$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: PnCmoGNGJZ7etJpsMWmL5Bf4izTKM5RkWBtWWhVEIHI= Subject key identifier: 2C:BA:8A:0F:08:7D:DE:D3:5A:F9:CC:9C:61:73:DE:C4:08:46:BD:74 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 3622AAA4E3386FD5E37537DBAB5B9E1CE3989F13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 5E Signing time: Sat 13 Jun 2026 19:57:13 +0000 Manifest this update: Sat 13 Jun 2026 19:52:13 +0000 Manifest next update: Sun 14 Jun 2026 21:12:13 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 2: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 3: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: W3e6X/0ja4icCA72702cReSFe7dCoBRzKWGOtJclFtU=) 4: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 5: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 6: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 7: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:22:aa:a4:e3:38:6f:d5:e3:75:37:db:ab:5b:9e:1c:e3:98:9f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Jun 13 19:52:13 2026 GMT Not After : Jun 14 21:12:13 2026 GMT Subject: CN=2CBA8A0F087DDED35AF9CC9C6173DEC40846BD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:a3:d0:91:84:50:fd:ec:26:5f:1e:57:35: 92:a7:15:bc:30:be:04:75:dd:4d:da:f8:ce:32:83: 9a:5a:1a:6b:ab:c0:e7:47:a3:32:e6:65:26:76:3c: 85:f2:3a:dd:41:32:34:e2:ae:25:dc:a7:fa:4a:f0: 11:e8:1a:5a:6b:d1:cf:e7:06:6d:df:86:6e:ee:77: 56:d0:2a:a0:8f:bf:a7:74:85:10:c5:cf:a1:71:83: 4b:c1:25:35:15:f1:75:d0:5b:4a:42:94:d2:2f:ab: d2:0c:c2:61:da:88:79:39:33:a0:70:21:bb:82:9f: 08:c9:19:9c:1a:39:fb:f3:9b:a4:71:66:ec:5a:b8: 8d:1d:9f:c0:2a:57:5d:5c:32:7c:c3:8f:93:b9:49: 72:98:c2:8e:48:cb:38:4f:f6:b7:af:25:30:07:1b: 7b:b5:59:0d:9c:d1:a8:b5:5c:a9:2d:b6:6a:2c:5f: 50:f6:ce:ed:26:89:83:4e:2a:2e:19:5d:5b:cd:9d: 4b:a2:36:bf:3d:d8:22:d3:8e:4d:f2:d8:53:ec:9e: 95:f5:31:75:eb:90:70:b1:69:4e:3a:fd:48:4d:78: 30:63:33:88:7a:8d:8f:22:58:ee:5c:e8:30:da:34: 9c:d7:9e:78:20:2e:45:f2:78:b6:e1:f4:7c:c9:71: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:8A:0F:08:7D:DE:D3:5A:F9:CC:9C:61:73:DE:C4:08:46:BD:74 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:7f:42:ad:a0:fc:bf:d7:4e:55:e5:a4:bb:1f:ae:a1:ba:c3: a5:9d:ad:ef:91:9f:be:ca:72:c3:cf:e2:45:69:10:68:75:45: 7f:50:c3:c0:0c:5b:d6:73:72:94:c0:eb:15:4a:91:c0:34:63: c2:91:98:bf:52:1a:01:2e:13:29:50:83:ca:a7:67:d5:c6:36: 3c:31:bb:80:70:ef:93:36:75:ff:1d:b8:72:ed:b9:c9:2b:60: f2:0b:f6:17:95:54:66:e2:39:a2:58:c8:f1:0a:74:b8:2c:b2: 3d:f4:17:b2:0b:27:8e:28:bc:ea:7e:7d:15:9a:85:c2:aa:d6: 28:79:14:99:4a:f6:bf:06:b6:90:01:10:d6:21:82:e6:d5:61: fa:ef:e9:98:7a:ce:2d:30:a4:ca:3a:c0:1b:ee:7d:ff:15:3e: 7d:a6:fb:ab:3e:de:59:42:d1:33:b7:e7:0d:94:5f:4c:4a:d7: f0:b1:96:e7:68:38:58:bd:1a:af:5c:0a:30:24:5a:33:8a:72: 10:9b:1a:50:85:3a:43:ad:42:52:6a:a2:8e:90:40:2a:6a:1d: 11:d4:57:64:b7:d1:78:7b:ed:aa:3d:8f:6a:47:80:16:e7:c4: 2d:e7:c5:a7:10:ae:84:5e:a4:bb:b3:a6:dd:9d:3c:a1:cd:38: f2:b4:d5:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNiKqpOM4b9XjdTfbq1ueHOOYnxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA2MTMxOTUyMTNaFw0yNjA2MTQyMTEyMTNaMDMxMTAvBgNV BAMTKDJDQkE4QTBGMDg3RERFRDM1QUY5Q0M5QzYxNzNERUM0MDg0NkJENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEKPQkYRQ/ewmXx5XNZKnFbww vgR13U3a+M4yg5paGmurwOdHozLmZSZ2PIXyOt1BMjTiriXcp/pK8BHoGlpr0c/n Bm3fhm7ud1bQKqCPv6d0hRDFz6Fxg0vBJTUV8XXQW0pClNIvq9IMwmHaiHk5M6Bw IbuCnwjJGZwaOfvzm6RxZuxauI0dn8AqV11cMnzDj5O5SXKYwo5IyzhP9revJTAH G3u1WQ2c0ai1XKkttmosX1D2zu0miYNOKi4ZXVvNnUuiNr892CLTjk3y2FPsnpX1 MXXrkHCxaU46/UhNeDBjM4h6jY8iWO5c6DDaNJzXnnggLkXyeLbh9HzJccyHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULLqKDwh93tNa+cycYXPexAhGvXQwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx39CraD8v9dO VeWkux+uobrDpZ2t75Gfvspyw8/iRWkQaHVFf1DDwAxb1nNylMDrFUqRwDRjwpGY v1IaAS4TKVCDyqdn1cY2PDG7gHDvkzZ1/x24cu25yStg8gv2F5VUZuI5oljI8Qp0 uCyyPfQXsgsnjii86n59FZqFwqrWKHkUmUr2vwa2kAEQ1iGC5tVh+u/pmHrOLTCk yjrAG+59/xU+fab7qz7eWULRM7fnDZRfTErX8LGW52g4WL0ar1wKMCRaM4pyEJsa UIU6Q61CUmqijpBAKmodEdRXZLfReHvtqj2PakeAFufELefFpxCuhF6ku7Om3Z08 oc048rTVbw== -----END CERTIFICATE-----Generated at Sun Jun 14 02:54:43 2026 by rpki-client