$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: kvXcoiLaVJ+3Yl0ke0Oywt25jSJc5moc3LUhfHhYpNc= Subject key identifier: 88:37:B0:AA:51:57:B3:3A:22:E8:1B:DF:92:48:4D:FD:70:7C:10:DE Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 6122CCC0555AAA42AAFE1102C1204A273026EE55 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: D4 Signing time: Sat 13 Jun 2026 21:32:15 +0000 Manifest this update: Sat 13 Jun 2026 21:27:15 +0000 Manifest next update: Sun 14 Jun 2026 22:26:15 +0000 Files and hashes: 1: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) 2: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 3: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) 4: AS131314.roa (hash: zm6eNEs+Sg3vn7JG2IW6iQKdGTgnpkFrfio80ns6ymQ=) 5: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: 35/cyW69S1pxbjcoMFNfcwnSP4/pEN+rMR26ptTjYGY=) 6: AS4808.roa (hash: 9xJTcGuM/yQxUG/gHOUlST+lfB11xme3THOXzC0nnDM=) 7: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 8: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 9: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) 10: AS4847.roa (hash: UaL0mueNJNce4o1bxIo/jlJg2m3Z4Oheqv+PAKiB4xA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:22:cc:c0:55:5a:aa:42:aa:fe:11:02:c1:20:4a:27:30:26:ee:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jun 13 21:27:15 2026 GMT Not After : Jun 14 22:26:15 2026 GMT Subject: CN=8837B0AA5157B33A22E81BDF92484DFD707C10DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:78:ef:88:78:11:c6:95:40:47:0a:ff:a9: f8:55:42:40:4a:dd:3e:33:47:65:59:40:4c:1f:84: e0:18:14:33:8c:1d:a4:78:7f:f0:19:ee:6c:9d:05: 54:64:f4:3c:a2:e5:90:64:04:f2:ef:01:c3:c7:45: 58:40:97:4e:70:5f:99:09:31:14:17:dc:a4:b6:22: af:45:7c:15:11:4f:a8:88:d8:05:fe:7c:50:57:54: f0:5a:7c:8b:ee:09:99:01:da:12:b3:e0:00:f1:2c: f5:93:32:97:fa:b1:af:fa:30:36:0a:d5:e0:b7:b8: 8d:25:4e:1f:75:f8:32:25:9b:12:d4:59:8a:ce:bf: 1d:ee:bf:d9:a5:a6:1d:aa:1b:0f:a1:40:45:98:5c: ae:83:79:ed:1e:08:e2:4e:e4:b7:01:f7:af:37:cb: 77:80:36:2e:bf:ff:16:53:ba:66:81:02:ae:49:6b: fc:b9:ad:33:85:bc:eb:3f:9b:ee:1b:3f:75:c8:e7: 4e:2b:9e:75:75:b8:2d:69:95:a3:44:e9:60:e9:e4: 81:61:e6:7a:bb:70:85:15:21:c0:c1:f5:a4:5c:41: 75:13:c9:cf:cc:14:a3:7d:1e:06:04:67:52:40:41: 80:e3:7b:a6:3a:fd:cb:23:63:96:cc:7b:4b:91:56: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:37:B0:AA:51:57:B3:3A:22:E8:1B:DF:92:48:4D:FD:70:7C:10:DE X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ac:0b:25:ae:9b:6e:81:aa:b4:a5:f9:d4:c1:0b:41:14:13: bf:73:81:02:0c:3b:a2:36:a1:4b:81:7c:49:4b:4b:88:36:6a: 5c:1b:73:18:27:d7:c5:e9:4f:b8:2e:3d:ec:ed:62:9f:ea:82: 43:1a:4e:0a:49:4d:8d:0f:37:04:f3:0b:32:b7:30:86:3e:50: 54:e4:f1:df:0f:ee:6d:34:09:95:63:f4:de:7c:b8:0f:66:11: e2:06:49:92:16:08:54:14:84:23:62:94:c2:39:90:19:8b:68: e6:03:34:01:89:78:8f:a0:c3:3b:8d:f6:2b:5c:78:bd:72:d5: c5:ae:49:46:1d:ab:3f:7d:63:c6:7c:f1:de:ea:52:22:78:e3: 50:a1:11:22:a7:22:be:30:ed:ff:44:12:b9:c9:62:03:9f:63: 1b:46:42:af:d9:9e:88:f0:61:18:4b:33:66:81:3f:ed:3e:58: a2:5b:de:17:26:f2:e8:5e:2a:36:1c:ec:ce:a2:f4:f7:c3:1e: 28:36:a0:9a:86:da:3a:99:bb:9b:09:65:4f:03:3d:43:c7:4b: 59:73:f3:fe:85:f8:06:0d:7e:43:6b:b8:25:e6:5e:6e:c2:0b: ec:36:cb:00:56:ab:43:78:58:72:1a:0a:0e:b3:84:92:7a:71: 71:34:bb:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYSLMwFVaqkKq/hECwSBKJzAm7lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA2MTMyMTI3MTVaFw0yNjA2MTQyMjI2MTVaMDMxMTAvBgNV BAMTKDg4MzdCMEFBNTE1N0IzM0EyMkU4MUJERjkyNDg0REZENzA3QzEwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk3jviHgRxpVARwr/qfhVQkBK 3T4zR2VZQEwfhOAYFDOMHaR4f/AZ7mydBVRk9Dyi5ZBkBPLvAcPHRVhAl05wX5kJ MRQX3KS2Iq9FfBURT6iI2AX+fFBXVPBafIvuCZkB2hKz4ADxLPWTMpf6sa/6MDYK 1eC3uI0lTh91+DIlmxLUWYrOvx3uv9mlph2qGw+hQEWYXK6Dee0eCOJO5LcB9683 y3eANi6//xZTumaBAq5Ja/y5rTOFvOs/m+4bP3XI504rnnV1uC1plaNE6WDp5IFh 5nq7cIUVIcDB9aRcQXUTyc/MFKN9HgYEZ1JAQYDje6Y6/csjY5bMe0uRVp5FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiDewqlFXszoi6BvfkkhN/XB8EN4wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqwLJa6bboGq tKX51MELQRQTv3OBAgw7ojahS4F8SUtLiDZqXBtzGCfXxelPuC497O1in+qCQxpO CklNjQ83BPMLMrcwhj5QVOTx3w/ubTQJlWP03ny4D2YR4gZJkhYIVBSEI2KUwjmQ GYto5gM0AYl4j6DDO432K1x4vXLVxa5JRh2rP31jxnzx3upSInjjUKERIqcivjDt /0QSucliA59jG0ZCr9meiPBhGEszZoE/7T5YolveFyby6F4qNhzszqL098MeKDag mobaOpm7mwllTwM9Q8dLWXPz/oX4Bg1+Q2u4JeZebsIL7DbLAFarQ3hYchoKDrOE knpxcTS7mw== -----END CERTIFICATE-----Generated at Sun Jun 14 03:31:09 2026 by rpki-client