$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: +TezOq4pnPdMt4okQM54FQYmdgQWIKgH27qb5FB2TgU= Subject key identifier: EF:B4:B1:51:C0:64:FC:B4:48:14:B5:01:F5:FA:47:76:D2:12:C4:F0 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 4E836B07412643DA9D4CAA9BE321680A68665C9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 13:41:49 +0000 Manifest this update: Sat 13 Jun 2026 13:36:49 +0000 Manifest next update: Sun 14 Jun 2026 16:27:49 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: dkpLbLey91p7yRSuJV1WzPlyKynfCAFEKlzA3cHwklY=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:83:6b:07:41:26:43:da:9d:4c:aa:9b:e3:21:68:0a:68:66:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Jun 13 13:36:49 2026 GMT Not After : Jun 14 16:27:49 2026 GMT Subject: CN=EFB4B151C064FCB44814B501F5FA4776D212C4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:45:6b:2e:b4:7e:17:74:fe:23:04:b1:37: dd:ca:52:f5:bf:f5:e1:05:ff:5e:46:82:c5:95:05: 71:84:f1:d2:ed:40:2b:96:f3:f3:f3:96:27:ec:0e: cc:64:f5:9c:01:65:c6:38:25:fb:b2:a3:be:96:70: 3b:36:10:35:07:40:b5:8e:3e:ed:1c:7e:7f:c4:07: 60:94:55:05:57:34:36:79:cc:13:59:68:48:36:f5: d9:21:3a:a1:37:53:65:2e:b4:0d:5c:b4:49:91:d4: b2:59:41:57:95:73:4e:97:b0:bf:b2:ea:23:78:10: db:38:33:ce:a5:f6:ac:88:f9:20:ab:a0:f7:93:4c: f2:eb:94:da:1d:68:9a:78:8a:98:dc:a7:9e:05:5a: 62:ee:c6:44:6b:32:95:77:b8:92:28:d7:ef:65:8e: 8d:31:00:71:af:f9:42:c0:a5:78:9d:70:4f:45:2c: 58:42:89:04:03:4a:31:50:e1:e6:30:17:49:85:fa: 88:ac:58:d7:cf:e1:69:b5:33:fa:0e:3c:92:00:05: 5f:ca:ea:45:66:27:29:69:04:54:05:34:92:0e:90: 7d:fb:cb:15:a8:83:0a:74:78:f0:d8:88:ac:3c:95: b5:49:e1:a5:18:eb:53:57:44:72:21:b3:20:38:7d: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:B1:51:C0:64:FC:B4:48:14:B5:01:F5:FA:47:76:D2:12:C4:F0 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ed:c6:05:eb:26:e5:32:2a:4f:83:50:a1:b8:18:d2:52:5d: c2:ef:2c:b4:37:fa:d9:9a:a2:e8:f4:bd:d3:cb:f3:f6:c3:7e: ef:3d:13:c9:25:8d:2e:7d:f5:8b:6f:fc:29:27:1a:19:89:62: 4d:34:13:5e:8e:0a:c0:fd:33:1c:ea:bf:a0:89:c6:43:cc:83: 24:f9:10:10:55:b0:10:91:40:6b:75:51:bc:0e:99:0f:92:1a: 43:3e:d8:b0:6b:f7:44:6e:cb:3c:8e:d6:0e:71:6e:87:1a:37: 6f:64:b9:8c:e5:ee:f5:bc:b7:ee:85:f8:08:8f:5d:a9:c0:87: 6f:3c:77:08:fd:75:a3:87:ad:9b:e7:6b:03:f1:1e:4d:53:02: 5a:56:31:63:3e:e9:eb:af:ed:04:34:b5:93:0e:18:89:34:6c: 94:b5:57:e1:bb:4a:59:95:b7:6c:8d:cb:31:10:4c:bb:60:ac: c6:53:b4:29:2c:cd:b0:06:0a:17:40:7f:a9:cf:a7:ad:c7:62: 00:c8:f8:e9:1d:f3:cc:04:ec:25:c3:f9:8b:88:77:d5:4c:5d: 2a:2a:78:e3:f7:82:13:4e:7e:ae:8e:9a:4b:52:4c:d5:f5:bb: 13:d2:98:3e:58:83:32:31:af:19:18:e7:56:1d:d0:c2:9d:2e: a5:d3:d7:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToNrB0EmQ9qdTKqb4yFoCmhmXJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA2MTMxMzM2NDlaFw0yNjA2MTQxNjI3NDlaMDMxMTAvBgNV BAMTKEVGQjRCMTUxQzA2NEZDQjQ0ODE0QjUwMUY1RkE0Nzc2RDIxMkM0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp90VrLrR+F3T+IwSxN93KUvW/ 9eEF/15GgsWVBXGE8dLtQCuW8/PzlifsDsxk9ZwBZcY4Jfuyo76WcDs2EDUHQLWO Pu0cfn/EB2CUVQVXNDZ5zBNZaEg29dkhOqE3U2UutA1ctEmR1LJZQVeVc06XsL+y 6iN4ENs4M86l9qyI+SCroPeTTPLrlNodaJp4ipjcp54FWmLuxkRrMpV3uJIo1+9l jo0xAHGv+ULApXidcE9FLFhCiQQDSjFQ4eYwF0mF+oisWNfP4Wm1M/oOPJIABV/K 6kVmJylpBFQFNJIOkH37yxWogwp0ePDYiKw8lbVJ4aUY61NXRHIhsyA4ffaVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU77SxUcBk/LRIFLUB9fpHdtISxPAwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+3GBesm5TIq T4NQobgY0lJdwu8stDf62Zqi6PS908vz9sN+7z0TySWNLn31i2/8KScaGYliTTQT Xo4KwP0zHOq/oInGQ8yDJPkQEFWwEJFAa3VRvA6ZD5IaQz7YsGv3RG7LPI7WDnFu hxo3b2S5jOXu9by37oX4CI9dqcCHbzx3CP11o4etm+drA/EeTVMCWlYxYz7p66/t BDS1kw4YiTRslLVX4btKWZW3bI3LMRBMu2CsxlO0KSzNsAYKF0B/qc+nrcdiAMj4 6R3zzATsJcP5i4h31UxdKip44/eCE05+ro6aS1JM1fW7E9KYPliDMjGvGRjnVh3Q wp0updPXNQ== -----END CERTIFICATE-----Generated at Sun Jun 14 09:35:47 2026 by rpki-client