$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: gBDZ81DfLwoubeoK5gEhr7TMjVv1RCGf7CLmPX5WyPU= Subject key identifier: 23:54:8E:25:A6:90:92:B4:9B:B4:43:58:C3:22:8E:2B:AE:9E:56:D7 Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 07DF04328DD305A0EED33800DAA5A961F3918B77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 23:02:26 +0000 Manifest this update: Sat 13 Jun 2026 22:57:26 +0000 Manifest next update: Sun 14 Jun 2026 23:57:26 +0000 Files and hashes: 1: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=) 2: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: vKXXwVqIQlwp8N/2j013hOdXoG+HzLntXVs/XM4oYyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:df:04:32:8d:d3:05:a0:ee:d3:38:00:da:a5:a9:61:f3:91:8b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Jun 13 22:57:26 2026 GMT Not After : Jun 14 23:57:26 2026 GMT Subject: CN=23548E25A69092B49BB44358C3228E2BAE9E56D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:ec:93:b1:df:e0:29:b7:be:ff:dc:f9:16: 4c:ed:97:ab:5d:7a:c2:ea:96:88:9b:eb:ff:a3:3e: 99:6b:9f:61:d2:cf:06:e5:de:d0:50:96:5d:aa:55: e9:48:e3:d2:05:98:7c:2a:ac:10:df:a2:76:32:0a: c3:9e:80:e8:4b:4b:bb:ab:f5:4c:71:84:21:bd:4e: b1:72:db:1b:86:24:b7:53:a9:4c:1c:2a:14:e1:f2: 0a:9a:8c:36:a2:5b:94:cf:04:34:ea:d5:fa:6c:15: 0c:17:dd:0b:36:02:bb:e9:ba:45:bb:ad:10:7e:88: 83:20:06:d9:7b:dd:48:07:66:bd:45:c6:10:22:d0: b9:f5:58:b7:84:62:c5:fd:c5:5c:b1:e4:90:bc:bf: f2:f7:a3:71:3c:d0:21:6f:eb:fc:53:c2:b8:6f:04: 34:b2:e6:66:51:be:65:48:e0:c1:39:20:2a:f5:92: 8a:93:49:af:91:7f:ba:82:a7:f6:f1:01:9b:80:ca: 0d:e3:e0:ca:11:65:27:30:e4:60:ad:08:9b:98:46: c0:e4:d8:49:e5:80:b5:0d:77:c7:62:5a:39:a5:37: 11:59:f4:e4:96:c7:98:49:4a:6f:13:94:55:47:43: ee:76:aa:dd:cb:ac:88:fd:2e:c6:5c:07:fc:94:50: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:8E:25:A6:90:92:B4:9B:B4:43:58:C3:22:8E:2B:AE:9E:56:D7 X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:24:30:b3:3b:e2:f6:bb:07:bb:0e:75:d5:10:4c:c5:ea:95: 27:b4:fe:b2:42:12:a3:01:b1:ae:35:a9:c2:f8:bc:2c:ba:61: f7:94:68:5e:2a:77:46:66:f8:a7:80:c3:65:94:25:3e:ca:50: 5a:7a:88:09:a0:33:86:cd:32:dd:80:db:9d:20:43:f3:66:92: 21:52:35:13:bb:65:6c:b7:16:e6:da:6b:31:eb:6f:0e:1d:fc: e7:68:be:2c:c1:4f:d5:4e:fe:f2:3a:1d:3e:ca:8a:4a:40:a3: bc:77:b8:be:2e:b1:38:c0:9e:ad:22:ce:ec:4f:dd:61:28:3b: b5:e4:9c:cd:c4:de:95:00:91:ea:54:d9:81:84:7a:74:a2:1a: f1:90:0a:34:22:5e:87:31:90:22:47:29:d6:35:a9:d9:89:00: ab:4c:cb:d5:d6:91:cd:aa:a9:c8:39:78:a7:2d:6d:c8:9d:b7: 14:4f:9c:90:24:2c:57:a5:f2:5c:2d:51:03:11:5a:ed:e5:3d: c5:4a:5d:92:e8:56:05:56:1f:c4:3e:c0:24:8b:09:93:07:1d: 3a:ba:13:f7:a0:b1:3b:44:05:6e:a5:95:68:c9:38:8e:2e:5f: eb:ab:fd:b3:e5:4d:29:9f:cb:39:40:91:3a:3e:6a:b8:d3:b4: 02:fc:71:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB98EMo3TBaDu0zgA2qWpYfORi3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjA2MTMyMjU3MjZaFw0yNjA2MTQyMzU3MjZaMDMxMTAvBgNV BAMTKDIzNTQ4RTI1QTY5MDkyQjQ5QkI0NDM1OEMzMjI4RTJCQUU5RTU2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkeyTsd/gKbe+/9z5Fkztl6td esLqloib6/+jPplrn2HSzwbl3tBQll2qVelI49IFmHwqrBDfonYyCsOegOhLS7ur 9UxxhCG9TrFy2xuGJLdTqUwcKhTh8gqajDaiW5TPBDTq1fpsFQwX3Qs2ArvpukW7 rRB+iIMgBtl73UgHZr1FxhAi0Ln1WLeEYsX9xVyx5JC8v/L3o3E80CFv6/xTwrhv BDSy5mZRvmVI4ME5ICr1koqTSa+Rf7qCp/bxAZuAyg3j4MoRZScw5GCtCJuYRsDk 2EnlgLUNd8diWjmlNxFZ9OSWx5hJSm8TlFVHQ+52qt3LrIj9LsZcB/yUUB71AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI1SOJaaQkrSbtENYwyKOK66eVtcwHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSQwszvi9rsH uw511RBMxeqVJ7T+skISowGxrjWpwvi8LLph95RoXip3Rmb4p4DDZZQlPspQWnqI CaAzhs0y3YDbnSBD82aSIVI1E7tlbLcW5tprMetvDh3852i+LMFP1U7+8jodPsqK SkCjvHe4vi6xOMCerSLO7E/dYSg7teSczcTelQCR6lTZgYR6dKIa8ZAKNCJehzGQ Ikcp1jWp2YkAq0zL1daRzaqpyDl4py1tyJ23FE+ckCQsV6XyXC1RAxFa7eU9xUpd kuhWBVYfxD7AJIsJkwcdOroT96CxO0QFbqWVaMk4ji5f66v9s+VNKZ/LOUCROj5q uNO0AvxxIQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:25 2026 by rpki-client