$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json) Hash identifier: k3gkFKEO7LJWFNXF/sVLe0esgj15wgOOxhVQpj3dBw8= Subject key identifier: CB:F6:24:8A:85:43:B9:4D:2E:9D:EC:AF:90:94:39:F1:B1:ED:F2:89 Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Certificate serial: 6D5EB91855EFE27999B59AB54F878187D86EB736 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft Manifest number: BE Signing time: Sat 13 Jun 2026 18:47:08 +0000 Manifest this update: Sat 13 Jun 2026 18:42:08 +0000 Manifest next update: Sun 14 Jun 2026 19:47:08 +0000 Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: G0usclFRE5FTi3y/moXyc0xzGZUnt6Jo74yNG/OCer0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5e:b9:18:55:ef:e2:79:99:b5:9a:b5:4f:87:81:87:d8:6e:b7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Validity Not Before: Jun 13 18:42:08 2026 GMT Not After : Jun 14 19:47:08 2026 GMT Subject: CN=CBF6248A8543B94D2E9DECAF909439F1B1EDF289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:e4:8b:8d:11:23:9a:db:41:6f:78:7d:ff: 17:d1:fe:2c:f0:00:ac:fa:d7:fa:50:01:eb:fa:70: d3:65:b8:28:72:a2:74:d5:52:b6:21:76:26:00:bb: 23:d8:88:c3:a7:95:92:6c:09:cd:ce:e8:fe:23:da: 96:62:9c:f6:08:d0:c8:9b:36:5d:71:f8:e9:aa:03: 94:68:cf:16:e9:ba:41:62:26:93:ed:11:6e:2e:a5: e5:71:c5:8b:bd:e0:70:29:e1:18:86:c9:9a:99:1d: c4:55:a1:5b:86:fe:cb:78:43:76:cd:21:d2:85:87: 6b:dc:d1:75:57:94:e8:4a:ee:4f:59:50:1f:c1:12: d3:f9:9a:8c:86:19:30:1e:59:87:92:b3:42:b0:4d: 26:0c:5c:fa:0d:c3:1b:68:07:ef:33:58:75:88:c7: 66:99:8e:11:42:e5:63:8f:36:f7:f6:34:99:61:fa: de:f1:e6:e1:ac:9f:d9:21:c7:12:b8:e4:15:99:39: 2f:cf:7c:cd:96:b0:6c:51:12:0d:54:88:74:c8:95: c4:49:cf:a8:41:9e:62:26:e8:e6:b0:fb:b6:d6:68: b7:54:59:e3:0b:48:b6:85:92:ff:32:c8:8b:75:d5: ac:53:ce:8a:d1:6d:1e:fb:2b:7e:5c:1d:6d:8a:9f: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:24:8A:85:43:B9:4D:2E:9D:EC:AF:90:94:39:F1:B1:ED:F2:89 X509v3 Authority Key Identifier: keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:82:b5:51:0c:61:78:e6:ac:54:b8:6a:45:83:62:2b:88:bc: bb:a8:cb:45:fa:32:d9:3d:4d:7f:95:6e:8a:29:f0:71:92:9b: a1:44:4d:15:5a:4f:1d:d0:8c:92:fa:07:43:61:ff:9f:8e:ac: 6b:7b:b0:e9:cd:ba:84:a9:31:61:9f:68:37:e7:94:d5:56:c7: 97:cc:47:c3:47:e5:ad:8d:39:09:00:5d:7d:d8:57:11:8c:dd: cf:a8:68:c2:42:12:6b:65:96:3b:b3:27:40:7a:0a:bd:b6:0c: 86:52:be:f7:31:9e:dc:e0:c1:51:ef:ac:ef:b3:2f:bd:5f:19: 7c:97:45:61:c7:d1:6f:46:5b:a9:e2:d6:8c:d4:58:c8:03:95: ff:35:4a:a8:12:14:e4:54:1d:b0:01:17:4c:d0:66:43:c3:47: 4d:a2:7d:3b:f8:88:87:86:79:2a:38:f2:d4:2c:76:6c:9a:fc: 43:07:b5:f9:af:30:fc:e1:5d:08:80:5d:78:7e:a7:bd:01:41: e0:69:e7:eb:38:f5:05:26:39:94:cc:95:03:42:5a:82:b1:72: f9:48:3f:e6:ab:04:da:10:0c:e0:b9:9b:14:82:2a:c5:d7:9d: 36:21:34:d8:ba:eb:4f:56:6f:78:57:65:87:16:66:47:5a:24: 8e:d3:a9:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbV65GFXv4nmZtZq1T4eBh9hutzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5 NjVFNTRBNTAeFw0yNjA2MTMxODQyMDhaFw0yNjA2MTQxOTQ3MDhaMDMxMTAvBgNV BAMTKENCRjYyNDhBODU0M0I5NEQyRTlERUNBRjkwOTQzOUYxQjFFREYyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnouSLjREjmttBb3h9/xfR/izw AKz61/pQAev6cNNluChyonTVUrYhdiYAuyPYiMOnlZJsCc3O6P4j2pZinPYI0Mib Nl1x+OmqA5RozxbpukFiJpPtEW4upeVxxYu94HAp4RiGyZqZHcRVoVuG/st4Q3bN IdKFh2vc0XVXlOhK7k9ZUB/BEtP5moyGGTAeWYeSs0KwTSYMXPoNwxtoB+8zWHWI x2aZjhFC5WOPNvf2NJlh+t7x5uGsn9khxxK45BWZOS/PfM2WsGxREg1UiHTIlcRJ z6hBnmIm6Oaw+7bWaLdUWeMLSLaFkv8yyIt11axTzorRbR77K35cHW2Kn6HlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy/YkioVDuU0uneyvkJQ58bHt8okwHwYDVR0j BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxYK1UQxheOas VLhqRYNiK4i8u6jLRfoy2T1Nf5VuiinwcZKboURNFVpPHdCMkvoHQ2H/n46sa3uw 6c26hKkxYZ9oN+eU1VbHl8xHw0flrY05CQBdfdhXEYzdz6howkISa2WWO7MnQHoK vbYMhlK+9zGe3ODBUe+s77MvvV8ZfJdFYcfRb0ZbqeLWjNRYyAOV/zVKqBIU5FQd sAEXTNBmQ8NHTaJ9O/iIh4Z5Kjjy1Cx2bJr8Qwe1+a8w/OFdCIBdeH6nvQFB4Gnn 6zj1BSY5lMyVA0JagrFy+Ug/5qsE2hAM4LmbFIIqxdedNiE02LrrT1ZveFdlhxZm R1okjtOpYQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:29 2026 by rpki-client