$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: lVpu45aJFo9y9/9S26BreR28q3MwLT7n0bJr3fff2nw= Subject key identifier: 31:0A:A5:63:E9:CF:94:2F:13:6B:BB:EF:9E:5E:17:8B:FD:C7:93:6E Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 5FB5CB193DAF393DCF3CDD738EA839CB77F61831 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: C8 Signing time: Sun 14 Jun 2026 05:12:45 +0000 Manifest this update: Sun 14 Jun 2026 05:07:45 +0000 Manifest next update: Mon 15 Jun 2026 05:24:45 +0000 Files and hashes: 1: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 2: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 3: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: jBgcJRvvmr9clTLoRZrEXftsr4Gy0xq9CwmXaysOSoA=) 4: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b5:cb:19:3d:af:39:3d:cf:3c:dd:73:8e:a8:39:cb:77:f6:18:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Jun 14 05:07:45 2026 GMT Not After : Jun 15 05:24:45 2026 GMT Subject: CN=310AA563E9CF942F136BBBEF9E5E178BFDC7936E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:af:52:6e:0f:65:b6:1b:d4:81:2d:9a:7f: 2c:1c:68:a2:de:f9:5f:9a:99:34:82:15:0d:e8:c4: 31:d5:45:cc:88:21:61:c5:40:59:58:b6:ab:61:ce: 72:40:fc:21:57:ed:3a:88:c5:23:7a:07:3f:c0:5d: ab:d8:81:7f:6e:e2:58:d7:4c:e0:28:ff:06:0d:b0: 89:29:bd:15:ac:fc:4b:ad:22:36:67:52:ba:a5:35: 21:41:d1:57:df:38:2a:df:d6:06:2e:b4:42:a6:cf: ef:29:c8:43:1c:02:2e:30:6c:c8:ac:49:03:b6:ef: 69:84:22:df:07:ba:40:06:13:5d:cd:33:83:9d:eb: f8:f2:36:cf:95:1a:43:c6:fe:fd:7f:ee:67:3d:73: f7:0c:2a:13:ba:1c:be:e8:d5:cd:31:7a:6b:2c:11: b6:34:aa:9b:f8:0e:ec:6e:1a:92:d4:f2:e8:44:f7: e8:fe:86:3d:d6:a2:a1:2a:78:1a:5a:79:2d:32:9e: 0c:b5:59:1a:05:b2:91:47:a0:3a:03:4b:9e:75:d6: 1d:e4:31:4c:4a:ea:95:25:f1:21:d0:2f:52:94:0f: a9:66:a6:cd:af:96:12:0c:ae:df:53:74:f9:d5:85: 5d:a1:ae:95:f9:80:79:ed:08:df:ff:e2:e2:b3:fc: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:A5:63:E9:CF:94:2F:13:6B:BB:EF:9E:5E:17:8B:FD:C7:93:6E X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1a:c7:ab:c0:13:3e:c5:c9:0a:a6:35:44:bd:d0:14:7f:88: a4:60:71:9b:57:9e:e4:eb:da:14:59:e6:7e:9e:83:9d:a4:b4: d5:2a:cd:44:3f:95:b8:a9:91:09:bc:11:a0:cf:ca:3d:8e:1b: ca:5c:d0:dd:f5:01:e4:f7:28:fe:4f:6a:38:5c:46:c6:81:44: 86:74:b6:89:04:38:55:51:da:c9:ac:57:cf:c0:ec:60:62:af: 14:28:b9:dd:26:e9:46:45:1f:93:bf:6c:fc:b3:a3:2c:75:77: 76:9d:d3:e4:3b:b2:18:a4:dc:46:2b:4e:21:df:6d:a1:ed:65: 03:12:b3:a4:57:e6:9d:f8:d6:4c:cd:d1:e8:3f:01:ad:17:51: 15:b6:56:e0:67:7c:a2:da:dc:62:5e:7f:2c:1c:c9:1e:b4:e9: ce:86:7b:0a:bd:47:25:85:02:ab:d0:ca:87:dd:c8:94:3e:7e: 96:d0:cd:d7:c8:fe:ac:a1:f5:44:81:e6:eb:ce:f0:d2:eb:19: b5:9d:ea:45:b7:67:dc:08:26:b8:62:1c:31:c6:cc:d5:01:f9: 34:f6:04:af:e9:ba:e5:c6:af:b6:3d:ba:e2:a7:c8:88:52:61: 88:61:e9:6a:2c:32:5e:26:fa:f8:14:5e:10:8d:d5:3f:ba:d0: a0:76:4e:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX7XLGT2vOT3PPN1zjqg5y3f2GDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA2MTQwNTA3NDVaFw0yNjA2MTUwNTI0NDVaMDMxMTAvBgNV BAMTKDMxMEFBNTYzRTlDRjk0MkYxMzZCQkJFRjlFNUUxNzhCRkRDNzkzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5K9Sbg9lthvUgS2afywcaKLe +V+amTSCFQ3oxDHVRcyIIWHFQFlYtqthznJA/CFX7TqIxSN6Bz/AXavYgX9u4ljX TOAo/wYNsIkpvRWs/EutIjZnUrqlNSFB0VffOCrf1gYutEKmz+8pyEMcAi4wbMis SQO272mEIt8HukAGE13NM4Od6/jyNs+VGkPG/v1/7mc9c/cMKhO6HL7o1c0xemss EbY0qpv4DuxuGpLU8uhE9+j+hj3WoqEqeBpaeS0yngy1WRoFspFHoDoDS5511h3k MUxK6pUl8SHQL1KUD6lmps2vlhIMrt9TdPnVhV2hrpX5gHntCN//4uKz/Iy5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMQqlY+nPlC8Ta7vvnl4Xi/3Hk24wHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBrHq8ATPsXJ CqY1RL3QFH+IpGBxm1ee5OvaFFnmfp6DnaS01SrNRD+VuKmRCbwRoM/KPY4bylzQ 3fUB5Pco/k9qOFxGxoFEhnS2iQQ4VVHayaxXz8DsYGKvFCi53SbpRkUfk79s/LOj LHV3dp3T5DuyGKTcRitOId9toe1lAxKzpFfmnfjWTM3R6D8BrRdRFbZW4Gd8otrc Yl5/LBzJHrTpzoZ7Cr1HJYUCq9DKh93IlD5+ltDN18j+rKH1RIHm687w0usZtZ3q Rbdn3AgmuGIcMcbM1QH5NPYEr+m65cavtj264qfIiFJhiGHpaiwyXib6+BReEI3V P7rQoHZOMg== -----END CERTIFICATE-----Generated at Sun Jun 14 09:28:31 2026 by rpki-client