c:f1:b7:15:0b:64:ae:aa:c1:cf:e2:58: 5a:36:44:8f:a2:f4:1a:0c:af:e0:05:f6:a9:4d:f8: 32:41:1a:f9:df:e9:2b:8b:78:fd:16:30:f2:ea:dd: ad:b6:46:92:6a:81:cc:7e:dd:4e:1c:a8:b5:36:42: 09:2c:5c:4f:08:10:28:77:10:e6:77:31:19:c7:27: 1a:8c:e7:ee:c0:1b:f0:db:aa:aa:17:e2:96:1b:7f: 38:6c:fe:2b:99:d3:1b:b6:c6:78:66:f3:f1:da:80: 52:e8:24:f3:0b:7e:7e:6c:75:ba:b0:61:fd:17:c7: 00:b4:f8:ab:0f:6c:c4:1e:1e:dc:43:04:10:45:16: db:fe:a2:a2:55:59:4b:11:b3:b7:c2:71:89:78:d9: af:1f:3c:54:55:0f:a7:c3:79:dc:ae:72:da:b6:37: 26:75:38:ac:a3:c2:c4:eb:99:8b:e0:a5:65:5b:ad: a6:2d:e8:c5:57:f7:00:52:37:a5:2c:57:af:a8:19: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6B:EC:DE:A0:5C:29:E3:1B:80:82:59:E8:DC:45:42:1C:22:90:81 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4b:91:e8:66:a8:45:27:54:da:5d:76:0b:14:81:3f:a3:ad: 46:69:64:c5:28:07:2d:1c:69:8c:8b:8d:2e:07:c2:c9:4d:08: b7:b2:73:ed:79:99:29:0a:75:10:e4:4a:8c:77:cf:fe:9e:45: be:77:96:81:21:7e:c1:83:2d:2f:98:f9:10:2a:d4:a8:65:34: 2e:f0:9c:d6:05:ab:ba:da:5f:4c:7b:ff:1c:b1:c1:6f:f5:90: 5e:81:a9:d6:86:47:52:c2:ec:55:23:43:be:f5:2d:50:0c:bc: be:65:65:45:9a:05:4b:5f:07:3d:7a:20:02:0a:bb:56:81:b0: 30:4e:8f:5b:ec:84:9f:01:13:21:f2:6b:27:f8:5a:33:27:d8: bd:9f:58:c3:c2:09:26:ca:11:28:c3:e9:d3:a0:b2:d7:31:71: ba:24:ed:87:74:3a:3c:50:d4:67:d5:ca:f0:f4:6d:94:67:94: 13:64:ef:84:a4:b5:43:20:6b:ee:47:94:e9:6c:ca:b9:90:68: eb:c5:21:09:33:50:15:1e:12:b1:99:22:f1:35:67:41:c2:13: f7:5f:d2:c5:7d:8b:ca:77:8b:06:9f:d8:d3:30:e9:4c:32:68: c9:27:2e:fe:09:46:06:41:fa:cf:58:9d:f3:23:1e:17:95:59: 65:6a:33:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJl879AJAu11AATz8SDIoWv7COUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA3MjkwMjMzMTJaFw0yNjA3MzAwNjIyMTJaMDMxMTAvBgNV BAMTKDg4NkJFQ0RFQTA1QzI5RTMxQjgwODI1OUU4REM0NTQyMUMyMjkwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOPigqMDqH212A8nBpbP1zcTR +te2rBcIrmbY0/xVGvMzl6CEfmqSIhz5RZ0omaNuyrnUvHMdocLZW8e3/nzxtxUL ZK6qwc/iWFo2RI+i9BoMr+AF9qlN+DJBGvnf6SuLeP0WMPLq3a22RpJqgcx+3U4c qLU2QgksXE8IECh3EOZ3MRnHJxqM5+7AG/DbqqoX4pYbfzhs/iuZ0xu2xnhm8/Ha gFLoJPMLfn5sdbqwYf0XxwC0+KsPbMQeHtxDBBBFFtv+oqJVWUsRs7fCcYl42a8f PFRVD6fDedyuctq2NyZ1OKyjwsTrmYvgpWVbraYt6MVX9wBSN6UsV6+oGaVpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiGvs3qBcKeMbgIJZ6NxFQhwikIEwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkuR6GaoRSdU 2l12CxSBP6OtRmlkxSgHLRxpjIuNLgfCyU0It7Jz7XmZKQp1EORKjHfP/p5FvneW gSF+wYMtL5j5ECrUqGU0LvCc1gWrutpfTHv/HLHBb/WQXoGp1oZHUsLsVSNDvvUt UAy8vmVlRZoFS18HPXogAgq7VoGwME6PW+yEnwETIfJrJ/haMyfYvZ9Yw8IJJsoR KMPp06Cy1zFxuiTth3Q6PFDUZ9XK8PRtlGeUE2TvhKS1QyBr7keU6WzKuZBo68Uh CTNQFR4SsZki8TVnQcIT91/SxX2LyneLBp/Y0zDpTDJoyScu/glGBkH6z1id8yMe F5VZZWozoQ== -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:09 2026 by rpki-client