$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: yAp5Z/qUlCMtQ2nQOgFsnxe3em18OWirT06FUa3FOkI= Subject key identifier: DB:17:09:26:5F:A2:05:F1:DE:70:C4:9B:F4:40:A6:95:61:EA:84:59 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 0DFF4BE2F3F37E76195882DEF0055D145DF8AB4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 19:17:09 +0000 Manifest this update: Sat 13 Jun 2026 19:12:09 +0000 Manifest next update: Sun 14 Jun 2026 22:09:09 +0000 Files and hashes: 1: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 2: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 3: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: vdB0/o5ZywBm6yFn+rDXkoWEnklPXbZo3rIIl8tLEwE=) 4: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:4b:e2:f3:f3:7e:76:19:58:82:de:f0:05:5d:14:5d:f8:ab:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jun 13 19:12:09 2026 GMT Not After : Jun 14 22:09:09 2026 GMT Subject: CN=DB1709265FA205F1DE70C49BF440A69561EA8459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:c7:fc:cf:77:12:b0:23:d4:78:b8:0f:23: 96:46:d5:61:c3:9a:70:55:f1:17:e8:d7:51:5e:77: b0:de:b4:b9:b7:33:c9:c4:91:89:52:75:a1:12:92: 62:7a:10:cd:ee:37:7f:ac:3d:7a:c7:8e:8c:28:0f: b2:a7:c6:81:15:68:b7:ee:b1:ef:e2:24:92:e1:77: 65:7d:36:8b:dd:38:67:ae:f0:cb:70:ae:a0:a9:af: 27:bf:0c:5d:66:6d:d7:51:c3:c4:d6:8f:b9:bd:da: 8d:26:bb:9a:d7:f4:6b:6d:64:4c:c4:bf:0b:ce:cf: bc:0c:54:94:9c:2f:a9:37:7e:fc:d6:56:39:77:c4: 6d:45:60:5f:6c:c9:97:57:35:1c:e6:e2:f2:7c:db: 00:6a:05:a4:8a:77:0a:94:85:cd:d9:51:e8:83:9e: 85:7d:fe:71:47:d4:4e:35:82:42:8f:e4:1b:2f:4b: 1d:da:14:d5:34:81:25:9c:0e:5a:73:da:f7:94:39: 8c:0c:d1:bb:10:0a:c9:20:6f:27:7c:c7:9f:df:dd: 7e:7d:b3:c6:ea:a2:5c:8c:38:d1:36:a7:d7:9b:41: 27:7d:3f:dd:49:35:2b:f4:c6:17:8b:2c:cb:d0:9a: fb:09:39:80:f6:98:38:0e:a2:07:eb:70:19:50:0c: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:09:26:5F:A2:05:F1:DE:70:C4:9B:F4:40:A6:95:61:EA:84:59 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ab:d4:22:5f:a5:03:0b:ae:86:c8:82:9f:1c:6f:fc:3f:1d: b5:a8:49:68:59:65:dc:50:b5:c0:62:bb:c9:bd:5f:b9:3f:41: 9c:a9:0b:60:a2:cc:e3:0e:24:5b:fd:33:7f:64:0d:cc:46:01: 8d:25:eb:70:b2:3a:2b:a4:73:2f:b4:02:45:c9:ac:5c:73:73: 24:0d:7c:6e:7b:07:9b:c1:2a:a9:5d:0b:b3:6c:af:03:31:72: 5c:b1:b9:21:b6:d1:f2:bc:14:63:27:82:5c:5a:05:05:1e:05: 4d:da:c2:c9:6a:e1:e6:b4:f0:f6:7a:50:17:ea:38:e0:ea:05: eb:d6:02:49:51:4e:bf:23:00:ea:73:be:a9:a7:b7:8d:03:6e: 5f:51:cb:38:fe:ff:bb:ea:09:d9:be:d4:9e:fe:a8:c6:74:cb: bd:2e:38:61:ea:9e:a9:52:2e:7a:d3:0a:52:5e:79:78:b1:82: 28:f7:f9:53:1a:a0:40:48:8e:24:b4:52:83:0d:dc:49:4d:3d: c8:b8:c8:12:21:6e:1e:38:80:30:f5:85:39:bf:77:e9:22:9f: b5:a9:b9:3d:6f:bb:c0:48:17:00:2c:a3:cf:da:e9:e5:3c:f4: 9c:da:d3:e5:ee:f2:26:b4:29:c1:9b:e4:e5:23:8c:49:03:93: 30:38:a2:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDf9L4vPzfnYZWILe8AVdFF34q00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA2MTMxOTEyMDlaFw0yNjA2MTQyMjA5MDlaMDMxMTAvBgNV BAMTKERCMTcwOTI2NUZBMjA1RjFERTcwQzQ5QkY0NDBBNjk1NjFFQTg0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCksf8z3cSsCPUeLgPI5ZG1WHD mnBV8Rfo11Fed7DetLm3M8nEkYlSdaESkmJ6EM3uN3+sPXrHjowoD7KnxoEVaLfu se/iJJLhd2V9NovdOGeu8MtwrqCprye/DF1mbddRw8TWj7m92o0mu5rX9GttZEzE vwvOz7wMVJScL6k3fvzWVjl3xG1FYF9syZdXNRzm4vJ82wBqBaSKdwqUhc3ZUeiD noV9/nFH1E41gkKP5BsvSx3aFNU0gSWcDlpz2veUOYwM0bsQCskgbyd8x5/f3X59 s8bqolyMONE2p9ebQSd9P91JNSv0xheLLMvQmvsJOYD2mDgOogfrcBlQDNptAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2xcJJl+iBfHecMSb9ECmlWHqhFkwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqvUIl+lAwuu hsiCnxxv/D8dtahJaFll3FC1wGK7yb1fuT9BnKkLYKLM4w4kW/0zf2QNzEYBjSXr cLI6K6RzL7QCRcmsXHNzJA18bnsHm8EqqV0Ls2yvAzFyXLG5IbbR8rwUYyeCXFoF BR4FTdrCyWrh5rTw9npQF+o44OoF69YCSVFOvyMA6nO+qae3jQNuX1HLOP7/u+oJ 2b7Unv6oxnTLvS44YeqeqVIuetMKUl55eLGCKPf5UxqgQEiOJLRSgw3cSU09yLjI EiFuHjiAMPWFOb936SKftam5PW+7wEgXACyjz9rp5Tz0nNrT5e7yJrQpwZvk5SOM SQOTMDiiNA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:23:26 2026 by rpki-client