$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: A6R/gm+g4H6Z4IGjOtrbIO3gwWcuyYeej93HpGo1asY= Subject key identifier: 33:37:33:FF:44:2E:E7:AC:B2:95:BC:C1:A3:A2:DA:E1:2B:B4:5D:E7 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 61C7F2A8126C4119F9448AAB785D8EE4DBA3996B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 07:41:30 +0000 Manifest this update: Sat 13 Jun 2026 07:36:30 +0000 Manifest next update: Sun 14 Jun 2026 10:35:30 +0000 Files and hashes: 1: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: ju4YuMMbQFDzFEjrU52rxf6ve/CjHRgZXUxxnkVAGLQ=) 4: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c7:f2:a8:12:6c:41:19:f9:44:8a:ab:78:5d:8e:e4:db:a3:99:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Jun 13 07:36:30 2026 GMT Not After : Jun 14 10:35:30 2026 GMT Subject: CN=333733FF442EE7ACB295BCC1A3A2DAE12BB45DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:d4:e0:ac:96:82:60:ae:8f:0e:7b:45:c9: 8c:92:74:5a:d7:0e:c3:be:4a:8e:30:e7:ac:f9:36: 20:62:3b:21:06:14:f9:eb:57:aa:b1:7b:14:d2:70: 2b:af:cf:e1:2f:0c:7b:6b:00:24:a3:84:63:19:a1: f5:cb:15:9b:3d:4f:01:d4:47:d1:6d:1c:63:01:38: 94:55:25:7a:71:7a:8e:4a:4c:3b:6d:96:69:c7:7b: 20:fa:b4:72:35:12:59:e8:e4:da:74:e8:95:69:e5: ea:a0:4b:99:a6:8a:f3:2b:9f:61:5c:45:82:aa:af: e7:22:9e:3d:61:32:8f:9c:34:e8:cd:1a:68:24:ed: 92:7f:fc:7a:09:8a:75:fe:07:11:ac:3f:27:c6:e8: 77:72:ab:40:10:cd:72:f8:eb:df:1a:cf:6f:19:f4: 04:81:da:0c:41:7f:f2:89:79:af:de:fa:44:99:82: d7:29:87:c4:95:d0:b1:f8:6a:10:c7:8c:ac:33:ed: 60:86:6d:ae:95:3e:85:39:2c:b5:2b:e9:e1:10:bd: 8f:68:f3:c7:bc:5f:a6:88:39:e1:c9:e7:be:6c:5f: 1d:47:0b:93:35:7d:ef:a3:3b:98:46:75:26:b2:28: 37:29:ee:43:dd:17:fe:1e:34:34:92:69:8e:ad:db: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:37:33:FF:44:2E:E7:AC:B2:95:BC:C1:A3:A2:DA:E1:2B:B4:5D:E7 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:62:4f:bb:e6:f4:a8:07:b2:b5:3d:31:ba:b8:b1:20:bd:46: 52:ba:8a:5f:ba:e7:b3:30:c0:be:8b:20:4a:43:19:92:d9:37: 24:19:36:11:fd:6c:28:f2:6f:1e:2a:eb:48:10:3b:02:d8:9f: f6:b8:5e:73:9d:f8:d3:cb:03:d3:31:e2:a5:7b:27:21:e4:46: cb:54:df:e0:45:cb:09:14:b7:63:01:9a:61:9c:9d:28:bc:3d: c3:4c:28:20:d4:00:1a:ab:e4:e1:ea:6b:0b:e2:e6:04:bf:78: 6d:3f:ea:22:63:86:43:bd:86:21:b3:84:3c:2b:80:22:7c:e7: 19:4f:d6:9b:12:15:2f:37:3e:8d:0b:f0:91:99:0e:d8:02:7a: f4:ed:3e:37:8f:aa:77:ad:52:35:a9:38:af:52:e8:82:cf:b3: ed:b8:1b:69:9a:05:12:78:ca:0d:20:d0:20:b2:a7:86:66:c0: f1:0b:51:8b:06:17:ff:fb:a7:8d:bf:d8:0b:d6:36:5a:f3:13: b1:da:00:ae:0c:ce:fe:8b:88:8f:b0:49:e2:99:56:3a:65:aa: dd:c5:e5:41:10:71:38:38:92:6a:7c:96:76:77:29:7d:14:fd: 08:0d:92:0d:e5:e3:5c:64:f8:76:aa:3b:71:42:5b:4b:6a:f0: 02:ab:22:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYcfyqBJsQRn5RIqreF2O5NujmWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA2MTMwNzM2MzBaFw0yNjA2MTQxMDM1MzBaMDMxMTAvBgNV BAMTKDMzMzczM0ZGNDQyRUU3QUNCMjk1QkNDMUEzQTJEQUUxMkJCNDVERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC209TgrJaCYK6PDntFyYySdFrX DsO+So4w56z5NiBiOyEGFPnrV6qxexTScCuvz+EvDHtrACSjhGMZofXLFZs9TwHU R9FtHGMBOJRVJXpxeo5KTDttlmnHeyD6tHI1Elno5Np06JVp5eqgS5mmivMrn2Fc RYKqr+cinj1hMo+cNOjNGmgk7ZJ//HoJinX+BxGsPyfG6Hdyq0AQzXL4698az28Z 9ASB2gxBf/KJea/e+kSZgtcph8SV0LH4ahDHjKwz7WCGba6VPoU5LLUr6eEQvY9o 88e8X6aIOeHJ575sXx1HC5M1fe+jO5hGdSayKDcp7kPdF/4eNDSSaY6t24yxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMzcz/0Qu56yylbzBo6La4Su0XecwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWJPu+b0qAey tT0xurixIL1GUrqKX7rnszDAvosgSkMZktk3JBk2Ef1sKPJvHirrSBA7Atif9rhe c53408sD0zHipXsnIeRGy1Tf4EXLCRS3YwGaYZydKLw9w0woINQAGqvk4eprC+Lm BL94bT/qImOGQ72GIbOEPCuAInznGU/WmxIVLzc+jQvwkZkO2AJ69O0+N4+qd61S Nak4r1Logs+z7bgbaZoFEnjKDSDQILKnhmbA8QtRiwYX//unjb/YC9Y2WvMTsdoA rgzO/ouIj7BJ4plWOmWq3cXlQRBxODiSanyWdncpfRT9CA2SDeXjXGT4dqo7cUJb S2rwAqsiYw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:54:48 2026 by rpki-client