$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: 5HroAE85j/gxTBC2zAft2sJC7043kFVC7CLme9/OXMs= Subject key identifier: 74:F9:FD:E3:FC:AC:1A:CE:80:60:B1:E0:4C:F0:5D:0A:F1:98:12:13 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 0AC1F4E1BEDFE53F75F087AB71E3E625DDCD8790 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 13:11:49 +0000 Manifest this update: Sat 13 Jun 2026 13:06:49 +0000 Manifest next update: Sun 14 Jun 2026 16:26:49 +0000 Files and hashes: 1: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 2: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: Zhwvc6eJ4+qKNTxFyqdaSpxrlZrs2b+jiNOvOHM1ouY=) 3: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c1:f4:e1:be:df:e5:3f:75:f0:87:ab:71:e3:e6:25:dd:cd:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Jun 13 13:06:49 2026 GMT Not After : Jun 14 16:26:49 2026 GMT Subject: CN=74F9FDE3FCAC1ACE8060B1E04CF05D0AF1981213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:2f:e7:12:3b:9f:e6:e1:59:5a:60:37:a0: 56:7a:ea:47:e7:0b:2f:07:77:75:c2:04:fd:d0:69: fd:0c:0b:9b:b7:c5:a2:dc:22:7e:7a:84:d2:d2:58: 42:05:6a:e1:76:e0:f2:33:6b:80:dd:8a:7d:43:82: 1f:cb:28:6c:85:45:af:e3:bb:8b:0b:29:b1:5b:95: f9:79:de:29:75:a4:18:42:d6:c7:30:e3:99:df:71: d9:25:9a:e0:16:30:7a:0f:b0:2c:02:53:bc:98:d9: 58:27:98:3b:65:be:9a:f0:3b:cb:37:56:16:5b:85: 55:7a:84:3f:91:6b:13:44:3f:d7:a8:8b:0f:80:0f: e3:04:3c:e6:3a:f4:79:06:7b:cd:12:53:42:d4:3e: df:9f:1b:ac:29:32:51:b7:e0:ea:80:a3:b7:ad:03: 02:4f:88:79:c3:e1:bf:f4:da:d5:bb:fe:2e:94:6e: e0:cb:36:ac:53:8c:9b:3f:0d:52:30:26:60:4e:5b: ca:fa:fa:5f:4f:27:3c:5d:dc:15:77:e3:2d:c6:1c: 39:2d:60:9b:87:06:15:c7:0a:a2:75:41:d4:4d:6c: 5f:54:0d:11:38:37:3e:f2:f1:32:1b:d2:bf:fd:2c: fe:71:0c:8d:4b:66:44:65:90:64:15:a8:da:33:78: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F9:FD:E3:FC:AC:1A:CE:80:60:B1:E0:4C:F0:5D:0A:F1:98:12:13 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6b:cc:9e:e7:fc:4b:c3:f7:c4:b9:27:8d:c6:9b:c4:78:37: 5d:80:dd:27:17:df:5a:3c:d6:6a:88:a2:35:30:01:86:06:4e: 5d:3f:5d:e2:18:17:6f:c3:f7:63:fe:97:eb:3e:7a:ec:1a:34: e6:e0:30:22:d9:59:a5:54:41:10:d7:cd:ff:c4:6b:a6:49:cf: f3:b3:18:2a:41:1e:cc:3b:85:5d:a1:13:01:60:ae:4c:d2:6b: a9:3c:5e:c2:12:e0:d3:e0:84:62:0c:bd:30:67:8d:b0:1d:ba: 60:1c:43:02:2f:ef:50:b6:b7:7e:05:c0:3b:8c:12:9e:8e:a0: a9:30:e2:e5:43:41:cf:a3:7c:0b:12:28:20:ae:3c:8e:75:56: 9f:23:02:8b:68:06:3d:07:2a:b1:62:55:e9:e1:b9:50:45:72: 83:04:15:09:ea:46:e0:a0:2c:7d:23:f8:70:a7:36:ab:2c:aa: 63:7f:1e:e5:92:bf:da:cc:af:d1:0a:01:7f:4c:e5:b3:83:89: 2b:14:da:db:10:a4:5c:1b:bb:de:52:b5:49:16:cb:d5:71:78: c1:43:b7:5d:2e:e9:51:5d:a3:81:02:eb:9e:84:9f:5d:b6:e1: d0:60:30:90:96:e8:9a:96:0c:5f:34:2f:34:b6:4e:58:78:13: eb:4d:3f:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCsH04b7f5T918IercePmJd3Nh5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA2MTMxMzA2NDlaFw0yNjA2MTQxNjI2NDlaMDMxMTAvBgNV BAMTKDc0RjlGREUzRkNBQzFBQ0U4MDYwQjFFMDRDRjA1RDBBRjE5ODEyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sC/nEjuf5uFZWmA3oFZ66kfn Cy8Hd3XCBP3Qaf0MC5u3xaLcIn56hNLSWEIFauF24PIza4Ddin1Dgh/LKGyFRa/j u4sLKbFblfl53il1pBhC1scw45nfcdklmuAWMHoPsCwCU7yY2VgnmDtlvprwO8s3 VhZbhVV6hD+RaxNEP9eoiw+AD+MEPOY69HkGe80SU0LUPt+fG6wpMlG34OqAo7et AwJPiHnD4b/02tW7/i6UbuDLNqxTjJs/DVIwJmBOW8r6+l9PJzxd3BV34y3GHDkt YJuHBhXHCqJ1QdRNbF9UDRE4Nz7y8TIb0r/9LP5xDI1LZkRlkGQVqNozePlfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdPn94/ysGs6AYLHgTPBdCvGYEhMwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmvMnuf8S8P3 xLknjcabxHg3XYDdJxffWjzWaoiiNTABhgZOXT9d4hgXb8P3Y/6X6z567Bo05uAw ItlZpVRBENfN/8RrpknP87MYKkEezDuFXaETAWCuTNJrqTxewhLg0+CEYgy9MGeN sB26YBxDAi/vULa3fgXAO4wSno6gqTDi5UNBz6N8CxIoIK48jnVWnyMCi2gGPQcq sWJV6eG5UEVygwQVCepG4KAsfSP4cKc2qyyqY38e5ZK/2syv0QoBf0zls4OJKxTa 2xCkXBu73lK1SRbL1XF4wUO3XS7pUV2jgQLrnoSfXbbh0GAwkJbompYMXzQvNLZO WHgT600/Ww== -----END CERTIFICATE-----Generated at Sun Jun 14 05:48:07 2026 by rpki-client