$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: au66Qs0io9x4u/ORs5JHCvyDYcleco1LGBBXnr5wkL8= Subject key identifier: 51:66:5D:B6:2C:D2:54:87:2D:A5:0A:AF:AA:26:C6:B0:7E:A8:A2:AA Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 3E9E7339405F4C3CE9A3058C4169F02C5D6BF93A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: C1 Signing time: Sat 13 Jun 2026 02:16:03 +0000 Manifest this update: Sat 13 Jun 2026 02:11:03 +0000 Manifest next update: Sun 14 Jun 2026 05:57:03 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: aRISlu09Tr3dWpQY5NHGE0bSphFj6Jh8rSHwCwOmzuQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 05:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:73:39:40:5f:4c:3c:e9:a3:05:8c:41:69:f0:2c:5d:6b:f9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Jun 13 02:11:03 2026 GMT Not After : Jun 14 05:57:03 2026 GMT Subject: CN=51665DB62CD254872DA50AAFAA26C6B07EA8A2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:71:1c:64:c0:a1:98:d1:81:42:11:32:d8: 2c:fc:5b:62:4e:d7:f2:81:94:9d:f9:86:75:20:d9: 42:d4:51:92:4e:ed:87:91:02:0a:51:08:6d:aa:0e: dd:5c:74:bd:f3:54:1e:4c:67:ab:53:b8:62:b1:b0: 93:a1:69:2e:ab:32:4a:26:9e:be:c9:ac:fd:37:e2: bd:30:18:ac:9f:22:ff:b0:a2:dc:a0:c3:cc:5f:46: 40:bd:6b:97:2a:9a:54:a7:fe:94:1e:1f:bd:6d:a3: c4:21:1c:dc:3b:3d:3c:c0:12:67:bf:6b:20:ba:60: d0:0d:d8:d1:0d:96:0a:06:09:92:32:6d:01:56:d2: e5:03:b4:5d:d7:f3:e5:cc:c9:1b:5c:d3:a1:df:84: c1:07:3b:1d:fa:b5:42:3e:b4:67:22:33:08:8a:cf: 74:0a:af:2f:37:64:3d:11:c5:d6:67:ce:43:31:28: 3a:3e:a6:35:49:1f:b6:11:e4:d3:32:b2:4c:7d:10: 37:c6:85:cf:f4:c2:38:3d:4d:c3:45:cd:35:2a:68: 98:5c:2e:cb:a5:f0:25:81:c2:e9:c5:6b:21:27:e4: 91:5a:30:9b:a9:48:1b:f1:f6:07:db:32:01:e0:28: 7e:ea:f0:ad:e5:30:0f:2c:70:cf:e6:d2:0b:ab:52: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:66:5D:B6:2C:D2:54:87:2D:A5:0A:AF:AA:26:C6:B0:7E:A8:A2:AA X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:11:61:13:3b:71:42:fb:6f:24:90:3d:a5:cd:62:f9:e8:97: 8c:8c:4d:f3:5c:38:e0:88:f3:83:6a:a4:e0:6f:46:d8:c3:c6: 02:99:a7:ac:d7:ce:d5:5b:d0:4f:79:bf:34:bb:c9:3d:c1:7e: a7:49:1c:0d:6f:82:53:33:40:dc:41:d8:5c:1e:b9:9e:d0:6c: db:2d:e0:cc:82:ae:62:61:e4:79:53:45:6a:94:56:c7:63:27: 6b:f0:19:f9:4b:d0:4c:bd:a1:16:95:f2:ae:3b:b5:9f:11:a0: 1e:c8:c0:fe:99:48:45:d9:7f:87:1a:23:d9:98:57:0a:7e:53: d8:24:eb:aa:51:fd:62:9a:08:82:c5:c6:99:15:78:5d:4a:4d: 4f:61:e2:2a:53:e5:b9:ea:a5:d7:20:9c:f0:a7:74:41:96:d4: 0b:15:0e:d2:ba:dd:a8:8f:a6:49:6e:93:1b:03:e1:44:63:20: 1e:53:09:76:09:eb:cd:dd:4c:4b:d8:a8:cc:5a:93:d9:97:ff: 6f:8e:68:f7:7d:6e:2d:97:b5:34:4c:e9:44:28:ec:4d:60:29: 07:2a:46:39:ea:bf:81:f5:a7:87:da:0a:41:a0:92:f0:c1:bc: c1:ff:d5:aa:d6:15:75:c4:b0:ef:57:53:b3:f7:0f:ec:69:83: 35:e9:0a:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPp5zOUBfTDzpowWMQWnwLF1r+TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA2MTMwMjExMDNaFw0yNjA2MTQwNTU3MDNaMDMxMTAvBgNV BAMTKDUxNjY1REI2MkNEMjU0ODcyREE1MEFBRkFBMjZDNkIwN0VBOEEyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWnEcZMChmNGBQhEy2Cz8W2JO 1/KBlJ35hnUg2ULUUZJO7YeRAgpRCG2qDt1cdL3zVB5MZ6tTuGKxsJOhaS6rMkom nr7JrP034r0wGKyfIv+wotygw8xfRkC9a5cqmlSn/pQeH71to8QhHNw7PTzAEme/ ayC6YNAN2NENlgoGCZIybQFW0uUDtF3X8+XMyRtc06HfhMEHOx36tUI+tGciMwiK z3QKry83ZD0RxdZnzkMxKDo+pjVJH7YR5NMyskx9EDfGhc/0wjg9TcNFzTUqaJhc Lsul8CWBwunFayEn5JFaMJupSBvx9gfbMgHgKH7q8K3lMA8scM/m0gurUubPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUWZdtizSVIctpQqvqibGsH6ooqowHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBFhEztxQvtv JJA9pc1i+eiXjIxN81w44Ijzg2qk4G9G2MPGApmnrNfO1VvQT3m/NLvJPcF+p0kc DW+CUzNA3EHYXB65ntBs2y3gzIKuYmHkeVNFapRWx2Mna/AZ+UvQTL2hFpXyrju1 nxGgHsjA/plIRdl/hxoj2ZhXCn5T2CTrqlH9YpoIgsXGmRV4XUpNT2HiKlPlueql 1yCc8Kd0QZbUCxUO0rrdqI+mSW6TGwPhRGMgHlMJdgnrzd1MS9iozFqT2Zf/b45o 931uLZe1NEzpRCjsTWApBypGOeq/gfWnh9oKQaCS8MG8wf/VqtYVdcSw71dTs/cP 7GmDNekKOA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:02:28 2026 by rpki-client