$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: eqY6uJNqz1YUK58tm2oUhqzihM7eRVjwBpCFyWc5aB8= Subject key identifier: 53:30:98:EB:E1:87:58:45:8C:FE:2B:20:E3:97:40:18:EB:7A:59:2B Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 13FDB2AD4651CA93709DC99E0A4D70204D73891E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: C4 Signing time: Sat 13 Jun 2026 14:21:51 +0000 Manifest this update: Sat 13 Jun 2026 14:16:51 +0000 Manifest next update: Sun 14 Jun 2026 15:42:51 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: GXfzgRcGy4Cs20xPLXeZ5ZOB5JxaDh7QzGoPyOIx0C8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fd:b2:ad:46:51:ca:93:70:9d:c9:9e:0a:4d:70:20:4d:73:89:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Jun 13 14:16:51 2026 GMT Not After : Jun 14 15:42:51 2026 GMT Subject: CN=533098EBE18758458CFE2B20E3974018EB7A592B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:0c:24:c1:5d:a3:6d:6c:d9:20:f4:ae:64: 0e:9f:8f:26:98:88:b0:02:f7:f2:63:32:51:36:4e: 2c:18:67:9d:98:b7:da:cb:ac:2a:4e:db:39:f9:3c: 63:46:98:ca:38:b8:bc:7b:c7:ae:43:4a:5b:29:15: 59:3a:65:15:5d:41:60:c8:b0:e2:a5:da:e3:00:1c: 1a:0e:6a:c2:3e:a9:51:5e:5f:a4:17:32:80:22:c7: 32:29:43:57:e7:07:39:cb:b9:ce:36:ea:19:f7:5e: 66:bc:b5:e9:27:3e:3e:68:b7:6e:82:43:9b:15:70: fc:e7:87:fd:d7:91:01:c3:96:c0:a5:89:74:db:2c: fb:bd:a2:c1:44:f0:4c:5a:a9:b4:b7:7b:6f:76:9f: 6b:8f:30:7e:69:ed:92:90:88:31:9d:08:63:d0:b7: 48:29:dc:6b:be:3f:6e:e4:f6:ac:fe:84:e9:50:6b: 72:55:9c:e4:be:41:aa:a0:da:38:4d:1d:16:03:24: 97:59:d1:ad:ec:8a:f0:ef:3d:1b:2b:ef:25:60:41: 0e:45:6b:e2:b5:3a:6d:78:4f:1d:26:5b:56:74:52: bf:36:27:4d:32:89:0b:30:52:1b:36:9c:54:f3:03: ff:e0:07:f0:2b:fe:ea:18:6f:f7:63:87:33:be:a2: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:98:EB:E1:87:58:45:8C:FE:2B:20:E3:97:40:18:EB:7A:59:2B X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:8f:c9:57:ae:e5:23:0b:64:64:2a:98:27:31:b1:4d:48: e5:17:2e:1f:95:58:a6:d1:08:b9:37:a8:f1:54:b3:8d:05:90: 59:73:78:73:18:5c:32:d8:19:a2:91:80:bd:82:0e:f3:98:70: f1:52:b4:56:37:a4:85:56:ca:b2:23:ff:e4:9b:b9:37:5b:c9: 29:80:b3:18:06:26:51:7f:37:7a:59:53:9a:ef:3f:a0:8f:c8: 70:38:33:77:d7:dd:c3:8d:a5:92:00:8e:96:71:f6:b8:65:ef: 44:5d:d0:52:fb:77:6d:cb:6c:13:40:d1:54:e6:be:6f:ed:f6: 6e:db:b8:1c:98:b0:a8:37:73:0b:80:25:9c:86:75:76:63:55: 80:ae:4f:74:f8:dd:a4:e4:bf:6f:97:d6:00:bd:5d:70:21:c4: 26:c8:4b:b5:fa:71:7b:6a:48:09:24:c3:1e:83:c7:79:58:5d: 0a:eb:6f:93:e9:29:a0:24:62:a7:12:ca:03:36:1f:85:42:47: 56:e1:19:2c:87:31:87:9d:c4:a8:5f:c7:e1:5c:5b:c6:75:b9: b0:92:08:65:23:cf:27:ca:20:b9:e4:98:6d:02:95:0f:10:25: 83:0c:af:fa:41:c8:9a:1e:b0:3a:c6:c2:91:fb:7e:b8:30:fc: a8:ca:e4:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE/2yrUZRypNwncmeCk1wIE1ziR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA2MTMxNDE2NTFaFw0yNjA2MTQxNTQyNTFaMDMxMTAvBgNV BAMTKDUzMzA5OEVCRTE4NzU4NDU4Q0ZFMkIyMEUzOTc0MDE4RUI3QTU5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1AwkwV2jbWzZIPSuZA6fjyaY iLAC9/JjMlE2TiwYZ52Yt9rLrCpO2zn5PGNGmMo4uLx7x65DSlspFVk6ZRVdQWDI sOKl2uMAHBoOasI+qVFeX6QXMoAixzIpQ1fnBznLuc426hn3Xma8teknPj5ot26C Q5sVcPznh/3XkQHDlsCliXTbLPu9osFE8ExaqbS3e292n2uPMH5p7ZKQiDGdCGPQ t0gp3Gu+P27k9qz+hOlQa3JVnOS+Qaqg2jhNHRYDJJdZ0a3sivDvPRsr7yVgQQ5F a+K1Om14Tx0mW1Z0Ur82J00yiQswUhs2nFTzA//gB/Ar/uoYb/djhzO+opkpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUzCY6+GHWEWM/isg45dAGOt6WSswHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnSPyVeu5SML ZGQqmCcxsU1I5RcuH5VYptEIuTeo8VSzjQWQWXN4cxhcMtgZopGAvYIO85hw8VK0 VjekhVbKsiP/5Ju5N1vJKYCzGAYmUX83ellTmu8/oI/IcDgzd9fdw42lkgCOlnH2 uGXvRF3QUvt3bctsE0DRVOa+b+32btu4HJiwqDdzC4AlnIZ1dmNVgK5PdPjdpOS/ b5fWAL1dcCHEJshLtfpxe2pICSTDHoPHeVhdCutvk+kpoCRipxLKAzYfhUJHVuEZ LIcxh53EqF/H4VxbxnW5sJIIZSPPJ8ogueSYbQKVDxAlgwyv+kHImh6wOsbCkft+ uDD8qMrkfQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:12:21 2026 by rpki-client