$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: eTPpyPPuNtbbiBnGvRCy4W3mu8B/vlcXCI6M4cqvt48= Subject key identifier: E7:C2:A3:8C:81:25:5F:06:3D:87:B9:7A:5C:F7:8C:83:E9:BB:A1:B3 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 3CCE16D5455063B079D157640AFCD68B8908DB69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 20:17:13 +0000 Manifest this update: Sat 13 Jun 2026 20:12:13 +0000 Manifest next update: Sun 14 Jun 2026 21:03:13 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: 2dyBvL9GGjrSk6INDrZCTuikxUerupNlYqlOjGinO6Q=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ce:16:d5:45:50:63:b0:79:d1:57:64:0a:fc:d6:8b:89:08:db:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Jun 13 20:12:13 2026 GMT Not After : Jun 14 21:03:13 2026 GMT Subject: CN=E7C2A38C81255F063D87B97A5CF78C83E9BBA1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:80:b1:e7:6d:85:29:3b:16:58:e0:27:7c:06: ec:77:90:04:55:e5:15:02:fc:3b:9e:16:55:d8:fe: af:18:d2:5d:c0:43:93:ac:a1:4e:49:b4:13:2a:bb: 49:13:c6:19:6a:81:73:5d:a1:b9:e0:0f:41:f5:c1: b8:e2:b1:23:cd:10:f3:1b:30:a3:18:95:dc:ea:9b: d7:48:e8:03:10:59:4b:3e:22:e1:0c:1e:81:9e:2c: b7:3e:38:e8:84:07:20:4a:3c:7a:1e:88:85:f2:bd: 91:c0:24:a0:21:71:ba:25:ff:ce:b7:17:6d:fc:0b: c6:27:75:39:89:ca:17:b6:ed:9f:9f:ea:9a:d6:f0: 76:70:fa:04:fa:ac:ec:4b:b3:c9:a3:cb:e7:19:3b: 7a:4c:df:89:41:a8:76:3f:96:d6:d0:ba:01:70:a7: ab:a2:a4:7c:2b:d0:a4:e5:5c:65:85:08:00:94:ce: c7:40:e8:70:9a:c7:5a:24:ec:0d:15:e6:d4:a2:f7: 5e:bc:d2:f0:f9:85:72:53:d1:20:ce:41:10:14:65: 88:43:29:d9:18:4f:a7:45:19:2c:e5:b7:b3:d0:f5: 6f:e5:61:28:60:1c:b1:91:4a:e8:73:23:8f:11:9b: 62:b5:93:ee:78:7f:ca:73:cb:10:87:b1:37:81:31: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:A3:8C:81:25:5F:06:3D:87:B9:7A:5C:F7:8C:83:E9:BB:A1:B3 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1c:cf:f1:76:ae:2e:51:e1:ec:c4:0a:6f:14:70:7e:b6:4d: 33:0d:03:ca:e4:e5:f1:5b:b4:07:c3:18:4c:a8:87:f3:1c:f7: c7:45:93:7e:1e:06:67:ec:42:bb:0c:b2:93:ae:a3:d1:cd:87: 0c:76:cd:c9:fa:f9:83:c6:c0:6e:c1:ff:0e:f2:56:fc:8d:ad: 16:84:4c:55:0e:27:d3:66:9b:a0:6c:63:a8:33:82:a6:f4:4a: 7f:bc:56:df:d8:3d:67:0c:c7:03:72:fd:d1:fb:8d:e4:e3:b4: e3:cf:f9:da:05:a1:f6:f2:0a:dc:5b:87:52:09:24:a3:98:86: 5d:4a:ef:af:2c:6f:79:59:b1:b9:00:5b:8f:38:4a:d5:ec:c1: 64:b3:b1:d3:ed:63:57:fc:7a:31:2b:aa:2e:dc:1a:9e:e5:ed: da:82:81:64:51:37:7e:ed:8d:02:ac:81:64:c0:6f:db:ca:cd: b5:2d:e9:c6:9d:86:e8:e5:7f:6e:ce:82:b0:48:bc:de:7e:64: 0a:9c:db:40:bf:9b:d2:de:46:b9:0e:7c:94:5d:3f:55:83:fa: a3:0a:f3:e8:5d:d3:6c:d7:7d:cc:cb:86:40:b5:e1:a2:ea:62: b2:59:ea:35:ca:ff:70:bf:7a:2b:c5:c8:56:c8:4c:b7:b7:75: 37:0a:b5:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPM4W1UVQY7B50VdkCvzWi4kI22kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA2MTMyMDEyMTNaFw0yNjA2MTQyMTAzMTNaMDMxMTAvBgNV BAMTKEU3QzJBMzhDODEyNTVGMDYzRDg3Qjk3QTVDRjc4QzgzRTlCQkExQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgLHnbYUpOxZY4Cd8Bux3kARV 5RUC/DueFlXY/q8Y0l3AQ5OsoU5JtBMqu0kTxhlqgXNdobngD0H1wbjisSPNEPMb MKMYldzqm9dI6AMQWUs+IuEMHoGeLLc+OOiEByBKPHoeiIXyvZHAJKAhcbol/863 F238C8YndTmJyhe27Z+f6prW8HZw+gT6rOxLs8mjy+cZO3pM34lBqHY/ltbQugFw p6uipHwr0KTlXGWFCACUzsdA6HCax1ok7A0V5tSi91680vD5hXJT0SDOQRAUZYhD KdkYT6dFGSzlt7PQ9W/lYShgHLGRSuhzI48Rm2K1k+54f8pzyxCHsTeBMRQXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU58KjjIElXwY9h7l6XPeMg+m7obMwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihzP8XauLlHh 7MQKbxRwfrZNMw0DyuTl8Vu0B8MYTKiH8xz3x0WTfh4GZ+xCuwyyk66j0c2HDHbN yfr5g8bAbsH/DvJW/I2tFoRMVQ4n02aboGxjqDOCpvRKf7xW39g9ZwzHA3L90fuN 5OO048/52gWh9vIK3FuHUgkko5iGXUrvryxveVmxuQBbjzhK1ezBZLOx0+1jV/x6 MSuqLtwanuXt2oKBZFE3fu2NAqyBZMBv28rNtS3pxp2G6OV/bs6CsEi83n5kCpzb QL+b0t5GuQ58lF0/VYP6owrz6F3TbNd9zMuGQLXhoupislnqNcr/cL96K8XIVshM t7d1Nwq1YA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:23:04 2026 by rpki-client