$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json) Hash identifier: tXPmGPPFT6TJnJesJReu24qO2USFYkeXsOw87ECsKOM= Subject key identifier: BF:6B:58:D7:41:70:95:AF:C2:4A:9F:7F:24:EE:AB:B8:9D:26:1F:9F Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 3FE7B29202EFD4781D5FF2A7D4E861ADD801F9CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft Manifest number: 64 Signing time: Sun 14 Jun 2026 00:22:29 +0000 Manifest this update: Sun 14 Jun 2026 00:17:29 +0000 Manifest next update: Mon 15 Jun 2026 02:22:29 +0000 Files and hashes: 1: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=) 2: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=) 3: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=) 4: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=) 5: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=) 6: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=) 7: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=) 8: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=) 9: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=) 10: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: e6hr9snpJcKcKvUL8iM+b56/vA39i3cwS7BRnmHAbCQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e7:b2:92:02:ef:d4:78:1d:5f:f2:a7:d4:e8:61:ad:d8:01:f9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Jun 14 00:17:29 2026 GMT Not After : Jun 15 02:22:29 2026 GMT Subject: CN=BF6B58D7417095AFC24A9F7F24EEABB89D261F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:b6:29:55:c4:c0:7d:7d:63:e1:e5:f4:6e: db:f1:e4:12:c0:14:65:ba:30:43:2e:37:bc:06:51: 5a:dd:93:f5:c3:a9:92:4a:e6:7c:e5:0e:ac:1c:f3: 19:d0:3b:40:8a:9b:0f:5e:5f:00:ed:50:ba:55:a7: a3:89:d7:55:7d:30:e5:46:f4:6d:a7:41:e5:46:b3: 3a:2e:60:6c:3e:9f:30:46:fd:b1:70:41:91:83:b0: a9:50:c8:37:22:19:36:0b:a1:a2:af:a9:74:32:37: 9c:23:47:1e:8b:1f:59:ef:92:ab:7d:3d:79:47:e3: 4b:0f:a1:24:1e:98:61:74:9e:77:10:9a:2d:1c:c0: a9:ab:57:8e:33:31:90:73:1c:3b:6f:f0:ea:8c:8a: 16:f3:a6:34:11:15:ee:94:a9:c3:79:2b:7a:ae:c4: c8:9c:a5:9d:58:7b:7c:8f:b5:6e:e7:fe:d8:12:0a: b5:5c:df:56:60:34:54:6e:57:f6:15:38:19:45:ec: bc:62:d8:2e:1a:57:a9:55:da:39:1c:1a:7e:ac:e6: 1b:17:35:fb:4d:d7:cf:5e:e2:33:e9:a3:f9:af:af: ad:61:84:a6:63:2c:af:7c:d4:11:c0:7d:6c:dc:57: e0:f9:97:3d:ed:8c:e0:67:13:60:38:04:da:88:3f: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6B:58:D7:41:70:95:AF:C2:4A:9F:7F:24:EE:AB:B8:9D:26:1F:9F X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b4:fe:f2:0c:dd:c1:fe:c5:0c:09:79:7c:52:0c:84:72:80: aa:3b:42:2a:6c:1d:86:b9:4a:b5:bc:1e:9f:27:85:15:46:6e: 9c:82:c2:79:e6:3d:a2:5b:9c:47:07:67:81:ee:62:41:77:7b: 83:c2:09:cf:03:e5:f8:e1:d8:d2:d6:30:0c:cf:ae:48:89:a7: 91:ab:4b:74:5b:8d:88:f8:45:09:ea:e9:4a:46:a7:50:ec:fe: 1f:55:eb:cf:cb:99:38:14:2b:9e:f4:b9:c4:a5:87:84:18:fc: 63:30:90:15:6c:f2:d8:20:78:bf:df:33:ad:7f:3a:4b:97:a1: 2c:cc:3a:44:36:a1:b2:90:7b:8d:e6:93:eb:96:e2:38:54:31: 39:ae:82:3e:c4:84:f7:c9:82:42:de:f1:73:05:b7:16:29:81: c9:d8:1e:d0:3b:c4:45:e8:0f:df:bf:c7:4c:41:2d:40:28:1d: a8:da:eb:df:9c:2d:12:4f:c3:f4:ae:4f:d6:6f:17:df:cf:2a: fa:66:c2:64:0c:45:cd:31:50:c6:69:5a:5a:a3:4f:17:68:aa: 0f:5a:63:40:0a:d6:42:90:b2:e5:f0:f7:31:6e:37:57:77:8a: cb:68:08:2e:2e:1c:ae:87:18:e5:c0:26:e9:c9:c9:68:c4:c4: 0a:0e:fe:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP+eykgLv1HgdX/Kn1OhhrdgB+c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA2MTQwMDE3MjlaFw0yNjA2MTUwMjIyMjlaMDMxMTAvBgNV BAMTKEJGNkI1OEQ3NDE3MDk1QUZDMjRBOUY3RjI0RUVBQkI4OUQyNjFGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8LYpVcTAfX1j4eX0btvx5BLA FGW6MEMuN7wGUVrdk/XDqZJK5nzlDqwc8xnQO0CKmw9eXwDtULpVp6OJ11V9MOVG 9G2nQeVGszouYGw+nzBG/bFwQZGDsKlQyDciGTYLoaKvqXQyN5wjRx6LH1nvkqt9 PXlH40sPoSQemGF0nncQmi0cwKmrV44zMZBzHDtv8OqMihbzpjQRFe6UqcN5K3qu xMicpZ1Ye3yPtW7n/tgSCrVc31ZgNFRuV/YVOBlF7Lxi2C4aV6lV2jkcGn6s5hsX NftN189e4jPpo/mvr61hhKZjLK981BHAfWzcV+D5lz3tjOBnE2A4BNqIPyJ3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv2tY10Fwla/CSp9/JO6ruJ0mH58wHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirT+8gzdwf7F DAl5fFIMhHKAqjtCKmwdhrlKtbwenyeFFUZunILCeeY9olucRwdnge5iQXd7g8IJ zwPl+OHY0tYwDM+uSImnkatLdFuNiPhFCerpSkanUOz+H1Xrz8uZOBQrnvS5xKWH hBj8YzCQFWzy2CB4v98zrX86S5ehLMw6RDahspB7jeaT65biOFQxOa6CPsSE98mC Qt7xcwW3FimBydge0DvERegP37/HTEEtQCgdqNrr35wtEk/D9K5P1m8X388q+mbC ZAxFzTFQxmlaWqNPF2iqD1pjQArWQpCy5fD3MW43V3eKy2gILi4crocY5cAm6cnJ aMTECg7+kw== -----END CERTIFICATE-----Generated at Sun Jun 14 05:26:57 2026 by rpki-client