$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: injz5Adv13WvsuYA/QwVo9mK1yuOLeImMnwZ9mKJ/d0= Subject key identifier: A1:6C:ED:67:FF:5A:35:09:AB:B1:AB:66:AA:D5:2C:C3:F9:44:B4:85 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 19B481C3C75B5E852D4B63F14C98ADC2FFC94472 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 21:02:13 +0000 Manifest this update: Sat 13 Jun 2026 20:57:13 +0000 Manifest next update: Sun 14 Jun 2026 22:05:13 +0000 Files and hashes: 1: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) 2: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: iX3nv52aa4+2dvBvW2FIA87hwv5BRaKS/vrZmznnn9Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b4:81:c3:c7:5b:5e:85:2d:4b:63:f1:4c:98:ad:c2:ff:c9:44:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Jun 13 20:57:13 2026 GMT Not After : Jun 14 22:05:13 2026 GMT Subject: CN=A16CED67FF5A3509ABB1AB66AAD52CC3F944B485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fd:f8:00:53:11:66:7b:74:c5:6b:d7:eb:b6: 42:69:89:40:57:38:1d:ce:38:ee:f0:75:b9:b6:1d: f2:be:f9:aa:ec:34:6b:e7:69:22:d3:8f:a8:be:fd: 44:94:15:2c:1f:81:0e:23:24:81:10:26:99:52:78: 8a:a5:54:17:a1:08:b9:27:c7:90:f5:c9:25:a0:f2: 75:63:31:19:dd:88:81:dc:fb:d9:e3:19:13:b8:ca: 4e:a0:e2:dc:5e:e3:17:88:dd:a2:5b:78:af:20:b8: fa:0e:63:a3:7a:9d:e7:ec:ec:06:fd:2c:60:a8:f0: 2d:15:af:ce:18:bd:4a:67:80:5a:65:ad:be:65:f7: 72:1a:01:23:f6:2a:e6:7d:fe:67:9c:aa:e3:c7:4a: 80:fc:26:40:5e:2f:0e:fb:37:4b:94:fe:15:f7:00: 8d:94:5b:be:40:68:28:78:9c:4c:98:1e:1d:af:ad: fe:4d:f9:cb:f9:7a:82:84:0f:df:80:de:ec:c6:56: 22:17:d1:f7:2b:1b:1d:fa:d5:55:2d:31:53:0d:15: e0:67:c6:10:78:8b:4e:23:0a:1a:c8:15:c4:6d:b0: a3:e9:0c:35:96:be:b9:81:db:3b:a1:23:08:56:5f: fc:35:52:3f:db:a4:9a:9c:2e:f0:68:65:6e:8d:2e: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:ED:67:FF:5A:35:09:AB:B1:AB:66:AA:D5:2C:C3:F9:44:B4:85 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:44:ff:1f:7e:0e:b9:22:5f:65:c1:19:22:9c:be:4f:c8:8f: ff:d9:5c:9e:d1:80:9e:a4:4e:eb:93:0e:13:f1:2a:cd:30:b5: 0c:80:12:c8:7c:50:f2:ff:ad:f6:84:3a:c8:23:5d:64:b0:84: 4e:9c:3e:a5:42:84:61:70:8e:1f:57:a1:75:64:b2:14:b5:6e: 85:4c:84:c3:1c:67:75:31:e1:34:c1:af:6c:59:bd:12:f3:a4: 73:bf:ad:df:64:11:88:10:d6:f1:82:9a:b9:4c:37:85:f0:05: 0d:85:29:94:62:4b:a8:d4:85:71:a3:a2:c9:2c:5b:fe:75:66: dd:7d:5c:24:15:e4:be:26:11:61:05:a8:ad:dc:9c:89:2d:58: 3d:5e:aa:cd:ed:ea:8b:67:10:86:34:d3:68:de:f0:ac:7c:c9: 7d:04:1a:97:f2:ad:8a:06:90:90:ae:04:51:ac:30:8a:f1:58: e6:75:1c:b3:54:fa:7c:ec:ce:d1:26:bc:2b:43:49:7f:a0:86: 8b:7e:31:aa:26:00:ff:3c:32:1c:66:16:75:65:be:86:5e:a9: 82:19:ce:01:03:e1:e9:b4:58:ec:7c:3e:69:87:a1:e6:dc:2f: 11:89:f1:2d:63:a2:da:cd:00:d7:21:49:48:2e:9e:e5:ef:57: 2a:3b:42:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGbSBw8dbXoUtS2PxTJitwv/JRHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA2MTMyMDU3MTNaFw0yNjA2MTQyMjA1MTNaMDMxMTAvBgNV BAMTKEExNkNFRDY3RkY1QTM1MDlBQkIxQUI2NkFBRDUyQ0MzRjk0NEI0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/fgAUxFme3TFa9frtkJpiUBX OB3OOO7wdbm2HfK++arsNGvnaSLTj6i+/USUFSwfgQ4jJIEQJplSeIqlVBehCLkn x5D1ySWg8nVjMRndiIHc+9njGRO4yk6g4txe4xeI3aJbeK8guPoOY6N6nefs7Ab9 LGCo8C0Vr84YvUpngFplrb5l93IaASP2KuZ9/mecquPHSoD8JkBeLw77N0uU/hX3 AI2UW75AaCh4nEyYHh2vrf5N+cv5eoKED9+A3uzGViIX0fcrGx361VUtMVMNFeBn xhB4i04jChrIFcRtsKPpDDWWvrmB2zuhIwhWX/w1Uj/bpJqcLvBoZW6NLpMbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoWztZ/9aNQmrsatmqtUsw/lEtIUwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUET/H34OuSJf ZcEZIpy+T8iP/9lcntGAnqRO65MOE/EqzTC1DIASyHxQ8v+t9oQ6yCNdZLCETpw+ pUKEYXCOH1ehdWSyFLVuhUyEwxxndTHhNMGvbFm9EvOkc7+t32QRiBDW8YKauUw3 hfAFDYUplGJLqNSFcaOiySxb/nVm3X1cJBXkviYRYQWordyciS1YPV6qze3qi2cQ hjTTaN7wrHzJfQQal/KtigaQkK4EUawwivFY5nUcs1T6fOzO0Sa8K0NJf6CGi34x qiYA/zwyHGYWdWW+hl6pghnOAQPh6bRY7Hw+aYeh5twvEYnxLWOi2s0A1yFJSC6e 5e9XKjtCzg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:12:25 2026 by rpki-client