$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: LPuyBg3nmXFZ+PVtTqfJQMcM5BLxhAUuyYCkUO09TlM= Subject key identifier: 15:71:E1:01:A4:16:42:D1:A1:07:71:93:37:FA:CD:36:F1:5F:EE:A9 Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 38771D1FABC39D882CD5FD9558D65532AA1A3119 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 64 Signing time: Sat 13 Jun 2026 09:36:40 +0000 Manifest this update: Sat 13 Jun 2026 09:31:40 +0000 Manifest next update: Sun 14 Jun 2026 13:12:40 +0000 Files and hashes: 1: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 2: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) 3: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: sgwccuZ+BNMF/AsLQ3EMl2ztFI4jcYtHkxMwtdlmzgc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:77:1d:1f:ab:c3:9d:88:2c:d5:fd:95:58:d6:55:32:aa:1a:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Jun 13 09:31:40 2026 GMT Not After : Jun 14 13:12:40 2026 GMT Subject: CN=1571E101A41642D1A107719337FACD36F15FEEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:06:d4:c6:b5:0f:be:e6:a8:71:6a:f7:fa: 36:d5:74:d3:56:ff:02:b0:bb:a6:4e:fd:6b:41:6f: f4:83:c9:3a:ad:a8:5c:6e:14:54:06:5b:34:39:ee: 95:2c:45:3c:19:43:07:68:7e:9e:b6:88:ef:e9:9e: 0b:1c:6e:ca:41:96:3a:7b:69:c1:7d:c2:18:24:00: 00:eb:3c:3c:68:e5:14:fe:ce:d9:9e:07:47:3f:d3: 10:99:36:9a:0e:d9:59:ea:31:52:0b:a4:8c:e9:a3: ff:b5:dd:12:a8:7a:8e:2d:97:78:6e:2a:1f:ac:8f: cd:95:4d:7b:bf:1e:aa:fe:27:27:73:5c:16:38:09: 1e:2c:97:03:94:d2:fa:f7:f4:b7:d8:74:68:d8:45: 3b:b5:b9:79:58:5a:33:28:54:53:61:8c:32:7b:a9: 0c:3d:1e:7c:c0:03:5f:fb:00:2a:44:c0:8e:49:53: da:fb:56:f4:11:a6:76:62:b4:6c:38:d4:0b:e7:4b: d5:5b:e3:c0:5e:71:84:fb:a4:ee:0c:cb:50:fb:41: f2:73:cd:f8:be:9f:90:96:a0:1b:a4:a6:4d:41:ac: fa:27:c8:e8:e7:22:82:e7:cc:44:5d:da:3f:fd:17: 19:85:e7:02:da:e9:3b:3b:35:fc:5a:28:da:8f:d9: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:E1:01:A4:16:42:D1:A1:07:71:93:37:FA:CD:36:F1:5F:EE:A9 X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ab:fc:54:d9:90:ea:b4:ec:dd:f6:3d:02:1e:b4:d4:bd:a6: a5:b1:b1:12:55:69:b7:54:3e:af:6b:15:8e:02:3f:cb:c9:83: d9:de:ed:ed:0e:5a:5b:e9:f5:5f:2e:4c:e4:60:16:e8:20:4f: 81:e3:af:fd:7b:10:77:bd:06:a8:37:50:b4:37:cd:8d:4b:48: 37:a0:f5:c8:13:cd:4a:f2:ea:ab:b0:46:89:f1:a3:7f:d8:4b: e1:39:f2:b0:c9:e8:10:f1:a2:99:2e:23:d3:e2:f3:b2:22:2d: 89:5a:5a:bb:24:c4:ed:44:13:b8:97:95:cb:02:fa:43:6b:89: 6b:cb:ca:18:23:91:29:e8:2c:e5:2a:7a:94:29:75:5a:da:50: f7:2a:30:74:9f:83:c5:90:92:80:07:0c:71:d6:39:63:96:8b: e3:1f:67:81:c4:d3:6b:4d:7d:2c:42:f7:6a:fd:8f:2f:3c:86: fb:7d:5f:13:3a:84:3a:1c:69:df:b7:b4:34:9f:5c:6c:fa:04: 6b:08:fb:e2:6b:77:93:db:ae:52:96:8b:c9:ab:69:af:97:c5: ed:1a:a2:03:5e:50:7c:cc:0f:d9:d1:06:16:73:85:7d:3b:c6: 0e:6e:23:c6:7c:1f:e1:15:42:55:0a:09:87:5e:90:90:0c:8a: 65:27:f9:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOHcdH6vDnYgs1f2VWNZVMqoaMRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA2MTMwOTMxNDBaFw0yNjA2MTQxMzEyNDBaMDMxMTAvBgNV BAMTKDE1NzFFMTAxQTQxNjQyRDFBMTA3NzE5MzM3RkFDRDM2RjE1RkVFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDQbUxrUPvuaocWr3+jbVdNNW /wKwu6ZO/WtBb/SDyTqtqFxuFFQGWzQ57pUsRTwZQwdofp62iO/pngscbspBljp7 acF9whgkAADrPDxo5RT+ztmeB0c/0xCZNpoO2VnqMVILpIzpo/+13RKoeo4tl3hu Kh+sj82VTXu/Hqr+JydzXBY4CR4slwOU0vr39LfYdGjYRTu1uXlYWjMoVFNhjDJ7 qQw9HnzAA1/7ACpEwI5JU9r7VvQRpnZitGw41AvnS9Vb48BecYT7pO4My1D7QfJz zfi+n5CWoBukpk1BrPonyOjnIoLnzERd2j/9FxmF5wLa6Ts7NfxaKNqP2UkrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFXHhAaQWQtGhB3GTN/rNNvFf7qkwHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOav8VNmQ6rTs 3fY9Ah601L2mpbGxElVpt1Q+r2sVjgI/y8mD2d7t7Q5aW+n1Xy5M5GAW6CBPgeOv /XsQd70GqDdQtDfNjUtIN6D1yBPNSvLqq7BGifGjf9hL4TnysMnoEPGimS4j0+Lz siItiVpauyTE7UQTuJeVywL6Q2uJa8vKGCORKegs5Sp6lCl1WtpQ9yowdJ+DxZCS gAcMcdY5Y5aL4x9ngcTTa019LEL3av2PLzyG+31fEzqEOhxp37e0NJ9cbPoEawj7 4mt3k9uuUpaLyatpr5fF7RqiA15QfMwP2dEGFnOFfTvGDm4jxnwf4RVCVQoJh16Q kAyKZSf5FQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:55 2026 by rpki-client