$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: HNgVoelXkkLaWzfzxpGfidtAUEgBCSQXXvTprO0TM5U= Subject key identifier: E4:45:04:E6:A1:4E:AC:D3:AE:00:14:AD:C5:F8:1C:77:80:1F:91:E1 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 6A0AC7AA4B2693956B463853DA97FD161A232DF7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: C3 Signing time: Sun 14 Jun 2026 01:32:35 +0000 Manifest this update: Sun 14 Jun 2026 01:27:35 +0000 Manifest next update: Mon 15 Jun 2026 04:36:35 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: 980bP906eV4xh88G3KXSh0LsWVs9kLJ/VkT1DS80Gmk=) 2: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0a:c7:aa:4b:26:93:95:6b:46:38:53:da:97:fd:16:1a:23:2d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jun 14 01:27:35 2026 GMT Not After : Jun 15 04:36:35 2026 GMT Subject: CN=E44504E6A14EACD3AE0014ADC5F81C77801F91E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:cd:25:73:85:a7:aa:80:b4:60:f2:68:fc: b4:ac:9f:29:ad:c7:1e:c5:60:97:00:23:04:23:17: 02:ed:81:fe:b7:b3:c6:0e:81:48:b6:91:da:87:57: 81:30:c9:2d:b5:c5:ee:ba:fa:db:5a:e9:96:72:50: 5c:5d:65:b3:8c:ab:10:b1:c7:fd:f6:b9:ad:38:e4: 7b:1e:08:f6:9e:f0:29:98:5c:02:2c:84:db:93:b5: 68:53:a9:25:30:3e:64:bb:ea:f0:39:48:60:5f:38: 84:f1:0d:af:94:d6:34:6a:b1:7e:97:d5:33:27:b0: 40:f1:ae:e1:77:6b:5a:e9:04:ff:0a:56:24:14:49: 18:6f:73:34:df:82:26:f6:61:7e:92:2d:9d:5a:c3: e4:bd:34:79:2c:4e:71:c8:81:d4:d7:33:4f:32:65: 19:40:dd:cb:ac:b3:a2:4e:fb:c1:e8:8f:57:ba:19: 8b:07:ca:61:ed:f5:77:c4:7c:ad:34:b3:c7:5f:d1: 35:54:1a:14:b6:23:7f:c0:a2:46:27:70:bd:2b:a0: 83:f7:a5:12:9c:f4:04:00:4a:62:1c:91:ab:e1:59: 97:94:1f:7d:bf:b7:1a:8e:b4:66:05:cc:c5:71:7e: b9:a0:10:5a:d2:76:5f:d7:b7:e0:25:e9:4f:92:4b: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:04:E6:A1:4E:AC:D3:AE:00:14:AD:C5:F8:1C:77:80:1F:91:E1 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:75:bc:8a:83:72:05:b8:02:83:94:e5:48:f9:b3:00:ff:ad: a7:38:6d:06:60:e9:f6:da:a7:0f:31:a6:40:ee:3b:70:38:79: 94:70:4a:2b:0c:cb:8d:1e:b3:c8:a3:50:b1:2b:d9:2f:5f:52: 2f:ac:af:41:24:c2:6e:fa:37:b9:a5:5a:7f:23:f3:92:da:1e: 2f:e6:9d:0a:c8:48:dc:54:29:d7:65:34:99:eb:84:e4:6f:73: 93:8f:11:41:42:ee:3b:df:7f:d4:19:19:fe:5c:98:af:c8:7f: d1:c3:62:14:76:19:26:b1:89:7c:7d:d7:d0:85:1a:85:20:0b: 1c:3f:99:65:b4:67:64:a7:b7:82:39:45:43:fc:4b:5d:79:d9: 53:f3:d1:22:5d:55:e6:56:0c:2d:cf:7a:ef:4c:f3:85:5e:82: 96:52:71:ca:9d:d2:47:bf:0f:1a:c4:ac:ee:c1:43:f1:2d:bc: 2b:c4:be:48:13:de:17:29:e4:ee:91:b0:33:28:71:a5:7d:79: 4d:28:57:71:31:94:c7:0d:52:a8:c5:ac:7f:cc:8a:6e:a4:f0: 95:d2:c5:3a:09:d2:96:ec:1b:be:16:4b:33:fa:7d:58:ee:5d: 33:13:f7:99:59:05:1f:4f:6b:ee:6f:e6:9b:74:f1:d0:d8:24: f3:6f:2c:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUagrHqksmk5VrRjhT2pf9FhojLfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA2MTQwMTI3MzVaFw0yNjA2MTUwNDM2MzVaMDMxMTAvBgNV BAMTKEU0NDUwNEU2QTE0RUFDRDNBRTAwMTRBREM1RjgxQzc3ODAxRjkxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVts0lc4WnqoC0YPJo/LSsnymt xx7FYJcAIwQjFwLtgf63s8YOgUi2kdqHV4EwyS21xe66+tta6ZZyUFxdZbOMqxCx x/32ua045HseCPae8CmYXAIshNuTtWhTqSUwPmS76vA5SGBfOITxDa+U1jRqsX6X 1TMnsEDxruF3a1rpBP8KViQUSRhvczTfgib2YX6SLZ1aw+S9NHksTnHIgdTXM08y ZRlA3cuss6JO+8Hoj1e6GYsHymHt9XfEfK00s8df0TVUGhS2I3/AokYncL0roIP3 pRKc9AQASmIckavhWZeUH32/txqOtGYFzMVxfrmgEFrSdl/Xt+Al6U+SS/5vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5EUE5qFOrNOuABStxfgcd4AfkeEwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXW8ioNyBbgC g5TlSPmzAP+tpzhtBmDp9tqnDzGmQO47cDh5lHBKKwzLjR6zyKNQsSvZL19SL6yv QSTCbvo3uaVafyPzktoeL+adCshI3FQp12U0meuE5G9zk48RQULuO99/1BkZ/lyY r8h/0cNiFHYZJrGJfH3X0IUahSALHD+ZZbRnZKe3gjlFQ/xLXXnZU/PRIl1V5lYM Lc9670zzhV6CllJxyp3SR78PGsSs7sFD8S28K8S+SBPeFynk7pGwMyhxpX15TShX cTGUxw1SqMWsf8yKbqTwldLFOgnSluwbvhZLM/p9WO5dMxP3mVkFH09r7m/mm3Tx 0Ngk828sNA== -----END CERTIFICATE-----Generated at Sun Jun 14 08:39:38 2026 by rpki-client