$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: R0oo140OjiTayU9dcyHTNSr/Y+qcYspo6VrxZHkg+mQ= Subject key identifier: 38:4A:B8:59:EE:CF:FB:30:23:4C:42:4A:FC:18:26:64:F4:02:B9:00 Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 6DA4C3CA3591681201BF7C879034A091DFEDC19C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: 56 Signing time: Sun 14 Jun 2026 00:47:31 +0000 Manifest this update: Sun 14 Jun 2026 00:42:31 +0000 Manifest next update: Mon 15 Jun 2026 00:48:31 +0000 Files and hashes: 1: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) 2: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) 3: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: iOvsvenDBToyWoUXJwAFBmsnRXKZEpw6zX1vjPcCbtE=) 4: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 5: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a4:c3:ca:35:91:68:12:01:bf:7c:87:90:34:a0:91:df:ed:c1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: Jun 14 00:42:31 2026 GMT Not After : Jun 15 00:48:31 2026 GMT Subject: CN=384AB859EECFFB30234C424AFC182664F402B900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:7b:28:8c:d7:5f:2b:20:8f:e2:83:cb:d8: 5a:19:bf:07:c1:44:94:7e:6e:be:72:ba:0d:08:49: dd:64:20:84:14:24:e1:7a:d6:e8:67:7d:23:1f:e0: 84:c1:07:53:9b:c7:94:e5:9e:5c:60:28:29:9f:f4: fe:19:c0:df:0c:d9:cd:04:b9:cd:67:98:71:94:74: db:ee:6c:80:ee:94:2f:77:ba:c1:67:95:50:01:4e: 19:11:9a:2a:cf:ba:a4:73:61:6f:74:cb:40:e2:6b: f1:85:5d:86:f2:3b:30:72:81:da:fc:b3:37:d2:a9: e6:c6:1f:55:60:18:02:60:88:2d:2e:01:bb:02:4c: 01:00:14:69:ba:bf:72:92:e4:80:49:d4:3e:eb:d5: b2:7a:00:49:87:c7:98:01:e7:bc:e1:f8:92:7e:f7: 00:36:d1:e2:cf:af:9a:52:00:2c:2b:92:26:88:ae: 6b:b9:34:de:44:af:4d:b8:c8:06:ab:d7:22:e9:22: 61:d4:b5:9f:65:5e:09:98:15:19:4d:38:77:5a:92: 0c:fc:42:2f:c3:24:5e:1e:ee:13:44:d2:a1:e1:03: f0:b8:af:e8:19:b5:0d:3d:99:4c:79:cd:04:c1:0e: 29:dc:f0:2a:43:01:b6:1c:8c:9d:1e:19:b0:e2:cc: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:B8:59:EE:CF:FB:30:23:4C:42:4A:FC:18:26:64:F4:02:B9:00 X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:93:06:c5:c3:a9:6f:76:d8:b1:88:0f:f0:da:52:9b:44:c1: f2:dc:8a:91:5e:bd:75:ea:91:f0:10:a9:b3:e2:03:70:a3:53: e4:66:24:1b:0d:b2:e6:d3:b3:13:ca:40:aa:bf:39:37:21:3d: cb:b2:68:48:cc:aa:ba:25:c0:9b:d6:b0:f6:1d:ff:cd:20:51: a3:25:1e:d8:de:f6:9d:01:16:b3:5d:a8:36:c6:c3:17:24:f6: 55:67:cf:b9:62:e6:5a:ac:c7:09:84:d5:49:e3:a8:6c:81:b9: 0f:38:d1:86:88:d7:05:49:ca:4f:78:19:2c:da:b8:b0:4a:04: de:ad:a5:ee:3a:72:79:2f:a4:c6:d7:7a:a1:fc:8e:66:25:db: 1e:e1:bf:64:6a:54:c6:41:c7:ea:1c:b1:a3:3c:8c:2b:ad:37: 22:6a:df:7e:36:d0:7c:7d:c1:8b:12:0f:9c:f2:77:13:0c:7b: 37:2b:a7:b5:49:40:82:61:43:39:ab:db:77:93:b7:d6:af:52: 75:b2:4c:e1:d8:2b:e3:ac:8d:11:cd:a9:40:c5:1e:d5:86:a0: 3b:ec:cf:51:47:a7:4e:10:0e:a1:f6:d4:b8:d7:95:92:54:d2: 3a:35:9c:fd:67:79:f2:2e:6b:0a:54:39:e8:f3:22:32:5c:3e: 15:18:a2:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbaTDyjWRaBIBv3yHkDSgkd/twZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjA2MTQwMDQyMzFaFw0yNjA2MTUwMDQ4MzFaMDMxMTAvBgNV BAMTKDM4NEFCODU5RUVDRkZCMzAyMzRDNDI0QUZDMTgyNjY0RjQwMkI5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZ3sojNdfKyCP4oPL2FoZvwfB RJR+br5yug0ISd1kIIQUJOF61uhnfSMf4ITBB1Obx5TlnlxgKCmf9P4ZwN8M2c0E uc1nmHGUdNvubIDulC93usFnlVABThkRmirPuqRzYW90y0Dia/GFXYbyOzBygdr8 szfSqebGH1VgGAJgiC0uAbsCTAEAFGm6v3KS5IBJ1D7r1bJ6AEmHx5gB57zh+JJ+ 9wA20eLPr5pSACwrkiaIrmu5NN5Er024yAar1yLpImHUtZ9lXgmYFRlNOHdakgz8 Qi/DJF4e7hNE0qHhA/C4r+gZtQ09mUx5zQTBDinc8CpDAbYcjJ0eGbDizPqtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOEq4We7P+zAjTEJK/BgmZPQCuQAwHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJMGxcOpb3bY sYgP8NpSm0TB8tyKkV69deqR8BCps+IDcKNT5GYkGw2y5tOzE8pAqr85NyE9y7Jo SMyquiXAm9aw9h3/zSBRoyUe2N72nQEWs12oNsbDFyT2VWfPuWLmWqzHCYTVSeOo bIG5DzjRhojXBUnKT3gZLNq4sEoE3q2l7jpyeS+kxtd6ofyOZiXbHuG/ZGpUxkHH 6hyxozyMK603ImrffjbQfH3BixIPnPJ3Ewx7NyuntUlAgmFDOavbd5O31q9SdbJM 4dgr46yNEc2pQMUe1YagO+zPUUenThAOofbUuNeVklTSOjWc/Wd58i5rClQ56PMi Mlw+FRiiSg== -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:18 2026 by rpki-client