$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: AaJ4DpTHTMTgLYqH6FwpcBYaEA5YZCp0W/7lDvP2XVk= Subject key identifier: 98:24:5A:F6:F2:8E:0D:08:87:BC:AC:7E:48:72:58:C5:E9:2F:BC:74 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 73F133EC6D2B34EF35C83474DC12236243F09798 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: D5 Signing time: Sat 13 Jun 2026 17:36:59 +0000 Manifest this update: Sat 13 Jun 2026 17:31:59 +0000 Manifest next update: Sun 14 Jun 2026 18:21:59 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: oV3UDzN4rrfAG6742IxVBDxV2GzsKMgyUG94dgiH9JU=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f1:33:ec:6d:2b:34:ef:35:c8:34:74:dc:12:23:62:43:f0:97:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Jun 13 17:31:59 2026 GMT Not After : Jun 14 18:21:59 2026 GMT Subject: CN=98245AF6F28E0D0887BCAC7E487258C5E92FBC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:12:90:a2:b4:51:ec:08:f0:74:52:86:af: 22:6c:03:c2:e9:4c:b3:b1:9f:31:bf:a5:01:39:92: d9:4e:50:4b:ef:69:1a:02:f9:5c:9f:cd:a7:c3:89: b4:07:b9:ea:ff:9c:9a:33:ec:42:a0:ce:10:d9:86: 71:a2:d7:a0:73:31:64:e1:d6:47:d7:1f:b3:f5:3b: fa:74:64:b5:ad:57:83:58:fb:69:d9:42:d3:fa:62: 9c:bc:fb:39:f2:63:20:08:81:2d:a8:33:52:eb:fe: 81:db:e2:60:fc:e4:17:42:a4:3f:c7:28:4a:40:bb: 55:af:ba:ac:e6:8f:4c:05:c8:58:d5:2c:e4:15:2a: b8:ed:3d:72:f4:e7:31:84:50:d8:0b:73:a5:bf:b4: df:d5:66:ff:b4:73:3f:7a:be:36:56:45:d7:47:8e: 2e:47:8e:c3:90:f4:51:75:a3:ff:90:d6:fe:50:d0: 47:01:e0:d4:7e:9c:3b:2c:eb:08:52:4f:73:1b:ec: 81:ca:b5:3f:0f:30:be:54:76:0f:3b:50:21:37:13: c8:80:ad:23:6a:62:da:45:1f:9d:19:a3:d0:e9:25: 71:c3:6c:4b:85:d1:ac:8b:ec:c6:c2:bc:ad:9c:14: 51:85:57:e5:7f:9d:1b:5c:91:ec:95:08:65:68:9e: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:5A:F6:F2:8E:0D:08:87:BC:AC:7E:48:72:58:C5:E9:2F:BC:74 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6f:02:21:b2:28:f9:c1:78:38:f0:59:24:dd:8a:2d:1b:ab: ba:91:ad:57:69:83:68:e2:e0:dd:3a:45:67:f4:ca:71:fe:a3: a4:ad:2d:12:a8:85:00:5a:c4:8e:2b:6f:06:43:c2:5b:f9:ec: a4:5d:d6:32:3e:62:77:f3:08:bd:af:fc:b3:e2:f5:37:92:f1: 19:66:5e:27:90:19:33:6e:b7:4c:f9:53:5f:c0:60:aa:6e:6a: e1:7c:55:f6:14:b8:68:e0:5c:3b:a7:fc:f5:a4:47:ea:08:b6: d8:5a:9f:a6:91:e5:58:84:76:51:bc:a3:23:27:6a:30:c1:c4: 0f:73:42:f0:f0:05:4e:f9:c5:eb:d6:ea:99:f8:93:97:4d:3f: 35:5b:f9:2a:3a:0d:84:a0:2c:20:66:b2:51:91:0d:11:b3:75: 08:e5:95:5e:ff:c4:13:03:ae:17:c8:f7:7c:0c:6b:4f:5e:8f: 64:70:be:44:78:04:fa:a2:94:d1:65:a2:88:76:29:91:1d:b4: 66:bf:b3:2b:f3:38:8d:85:a9:b5:d7:9c:57:f6:4f:47:31:a3: e5:1e:3e:43:00:04:2b:9c:58:8a:cd:1d:29:11:20:ad:e2:95: fa:6d:62:7c:01:22:a8:89:2c:05:6b:18:f3:10:3c:9b:72:85: 77:05:df:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc/Ez7G0rNO81yDR03BIjYkPwl5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA2MTMxNzMxNTlaFw0yNjA2MTQxODIxNTlaMDMxMTAvBgNV BAMTKDk4MjQ1QUY2RjI4RTBEMDg4N0JDQUM3RTQ4NzI1OEM1RTkyRkJDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HRKQorRR7AjwdFKGryJsA8Lp TLOxnzG/pQE5ktlOUEvvaRoC+VyfzafDibQHuer/nJoz7EKgzhDZhnGi16BzMWTh 1kfXH7P1O/p0ZLWtV4NY+2nZQtP6Ypy8+znyYyAIgS2oM1Lr/oHb4mD85BdCpD/H KEpAu1Wvuqzmj0wFyFjVLOQVKrjtPXL05zGEUNgLc6W/tN/VZv+0cz96vjZWRddH ji5HjsOQ9FF1o/+Q1v5Q0EcB4NR+nDss6whST3Mb7IHKtT8PML5Udg87UCE3E8iA rSNqYtpFH50Zo9DpJXHDbEuF0ayL7MbCvK2cFFGFV+V/nRtckeyVCGVonl/zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmCRa9vKODQiHvKx+SHJYxekvvHQwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG8CIbIo+cF4 OPBZJN2KLRurupGtV2mDaOLg3TpFZ/TKcf6jpK0tEqiFAFrEjitvBkPCW/nspF3W Mj5id/MIva/8s+L1N5LxGWZeJ5AZM263TPlTX8Bgqm5q4XxV9hS4aOBcO6f89aRH 6gi22FqfppHlWIR2UbyjIydqMMHED3NC8PAFTvnF69bqmfiTl00/NVv5KjoNhKAs IGayUZENEbN1COWVXv/EEwOuF8j3fAxrT16PZHC+RHgE+qKU0WWiiHYpkR20Zr+z K/M4jYWptdecV/ZPRzGj5R4+QwAEK5xYis0dKREgreKV+m1ifAEiqIksBWsY8xA8 m3KFdwXfHg== -----END CERTIFICATE-----Generated at Sun Jun 14 03:41:33 2026 by rpki-client