$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: hPf0UonYxz6s8wiChOMo/+dfsXkJVsA5SP6I2xLWJXQ= Subject key identifier: 06:09:57:2C:96:54:F5:FD:2A:C1:7C:6C:A0:F1:B6:9A:FD:42:4E:31 Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 058AC9CDCBEBD274B3473A29BE1DBAF7C8D624D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 21:47:16 +0000 Manifest this update: Sat 13 Jun 2026 21:42:16 +0000 Manifest next update: Mon 15 Jun 2026 01:28:16 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: D/9fx9gOiukXKolhKvlNCwTACIfEF884V3iYqg7D7A4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8a:c9:cd:cb:eb:d2:74:b3:47:3a:29:be:1d:ba:f7:c8:d6:24:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jun 13 21:42:16 2026 GMT Not After : Jun 15 01:28:16 2026 GMT Subject: CN=0609572C9654F5FD2AC17C6CA0F1B69AFD424E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:98:78:f5:66:62:f1:00:09:7a:3c:63:33: a5:4c:ed:a7:88:d1:32:42:9b:61:2e:05:38:b2:3c: ce:5e:0f:53:3a:80:06:0d:c8:33:90:90:ea:54:9a: e5:4f:2a:a0:e9:f4:65:13:ab:7e:22:b3:bd:87:98: d2:bf:ef:e7:98:67:69:c0:a2:d4:0e:b8:27:66:1a: dd:5e:36:3e:4a:0e:91:b4:b6:04:4e:1e:fc:3d:3c: 67:af:28:05:7b:2e:ff:4c:fb:fe:bd:f4:18:d1:47: 51:1c:1c:72:1a:d3:17:c2:ad:e9:a8:82:c6:de:e8: 5b:b1:f1:2c:93:89:c0:71:47:06:9f:7c:06:24:50: c9:40:ba:a3:0a:74:82:09:31:6c:6a:10:94:2a:a8: 35:b1:d9:b2:eb:f6:90:4b:c9:83:a0:e8:17:a6:78: 50:23:e1:96:e9:a9:f8:93:d4:a9:e2:02:5e:32:18: 73:fc:b7:5f:43:87:6d:98:99:76:be:38:4c:e2:b2: 83:33:65:60:bd:1f:57:53:86:42:cc:95:ad:5e:ee: b3:63:d6:25:7a:d8:54:79:89:6a:da:d7:ea:a0:3f: 19:69:7b:ca:d8:fd:19:fd:d8:8c:83:e6:73:89:bc: 48:6f:6c:63:e5:05:9d:48:dd:9d:25:b3:2a:a0:0d: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:57:2C:96:54:F5:FD:2A:C1:7C:6C:A0:F1:B6:9A:FD:42:4E:31 X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c5:2f:8b:61:91:da:cf:6e:60:e7:42:ba:57:96:13:36:93: 64:45:e6:c0:7f:93:ec:37:39:55:db:15:8e:13:a9:74:8a:59: fe:a3:9e:4c:a7:29:38:c3:f6:51:23:6a:58:6f:d8:24:f1:bb: 89:29:35:94:1c:15:0f:be:4a:eb:dd:d1:cd:d3:54:e9:60:51: 4d:49:57:91:6a:94:1e:d4:92:74:dd:33:5a:bd:b4:11:78:1b: fd:a3:26:54:60:24:1c:5e:a8:36:2f:de:71:6b:10:69:90:38: af:35:6f:45:d8:4d:e5:a7:18:e6:2c:17:3d:9f:1a:03:49:c4: 33:8f:23:37:99:83:4b:93:fe:0f:81:d1:f2:0d:3e:05:18:df: d7:a5:34:4f:0b:42:3e:7a:75:b2:ae:5e:49:ff:1a:34:e4:78: 06:10:36:90:7f:e5:16:bb:0b:26:a1:c7:b3:e0:5e:82:15:7b: d2:1a:fd:cd:b7:3a:8d:31:24:99:56:8d:41:19:f5:bc:6e:40: f4:82:6d:74:62:22:05:84:aa:f8:47:c7:72:97:1c:ed:cc:79: c9:c4:9c:0e:df:4c:62:4e:4d:62:21:53:ad:67:4a:9e:9c:ca: e9:48:2a:6c:4d:4b:31:86:77:a5:97:dd:4e:0e:1b:4f:80:38: db:6e:9a:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBYrJzcvr0nSzRzopvh2698jWJNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA2MTMyMTQyMTZaFw0yNjA2MTUwMTI4MTZaMDMxMTAvBgNV BAMTKDA2MDk1NzJDOTY1NEY1RkQyQUMxN0M2Q0EwRjFCNjlBRkQ0MjRFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJZh49WZi8QAJejxjM6VM7aeI 0TJCm2EuBTiyPM5eD1M6gAYNyDOQkOpUmuVPKqDp9GUTq34is72HmNK/7+eYZ2nA otQOuCdmGt1eNj5KDpG0tgROHvw9PGevKAV7Lv9M+/699BjRR1EcHHIa0xfCremo gsbe6Fux8SyTicBxRwaffAYkUMlAuqMKdIIJMWxqEJQqqDWx2bLr9pBLyYOg6Bem eFAj4ZbpqfiT1KniAl4yGHP8t19Dh22YmXa+OEzisoMzZWC9H1dThkLMla1e7rNj 1iV62FR5iWra1+qgPxlpe8rY/Rn92IyD5nOJvEhvbGPlBZ1I3Z0lsyqgDWHhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBglXLJZU9f0qwXxsoPG2mv1CTjEwHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMUvi2GR2s9u YOdCuleWEzaTZEXmwH+T7Dc5VdsVjhOpdIpZ/qOeTKcpOMP2USNqWG/YJPG7iSk1 lBwVD75K693RzdNU6WBRTUlXkWqUHtSSdN0zWr20EXgb/aMmVGAkHF6oNi/ecWsQ aZA4rzVvRdhN5acY5iwXPZ8aA0nEM48jN5mDS5P+D4HR8g0+BRjf16U0TwtCPnp1 sq5eSf8aNOR4BhA2kH/lFrsLJqHHs+BeghV70hr9zbc6jTEkmVaNQRn1vG5A9IJt dGIiBYSq+EfHcpcc7cx5ycScDt9MYk5NYiFTrWdKnpzK6UgqbE1LMYZ3pZfdTg4b T4A4226aSg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:11 2026 by rpki-client