$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: Ixl9TCrTfiBMStsCjose8kpfKWLoBSY4+beOmc6lDbc= Subject key identifier: 00:DE:24:4B:82:55:6F:EB:28:37:B6:BD:F7:83:00:F9:64:B5:BA:55 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 512E11C5A1BB4D23C19CE7E69F6D616807D475E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: C2 Signing time: Sun 14 Jun 2026 00:37:30 +0000 Manifest this update: Sun 14 Jun 2026 00:32:30 +0000 Manifest next update: Mon 15 Jun 2026 03:48:30 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 2: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 3: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 4: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 5: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: qhMoHxcg/53uQ8tJmR7jaW1LoFSdGtSYMB5NkQm9O4U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2e:11:c5:a1:bb:4d:23:c1:9c:e7:e6:9f:6d:61:68:07:d4:75:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jun 14 00:32:30 2026 GMT Not After : Jun 15 03:48:30 2026 GMT Subject: CN=00DE244B82556FEB2837B6BDF78300F964B5BA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:25:37:aa:cb:8b:4f:c5:5d:45:76:15:37: 1d:fb:03:65:a0:9e:a4:f5:ef:37:d4:62:e2:c2:cd: f8:41:e1:18:8c:99:dc:ae:1f:ac:62:5b:1f:60:83: 6f:ab:8b:18:9c:2f:45:ea:8d:b8:8c:31:ec:b7:27: 36:92:89:25:9f:2a:c1:b0:0c:94:4c:16:56:bc:87: 0b:41:84:da:40:ef:aa:d3:62:c1:07:8d:f5:5a:27: f7:fe:3c:69:a7:b2:b1:fb:e2:76:cd:ed:92:1f:24: b9:9f:49:51:be:d5:a2:33:49:98:1a:72:d0:fa:8f: 08:1f:65:07:7a:4f:26:67:51:5f:4e:e2:fb:29:0f: 8c:b6:9e:67:9f:d1:f5:e8:16:13:fc:9c:0e:0f:d0: 34:ce:28:20:d7:59:c5:fb:1b:e3:f9:92:ae:5e:fa: ec:ab:0b:d4:a7:b1:74:de:b2:6b:b6:48:4c:24:24: 69:70:f5:74:45:4d:ee:4c:8c:97:91:0a:5e:ef:db: 28:22:6d:88:c6:0d:4b:22:34:92:8f:ec:8b:e3:c2: 7c:6c:c9:47:d7:d3:9a:22:fc:30:5c:44:32:4a:4e: 87:38:89:35:db:78:d6:42:d6:61:58:69:ce:20:3a: da:c7:2e:49:e6:6d:cb:27:b0:3f:ce:b0:64:4c:cd: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:24:4B:82:55:6F:EB:28:37:B6:BD:F7:83:00:F9:64:B5:BA:55 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:61:06:4c:06:71:32:35:24:e6:73:91:56:5c:e0:4d:57:b5: c7:d4:97:6e:14:c4:41:b9:56:1e:e1:17:a6:c1:9b:91:16:a2: 86:15:6a:5e:6d:dc:88:62:9d:48:f5:fe:1c:e9:d0:5a:a4:3c: cd:03:70:9f:0c:b3:04:c5:0a:88:db:9a:fa:c4:4c:53:c5:45: f7:7a:44:ea:48:3f:b1:91:c4:1c:ac:1a:15:5b:3e:4f:06:76: 4f:74:76:8a:97:74:55:98:f3:0e:4b:05:77:f2:bd:01:ec:44: 1c:93:b0:93:4d:52:c1:6d:10:05:32:8d:5e:a2:6a:78:1f:3a: 7f:3e:1f:00:2a:02:2d:7f:17:2d:7a:48:85:e7:f1:52:f9:cf: 10:fb:8a:e4:cf:fc:2a:2c:b7:92:bf:7c:4f:4a:16:b4:ec:3f: 02:c2:4a:a3:b1:37:ed:93:57:a7:8d:a5:4f:1f:0a:81:c9:54: 87:81:43:24:38:9e:7d:95:e6:12:06:a7:ac:bf:80:03:4f:d5: 30:53:8d:c8:2a:7c:9c:86:bc:46:29:6b:ee:fd:e7:12:88:91: d0:bb:65:0f:85:da:df:b4:03:8a:4c:57:51:41:b2:98:b2:7b: f8:80:ed:e9:a8:02:40:96:5c:01:37:03:35:73:23:85:fb:23: e4:aa:38:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUS4RxaG7TSPBnOfmn21haAfUdeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA2MTQwMDMyMzBaFw0yNjA2MTUwMzQ4MzBaMDMxMTAvBgNV BAMTKDAwREUyNDRCODI1NTZGRUIyODM3QjZCREY3ODMwMEY5NjRCNUJBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhCU3qsuLT8VdRXYVNx37A2Wg nqT17zfUYuLCzfhB4RiMmdyuH6xiWx9gg2+rixicL0XqjbiMMey3JzaSiSWfKsGw DJRMFla8hwtBhNpA76rTYsEHjfVaJ/f+PGmnsrH74nbN7ZIfJLmfSVG+1aIzSZga ctD6jwgfZQd6TyZnUV9O4vspD4y2nmef0fXoFhP8nA4P0DTOKCDXWcX7G+P5kq5e +uyrC9SnsXTesmu2SEwkJGlw9XRFTe5MjJeRCl7v2ygibYjGDUsiNJKP7Ivjwnxs yUfX05oi/DBcRDJKToc4iTXbeNZC1mFYac4gOtrHLknmbcsnsD/OsGRMzW9dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAN4kS4JVb+soN7a994MA+WS1ulUwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWEGTAZxMjUk 5nORVlzgTVe1x9SXbhTEQblWHuEXpsGbkRaihhVqXm3ciGKdSPX+HOnQWqQ8zQNw nwyzBMUKiNua+sRMU8VF93pE6kg/sZHEHKwaFVs+TwZ2T3R2ipd0VZjzDksFd/K9 AexEHJOwk01SwW0QBTKNXqJqeB86fz4fACoCLX8XLXpIhefxUvnPEPuK5M/8Kiy3 kr98T0oWtOw/AsJKo7E37ZNXp42lTx8KgclUh4FDJDiefZXmEganrL+AA0/VMFON yCp8nIa8Rilr7v3nEoiR0LtlD4Xa37QDikxXUUGymLJ7+IDt6agCQJZcATcDNXMj hfsj5Ko4uQ== -----END CERTIFICATE-----Generated at Sun Jun 14 02:41:16 2026 by rpki-client