$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: tZlcG+nZgjheBAfafOivX8twV8HCWyGSu6tXCJcZ/f8= Subject key identifier: F8:AA:E1:43:B1:63:05:A7:8C:19:3E:8C:E1:4B:10:11:46:6D:EF:29 Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 66FDD8FFF4490CE976053D543D741DBC3CA55709 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: 57 Signing time: Sat 13 Jun 2026 19:37:11 +0000 Manifest this update: Sat 13 Jun 2026 19:32:11 +0000 Manifest next update: Sun 14 Jun 2026 20:41:11 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: lc6fvICv2Gvnr3yZKPCljVMARdFHznwTN7BwUKIfn/g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fd:d8:ff:f4:49:0c:e9:76:05:3d:54:3d:74:1d:bc:3c:a5:57:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: Jun 13 19:32:11 2026 GMT Not After : Jun 14 20:41:11 2026 GMT Subject: CN=F8AAE143B16305A78C193E8CE14B1011466DEF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:0d:cc:6e:5e:27:ba:02:aa:3a:3e:cd:15: 28:35:5b:6e:54:d1:96:a1:41:79:ba:c8:8e:82:a0: 01:86:56:76:53:20:6d:f0:9f:84:b3:1c:bf:36:7c: c4:c1:1d:21:a4:04:bd:53:43:a1:1e:0f:8e:9f:9d: ac:b1:24:a7:5b:dd:29:39:36:43:b9:09:10:b0:9c: ba:05:97:d1:e6:c8:a4:0b:88:04:29:5d:8c:6d:1a: d7:7e:d2:5a:05:9b:2d:f8:d0:d4:1d:bd:89:1e:a1: cc:65:36:1a:b2:fd:4e:38:8f:0b:55:aa:c6:97:2b: 9d:48:ab:7b:c3:2c:e5:0c:fd:00:70:18:da:40:b9: 9b:16:3f:a8:fb:7e:a8:a3:c2:fd:6f:d4:4e:08:27: 4f:8a:a7:74:59:73:68:e6:ae:a6:98:58:c1:86:65: fc:97:e7:ef:a2:c1:48:c8:57:d9:c9:fc:ef:2a:13: 52:30:ce:18:f4:ee:26:bc:2f:f8:94:40:68:89:ea: 2b:8e:01:b9:07:7c:9f:8f:e7:f1:e7:bb:df:41:22: 22:88:cb:1d:60:75:e6:44:23:8c:11:fa:ef:87:13: 8f:1d:e5:93:12:42:07:5a:20:67:8d:99:24:48:d9: 40:50:b4:cb:70:ce:44:52:01:bf:e7:50:91:eb:ec: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AA:E1:43:B1:63:05:A7:8C:19:3E:8C:E1:4B:10:11:46:6D:EF:29 X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9e:c0:16:25:cf:25:b9:09:a3:1e:a9:a3:1f:cc:80:4d:d2: 9b:59:4f:a3:7a:98:85:70:d3:62:e9:a1:8f:75:35:52:95:03: d0:ff:e8:8e:30:12:ba:af:d5:32:7a:4f:3f:01:e8:5d:a8:eb: 47:8c:1b:6d:60:a5:1e:42:a1:16:40:36:a9:7d:71:48:1f:53: ff:80:46:eb:7a:93:0d:16:6e:dc:55:7d:cf:4d:64:cb:37:5a: 85:54:51:4f:f2:31:a1:b8:c7:09:fc:52:f8:f6:bf:d5:77:d7: 1d:45:73:23:93:07:17:86:df:16:f9:a7:e9:c1:b6:97:a4:d0: f8:8e:b8:1d:6b:82:18:b6:9d:f7:20:c4:fa:44:ba:e6:e0:01: 56:05:f0:7a:10:f9:03:ad:7d:1e:51:cf:57:db:84:28:47:55: 1f:8d:df:f1:95:15:48:25:6d:f0:ac:e6:65:b6:47:4c:85:4c: 20:56:96:2e:2d:e3:26:b1:3b:96:b1:02:19:01:83:6a:b5:de: 64:b9:52:b6:54:96:fc:4a:8a:8e:97:f5:86:3c:b3:7a:9b:cf: 11:c9:63:4f:66:9f:b2:74:fc:b4:50:f6:35:69:fa:8e:30:57: 53:46:7b:93:e1:e7:22:0c:b0:32:3c:06:84:2f:cf:c6:a0:bb: 70:ab:dc:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZv3Y//RJDOl2BT1UPXQdvDylVwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA2MTMxOTMyMTFaFw0yNjA2MTQyMDQxMTFaMDMxMTAvBgNV BAMTKEY4QUFFMTQzQjE2MzA1QTc4QzE5M0U4Q0UxNEIxMDExNDY2REVGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJQ3Mbl4nugKqOj7NFSg1W25U 0ZahQXm6yI6CoAGGVnZTIG3wn4SzHL82fMTBHSGkBL1TQ6EeD46fnayxJKdb3Sk5 NkO5CRCwnLoFl9HmyKQLiAQpXYxtGtd+0loFmy340NQdvYkeocxlNhqy/U44jwtV qsaXK51Iq3vDLOUM/QBwGNpAuZsWP6j7fqijwv1v1E4IJ0+Kp3RZc2jmrqaYWMGG ZfyX5++iwUjIV9nJ/O8qE1Iwzhj07ia8L/iUQGiJ6iuOAbkHfJ+P5/Hnu99BIiKI yx1gdeZEI4wR+u+HE48d5ZMSQgdaIGeNmSRI2UBQtMtwzkRSAb/nUJHr7A1TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+KrhQ7FjBaeMGT6M4UsQEUZt7ykwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ57AFiXPJbkJ ox6pox/MgE3Sm1lPo3qYhXDTYumhj3U1UpUD0P/ojjASuq/VMnpPPwHoXajrR4wb bWClHkKhFkA2qX1xSB9T/4BG63qTDRZu3FV9z01kyzdahVRRT/IxobjHCfxS+Pa/ 1XfXHUVzI5MHF4bfFvmn6cG2l6TQ+I64HWuCGLad9yDE+kS65uABVgXwehD5A619 HlHPV9uEKEdVH43f8ZUVSCVt8KzmZbZHTIVMIFaWLi3jJrE7lrECGQGDarXeZLlS tlSW/EqKjpf1hjyzepvPEcljT2afsnT8tFD2NWn6jjBXU0Z7k+HnIgywMjwGhC/P xqC7cKvcRQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:13 2026 by rpki-client