$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: l9tBoluO8DHtgLJUh6l/6eSNORxt9lbiy7pfQZ+9MHw= Subject key identifier: 41:59:79:9E:DC:1D:75:EB:59:14:18:E0:72:13:F9:FD:A9:3B:71:5C Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 3C0FA49B23A9005CDC92FF9FA19414AA14F2FEC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: 5A Signing time: Sat 13 Jun 2026 17:16:59 +0000 Manifest this update: Sat 13 Jun 2026 17:11:59 +0000 Manifest next update: Sun 14 Jun 2026 17:54:59 +0000 Files and hashes: 1: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 2: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 3: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: cG8QUou+g1jI6hTEu6Mx6VHGYJ0y7lYg+K2zqIlDz84=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0f:a4:9b:23:a9:00:5c:dc:92:ff:9f:a1:94:14:aa:14:f2:fe:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Jun 13 17:11:59 2026 GMT Not After : Jun 14 17:54:59 2026 GMT Subject: CN=4159799EDC1D75EB591418E07213F9FDA93B715C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:4f:72:93:29:0d:37:e5:31:8a:c4:5d:15: 94:5c:16:50:69:12:44:7b:3b:72:bf:30:88:c7:26: f1:64:ae:59:77:41:e0:48:42:63:77:36:40:82:84: dd:09:05:34:0c:80:e6:4b:4e:e0:55:79:e9:5f:8b: fa:e0:3c:48:0d:4a:10:cd:1b:15:bd:a3:ee:41:c6: dd:7b:58:4b:c5:ab:68:47:79:8b:db:ba:8f:43:ca: 06:31:35:14:28:bc:8a:9d:3b:48:b4:87:c1:3c:f8: cf:ef:45:79:45:6b:20:27:a3:0f:e0:f0:79:72:23: 10:ae:0c:f6:e4:ea:f5:b6:f1:77:93:3e:39:a7:cd: dc:43:bd:4e:9b:7e:19:cf:f6:d8:27:fe:f9:be:de: f4:26:f3:3d:a3:a1:07:b5:81:67:fe:98:42:0d:af: 56:5e:18:5b:28:21:1b:b8:f6:fc:18:44:47:1b:e1: 38:ef:3e:f5:81:bd:ee:71:2d:5d:8f:9e:fc:b1:ec: 2f:3b:94:c8:43:92:25:f1:67:47:84:5d:6e:23:f5: 4c:a1:7e:7b:f6:e1:b5:1e:90:41:6a:28:04:30:48: 9a:34:bc:3f:c4:a7:08:df:b8:9a:21:fd:61:8f:90: d3:88:00:da:81:91:0c:b2:d2:9e:b6:08:88:58:9a: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:79:9E:DC:1D:75:EB:59:14:18:E0:72:13:F9:FD:A9:3B:71:5C X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:73:fd:b0:a4:24:47:c2:e5:44:01:d5:8e:11:89:a9:fb:7e: 93:ca:2c:1a:d7:00:ef:1c:79:e7:6d:b7:7b:23:f3:33:4a:39: 5c:f1:74:d3:6b:b5:d9:46:3a:4b:82:3e:a1:bf:13:57:dc:a1: 02:a6:97:a2:8c:d6:96:64:ba:e9:9b:fe:a0:7c:83:d9:8c:08: f7:53:0a:a4:ce:33:2b:90:4b:13:a1:aa:41:e4:04:7e:7a:7b: c5:a4:48:23:73:9a:13:fe:d3:2e:22:5a:bd:ff:6f:80:1e:c4: 70:dc:36:0e:09:61:79:97:86:6a:c6:41:83:8e:84:43:4f:8a: c0:f0:93:34:b3:2a:93:7e:fe:6b:f2:32:d3:2e:dd:9d:71:dd: c5:a0:e3:da:f2:84:93:e9:f1:89:af:cc:c0:70:15:04:b7:02: b3:61:fd:48:c2:85:5b:07:dd:17:25:10:d4:df:d9:85:92:b0: 61:73:fc:f6:bc:5d:30:53:c6:d6:de:02:48:e2:f3:14:30:cd: 93:db:ad:c6:0c:f8:e2:13:36:c8:5e:44:56:18:e2:dd:2f:23: 2c:3b:9f:5e:21:72:c1:be:be:0b:fe:be:a9:2c:d8:f3:88:9b: 21:0e:09:e4:ef:67:a6:00:bb:e5:d8:52:18:50:9d:b6:67:d9: e1:a6:60:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPA+kmyOpAFzckv+foZQUqhTy/sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA2MTMxNzExNTlaFw0yNjA2MTQxNzU0NTlaMDMxMTAvBgNV BAMTKDQxNTk3OTlFREMxRDc1RUI1OTE0MThFMDcyMTNGOUZEQTkzQjcxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5E9ykykNN+UxisRdFZRcFlBp EkR7O3K/MIjHJvFkrll3QeBIQmN3NkCChN0JBTQMgOZLTuBVeelfi/rgPEgNShDN GxW9o+5Bxt17WEvFq2hHeYvbuo9DygYxNRQovIqdO0i0h8E8+M/vRXlFayAnow/g 8HlyIxCuDPbk6vW28XeTPjmnzdxDvU6bfhnP9tgn/vm+3vQm8z2joQe1gWf+mEIN r1ZeGFsoIRu49vwYREcb4TjvPvWBve5xLV2Pnvyx7C87lMhDkiXxZ0eEXW4j9Uyh fnv24bUekEFqKAQwSJo0vD/EpwjfuJoh/WGPkNOIANqBkQyy0p62CIhYmvBtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQVl5ntwddetZFBjgchP5/ak7cVwwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3P9sKQkR8Ll RAHVjhGJqft+k8osGtcA7xx55223eyPzM0o5XPF002u12UY6S4I+ob8TV9yhAqaX oozWlmS66Zv+oHyD2YwI91MKpM4zK5BLE6GqQeQEfnp7xaRII3OaE/7TLiJavf9v gB7EcNw2DglheZeGasZBg46EQ0+KwPCTNLMqk37+a/Iy0y7dnXHdxaDj2vKEk+nx ia/MwHAVBLcCs2H9SMKFWwfdFyUQ1N/ZhZKwYXP89rxdMFPG1t4CSOLzFDDNk9ut xgz44hM2yF5EVhji3S8jLDufXiFywb6+C/6+qSzY84ibIQ4J5O9npgC75dhSGFCd tmfZ4aZggQ== -----END CERTIFICATE-----Generated at Sun Jun 14 05:47:13 2026 by rpki-client