$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: UPwgedFFSFmPZYjwcYxciovQLa828xkXQLKOkN+Ed8M= Subject key identifier: 8C:93:86:A9:18:3D:0F:38:03:8F:7F:D4:FD:E3:D7:74:45:04:6B:7E Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 420BB8260BD8F614C6D6850DA57E881D5AF66DCB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 0101 Signing time: Sat 13 Jun 2026 18:06:59 +0000 Manifest this update: Sat 13 Jun 2026 18:01:59 +0000 Manifest next update: Sun 14 Jun 2026 20:59:59 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 2: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: jqlFGiZGuw5hYaKCT7ic6TU2BQsSIgHogc+mNYlfM3Y=) 3: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 4: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 5: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 6: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0b:b8:26:0b:d8:f6:14:c6:d6:85:0d:a5:7e:88:1d:5a:f6:6d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Jun 13 18:01:59 2026 GMT Not After : Jun 14 20:59:59 2026 GMT Subject: CN=8C9386A9183D0F38038F7FD4FDE3D77445046B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7c:99:b5:28:a6:3e:7f:92:10:d1:52:79:8a: a8:de:4c:f9:3f:fe:49:13:76:67:f7:04:08:c1:2e: da:0e:2c:05:16:d7:d1:f6:22:7e:7c:b6:12:10:a3: 1d:ef:ab:4c:74:b0:9f:31:0b:8d:86:6d:78:de:56: 01:87:8b:06:3b:fc:7f:f4:08:c6:eb:1f:23:12:f2: c3:1f:f4:2c:9f:ea:a7:36:1d:17:e8:3d:0a:fe:c8: 36:0e:2c:ef:0a:96:84:be:26:f3:10:58:24:80:24: f4:66:59:9b:22:be:f6:e0:b5:18:90:2f:43:2b:27: e1:b1:39:51:ad:94:de:18:30:74:0b:87:2c:0f:75: 8e:28:37:b3:40:0a:2e:45:c1:6d:c3:38:97:35:d6: 11:8e:0d:99:57:58:4f:f2:18:af:ee:6b:63:5f:5b: 53:d5:f2:0e:6a:f7:6f:f9:00:71:ff:e5:e8:91:6c: e3:c3:cb:a5:8a:e6:49:9c:e4:93:c4:07:06:36:5a: 46:38:36:17:a2:0a:87:21:01:23:08:ea:38:b2:56: 5f:f7:f1:12:a4:91:ba:25:91:31:32:18:9b:97:5d: b0:5d:c4:30:72:76:dd:d4:dd:dc:d8:cb:e6:3c:31: 82:e6:5e:2f:83:7d:e0:7a:92:2c:c0:38:6e:3c:6a: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:86:A9:18:3D:0F:38:03:8F:7F:D4:FD:E3:D7:74:45:04:6B:7E X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:b5:d7:62:7c:e1:5e:91:df:8d:c2:c9:2b:c5:4a:d6:e3:72: a3:04:a8:d9:96:81:d9:7e:06:95:ba:6f:f3:7f:75:4f:c9:5d: a7:3a:23:ab:8d:ac:5a:93:23:53:ad:59:bc:c3:f0:56:3f:fd: 22:e6:9d:99:2d:b6:dd:97:45:92:cd:c0:46:b5:93:56:d2:aa: 00:c6:60:55:cc:9b:2e:34:3b:50:09:9f:c1:31:68:c2:87:a7: c7:dd:11:de:f9:c5:cd:60:35:af:1e:ed:b4:84:2c:27:89:f0: 6f:d7:2e:d8:6d:eb:4c:1f:81:0e:7b:00:ef:64:02:a5:88:77: 9d:fc:d5:57:d4:9c:ae:a4:1a:e8:14:60:77:a9:33:01:34:ee: aa:0a:57:72:73:00:1b:fd:30:3d:11:74:af:b0:8b:d4:90:ef: 93:c8:f5:58:ae:80:90:f5:77:d5:ab:2d:d9:fc:32:98:ae:5e: 9c:5a:45:06:e8:dc:a2:8b:4b:8f:cc:eb:8d:76:4a:d8:5b:ab: 5c:3d:dd:9e:68:0b:fb:ed:b0:4d:10:b7:dd:4f:ec:22:0f:de: 18:60:95:03:49:d3:fb:28:6a:fe:06:e6:c6:68:bc:2d:fd:8c: 4e:12:70:03:ea:ae:32:a0:2b:ca:74:ed:7f:ba:b2:24:25:83: 85:41:0e:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQgu4JgvY9hTG1oUNpX6IHVr2bcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA2MTMxODAxNTlaFw0yNjA2MTQyMDU5NTlaMDMxMTAvBgNV BAMTKDhDOTM4NkE5MTgzRDBGMzgwMzhGN0ZENEZERTNENzc0NDUwNDZCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsfJm1KKY+f5IQ0VJ5iqjeTPk/ /kkTdmf3BAjBLtoOLAUW19H2In58thIQox3vq0x0sJ8xC42GbXjeVgGHiwY7/H/0 CMbrHyMS8sMf9Cyf6qc2HRfoPQr+yDYOLO8KloS+JvMQWCSAJPRmWZsivvbgtRiQ L0MrJ+GxOVGtlN4YMHQLhywPdY4oN7NACi5FwW3DOJc11hGODZlXWE/yGK/ua2Nf W1PV8g5q92/5AHH/5eiRbOPDy6WK5kmc5JPEBwY2WkY4NheiCochASMI6jiyVl/3 8RKkkbolkTEyGJuXXbBdxDBydt3U3dzYy+Y8MYLmXi+DfeB6kizAOG48amtNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjJOGqRg9DzgDj3/U/ePXdEUEa34wHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA17XXYnzhXpHf jcLJK8VK1uNyowSo2ZaB2X4Glbpv8391T8ldpzojq42sWpMjU61ZvMPwVj/9Iuad mS223ZdFks3ARrWTVtKqAMZgVcybLjQ7UAmfwTFowoenx90R3vnFzWA1rx7ttIQs J4nwb9cu2G3rTB+BDnsA72QCpYh3nfzVV9ScrqQa6BRgd6kzATTuqgpXcnMAG/0w PRF0r7CL1JDvk8j1WK6AkPV31ast2fwymK5enFpFBujcootLj8zrjXZK2FurXD3d nmgL++2wTRC33U/sIg/eGGCVA0nT+yhq/gbmxmi8Lf2MThJwA+quMqArynTtf7qy JCWDhUEOMw== -----END CERTIFICATE-----Generated at Sun Jun 14 01:33:31 2026 by rpki-client