$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: ANtMfecXaNNw4WK4cRsCv1G8pFoWoJm+7XnzH7ccERA= Subject key identifier: 33:CB:4B:0F:5C:99:42:C2:AC:0D:0D:2A:96:B6:D0:A2:50:16:0A:3E Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 13CB71C767D2069EF0E8CD5A767715822BEAECCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 5A Signing time: Sat 13 Jun 2026 13:06:49 +0000 Manifest this update: Sat 13 Jun 2026 13:01:49 +0000 Manifest next update: Sun 14 Jun 2026 16:21:49 +0000 Files and hashes: 1: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: 3vQEwQ326Pcnw88VwcEhK13yauIkpIFrPCjXVMfVSAM=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cb:71:c7:67:d2:06:9e:f0:e8:cd:5a:76:77:15:82:2b:ea:ec:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Jun 13 13:01:49 2026 GMT Not After : Jun 14 16:21:49 2026 GMT Subject: CN=33CB4B0F5C9942C2AC0D0D2A96B6D0A250160A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:36:4f:a5:99:0e:bd:cb:19:4a:d0:a2:dc: 1f:aa:20:b4:0d:9a:c6:5f:71:27:fd:87:04:a6:c3: 50:7b:d3:18:65:1b:93:08:46:11:c0:72:d4:e0:c4: 9b:80:10:ae:34:8f:70:fc:a2:60:18:a4:03:88:c0: c5:fb:cb:f7:d5:1e:03:c6:cf:29:d6:43:25:80:e0: 2a:a5:85:af:0b:b3:c6:9a:da:e4:4d:0a:3f:99:34: 4c:20:78:61:2f:6b:19:37:2b:6a:0a:b1:dc:00:cf: 1e:20:33:f3:f9:8c:99:5a:e4:0c:d6:e9:b9:cf:b1: b9:db:74:84:07:d7:83:f5:33:72:16:50:be:a1:58: b8:c0:be:e7:ce:cd:14:92:14:fa:ee:11:52:95:86: 51:74:a9:86:54:64:76:6a:53:21:5c:b6:4c:fa:80: 6e:77:61:f9:16:7b:c8:a0:50:60:74:55:71:01:82: 05:88:0a:e1:96:78:1a:13:76:54:c0:d9:95:7f:6f: 29:f2:7c:3f:9e:c0:c3:6d:f4:b0:9e:a0:72:f1:1d: cc:8d:52:f3:75:07:b2:1d:b7:b2:e3:c6:3d:9f:ef: 86:16:c5:21:d1:00:f2:4f:4c:a8:fb:18:ec:f7:89: 3f:b7:88:9a:d9:28:f3:14:a1:ce:2f:d1:c0:9b:d8: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:4B:0F:5C:99:42:C2:AC:0D:0D:2A:96:B6:D0:A2:50:16:0A:3E X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b1:a3:62:65:6a:82:7c:d0:70:44:b7:2f:88:4b:f8:d9:eb: 37:d0:5c:e7:59:81:95:5b:7c:20:76:72:7c:69:2c:1a:08:ac: bc:2c:d7:26:dc:cc:40:40:22:38:8b:8a:17:54:d2:b7:ee:83: 62:72:aa:fc:fe:cc:e8:1d:dc:73:cb:9e:9f:51:a8:ef:c8:55: b3:31:b8:88:43:73:6c:47:8b:45:23:12:4c:0e:46:1d:e9:90: a5:c0:85:59:57:d6:bc:c2:fa:4b:6a:2a:3b:f2:0c:10:ce:ba: 60:c2:dc:9c:c0:a8:8f:85:46:ab:46:2b:42:9c:52:67:75:4c: 7b:8b:32:89:bf:d7:d7:e6:0f:38:86:0a:3a:c9:34:ad:b6:2d: 43:1a:14:e9:4a:86:90:5b:69:44:e4:7e:e0:2c:67:ec:48:85: a5:74:5f:66:c4:b0:d1:60:94:fc:49:31:19:3a:6e:c0:69:2b: 7f:34:74:34:21:7f:91:89:c5:ff:a3:5e:e8:97:e7:6f:4f:e2: 8b:e1:8a:2b:53:7f:54:2f:e6:a6:36:86:c0:81:fc:5e:87:4c: 54:7a:d1:4b:c1:ba:51:ba:0d:f7:ff:34:7a:f0:f6:0a:9a:d8: f9:fb:92:d8:43:03:15:d4:dd:1f:27:8e:b5:05:c5:f9:22:22: 81:fe:28:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8txx2fSBp7w6M1adncVgivq7M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA2MTMxMzAxNDlaFw0yNjA2MTQxNjIxNDlaMDMxMTAvBgNV BAMTKDMzQ0I0QjBGNUM5OTQyQzJBQzBEMEQyQTk2QjZEMEEyNTAxNjBBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPjZPpZkOvcsZStCi3B+qILQN msZfcSf9hwSmw1B70xhlG5MIRhHActTgxJuAEK40j3D8omAYpAOIwMX7y/fVHgPG zynWQyWA4Cqlha8Ls8aa2uRNCj+ZNEwgeGEvaxk3K2oKsdwAzx4gM/P5jJla5AzW 6bnPsbnbdIQH14P1M3IWUL6hWLjAvufOzRSSFPruEVKVhlF0qYZUZHZqUyFctkz6 gG53YfkWe8igUGB0VXEBggWICuGWeBoTdlTA2ZV/bynyfD+ewMNt9LCeoHLxHcyN UvN1B7Idt7Ljxj2f74YWxSHRAPJPTKj7GOz3iT+3iJrZKPMUoc4v0cCb2JWjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM8tLD1yZQsKsDQ0qlrbQolAWCj4wHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurGjYmVqgnzQ cES3L4hL+NnrN9Bc51mBlVt8IHZyfGksGgisvCzXJtzMQEAiOIuKF1TSt+6DYnKq /P7M6B3cc8uen1Go78hVszG4iENzbEeLRSMSTA5GHemQpcCFWVfWvML6S2oqO/IM EM66YMLcnMCoj4VGq0YrQpxSZ3VMe4syib/X1+YPOIYKOsk0rbYtQxoU6UqGkFtp ROR+4Cxn7EiFpXRfZsSw0WCU/EkxGTpuwGkrfzR0NCF/kYnF/6Ne6Jfnb0/ii+GK K1N/VC/mpjaGwIH8XodMVHrRS8G6UboN9/80evD2CprY+fuS2EMDFdTdHyeOtQXF +SIigf4oSg== -----END CERTIFICATE-----Generated at Sun Jun 14 05:11:55 2026 by rpki-client