$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.mft (raw, json) Hash identifier: tJikp3xwMx4WhKnbwg4E0zkOOtkw86cSH/Kt5iZk+Bw= Subject key identifier: 8C:BB:A0:B2:79:62:29:7B:78:C3:09:1C:46:88:B9:93:E8:3C:1C:A6 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 461B1803EEBEEA337981BFFA2D4163B8E6ACEFF9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft Manifest number: A4 Signing time: Fri 25 Sep 2026 13:32:37 +0000 Manifest this update: Fri 25 Sep 2026 13:27:37 +0000 Manifest next update: Mon 28 Sep 2026 13:48:37 +0000 Files and hashes: 1: AS24547.roa (hash: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=) 2: AS146781.roa (hash: TnJECSPc7Qzg83Q9wHjvn70uGQr0vJDeZvl8X6PzeCY=) 3: AS23724.roa (hash: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU=) 4: AS63619.roa (hash: L1f2TUIeS+g0y19KQLhL6w371EHGtoHP0pZw95T7AaY=) 5: AS4808.roa (hash: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g=) 6: AS4837.roa (hash: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=) 7: AS141771.roa (hash: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4=) 8: 9CDD899429A14223F030EC28602F57FC4CAC8F60.crl (hash: IXLLUy4pHC+D4UPpB9DN1pW1M03S0BeKEdnsgtVBsuk=) 9: AS17621.roa (hash: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw=) 10: AS59025.roa (hash: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0=) 11: AS4811.roa (hash: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1b:18:03:ee:be:ea:33:79:81:bf:fa:2d:41:63:b8:e6:ac:ef:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Sep 25 13:27:37 2026 GMT Not After : Sep 28 13:48:37 2026 GMT Subject: CN=8CBBA0B27962297B78C3091C4688B993E83C1CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:48:14:04:de:94:e0:c1:d5:92:65:3f:92: bb:f1:5b:54:cc:4a:a7:ea:4b:76:47:bf:7d:8d:8e: 2b:85:bf:5c:62:b5:95:16:3c:be:95:5e:1f:81:b3: e0:e5:c7:3f:61:b7:6d:4a:5f:66:3d:ab:c3:f8:90: 62:31:2a:64:23:ef:63:ee:36:74:09:bd:bd:e5:cf: 39:8c:e6:5d:a0:d4:9d:b2:ff:7f:83:71:97:3c:94: 3c:e0:2b:67:49:f3:d1:93:10:02:b8:cf:ca:be:bb: 5f:64:43:1d:fc:45:c9:43:ea:01:33:49:3a:31:f1: 26:4b:d3:1c:52:75:06:a2:86:a6:59:7b:ca:5d:54: b1:a1:12:fb:52:5b:2f:dc:70:fd:aa:0f:f7:2b:97: 66:2c:97:74:56:4d:a2:82:ec:33:31:11:17:ac:a2: 4a:ee:e5:87:d9:94:f2:31:fc:f4:33:e5:d8:e6:a8: 0c:5f:21:05:8c:d8:82:4f:40:68:49:ec:e9:16:10: a2:53:87:29:0b:07:c1:4a:5b:a9:da:49:5e:b3:ce: bc:27:d2:5a:1d:0d:ae:67:81:3f:dc:8a:87:c0:9f: b6:6c:58:e2:41:1a:c5:a5:36:7f:3a:54:42:f1:29: b2:90:dd:77:75:4e:7c:62:85:ac:d4:2c:4a:66:4e: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:A0:B2:79:62:29:7B:78:C3:09:1C:46:88:B9:93:E8:3C:1C:A6 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:69:97:88:73:f3:c3:0a:2f:66:e4:b7:3c:fa:a0:32:2e:af: 71:9a:8c:c6:55:f6:0f:c8:fa:4b:4c:0a:88:85:be:0c:5b:b8: 00:e4:98:14:5e:7f:0e:ec:12:26:07:08:18:a1:f2:95:04:63: 39:f9:ea:cd:93:bc:14:41:a8:1f:ae:6f:14:c1:ce:dd:f5:a3: 1a:a6:d5:bb:22:17:4c:c4:83:9f:9f:81:98:5b:00:e7:e5:bc: b3:57:92:e7:bb:88:2d:32:2c:16:b2:1e:53:07:fa:fc:b1:40: 1b:a6:66:3c:52:7a:d2:ca:cd:57:75:30:8f:66:f9:8f:15:41: 51:ac:3a:89:cb:66:2e:b9:59:2d:87:6d:61:87:96:cd:79:52: 16:11:9a:e2:72:3b:bc:13:09:b0:3e:7e:1c:9a:3c:b7:80:f9: 38:53:e3:e8:59:04:27:7d:f0:d6:0a:dd:33:58:48:27:07:3a: a4:78:f0:68:99:da:a2:c9:6b:bd:94:fa:f8:22:77:4e:d2:cc: 14:5c:bc:1a:67:79:6a:0d:ed:f9:3a:22:49:42:63:68:9c:08: 65:18:22:99:08:ce:ed:0b:10:50:3c:37:95:9c:83:7b:21:61: bd:3c:42:50:e8:07:2b:7d:05:7d:c7:c4:ce:d5:2e:54:12:b8: ff:e3:c4:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURhsYA+6+6jN5gb/6LUFjuOas7/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA5MjUxMzI3MzdaFw0yNjA5MjgxMzQ4MzdaMDMxMTAvBgNV BAMTKDhDQkJBMEIyNzk2MjI5N0I3OEMzMDkxQzQ2ODhCOTkzRTgzQzFDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLlUgUBN6U4MHVkmU/krvxW1TM SqfqS3ZHv32NjiuFv1xitZUWPL6VXh+Bs+Dlxz9ht21KX2Y9q8P4kGIxKmQj72Pu NnQJvb3lzzmM5l2g1J2y/3+DcZc8lDzgK2dJ89GTEAK4z8q+u19kQx38RclD6gEz STox8SZL0xxSdQaihqZZe8pdVLGhEvtSWy/ccP2qD/crl2Ysl3RWTaKC7DMxERes okru5YfZlPIx/PQz5djmqAxfIQWM2IJPQGhJ7OkWEKJThykLB8FKW6naSV6zzrwn 0lodDa5ngT/ciofAn7ZsWOJBGsWlNn86VELxKbKQ3Xd1TnxihazULEpmTlDfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjLugsnliKXt4wwkcRoi5k+g8HKYwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC85Q0REODk5NDI5QTE0 MjIzRjAzMEVDMjg2MDJGNTdGQzRDQUM4RjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2mXiHPzwwov ZuS3PPqgMi6vcZqMxlX2D8j6S0wKiIW+DFu4AOSYFF5/DuwSJgcIGKHylQRjOfnq zZO8FEGoH65vFMHO3fWjGqbVuyIXTMSDn5+BmFsA5+W8s1eS57uILTIsFrIeUwf6 /LFAG6ZmPFJ60srNV3Uwj2b5jxVBUaw6ictmLrlZLYdtYYeWzXlSFhGa4nI7vBMJ sD5+HJo8t4D5OFPj6FkEJ33w1grdM1hIJwc6pHjwaJnaoslrvZT6+CJ3TtLMFFy8 Gmd5ag3t+ToiSUJjaJwIZRgimQjO7QsQUDw3lZyDeyFhvTxCUOgHK30FfcfEztUu VBK4/+PEoA== -----END CERTIFICATE-----Generated at Sat Sep 26 09:55:20 2026 by rpki-client