$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: 4aTnkXwpABLqcIAIH062IVAWt5TkWWq0ou8X+jHpbNw= Subject key identifier: EF:B3:57:CC:B7:44:3C:6A:4D:03:93:57:7A:98:77:4E:5B:07:01:21 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 014B505697533E72D2B6F77DBE11F7714570658C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 23:57:27 +0000 Manifest this update: Sat 13 Jun 2026 23:52:27 +0000 Manifest next update: Mon 15 Jun 2026 01:26:27 +0000 Files and hashes: 1: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: lX/GLjkzM7+UeZUYXBezqXoY4Xur4jzjdcvp74+HiEk=) 2: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 3: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 4: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 5: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 6: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4b:50:56:97:53:3e:72:d2:b6:f7:7d:be:11:f7:71:45:70:65:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Jun 13 23:52:27 2026 GMT Not After : Jun 15 01:26:27 2026 GMT Subject: CN=EFB357CCB7443C6A4D0393577A98774E5B070121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:32:52:a3:5b:70:4a:03:dd:e1:bf:92:de:36: 50:28:1d:2a:22:ab:8a:ef:d6:aa:42:3c:a7:fe:e7: ec:d2:02:31:dc:96:de:7c:e9:9d:48:a2:be:30:d5: 28:81:0a:ae:1e:34:89:85:26:fd:e7:c2:f0:83:03: a0:d9:fd:98:d1:ad:7a:2f:b7:ea:cc:43:bc:06:f7: ff:81:0c:2c:fe:f9:58:0e:23:e6:2d:49:ba:77:16: c8:3e:86:1a:4d:d6:88:39:a1:fe:48:f1:4c:67:14: a0:f0:d2:61:e3:6e:4b:ea:bb:73:97:39:11:0d:5f: 12:06:84:33:94:83:f3:b3:a8:e0:4a:6b:9e:9b:1a: f9:b7:b7:11:c9:91:64:53:ec:d0:fe:5d:b9:c0:57: 9a:23:d6:dd:09:7d:93:2f:b9:56:58:f3:c6:97:45: e8:db:ed:b1:14:88:72:c7:1d:8b:c5:aa:a5:5a:5c: ad:0b:03:0e:1c:a6:50:a6:ff:8f:31:6e:e2:7f:07: 75:a0:02:52:3e:27:0c:5a:40:45:f3:3e:ed:69:88: 0a:3b:47:49:8f:1e:cc:54:01:44:77:a9:5d:b3:fd: 75:80:4d:cb:24:e8:77:51:d9:bb:d1:c9:72:74:61: b5:12:4b:98:e1:95:ea:82:44:c0:bd:7c:60:85:bb: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B3:57:CC:B7:44:3C:6A:4D:03:93:57:7A:98:77:4E:5B:07:01:21 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0c:25:0b:2e:6c:18:31:79:2b:4e:0d:eb:76:1c:29:ea:85: ee:e7:4a:f7:3c:e0:63:d3:58:e3:f1:fb:3d:97:3e:1f:d0:66: 63:32:c3:a3:13:76:0c:15:1e:8d:a4:0d:50:3b:9f:fa:4e:85: e6:63:a1:c4:68:45:02:f1:44:48:6f:19:4d:09:7d:82:d7:5b: 87:6e:59:98:9b:0e:db:3b:13:9d:6b:8d:10:fa:16:bf:50:c4: 1f:d5:c2:62:93:08:89:f9:14:1e:8d:e5:92:7b:06:55:40:14: 36:b4:58:2e:80:21:ff:71:aa:e4:ba:30:1b:66:77:ef:76:6d: 42:90:25:64:d9:f5:8f:92:ee:c6:e6:c9:29:55:06:23:66:fb: 9d:18:59:8e:5e:01:b9:a8:ab:2c:ed:d5:36:d6:ee:82:ba:b6: 20:18:ee:00:59:f8:0b:a5:9e:3f:51:d1:0f:a6:ce:dd:d8:0d: 29:1c:21:d6:8a:cd:63:3b:76:36:30:b9:9f:2f:bf:f5:ab:da: 38:ee:be:d5:6e:35:29:65:75:9e:2b:45:a6:57:36:e9:d4:b3: 95:b2:b2:f8:e6:b8:5c:ec:c6:10:b9:07:2c:2c:29:8c:8e:97: 9f:09:fc:0e:92:c6:14:56:08:2a:b2:e3:e9:b1:3b:f8:7b:d8: cf:72:94:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAUtQVpdTPnLStvd9vhH3cUVwZYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA2MTMyMzUyMjdaFw0yNjA2MTUwMTI2MjdaMDMxMTAvBgNV BAMTKEVGQjM1N0NDQjc0NDNDNkE0RDAzOTM1NzdBOTg3NzRFNUIwNzAxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2MlKjW3BKA93hv5LeNlAoHSoi q4rv1qpCPKf+5+zSAjHclt586Z1Ior4w1SiBCq4eNImFJv3nwvCDA6DZ/ZjRrXov t+rMQ7wG9/+BDCz++VgOI+YtSbp3Fsg+hhpN1og5of5I8UxnFKDw0mHjbkvqu3OX ORENXxIGhDOUg/OzqOBKa56bGvm3txHJkWRT7ND+XbnAV5oj1t0JfZMvuVZY88aX Rejb7bEUiHLHHYvFqqVaXK0LAw4cplCm/48xbuJ/B3WgAlI+JwxaQEXzPu1piAo7 R0mPHsxUAUR3qV2z/XWATcsk6HdR2bvRyXJ0YbUSS5jhleqCRMC9fGCFu/xPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU77NXzLdEPGpNA5NXeph3TlsHASEwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgwlCy5sGDF5 K04N63YcKeqF7udK9zzgY9NY4/H7PZc+H9BmYzLDoxN2DBUejaQNUDuf+k6F5mOh xGhFAvFESG8ZTQl9gtdbh25ZmJsO2zsTnWuNEPoWv1DEH9XCYpMIifkUHo3lknsG VUAUNrRYLoAh/3Gq5LowG2Z373ZtQpAlZNn1j5LuxubJKVUGI2b7nRhZjl4Buair LO3VNtbugrq2IBjuAFn4C6WeP1HRD6bO3dgNKRwh1orNYzt2NjC5ny+/9avaOO6+ 1W41KWV1nitFplc26dSzlbKy+Oa4XOzGELkHLCwpjI6Xnwn8DpLGFFYIKrLj6bE7 +HvYz3KUYg== -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:30 2026 by rpki-client