$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: nrILs/QPn64JQ7402u00bMuHQvWHkPNCsbpkV20SRDk= Subject key identifier: 82:42:17:16:E0:E9:02:6D:FD:DA:93:50:18:F9:F1:46:7A:A0:0D:98 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 76BD42A1855486C6D96A969DEC4FBC95EFE71CA1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: E1 Signing time: Sat 13 Jun 2026 13:36:49 +0000 Manifest this update: Sat 13 Jun 2026 13:31:49 +0000 Manifest next update: Sun 14 Jun 2026 15:48:49 +0000 Files and hashes: 1: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) 2: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: SabBJhRBATaFiNq+GS3zVE7f79ZbvNxc3ArxX9CdvSU=) 3: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bd:42:a1:85:54:86:c6:d9:6a:96:9d:ec:4f:bc:95:ef:e7:1c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jun 13 13:31:49 2026 GMT Not After : Jun 14 15:48:49 2026 GMT Subject: CN=82421716E0E9026DFDDA935018F9F1467AA00D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:41:5e:12:f4:03:c2:79:d2:f6:b2:6b:c9: 93:27:37:28:48:e8:1a:8b:de:84:47:9f:b8:37:61: d9:0b:7c:8f:77:dc:57:bb:da:0c:59:49:1e:ed:3a: e6:e7:e6:d9:a2:38:aa:6f:70:20:81:2e:48:69:31: 09:31:ba:4e:88:e1:54:08:74:de:15:1a:43:a4:62: e6:13:86:6c:8b:3b:f4:d0:0b:b8:8f:30:19:a3:b8: ff:a7:c2:a0:3c:ab:98:52:5f:c6:50:e6:16:67:c6: 1e:53:d7:47:06:9e:3a:fb:53:98:81:ba:89:43:06: 8d:f1:34:e6:d4:2b:d7:70:4f:99:ab:59:ac:cd:a9: 61:29:c2:2d:f6:2b:43:bd:ee:a4:10:42:a1:73:71: a8:52:ab:8c:eb:57:a9:80:1e:7e:a8:09:a8:36:1a: e3:2d:c9:13:3c:f3:94:e6:d1:22:3f:5c:7c:15:b0: 59:e5:92:d8:d1:b1:15:65:0c:b5:9a:53:cf:90:9e: f0:aa:79:9b:01:40:ad:97:26:7a:82:2c:93:a0:79: 24:1a:a0:be:03:ca:51:7f:a7:ee:14:07:12:b6:1e: 3a:84:8c:c0:b2:00:1c:8e:c3:78:82:60:31:eb:43: a6:7c:f4:54:ff:64:3d:71:19:a1:95:9b:f2:ac:ac: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:42:17:16:E0:E9:02:6D:FD:DA:93:50:18:F9:F1:46:7A:A0:0D:98 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ab:a3:69:de:33:e2:45:53:2b:1e:43:44:2b:4d:e6:35:e0: 67:2e:75:b0:0c:4c:71:35:5c:29:ed:42:e2:bb:6e:94:36:10: 5c:d8:65:b0:ea:57:72:c7:76:e2:54:5b:f4:81:4a:3c:2f:84: a8:80:fe:02:f3:8e:74:38:4d:1f:04:dc:a4:09:55:eb:4d:c8: 87:d3:fa:93:bf:b0:e3:12:24:ad:4a:26:95:7d:56:6f:1e:71: 6f:8d:f1:30:34:e9:57:bc:d7:19:e7:e8:e1:c4:72:f1:9e:16: c2:08:cf:9e:f5:42:22:e3:3a:c1:32:23:cf:b6:5c:42:7e:ac: a3:cf:64:bf:93:b2:9c:04:89:fc:cf:3b:ea:3f:63:6f:c8:10: ae:07:a1:3c:c7:6a:f4:bc:d7:8e:3f:cc:be:05:4a:af:ba:17: 33:a2:8e:44:9e:48:d6:81:9c:93:1f:62:76:c7:f4:67:d6:eb: 0e:36:a6:5a:3b:31:31:fe:00:a2:8f:aa:7b:7a:24:cc:b2:25: 8a:c1:d1:3c:0f:e2:9c:e6:d7:c7:ae:4c:a6:19:96:20:f6:4a: cf:a2:73:d0:96:66:8e:b5:e9:0f:18:58:b8:06:0b:a9:b1:5f: 79:60:9d:26:ef:03:e5:e2:44:e1:a1:6a:9f:fd:cd:5d:b2:4e: 6a:a4:d9:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdr1CoYVUhsbZapad7E+8le/nHKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA2MTMxMzMxNDlaFw0yNjA2MTQxNTQ4NDlaMDMxMTAvBgNV BAMTKDgyNDIxNzE2RTBFOTAyNkRGRERBOTM1MDE4RjlGMTQ2N0FBMDBEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oEFeEvQDwnnS9rJryZMnNyhI 6BqL3oRHn7g3YdkLfI933Fe72gxZSR7tOubn5tmiOKpvcCCBLkhpMQkxuk6I4VQI dN4VGkOkYuYThmyLO/TQC7iPMBmjuP+nwqA8q5hSX8ZQ5hZnxh5T10cGnjr7U5iB uolDBo3xNObUK9dwT5mrWazNqWEpwi32K0O97qQQQqFzcahSq4zrV6mAHn6oCag2 GuMtyRM885Tm0SI/XHwVsFnlktjRsRVlDLWaU8+QnvCqeZsBQK2XJnqCLJOgeSQa oL4DylF/p+4UBxK2HjqEjMCyAByOw3iCYDHrQ6Z89FT/ZD1xGaGVm/KsrPTPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgkIXFuDpAm392pNQGPnxRnqgDZgwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaujad4z4kVT Kx5DRCtN5jXgZy51sAxMcTVcKe1C4rtulDYQXNhlsOpXcsd24lRb9IFKPC+EqID+ AvOOdDhNHwTcpAlV603Ih9P6k7+w4xIkrUomlX1Wbx5xb43xMDTpV7zXGefo4cRy 8Z4WwgjPnvVCIuM6wTIjz7ZcQn6so89kv5OynASJ/M876j9jb8gQrgehPMdq9LzX jj/MvgVKr7oXM6KORJ5I1oGckx9idsf0Z9brDjamWjsxMf4Aoo+qe3okzLIlisHR PA/inObXx65MphmWIPZKz6Jz0JZmjrXpDxhYuAYLqbFfeWCdJu8D5eJE4aFqn/3N XbJOaqTZDg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:17 2026 by rpki-client