$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft File: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json) Hash identifier: mqc9dEsKICIa7k3Ref7OO2Uc+5CTt9H1QNG3fABePkk= Subject key identifier: D4:E3:E0:E9:C0:86:9C:17:4F:41:93:2F:AD:A2:2F:B9:E7:8B:EB:3C Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Certificate serial: 3AA3CD4A7235BAB3E86258FBFD725C5F6784D07F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft Manifest number: 3D Signing time: Tue 28 Jul 2026 15:37:09 +0000 Manifest this update: Tue 28 Jul 2026 15:32:09 +0000 Manifest next update: Wed 29 Jul 2026 17:20:09 +0000 Files and hashes: 1: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=) 2: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=) 3: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=) 4: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=) 5: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=) 6: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=) 7: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=) 8: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=) 9: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=) 10: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=) 11: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: WtsDojQ2bW+W1UDWhU3SzDpl7zr3pRCo5ulgf582QT0=) 12: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=) 13: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:cd:4a:72:35:ba:b3:e8:62:58:fb:fd:72:5c:5f:67:84:d0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Validity Not Before: Jul 28 15:32:09 2026 GMT Not After : Jul 29 17:20:09 2026 GMT Subject: CN=D4E3E0E9C0869C174F41932FADA22FB9E78BEB3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:85:f0:f8:3a:86:c3:d9:da:dc:28:23:77: 68:98:aa:26:e0:17:79:d2:a3:67:b2:d1:d8:fb:8d: 40:1b:e4:e5:0e:3f:65:90:36:be:33:84:bb:6e:de: 87:09:64:93:4e:cb:84:de:b7:3c:43:fd:53:11:65: d8:9b:f8:a1:30:5e:22:49:ca:b3:59:58:9a:92:d8: 1e:5d:d3:a3:49:a4:17:c4:e4:f3:88:98:f1:86:fc: f3:57:4f:66:06:50:df:59:4e:93:74:7b:49:84:70: 1b:e3:fa:80:7e:17:c0:51:29:5b:01:3b:88:c6:41: 45:7e:99:b8:0e:2d:33:50:1a:69:1d:b9:91:50:44: 4c:b4:29:04:7d:30:87:0e:24:2c:e6:0a:ae:d7:6d: fd:db:5f:c4:5d:cc:b3:a4:89:3a:1f:0c:83:72:98: 3e:1c:22:90:7f:ef:63:68:e4:f8:28:4c:ea:49:04: ed:4b:f8:ab:fb:c8:73:88:38:92:4c:4b:4e:1a:02: d7:6b:9f:9c:5c:1b:51:3a:67:ad:70:69:f8:b1:02: d6:34:14:bb:ca:35:7b:00:31:73:0e:f7:bf:f7:04: 08:a9:bf:8b:df:61:ec:70:e1:72:5e:e3:b6:9c:51: b2:ad:f7:14:16:f1:d0:8f:44:4c:85:98:fb:95:33: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E3:E0:E9:C0:86:9C:17:4F:41:93:2F:AD:A2:2F:B9:E7:8B:EB:3C X509v3 Authority Key Identifier: keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:cc:f9:af:b8:cf:ef:a0:32:0d:b6:c0:41:2e:f4:6f:23: be:cd:6b:37:d7:4a:0b:5e:94:2d:0c:84:fe:78:01:86:d9:55: 36:a5:e5:c4:d1:4e:f5:1a:60:00:1a:3b:4f:02:65:e3:b0:91: 62:ee:14:f0:4e:33:d8:ea:a2:15:28:ae:b1:b2:a4:1d:8d:97: 7e:e6:e7:a5:66:a6:e5:dc:4e:9e:e3:74:be:4e:ff:31:57:69: 1f:f0:79:4e:0f:44:1e:a8:3e:d0:07:db:c7:29:f1:ac:4c:9a: 1b:f9:c4:5e:21:1b:73:6d:e7:52:67:90:3d:ea:64:65:cd:9d: 60:e3:40:6d:6f:10:48:55:ab:3a:d4:98:d9:dc:9b:09:4b:9e: bf:06:91:ca:30:7c:57:ff:9c:52:5a:09:8c:ec:ca:99:fa:9a: 21:c4:4b:c6:7d:a7:bd:d8:4e:88:01:98:95:2a:9f:4a:4e:27: 19:39:cb:be:1f:25:01:d9:9f:77:7d:b5:ac:b0:83:89:92:13: a3:a8:ab:35:5f:5b:84:f3:9f:43:3b:93:bf:3e:75:e5:25:cf: 20:3f:28:fd:6c:f8:a1:a0:e0:f7:e1:d8:94:2d:ae:c1:be:13: 7f:32:a0:b7:92:c0:3a:f1:6a:61:f1:4d:f2:14:df:5c:a3:fb: b8:26:e3:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOqPNSnI1urPoYlj7/XJcX2eE0H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw QjYwRDA0QTAeFw0yNjA3MjgxNTMyMDlaFw0yNjA3MjkxNzIwMDlaMDMxMTAvBgNV BAMTKEQ0RTNFMEU5QzA4NjlDMTc0RjQxOTMyRkFEQTIyRkI5RTc4QkVCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDYXw+DqGw9na3Cgjd2iYqibg F3nSo2ey0dj7jUAb5OUOP2WQNr4zhLtu3ocJZJNOy4TetzxD/VMRZdib+KEwXiJJ yrNZWJqS2B5d06NJpBfE5POImPGG/PNXT2YGUN9ZTpN0e0mEcBvj+oB+F8BRKVsB O4jGQUV+mbgOLTNQGmkduZFQREy0KQR9MIcOJCzmCq7Xbf3bX8RdzLOkiTofDINy mD4cIpB/72No5PgoTOpJBO1L+Kv7yHOIOJJMS04aAtdrn5xcG1E6Z61wafixAtY0 FLvKNXsAMXMO97/3BAipv4vfYexw4XJe47acUbKt9xQW8dCPREyFmPuVM0rFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1OPg6cCGnBdPQZMvraIvueeL6zwwHwYDVR0j BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Mjg3MjAyNjYzNjI5MDcvMC85REZBNUQ0NENGNTBF REY1NkU5M0JCN0ZBRjg2M0VCNjBCNjBEMDRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFHM+a+4z++g Mg22wEEu9G8jvs1rN9dKC16ULQyE/ngBhtlVNqXlxNFO9RpgABo7TwJl47CRYu4U 8E4z2OqiFSiusbKkHY2XfubnpWam5dxOnuN0vk7/MVdpH/B5Tg9EHqg+0Afbxynx rEyaG/nEXiEbc23nUmeQPepkZc2dYONAbW8QSFWrOtSY2dybCUuevwaRyjB8V/+c UloJjOzKmfqaIcRLxn2nvdhOiAGYlSqfSk4nGTnLvh8lAdmfd321rLCDiZITo6ir NV9bhPOfQzuTvz515SXPID8o/Wz4oaDg9+HYlC2uwb4TfzKgt5LAOvFqYfFN8hTf XKP7uCbjpQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:15:35 2026 by rpki-client