$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: B+w9bFdGcqkqZut2qW3Ph/Ys9tNh0PA28N1i1cOU8Ko= Subject key identifier: B5:79:6B:2D:DD:07:BA:88:CA:71:9B:00:70:3C:F6:76:F1:D6:2C:EB Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 6D6796932E60CC0BAE5206E680711D0143CAB031 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: C4 Signing time: Sat 13 Jun 2026 22:32:21 +0000 Manifest this update: Sat 13 Jun 2026 22:27:21 +0000 Manifest next update: Mon 15 Jun 2026 01:54:21 +0000 Files and hashes: 1: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) 2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: WqdR9QFKHs3gZYjvK/VXtIyDZuCGTs42c0GF/w58mNM=) 3: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:96:93:2e:60:cc:0b:ae:52:06:e6:80:71:1d:01:43:ca:b0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Jun 13 22:27:21 2026 GMT Not After : Jun 15 01:54:21 2026 GMT Subject: CN=B5796B2DDD07BA88CA719B00703CF676F1D62CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:f7:c8:8d:d1:17:0d:4c:3c:99:3e:9c:77: 09:2e:a1:20:7f:f4:d3:14:47:cd:df:b1:8d:89:9e: 94:de:51:fc:78:16:c4:31:99:86:70:c6:b8:ab:e2: f8:13:2c:72:de:d4:16:bd:b5:16:6d:2e:09:31:fe: 3f:a7:ef:bb:6c:de:48:31:95:ed:9c:44:06:22:76: 1e:9e:5e:0c:3b:4d:54:61:f9:32:27:2c:75:33:10: 6b:40:9a:03:81:36:26:5f:1d:e8:3c:6e:ac:a3:bc: 46:b6:d2:6f:39:4d:8e:ae:1b:9c:11:d9:df:07:bf: 31:ce:89:a4:7f:cf:82:f3:d8:61:6a:89:15:cc:4a: 7a:6a:52:63:2a:ee:65:77:1e:b3:33:e6:fe:bf:d5: 25:3f:f2:45:b7:6b:90:50:bc:a6:09:c9:e3:ae:50: a6:b1:38:34:9b:1a:30:8e:c9:65:10:af:80:9a:e6: ec:2f:67:ac:f5:fa:a7:1d:7b:eb:d3:94:ff:e1:98: bf:59:cb:0f:c4:3e:6c:6d:70:07:58:49:87:15:c5: a5:ae:88:45:2d:c8:4a:6d:b2:07:e6:26:c6:ac:f3: d0:da:87:0b:c9:18:c7:6d:40:4a:bd:1f:b0:cd:d3: 97:e1:bf:c5:49:ac:a2:14:88:ca:d8:af:3c:ec:b5: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:6B:2D:DD:07:BA:88:CA:71:9B:00:70:3C:F6:76:F1:D6:2C:EB X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c2:d7:dc:f8:32:1f:5c:33:e1:61:2a:f4:13:53:aa:11:53: dd:d4:64:e0:bc:54:a7:d2:69:38:f2:16:81:51:e8:c1:6a:8b: b8:f6:e8:da:9a:58:83:73:d2:42:e6:4d:77:55:33:ec:90:7e: 66:a3:98:2b:02:cc:18:a6:ed:dc:76:9c:a6:02:24:69:5b:26: 69:74:a8:54:f0:97:2e:fc:1b:f2:0d:d7:0d:74:ab:eb:56:df: f8:e8:d8:0e:b4:12:2d:9d:4e:02:c9:a5:56:1a:a6:14:72:13: 1f:ad:d9:47:a1:fd:d0:5b:ed:3c:77:a6:8c:ee:c6:4f:fb:da: 4b:b0:d4:aa:1b:4b:93:5c:65:ba:07:c0:79:e1:c3:4f:de:0b: 72:c4:1c:3e:cb:cd:45:98:69:44:ff:42:6a:26:fe:23:4c:35: 00:50:da:7e:41:89:0c:6f:38:52:29:71:98:36:a4:12:10:39: 84:fa:31:67:0f:c3:28:0c:7a:98:46:63:fb:ad:2c:03:22:a9: d7:ba:4e:bb:a0:d4:36:95:d9:72:00:31:61:da:b4:07:db:83: 57:a3:3b:63:44:6b:43:ee:38:1b:ec:8c:3c:40:2f:54:77:62: 67:f1:e9:04:19:e2:be:01:6b:50:b5:4d:1d:9d:16:e8:57:f3: 32:99:dc:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbWeWky5gzAuuUgbmgHEdAUPKsDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA2MTMyMjI3MjFaFw0yNjA2MTUwMTU0MjFaMDMxMTAvBgNV BAMTKEI1Nzk2QjJEREQwN0JBODhDQTcxOUIwMDcwM0NGNjc2RjFENjJDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlPfIjdEXDUw8mT6cdwkuoSB/ 9NMUR83fsY2JnpTeUfx4FsQxmYZwxrir4vgTLHLe1Ba9tRZtLgkx/j+n77ts3kgx le2cRAYidh6eXgw7TVRh+TInLHUzEGtAmgOBNiZfHeg8bqyjvEa20m85TY6uG5wR 2d8HvzHOiaR/z4Lz2GFqiRXMSnpqUmMq7mV3HrMz5v6/1SU/8kW3a5BQvKYJyeOu UKaxODSbGjCOyWUQr4Ca5uwvZ6z1+qcde+vTlP/hmL9Zyw/EPmxtcAdYSYcVxaWu iEUtyEptsgfmJsas89DahwvJGMdtQEq9H7DN05fhv8VJrKIUiMrYrzzstajlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtXlrLd0HuojKcZsAcDz2dvHWLOswHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcLX3PgyH1wz 4WEq9BNTqhFT3dRk4LxUp9JpOPIWgVHowWqLuPbo2ppYg3PSQuZNd1Uz7JB+ZqOY KwLMGKbt3HacpgIkaVsmaXSoVPCXLvwb8g3XDXSr61bf+OjYDrQSLZ1OAsmlVhqm FHITH63ZR6H90FvtPHemjO7GT/vaS7DUqhtLk1xlugfAeeHDT94LcsQcPsvNRZhp RP9Caib+I0w1AFDafkGJDG84UilxmDakEhA5hPoxZw/DKAx6mEZj+60sAyKp17pO u6DUNpXZcgAxYdq0B9uDV6M7Y0RrQ+44G+yMPEAvVHdiZ/HpBBnivgFrULVNHZ0W 6FfzMpnccg== -----END CERTIFICATE-----Generated at Sun Jun 14 05:58:17 2026 by rpki-client