$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: qaFKej7zMEWA6v9rN69YKMJ+HO86LilUGzZEp7QIIHM= Subject key identifier: 85:8C:10:45:D1:E2:22:C5:FD:0A:F6:E0:B2:F5:7B:D2:51:7A:3D:CF Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 46166B0F8383963D1067178C0581DEF2288F3129 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 8F Signing time: Sat 13 Jun 2026 12:21:49 +0000 Manifest this update: Sat 13 Jun 2026 12:16:49 +0000 Manifest next update: Sun 14 Jun 2026 16:06:49 +0000 Files and hashes: 1: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: 3UJJjWKgddANFx3VV5DtkZuqOz0fJAE//kgROH5MkQ4=) 2: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:16:6b:0f:83:83:96:3d:10:67:17:8c:05:81:de:f2:28:8f:31:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Jun 13 12:16:49 2026 GMT Not After : Jun 14 16:06:49 2026 GMT Subject: CN=858C1045D1E222C5FD0AF6E0B2F57BD2517A3DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:01:25:1a:50:0e:c1:b8:9f:0b:31:b1:e5: 76:3c:d1:5f:c1:8c:83:22:cd:5c:47:1e:5e:bc:e1: 6e:fb:d3:76:0c:51:c4:95:e9:6e:9b:b5:3c:22:44: 27:1e:cf:0e:75:62:df:be:bd:00:a0:1d:cb:9f:0f: 38:32:58:82:4a:49:5e:cb:a0:80:e5:12:9e:b9:74: 69:f1:e2:32:25:50:cb:28:43:f9:7c:6f:0d:4b:57: cb:ed:97:9c:ba:ab:a4:0e:2a:6e:b2:55:51:f9:29: 72:7d:9a:81:48:5a:3a:2f:5c:30:f9:f3:df:9a:0d: 64:87:cb:cc:7c:11:2a:82:3e:78:b5:bb:d6:b4:99: 05:82:fa:d4:1d:0e:3e:a2:1a:d0:da:3f:13:b3:dc: 2d:39:6b:9b:af:f4:13:bf:5a:2f:1b:7f:d7:09:0a: 12:f5:46:7d:e6:06:d3:b7:21:57:f3:68:c8:3f:c8: 75:13:5e:0e:d1:f7:be:3d:dd:db:e5:91:6b:fc:92: f0:8c:28:3b:6c:d6:8e:08:30:ce:4c:4f:34:e6:64: 7f:26:8f:4f:c8:83:ff:aa:04:ce:75:33:b6:bf:95: e9:e9:05:51:8e:ff:13:da:10:b7:d5:90:78:89:c3: 56:3f:70:90:54:48:c6:cd:31:01:e2:b7:9b:44:03: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:10:45:D1:E2:22:C5:FD:0A:F6:E0:B2:F5:7B:D2:51:7A:3D:CF X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d3:e4:40:8d:d9:34:e7:29:46:f8:0b:55:a6:48:e5:af:0d: ab:f2:0c:0f:1c:4f:89:04:5b:5a:69:34:58:44:e0:8f:d7:f9: 61:c7:ce:64:42:d9:40:4a:17:1f:0d:b0:46:a0:aa:12:ac:6d: 46:52:b1:0f:02:8b:93:3c:df:63:53:b2:b2:22:67:d6:b4:1e: 48:5e:d2:b7:fd:48:65:c2:0f:d2:6c:3a:93:bc:9d:90:30:21: 98:12:12:e1:0b:db:6b:0a:8a:06:16:9e:a1:d6:f2:b6:62:63: 6c:fe:80:18:12:ae:5d:ce:01:cc:d1:95:13:d7:50:83:7f:4a: f9:3d:b2:5c:80:42:ac:72:8d:ca:a1:95:9d:20:47:1c:c9:41: d7:f9:9d:f9:f7:1d:75:50:0f:6f:90:ec:c1:c5:5e:0d:be:a6: 0e:69:e0:41:ac:25:a9:53:85:bc:4b:71:50:0c:ed:f1:8f:a4: 50:72:b6:20:05:e4:2b:12:26:dc:d0:ab:7f:3f:a4:20:28:52: 5a:74:d0:0d:9e:d3:67:fb:e2:fb:ce:32:a2:fb:50:dd:57:51: f6:26:27:ce:b6:5f:5e:a6:84:5e:fa:e5:b4:3e:de:88:51:5e: c6:70:ff:d0:49:a8:dd:02:4a:1f:d7:9b:da:a2:2c:10:e4:ea: fd:31:7b:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURhZrD4ODlj0QZxeMBYHe8iiPMSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA2MTMxMjE2NDlaFw0yNjA2MTQxNjA2NDlaMDMxMTAvBgNV BAMTKDg1OEMxMDQ1RDFFMjIyQzVGRDBBRjZFMEIyRjU3QkQyNTE3QTNEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvgElGlAOwbifCzGx5XY80V/B jIMizVxHHl684W7703YMUcSV6W6btTwiRCcezw51Yt++vQCgHcufDzgyWIJKSV7L oIDlEp65dGnx4jIlUMsoQ/l8bw1LV8vtl5y6q6QOKm6yVVH5KXJ9moFIWjovXDD5 89+aDWSHy8x8ESqCPni1u9a0mQWC+tQdDj6iGtDaPxOz3C05a5uv9BO/Wi8bf9cJ ChL1Rn3mBtO3IVfzaMg/yHUTXg7R97493dvlkWv8kvCMKDts1o4IMM5MTzTmZH8m j0/Ig/+qBM51M7a/lenpBVGO/xPaELfVkHiJw1Y/cJBUSMbNMQHit5tEA0hbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhYwQRdHiIsX9CvbgsvV70lF6Pc8wHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtPkQI3ZNOcp RvgLVaZI5a8Nq/IMDxxPiQRbWmk0WETgj9f5YcfOZELZQEoXHw2wRqCqEqxtRlKx DwKLkzzfY1OysiJn1rQeSF7St/1IZcIP0mw6k7ydkDAhmBIS4QvbawqKBhaeodby tmJjbP6AGBKuXc4BzNGVE9dQg39K+T2yXIBCrHKNyqGVnSBHHMlB1/md+fcddVAP b5DswcVeDb6mDmngQawlqVOFvEtxUAzt8Y+kUHK2IAXkKxIm3NCrfz+kIChSWnTQ DZ7TZ/vi+84yovtQ3VdR9iYnzrZfXqaEXvrltD7eiFFexnD/0Emo3QJKH9eb2qIs EOTq/TF7ww== -----END CERTIFICATE-----Generated at Sun Jun 14 07:11:37 2026 by rpki-client