$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: C6VwUnj2DksZ26RQxrT1DPSeW0Eqz9wZdm027k+lkZM= Subject key identifier: 21:77:95:D0:0C:59:80:1D:16:9A:C9:AB:7C:91:4A:E0:1F:62:4D:B2 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 4A37FFC3E15D1CC8EAE0C6875E1BF825E038ED6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 23:52:27 +0000 Manifest this update: Sat 13 Jun 2026 23:47:27 +0000 Manifest next update: Mon 15 Jun 2026 00:04:27 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: DCQk0DLwj/cC4Lhtjw07UovvrE/KT5EiWYh8oLCtDvs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:37:ff:c3:e1:5d:1c:c8:ea:e0:c6:87:5e:1b:f8:25:e0:38:ed:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jun 13 23:47:27 2026 GMT Not After : Jun 15 00:04:27 2026 GMT Subject: CN=217795D00C59801D169AC9AB7C914AE01F624DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:30:5e:3c:f2:6a:b7:6c:78:34:f9:9b:cf: 9b:29:8c:c2:d2:2e:9e:d4:0e:e6:37:fc:29:f0:51: 95:01:11:22:c9:77:87:4c:c5:82:c7:55:09:0d:7d: db:5b:a9:76:6a:da:b4:bb:f0:7f:b7:c5:1a:b6:1f: ef:89:9b:67:86:17:a8:93:89:30:e1:48:a5:2f:53: 95:ad:33:e3:f3:34:ba:e2:da:62:06:ce:f8:c9:3d: 61:01:59:86:34:e7:ab:56:64:93:da:89:11:70:1f: 6b:eb:2a:4b:de:78:f6:5f:4c:37:4e:91:34:89:fa: 42:05:f1:69:c3:80:4e:2f:47:b4:82:17:1f:f9:bb: 4d:05:46:cb:ed:b8:60:dc:fd:92:ca:d0:3a:53:6a: 94:2f:4d:b6:e7:db:22:3d:b5:1a:8a:0f:29:d1:51: 00:e9:75:16:a1:3a:f9:66:c1:f0:0f:62:fc:f6:8c: b7:d4:94:79:33:e8:30:7f:41:a3:81:ca:33:13:43: 33:be:25:f1:1a:0c:8f:e8:fc:e4:f7:db:30:0e:6e: f6:98:28:c7:73:dc:ef:7f:e6:e0:74:9f:3d:8f:88: f4:31:04:92:f3:61:8b:e4:c3:e6:b9:b4:48:50:22: 6f:80:bf:b6:24:ce:fb:6e:7d:e8:1c:a6:f2:3d:b1: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:77:95:D0:0C:59:80:1D:16:9A:C9:AB:7C:91:4A:E0:1F:62:4D:B2 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1a:7b:c0:8e:41:9f:a5:7b:12:c2:cf:1d:8e:02:0b:91:05: 61:49:9c:ae:39:68:98:b9:e4:6b:92:6f:1a:59:ac:38:25:c5: ed:6b:0a:fe:10:b4:18:1b:33:7d:6e:fd:d6:60:35:89:11:71: e8:1c:1b:ef:30:90:ba:d2:d3:5d:41:47:c7:22:4e:c7:5a:da: df:d2:bf:15:c5:36:07:50:ca:74:bb:13:1c:74:48:36:b0:c4: 6a:ca:2e:23:cb:37:52:7b:0f:53:d1:ce:f2:d0:74:cd:ac:77: 69:e7:39:b8:e8:d6:83:32:2d:d1:12:45:91:5a:02:ea:ef:78: be:a8:11:0e:85:12:3f:d3:ba:bd:39:2c:38:59:d9:69:c0:11: ea:88:78:ac:10:5f:ee:1b:ad:11:17:2b:5f:ba:92:7f:8d:20: 08:e5:97:96:8d:8c:43:fa:bd:da:62:05:43:2e:2e:22:fc:5e: b0:b7:80:64:32:30:9f:b0:97:21:18:59:fe:d9:77:c1:0e:fd: d6:a5:9f:5c:2e:37:2a:4b:15:52:39:d4:6d:25:ff:87:78:4b: a3:52:6d:de:ef:c1:2a:28:b0:69:28:f1:bd:98:f6:23:39:88: d1:02:d0:5f:6f:30:bf:0c:e9:7d:50:3f:ab:fd:be:de:72:ce: b8:39:02:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSjf/w+FdHMjq4MaHXhv4JeA47W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA2MTMyMzQ3MjdaFw0yNjA2MTUwMDA0MjdaMDMxMTAvBgNV BAMTKDIxNzc5NUQwMEM1OTgwMUQxNjlBQzlBQjdDOTE0QUUwMUY2MjREQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjDBePPJqt2x4NPmbz5spjMLS Lp7UDuY3/CnwUZUBESLJd4dMxYLHVQkNfdtbqXZq2rS78H+3xRq2H++Jm2eGF6iT iTDhSKUvU5WtM+PzNLri2mIGzvjJPWEBWYY056tWZJPaiRFwH2vrKkveePZfTDdO kTSJ+kIF8WnDgE4vR7SCFx/5u00FRsvtuGDc/ZLK0DpTapQvTbbn2yI9tRqKDynR UQDpdRahOvlmwfAPYvz2jLfUlHkz6DB/QaOByjMTQzO+JfEaDI/o/OT32zAObvaY KMdz3O9/5uB0nz2PiPQxBJLzYYvkw+a5tEhQIm+Av7YkzvtufegcpvI9seURAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIXeV0AxZgB0WmsmrfJFK4B9iTbIwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhp7wI5Bn6V7 EsLPHY4CC5EFYUmcrjlomLnka5JvGlmsOCXF7WsK/hC0GBszfW791mA1iRFx6Bwb 7zCQutLTXUFHxyJOx1ra39K/FcU2B1DKdLsTHHRINrDEasouI8s3UnsPU9HO8tB0 zax3aec5uOjWgzIt0RJFkVoC6u94vqgRDoUSP9O6vTksOFnZacAR6oh4rBBf7hut ERcrX7qSf40gCOWXlo2MQ/q92mIFQy4uIvxesLeAZDIwn7CXIRhZ/tl3wQ791qWf XC43KksVUjnUbSX/h3hLo1Jt3u/BKiiwaSjxvZj2IzmI0QLQX28wvwzpfVA/q/2+ 3nLOuDkCww== -----END CERTIFICATE-----Generated at Sun Jun 14 05:46:17 2026 by rpki-client