$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json) Hash identifier: NQNwO0Pk3odzKYeFqGwk2TLQbdNIJ6Xw4PSEQEQX4FQ= Subject key identifier: DD:60:C6:B9:08:0C:7A:1A:12:A9:2C:F5:35:5A:B1:BF:21:18:34:AC Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 023861D2CA396D40207F503655BEB54372FF466E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft Manifest number: C7 Signing time: Sun 14 Jun 2026 01:22:34 +0000 Manifest this update: Sun 14 Jun 2026 01:17:34 +0000 Manifest next update: Mon 15 Jun 2026 04:08:34 +0000 Files and hashes: 1: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=) 2: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: yZ27+1XCUWymVDgB4aSVVvc9M6ZYLyiDEs5x5yC7fpo=) 3: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:38:61:d2:ca:39:6d:40:20:7f:50:36:55:be:b5:43:72:ff:46:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Jun 14 01:17:34 2026 GMT Not After : Jun 15 04:08:34 2026 GMT Subject: CN=DD60C6B9080C7A1A12A92CF5355AB1BF211834AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:79:25:68:7f:a2:40:c0:98:ed:ad:e0:1a: 40:f7:31:a4:28:e2:0a:58:b7:00:06:53:4d:bc:9b: 15:d0:f0:ad:f6:f0:8c:71:eb:6a:11:37:60:d0:e7: a2:d9:16:96:cb:b0:2f:d6:d5:9f:81:ff:53:d4:e0: 05:c9:92:92:50:63:7f:4d:7b:59:f6:43:c1:be:88: bc:9f:7c:38:8d:ef:e2:13:54:6d:de:9d:6f:2c:6d: c2:81:d0:c4:b4:2e:0e:a9:32:a3:89:d5:48:65:bb: 43:31:e6:b1:78:08:7e:98:5c:f8:71:cc:d8:68:4e: ae:26:d9:8a:76:be:62:ff:66:c0:4a:93:2e:cd:c9: 67:ca:77:7c:38:f3:ce:c3:5f:a2:1c:a5:ee:36:92: 7b:a0:51:98:d5:84:ed:6c:3f:76:91:03:d0:6e:f6: 30:f2:b7:67:61:c3:b2:ae:dd:2f:5c:2a:cb:a3:4b: ee:e6:c5:7d:0e:5f:a5:e4:80:21:bc:ea:17:25:d0: 76:69:08:48:15:ce:c6:33:2d:54:2e:2a:f3:01:c0: 52:d8:e9:56:34:68:1e:0c:bb:f6:da:e7:af:52:22: 0f:c1:6c:0d:77:bb:42:8f:82:48:22:c4:81:e1:73: a4:ee:8b:42:2f:3d:70:4b:9b:0d:2a:fd:61:61:86: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:C6:B9:08:0C:7A:1A:12:A9:2C:F5:35:5A:B1:BF:21:18:34:AC X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:87:56:1a:cb:7e:9d:9b:e5:63:7a:00:7e:6f:ae:0b:f2:5d: 5a:e3:77:c0:91:26:12:d2:53:52:71:55:60:45:ac:15:7f:50: 25:70:4f:2a:58:09:16:09:99:1d:f3:8b:d3:e4:e0:33:25:a1: 93:07:2f:01:69:b3:a8:dc:95:13:e3:a4:ad:04:3e:0f:fd:39: 3f:39:54:7c:a3:de:ae:41:b7:0d:03:06:b6:e9:f5:a7:3a:fb: b8:18:bd:54:db:e3:ad:88:ae:cc:12:f4:ea:99:af:db:c4:8a: eb:b6:45:0b:6d:c1:19:29:2f:e1:21:70:ce:6f:26:cb:ff:b3: d3:d2:e3:b0:5b:ad:63:c7:06:fb:69:d8:1c:76:4f:1b:ea:29: 1c:8b:d4:e1:22:bb:b0:c5:89:f3:46:cd:1c:ec:38:d6:da:56: cc:e3:8f:2a:0d:0c:7e:18:6a:f4:af:e7:45:43:9e:bf:21:8d: d2:2a:f3:26:68:bb:45:f9:ed:71:3e:24:97:34:a0:56:7e:78: a6:2b:87:af:0f:77:3a:f0:77:f0:77:38:53:91:a5:e3:bf:33: 9f:09:ee:1b:c5:21:71:7b:d3:fc:08:e2:a2:6e:34:6d:72:be: f2:9b:48:90:f7:71:a7:91:fd:46:29:6f:f4:43:8b:50:88:7c: 62:36:4a:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAjhh0so5bUAgf1A2Vb61Q3L/Rm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjA2MTQwMTE3MzRaFw0yNjA2MTUwNDA4MzRaMDMxMTAvBgNV BAMTKERENjBDNkI5MDgwQzdBMUExMkE5MkNGNTM1NUFCMUJGMjExODM0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqHklaH+iQMCY7a3gGkD3MaQo 4gpYtwAGU028mxXQ8K328Ixx62oRN2DQ56LZFpbLsC/W1Z+B/1PU4AXJkpJQY39N e1n2Q8G+iLyffDiN7+ITVG3enW8sbcKB0MS0Lg6pMqOJ1Uhlu0Mx5rF4CH6YXPhx zNhoTq4m2Yp2vmL/ZsBKky7NyWfKd3w4887DX6Icpe42knugUZjVhO1sP3aRA9Bu 9jDyt2dhw7Ku3S9cKsujS+7mxX0OX6XkgCG86hcl0HZpCEgVzsYzLVQuKvMBwFLY 6VY0aB4Mu/ba569SIg/BbA13u0KPgkgixIHhc6Tui0IvPXBLmw0q/WFhhkoNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3WDGuQgMehoSqSz1NVqxvyEYNKwwHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4dWGst+nZvl Y3oAfm+uC/JdWuN3wJEmEtJTUnFVYEWsFX9QJXBPKlgJFgmZHfOL0+TgMyWhkwcv AWmzqNyVE+OkrQQ+D/05PzlUfKPerkG3DQMGtun1pzr7uBi9VNvjrYiuzBL06pmv 28SK67ZFC23BGSkv4SFwzm8my/+z09LjsFutY8cG+2nYHHZPG+opHIvU4SK7sMWJ 80bNHOw41tpWzOOPKg0Mfhhq9K/nRUOevyGN0irzJmi7RfntcT4klzSgVn54piuH rw93OvB38Hc4U5Gl478znwnuG8UhcXvT/Ajiom40bXK+8ptIkPdxp5H9Rilv9EOL UIh8YjZKoQ== -----END CERTIFICATE-----Generated at Sun Jun 14 08:37:51 2026 by rpki-client