$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: yM58n8bL2Y9ghMbsnL2xmckHzVrCzeVEOEdsqZFyzJI= Subject key identifier: CB:46:D3:F5:A3:DA:5E:A4:C7:79:0D:C6:C9:65:91:77:2D:70:B6:33 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 1C42E39B6C687070233A1CABEDE683F58812F928 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 13:41:49 +0000 Manifest this update: Sat 13 Jun 2026 13:36:49 +0000 Manifest next update: Sun 14 Jun 2026 17:40:49 +0000 Files and hashes: 1: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: iCxwtiuGHjenh89mYk8jYUG4/vfMSKSnAWUARkdLIUw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:42:e3:9b:6c:68:70:70:23:3a:1c:ab:ed:e6:83:f5:88:12:f9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jun 13 13:36:49 2026 GMT Not After : Jun 14 17:40:49 2026 GMT Subject: CN=CB46D3F5A3DA5EA4C7790DC6C96591772D70B633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:1d:b9:c0:36:0f:64:90:69:db:2b:36:c6: c9:4b:5a:a6:26:fd:30:92:ef:0f:55:54:1d:54:e0: e2:f2:2e:86:b5:70:06:7f:27:7b:cf:5a:67:06:cc: 27:cd:8d:f3:ca:60:0d:0c:ad:3e:13:7d:47:b7:f6: dd:57:1e:cf:3c:43:d9:25:a2:8d:7d:41:51:33:eb: 8c:da:fb:5e:c0:6c:20:1f:d1:10:23:8b:56:2e:d3: 1f:07:25:8d:01:30:3a:65:e2:04:c9:5a:c0:7d:89: 2a:d6:d9:b1:e5:0c:9d:80:2b:ac:2b:c2:c1:c0:41: ed:26:9d:8e:d3:dd:49:fa:52:bf:c2:89:4a:43:de: 8b:50:dc:31:23:01:67:82:c1:bc:7b:ef:1c:38:b5: 9f:d4:64:fc:2f:e6:2a:d7:36:f7:56:de:31:08:f6: bd:b2:e3:8b:de:91:80:71:d8:ad:60:57:09:73:9a: b9:16:bb:0f:9a:47:06:54:b1:ab:71:d3:95:1e:05: e6:12:26:dd:8d:c6:96:4f:f3:7b:cd:3c:25:7d:fb: 5d:ca:d1:c5:30:14:b9:4c:2e:e9:4e:36:18:8a:46: f1:eb:e0:49:bc:92:97:b7:df:cc:54:b5:48:36:62: 76:a5:a8:c4:1b:34:86:e0:e8:8b:80:1e:76:a1:8b: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:D3:F5:A3:DA:5E:A4:C7:79:0D:C6:C9:65:91:77:2D:70:B6:33 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b2:68:93:da:54:78:9b:29:5c:a2:af:3c:c4:00:e7:4a:42: 18:42:55:2c:ed:d5:98:84:f4:6e:81:5c:b7:2d:21:43:67:96: b2:88:82:52:92:a7:7b:ac:f2:70:24:34:64:71:a3:b7:14:29: da:57:1d:24:af:ba:3b:35:30:de:5d:ab:bf:71:5b:b5:e7:07: 8e:55:56:1e:fe:ad:2b:67:46:0f:5f:8d:3b:3b:7a:d0:27:cf: e6:68:cc:5d:df:03:e9:0c:20:aa:47:fe:67:2b:3e:b2:4a:5f: 7e:01:12:a2:5a:47:83:3e:df:d3:a9:91:a3:83:a5:89:31:33: 54:a6:ed:9b:3d:f0:bd:73:0b:1d:8a:d1:33:8d:6c:3f:16:55: 7a:4a:76:19:93:65:9e:8c:3d:61:5f:3e:c8:85:2b:3e:ea:4f: 7d:c3:b2:c1:af:6c:d2:4f:39:b3:b0:54:48:6e:79:8c:84:1d: 9b:dd:6c:bb:e6:01:b0:35:e9:ea:6b:1e:09:cc:26:ec:58:04: 4c:64:dc:a8:4b:66:83:8e:c2:dd:3e:e0:90:a7:e4:a9:cf:5f: 75:0d:0a:cd:e3:4a:08:22:20:57:70:02:97:37:df:14:90:ee: 26:87:51:4b:da:d0:57:e5:a9:33:5a:f7:13:3a:56:a7:a1:0d: 7a:45:57:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHELjm2xocHAjOhyr7eaD9YgS+SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA2MTMxMzM2NDlaFw0yNjA2MTQxNzQwNDlaMDMxMTAvBgNV BAMTKENCNDZEM0Y1QTNEQTVFQTRDNzc5MERDNkM5NjU5MTc3MkQ3MEI2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHPh25wDYPZJBp2ys2xslLWqYm /TCS7w9VVB1U4OLyLoa1cAZ/J3vPWmcGzCfNjfPKYA0MrT4TfUe39t1XHs88Q9kl oo19QVEz64za+17AbCAf0RAji1Yu0x8HJY0BMDpl4gTJWsB9iSrW2bHlDJ2AK6wr wsHAQe0mnY7T3Un6Ur/CiUpD3otQ3DEjAWeCwbx77xw4tZ/UZPwv5irXNvdW3jEI 9r2y44vekYBx2K1gVwlzmrkWuw+aRwZUsatx05UeBeYSJt2NxpZP83vNPCV9+13K 0cUwFLlMLulONhiKRvHr4Em8kpe338xUtUg2YnalqMQbNIbg6IuAHnahi21VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy0bT9aPaXqTHeQ3GyWWRdy1wtjMwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbJok9pUeJsp XKKvPMQA50pCGEJVLO3VmIT0boFcty0hQ2eWsoiCUpKne6zycCQ0ZHGjtxQp2lcd JK+6OzUw3l2rv3FbtecHjlVWHv6tK2dGD1+NOzt60CfP5mjMXd8D6Qwgqkf+Zys+ skpffgESolpHgz7f06mRo4OliTEzVKbtmz3wvXMLHYrRM41sPxZVekp2GZNlnow9 YV8+yIUrPupPfcOywa9s0k85s7BUSG55jIQdm91su+YBsDXp6mseCcwm7FgETGTc qEtmg47C3T7gkKfkqc9fdQ0KzeNKCCIgV3AClzffFJDuJodRS9rQV+WpM1r3EzpW p6ENekVXYQ== -----END CERTIFICATE-----Generated at Sun Jun 14 03:41:11 2026 by rpki-client