$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: 2EL2Ssb5oQou+rTusMzukvs3rrudD5RFKkWdfFOhacU= Subject key identifier: 34:5B:B0:3F:1F:E0:38:07:27:B6:B3:93:B5:04:E6:BB:76:5E:C6:07 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 01307B766BA0EBF308B24401E339637ABBF159F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 19:17:08 +0000 Manifest this update: Sat 13 Jun 2026 19:12:08 +0000 Manifest next update: Sun 14 Jun 2026 22:32:08 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: nV7cYnh6Ku5oihXHX4vjPtq21hu7LgU2xWv+9XA3fLE=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:30:7b:76:6b:a0:eb:f3:08:b2:44:01:e3:39:63:7a:bb:f1:59:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jun 13 19:12:08 2026 GMT Not After : Jun 14 22:32:08 2026 GMT Subject: CN=345BB03F1FE0380727B6B393B504E6BB765EC607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:60:a3:f5:3c:17:82:27:d0:65:5d:e1:ef: 79:0f:c7:99:e8:6d:7e:ad:5a:c5:9f:2d:78:20:ce: 29:3d:95:93:bb:a6:82:c1:6d:64:6a:04:e9:7c:85: 8b:7d:9c:a7:f6:c4:ec:2e:8b:7a:96:13:8e:7e:bb: d5:e0:c2:ba:73:8f:01:5f:a5:55:a4:70:61:41:f3: a6:35:b5:72:66:72:18:18:28:b3:cd:dd:ce:e1:d4: fb:04:fa:4c:c6:a0:00:05:3b:b4:b9:e0:34:f1:4c: 92:6a:0f:2e:4f:0b:e2:94:bb:04:95:57:bf:3d:58: 11:e8:15:ec:9c:2c:ef:97:54:ba:e1:86:d2:90:10: f2:29:ac:ca:ca:a5:d5:76:02:5d:ad:1f:8d:6d:39: 0b:36:12:fd:a9:4d:45:48:1d:05:9a:60:17:3a:49: fe:db:b7:98:ea:75:dc:77:a0:a0:75:87:99:66:31: 03:43:b8:fe:e3:c2:9c:25:ae:f1:86:1e:4a:8b:23: f8:16:26:62:b5:e7:7a:20:86:aa:9f:aa:30:09:8b: d7:85:4b:48:93:4c:c4:8e:3b:b3:c9:cf:62:dd:cf: 55:86:16:05:9b:2a:87:89:8b:14:d7:c4:2d:4c:48: e5:9a:d6:1c:e1:b0:39:f2:71:ea:0c:67:77:71:20: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:B0:3F:1F:E0:38:07:27:B6:B3:93:B5:04:E6:BB:76:5E:C6:07 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e5:c6:1a:77:04:27:f6:fc:08:5d:2e:76:42:41:9f:10:c8: a7:58:a8:be:75:5e:0e:29:89:1f:a5:74:e5:40:aa:12:77:1b: e5:9e:88:48:aa:19:19:66:cf:f5:39:c3:bc:63:47:d7:57:7e: 98:78:e5:e0:c8:f3:ad:59:7c:91:ec:18:ea:ac:e4:6e:54:43: 4e:77:5a:1e:c6:d8:e0:d3:cc:43:22:14:39:ad:50:be:08:29: 00:5d:36:68:bb:ed:da:a4:a8:e1:ae:e9:58:5a:a2:41:7a:27: 09:c8:e4:f7:ad:5b:8a:15:5b:70:6d:fb:20:d9:8a:da:2b:35: 45:fd:8c:4f:40:e4:31:52:d5:04:f0:95:f6:70:5f:cb:25:7c: 6e:19:23:f7:dd:2f:da:8b:4c:82:a1:7c:b8:ed:53:29:3c:dd: 82:62:c8:9c:ff:fa:4f:91:c7:0c:36:e7:b1:89:e0:f6:b5:eb: d7:47:01:f7:a1:4e:27:f1:19:53:6d:d3:c0:6c:ec:57:65:3e: 31:6a:41:0b:2c:9b:ed:ca:82:ff:b8:78:1f:bf:b3:36:75:3c: 73:ac:86:04:eb:29:ae:3d:73:65:ff:11:3a:9f:6e:97:c4:a6: 6f:56:6d:ae:be:cc:64:c9:e0:c8:ba:ad:db:61:7e:70:05:dc: 65:3e:1a:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUATB7dmug6/MIskQB4zljervxWfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA2MTMxOTEyMDhaFw0yNjA2MTQyMjMyMDhaMDMxMTAvBgNV BAMTKDM0NUJCMDNGMUZFMDM4MDcyN0I2QjM5M0I1MDRFNkJCNzY1RUM2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKmCj9TwXgifQZV3h73kPx5no bX6tWsWfLXggzik9lZO7poLBbWRqBOl8hYt9nKf2xOwui3qWE45+u9XgwrpzjwFf pVWkcGFB86Y1tXJmchgYKLPN3c7h1PsE+kzGoAAFO7S54DTxTJJqDy5PC+KUuwSV V789WBHoFeycLO+XVLrhhtKQEPIprMrKpdV2Al2tH41tOQs2Ev2pTUVIHQWaYBc6 Sf7bt5jqddx3oKB1h5lmMQNDuP7jwpwlrvGGHkqLI/gWJmK153oghqqfqjAJi9eF S0iTTMSOO7PJz2Ldz1WGFgWbKoeJixTXxC1MSOWa1hzhsDnyceoMZ3dxIJQxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNFuwPx/gOAcntrOTtQTmu3ZexgcwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+XGGncEJ/b8 CF0udkJBnxDIp1iovnVeDimJH6V05UCqEncb5Z6ISKoZGWbP9TnDvGNH11d+mHjl 4MjzrVl8kewY6qzkblRDTndaHsbY4NPMQyIUOa1QvggpAF02aLvt2qSo4a7pWFqi QXonCcjk961bihVbcG37INmK2is1Rf2MT0DkMVLVBPCV9nBfyyV8bhkj990v2otM gqF8uO1TKTzdgmLInP/6T5HHDDbnsYng9rXr10cB96FOJ/EZU23TwGzsV2U+MWpB Cyyb7cqC/7h4H7+zNnU8c6yGBOsprj1zZf8ROp9ul8Smb1Ztrr7MZMngyLqt22F+ cAXcZT4axA== -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:55 2026 by rpki-client