$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: b8KUCjkckIQFaKMYPzrjw6pcSB7f/1u8jxKIwdc2GzM= Subject key identifier: F9:C6:61:38:2B:9B:A0:85:46:9F:92:0E:92:95:C1:A2:4A:A7:A0:28 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 22E81D71956747D4EBE18E48E1644CB482BF75CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 54 Signing time: Sun 14 Jun 2026 00:37:29 +0000 Manifest this update: Sun 14 Jun 2026 00:32:29 +0000 Manifest next update: Mon 15 Jun 2026 01:23:29 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: r57Khz4KSRIR8mfhr+vwdy7cn0GFMO9my/jpy1H7z2A=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e8:1d:71:95:67:47:d4:eb:e1:8e:48:e1:64:4c:b4:82:bf:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Jun 14 00:32:29 2026 GMT Not After : Jun 15 01:23:29 2026 GMT Subject: CN=F9C661382B9BA085469F920E9295C1A24AA7A028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:af:2e:e0:b9:01:67:55:02:25:b2:62:b6:37: 0d:57:4f:84:e8:b7:1b:c7:c4:3d:b1:73:a7:0c:8a: 19:cc:d0:7b:27:c7:25:8b:04:ef:0b:d4:0b:42:5e: 05:58:ac:ad:a5:20:c8:d2:b3:3e:ae:39:ad:f2:7e: 9c:fe:65:22:79:7d:1c:c8:84:1e:74:92:d6:0f:95: 71:eb:bb:04:71:2f:24:5e:9c:89:20:a0:83:b1:2b: 1f:3d:66:7f:51:34:0b:6e:ca:24:19:9b:00:9f:d2: a7:ca:66:f0:55:fa:7e:e8:c3:e0:5d:25:c4:50:01: a4:ac:1b:55:59:ad:46:57:96:5b:36:54:af:3d:71: 4d:dd:65:39:2e:e0:a0:8c:4e:c1:0e:68:1d:b1:4c: 14:ec:d0:58:a2:57:c9:a0:95:ad:41:de:1d:43:2c: bd:ef:ac:2a:07:12:95:ce:16:22:04:5b:cb:a9:d5: 25:1d:8e:74:bb:a2:6c:a5:46:92:2c:74:5e:f6:1b: cc:55:d5:12:a2:62:c9:eb:0d:d0:4b:30:a9:81:37: 21:c9:92:9f:3e:bc:dc:5e:25:01:8c:e2:ae:f2:2c: eb:fc:6d:01:43:7b:20:1a:f4:34:d1:80:15:17:31: b4:c4:72:6d:93:37:29:84:36:fa:a5:a2:bb:11:26: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:61:38:2B:9B:A0:85:46:9F:92:0E:92:95:C1:A2:4A:A7:A0:28 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fb:93:d4:49:4f:ec:bc:d8:30:fc:ed:b2:bf:28:a9:9f:80: 84:c1:31:16:64:5a:77:be:5f:c7:02:c2:c0:fe:d5:09:66:60: b6:85:e6:e0:e7:35:0c:89:cd:84:d4:93:73:85:b6:bb:7a:ac: 21:8d:7f:7e:84:fb:87:4d:43:23:ac:30:09:7c:f8:75:a2:b0: 41:2a:d8:b9:db:07:77:91:78:b4:28:73:08:27:dd:0f:2b:1c: ae:a2:57:83:c5:4a:ff:39:e7:6b:bf:4f:7d:b0:9b:07:c8:3b: 50:3e:5e:61:f2:ce:71:3e:3f:37:6d:69:3d:5b:b2:2e:87:15: be:ea:3d:dc:c9:74:e1:e0:31:15:f8:e8:7b:ed:4f:35:b8:f3: ce:09:12:55:4e:03:f2:d2:42:b7:e6:ed:de:b1:9b:63:02:c3: 3f:f5:4a:57:16:03:f4:ed:9e:7c:e2:c6:e4:b1:61:f0:84:53: 64:18:6f:79:ba:86:67:9f:fb:ab:30:1d:5e:22:be:f9:96:5a: 4c:f5:b3:28:b7:8c:4c:32:46:9c:e6:87:de:dd:74:60:3f:1f: 21:4e:ef:67:c3:e7:5f:c3:28:47:5f:8b:48:51:b3:c0:d0:88: 9f:70:18:c2:14:14:51:65:f2:1b:e0:bd:2a:c4:46:d2:1e:e2: 0e:78:3c:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIugdcZVnR9Tr4Y5I4WRMtIK/dcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA2MTQwMDMyMjlaFw0yNjA2MTUwMTIzMjlaMDMxMTAvBgNV BAMTKEY5QzY2MTM4MkI5QkEwODU0NjlGOTIwRTkyOTVDMUEyNEFBN0EwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqry7guQFnVQIlsmK2Nw1XT4To txvHxD2xc6cMihnM0HsnxyWLBO8L1AtCXgVYrK2lIMjSsz6uOa3yfpz+ZSJ5fRzI hB50ktYPlXHruwRxLyRenIkgoIOxKx89Zn9RNAtuyiQZmwCf0qfKZvBV+n7ow+Bd JcRQAaSsG1VZrUZXlls2VK89cU3dZTku4KCMTsEOaB2xTBTs0FiiV8mgla1B3h1D LL3vrCoHEpXOFiIEW8up1SUdjnS7omylRpIsdF72G8xV1RKiYsnrDdBLMKmBNyHJ kp8+vNxeJQGM4q7yLOv8bQFDeyAa9DTRgBUXMbTEcm2TNymENvqlorsRJo9NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+cZhOCuboIVGn5IOkpXBokqnoCgwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/uT1ElP7LzY MPztsr8oqZ+AhMExFmRad75fxwLCwP7VCWZgtoXm4Oc1DInNhNSTc4W2u3qsIY1/ foT7h01DI6wwCXz4daKwQSrYudsHd5F4tChzCCfdDyscrqJXg8VK/znna79PfbCb B8g7UD5eYfLOcT4/N21pPVuyLocVvuo93Ml04eAxFfjoe+1PNbjzzgkSVU4D8tJC t+bt3rGbYwLDP/VKVxYD9O2efOLG5LFh8IRTZBhvebqGZ5/7qzAdXiK++ZZaTPWz KLeMTDJGnOaH3t10YD8fIU7vZ8PnX8MoR1+LSFGzwNCIn3AYwhQUUWXyG+C9KsRG 0h7iDng8uw== -----END CERTIFICATE-----Generated at Sun Jun 14 05:09:44 2026 by rpki-client