$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: ILAcXxAk8xdyLHu42Y+mc9EeijVHKcLi4JKJdRSdY5M= Subject key identifier: 07:87:6F:D2:98:21:DB:61:77:48:42:67:F1:C4:73:BB:FC:B1:0B:DD Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: A771B1292F0F7129B14411485C2266F2D25B08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 21:27:15 +0000 Manifest this update: Sat 13 Jun 2026 21:22:15 +0000 Manifest next update: Sun 14 Jun 2026 22:14:15 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 3: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: iFGOAGNXVWrH8kxx/1YOAJh6jwID2h9vSDvr4huB6gA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a7:71:b1:29:2f:0f:71:29:b1:44:11:48:5c:22:66:f2:d2:5b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Jun 13 21:22:15 2026 GMT Not After : Jun 14 22:14:15 2026 GMT Subject: CN=07876FD29821DB6177484267F1C473BBFCB10BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:4b:da:a9:74:f6:25:ca:01:c1:a8:27:bf: 30:20:76:16:86:ca:7e:48:51:dc:a2:c7:2f:8b:1e: f1:42:9a:7b:c7:e7:85:2b:14:d4:b3:fc:91:55:0c: 08:d9:79:fe:a3:50:f1:0b:0f:5e:7f:5d:23:7b:b7: d3:a7:0b:0a:e1:35:87:2a:69:58:0c:9e:a5:24:cd: 12:51:40:c6:da:94:fd:57:6e:ee:c4:41:7d:7c:c8: c4:33:d7:6e:c8:56:9a:41:32:62:62:fb:7f:d3:24: cb:09:75:dc:36:24:fa:1a:e5:f4:ee:e5:0a:f7:6f: 9d:1b:6d:90:f0:d6:2c:f8:62:68:f9:92:4a:f0:9d: be:6d:af:43:1d:14:ff:55:59:a8:e4:f4:cf:ee:b8: ba:4d:56:9d:b3:07:45:e3:e1:42:47:30:fd:17:95: a3:e9:15:61:67:b9:a6:2a:0f:60:51:b3:19:73:31: 4f:8a:b9:a5:fa:a6:b6:fd:dd:c6:be:4e:28:ff:0f: c0:e4:00:f1:46:d0:44:b1:74:96:26:71:78:8c:60: 1f:39:be:c8:0f:d4:a8:d6:91:5f:dc:ae:2a:ed:62: 30:08:aa:7d:b8:75:57:dd:22:d4:6a:c2:d8:fc:3e: 4e:5f:b8:83:5d:d4:e8:f3:0c:04:55:19:eb:2b:28: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:6F:D2:98:21:DB:61:77:48:42:67:F1:C4:73:BB:FC:B1:0B:DD X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:ff:23:5f:a0:c4:f4:26:5b:67:0a:3e:5f:c0:96:b3:ee: 07:d1:52:55:8c:aa:45:4f:4e:24:48:c4:e2:dd:17:ec:93:6d: f5:0f:1a:62:a0:35:e9:9f:05:c8:f5:96:f1:eb:ae:2a:c9:a7: 2e:da:34:85:e2:25:5e:0a:5d:06:7c:16:83:3c:82:4a:74:b0: d7:5e:26:db:1d:25:f4:51:b4:ab:c6:a0:3d:32:0e:c6:9c:6b: ac:14:ae:e3:72:11:0b:ae:34:19:84:e4:1a:a4:f2:0f:fc:3f: 91:a8:8f:13:d3:a9:0d:ba:d2:0e:05:24:5e:56:7f:7e:e7:ff: ef:c9:6b:1c:da:43:5b:d9:d3:d3:22:e4:b8:ce:85:66:e9:26: 10:95:65:2a:bd:1d:a8:2a:2f:ff:43:82:0b:00:82:58:69:dd: 86:2c:33:9d:21:95:ec:85:ab:94:20:0b:36:62:42:24:7c:5f: f8:6b:e2:fc:7d:1d:eb:c4:6d:99:5e:cf:d3:76:a0:b4:19:f2: 75:75:59:28:fa:cc:1b:bb:95:14:f9:ca:a4:0c:5a:37:32:df: 3c:7c:01:bf:7c:56:1c:66:da:8d:60:cb:dc:5f:1e:e2:02:2b: c3:48:10:ae:dc:c7:aa:90:e1:fb:5d:70:26:ee:60:d7:48:d0: 50:ce:5c:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAKdxsSkvD3EpsUQRSFwiZvLSWwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA2MTMyMTIyMTVaFw0yNjA2MTQyMjE0MTVaMDMxMTAvBgNV BAMTKDA3ODc2RkQyOTgyMURCNjE3NzQ4NDI2N0YxQzQ3M0JCRkNCMTBCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugkvaqXT2JcoBwagnvzAgdhaG yn5IUdyixy+LHvFCmnvH54UrFNSz/JFVDAjZef6jUPELD15/XSN7t9OnCwrhNYcq aVgMnqUkzRJRQMbalP1Xbu7EQX18yMQz127IVppBMmJi+3/TJMsJddw2JPoa5fTu 5Qr3b50bbZDw1iz4Ymj5kkrwnb5tr0MdFP9VWajk9M/uuLpNVp2zB0Xj4UJHMP0X laPpFWFnuaYqD2BRsxlzMU+KuaX6prb93ca+Tij/D8DkAPFG0ESxdJYmcXiMYB85 vsgP1KjWkV/crirtYjAIqn24dVfdItRqwtj8Pk5fuINd1OjzDARVGesrKNCNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB4dv0pgh22F3SEJn8cRzu/yxC90wHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/b/I1+gxPQm W2cKPl/AlrPuB9FSVYyqRU9OJEjE4t0X7JNt9Q8aYqA16Z8FyPWW8euuKsmnLto0 heIlXgpdBnwWgzyCSnSw114m2x0l9FG0q8agPTIOxpxrrBSu43IRC640GYTkGqTy D/w/kaiPE9OpDbrSDgUkXlZ/fuf/78lrHNpDW9nT0yLkuM6FZukmEJVlKr0dqCov /0OCCwCCWGndhiwznSGV7IWrlCALNmJCJHxf+Gvi/H0d68RtmV7P03agtBnydXVZ KPrMG7uVFPnKpAxaNzLfPHwBv3xWHGbajWDL3F8e4gIrw0gQrtzHqpDh+11wJu5g 10jQUM5c/A== -----END CERTIFICATE-----Generated at Sun Jun 14 04:16:09 2026 by rpki-client