$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: EWoMEAGwCIapUwxhMOyQMEEi3EBqSLH+Btx7Zn63gdw= Subject key identifier: 54:CD:34:21:35:92:14:67:53:FC:34:2E:CC:ED:BD:47:AA:80:89:08 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 062CBBBF4A5B1C1262CA3B28A913C1439CC4A07D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: C2 Signing time: Sun 14 Jun 2026 00:07:28 +0000 Manifest this update: Sun 14 Jun 2026 00:02:28 +0000 Manifest next update: Mon 15 Jun 2026 03:14:28 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: AtJbuYcLx11GVuDUo9Kg/tl11WE4sKOOiP7DVVTVGYA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2c:bb:bf:4a:5b:1c:12:62:ca:3b:28:a9:13:c1:43:9c:c4:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jun 14 00:02:28 2026 GMT Not After : Jun 15 03:14:28 2026 GMT Subject: CN=54CD34213592146753FC342ECCEDBD47AA808908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:36:01:7c:27:8e:4e:ba:e2:75:c5:d4:59: 41:55:93:38:85:b8:95:42:b9:12:e2:b5:e7:5d:46: 9b:ac:42:04:4b:05:2b:44:24:ee:0a:44:41:7b:7a: 90:bc:e5:27:4e:e1:ef:4f:77:d4:99:78:17:a2:df: 06:2d:95:3b:64:ad:42:7b:e4:a8:04:12:94:61:b1: 9e:79:bf:29:f9:03:6a:a8:cd:73:fd:54:1f:8c:b4: c6:9d:e1:88:ed:f2:7d:52:da:a9:bd:a7:8b:d2:65: 4f:6d:ae:b5:d7:d7:7a:08:1c:2e:4b:41:e1:c4:d6: e8:f9:fc:e7:4c:ac:99:17:e5:97:e6:80:6f:ab:3a: b6:84:fe:32:94:e0:49:68:51:c5:8a:5e:45:1b:ce: b1:b2:3e:67:05:5f:40:09:f8:58:1d:da:8e:63:79: de:13:99:57:53:e1:c3:25:02:c0:6a:11:a4:b6:61: 34:6f:69:e1:2c:a7:cd:ac:fb:07:bc:2b:8f:5d:e4: 03:8f:fd:19:22:3b:d8:18:38:3d:ea:85:9b:f9:a5: 7f:ca:76:03:70:3c:05:36:e0:92:ff:2a:52:f4:61: 8c:38:73:0b:f8:b1:a7:f5:69:8e:f8:5e:7c:89:45: 6a:b5:5d:77:68:09:6e:17:ae:2b:32:af:d7:e1:ae: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:34:21:35:92:14:67:53:FC:34:2E:CC:ED:BD:47:AA:80:89:08 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ca:4f:88:97:89:c8:29:4e:19:85:42:ad:4a:d6:1d:bd:ba: d8:59:4e:8c:ea:f5:c6:cd:3b:08:bd:cc:2d:e4:01:b7:14:d1: 5b:c0:db:b1:0e:3e:d3:a0:c2:13:c2:0a:2c:22:bf:75:68:3f: c2:86:ae:cd:a1:f4:b3:6f:62:e4:43:f0:41:5c:cb:5a:6d:33: 0c:27:db:4f:47:75:73:2d:05:a2:3f:fd:17:49:14:ca:16:f4: 25:38:d8:f8:e3:cb:b8:94:a2:18:e2:f0:55:e6:78:8c:78:19: cd:9d:e8:09:e9:67:45:6b:15:35:0a:4d:51:e9:2f:19:97:7c: 43:65:7f:98:2d:ec:e0:62:4f:a1:94:8c:37:31:21:b0:8f:c0: 75:a8:34:41:2b:b7:63:3e:35:89:25:fd:09:18:b4:ee:4e:87: 39:dc:bd:d1:e7:99:8f:06:27:d3:42:f6:ed:38:a4:12:34:94: bf:2d:d6:fd:61:05:17:61:a0:23:91:7f:f7:b8:d8:08:2c:24: 12:d8:b4:b4:3d:92:5c:e8:eb:a4:02:3d:a8:1f:6f:7a:7d:a7: 6f:40:54:8d:10:d3:1f:f9:28:be:82:f0:9d:9f:c5:95:56:37: e9:89:98:ec:f7:ff:d2:9c:e3:24:91:69:36:06:cf:01:3c:db: 9d:7f:9c:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBiy7v0pbHBJiyjsoqRPBQ5zEoH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA2MTQwMDAyMjhaFw0yNjA2MTUwMzE0MjhaMDMxMTAvBgNV BAMTKDU0Q0QzNDIxMzU5MjE0Njc1M0ZDMzQyRUNDRURCRDQ3QUE4MDg5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOzYBfCeOTrridcXUWUFVkziF uJVCuRLiteddRpusQgRLBStEJO4KREF7epC85SdO4e9Pd9SZeBei3wYtlTtkrUJ7 5KgEEpRhsZ55vyn5A2qozXP9VB+MtMad4Yjt8n1S2qm9p4vSZU9trrXX13oIHC5L QeHE1uj5/OdMrJkX5ZfmgG+rOraE/jKU4EloUcWKXkUbzrGyPmcFX0AJ+Fgd2o5j ed4TmVdT4cMlAsBqEaS2YTRvaeEsp82s+we8K49d5AOP/RkiO9gYOD3qhZv5pX/K dgNwPAU24JL/KlL0YYw4cwv4saf1aY74XnyJRWq1XXdoCW4Xrisyr9fhrsRTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVM00ITWSFGdT/DQuzO29R6qAiQgwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcpPiJeJyClO GYVCrUrWHb262FlOjOr1xs07CL3MLeQBtxTRW8DbsQ4+06DCE8IKLCK/dWg/woau zaH0s29i5EPwQVzLWm0zDCfbT0d1cy0Foj/9F0kUyhb0JTjY+OPLuJSiGOLwVeZ4 jHgZzZ3oCelnRWsVNQpNUekvGZd8Q2V/mC3s4GJPoZSMNzEhsI/Adag0QSu3Yz41 iSX9CRi07k6HOdy90eeZjwYn00L27TikEjSUvy3W/WEFF2GgI5F/97jYCCwkEti0 tD2SXOjrpAI9qB9ven2nb0BUjRDTH/kovoLwnZ/FlVY36YmY7Pf/0pzjJJFpNgbP ATzbnX+cjg== -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:23 2026 by rpki-client