$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: jTqL0hjxgeQzKHxisXCvTrfKEBu2uk66ioPJO718Kxk= Subject key identifier: 82:C3:55:63:EE:44:3B:23:E5:69:52:EA:5C:E9:1E:7E:92:07:08:53 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 659811F1B6ADABE86E45D81D95A2EBAD860FD018 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 50 Signing time: Sat 13 Jun 2026 09:21:39 +0000 Manifest this update: Sat 13 Jun 2026 09:16:39 +0000 Manifest next update: Sun 14 Jun 2026 10:57:39 +0000 Files and hashes: 1: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 2: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 3: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 4: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: 399do1Kdjp1H51UnycI3C2TeWmVuhStDblVNmzYRiZI=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:98:11:f1:b6:ad:ab:e8:6e:45:d8:1d:95:a2:eb:ad:86:0f:d0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Jun 13 09:16:39 2026 GMT Not After : Jun 14 10:57:39 2026 GMT Subject: CN=82C35563EE443B23E56952EA5CE91E7E92070853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:09:2d:85:dc:0c:dd:90:52:b8:32:9c:4d: f6:95:c1:8a:65:3c:d7:7f:96:f1:c8:09:a9:f1:fa: 5a:46:68:2b:dc:32:0b:60:70:fd:88:28:28:bf:1c: 12:76:3b:af:87:26:1f:4f:f3:97:04:95:1e:00:02: 6d:d5:41:ac:e3:b4:72:b3:70:06:6f:8f:e2:9e:58: 5d:bc:53:21:6c:a4:5d:23:75:81:7a:4d:cb:85:4f: 1e:3b:fa:ee:a1:d6:0c:0a:4f:77:cb:29:e0:71:79: 04:3c:ce:bd:3d:7a:61:ae:46:05:8a:97:ce:57:ca: 8c:34:c1:68:79:7b:cd:b8:dc:f0:99:23:ff:0a:1a: 9c:f2:6a:57:2b:c8:f3:8e:cf:03:d3:0d:25:05:8b: 09:22:fb:c5:50:09:8f:31:28:c4:80:25:39:45:8b: 9e:56:a1:51:0b:a3:93:87:3b:49:e2:4f:43:c7:67: 4a:55:63:ef:17:a8:48:a2:6e:78:ee:c8:eb:84:8c: 5a:fc:29:b6:c2:cd:09:e5:b4:11:8b:1c:81:61:5b: 62:5c:9e:42:88:5c:3d:a8:b1:c9:b4:2f:06:d2:65: 16:10:d7:d0:83:48:0e:db:2b:a1:86:4f:ad:4f:15: c5:c3:c8:7d:f6:ca:41:6b:c9:50:16:38:65:bc:e4: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C3:55:63:EE:44:3B:23:E5:69:52:EA:5C:E9:1E:7E:92:07:08:53 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:0e:18:a2:0f:23:bc:fa:6a:45:75:6d:27:74:00:3f:68:80: 50:4a:86:96:ae:a9:7d:f7:ea:9b:4c:2c:c7:ec:d8:52:88:92: ba:de:21:0c:ac:4a:1d:3e:3d:8c:3a:f2:bc:7b:e4:f4:ad:91: ab:d3:d7:76:28:9d:2d:42:ac:1c:5d:ae:cb:60:cb:b6:d7:d8: e5:3e:34:e7:2d:14:20:cf:1e:28:bd:8b:37:62:e0:d4:ee:68: 22:82:a4:56:a6:8c:c1:f9:e2:de:ba:d0:38:02:56:d2:a1:f9: d5:b6:79:cf:9d:ee:61:27:6a:dd:00:3f:41:20:b5:4b:f7:9c: 90:b0:a3:78:04:c1:d2:06:f0:8a:3d:db:77:68:7b:10:cc:5e: db:69:78:78:92:82:8f:b6:33:e0:80:83:15:aa:f1:db:43:11: b9:90:86:72:ae:93:1b:6c:49:62:47:f9:bb:c3:43:29:72:fa: 2d:d3:e4:c1:e9:98:5a:00:0c:56:34:51:c6:47:f9:62:8b:c8: 89:96:fb:a4:0e:c1:6c:a7:3b:79:b2:eb:bf:4e:cf:5a:cf:a3: ad:3d:8a:84:f0:35:d0:59:10:63:9b:d7:3c:57:c0:15:8b:4f: 17:8f:11:02:59:d8:2c:cc:34:cb:e2:93:8e:a0:66:5e:b9:70: 36:90:cf:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZZgR8batq+huRdgdlaLrrYYP0BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA2MTMwOTE2MzlaFw0yNjA2MTQxMDU3MzlaMDMxMTAvBgNV BAMTKDgyQzM1NTYzRUU0NDNCMjNFNTY5NTJFQTVDRTkxRTdFOTIwNzA4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtgkthdwM3ZBSuDKcTfaVwYpl PNd/lvHICanx+lpGaCvcMgtgcP2IKCi/HBJ2O6+HJh9P85cElR4AAm3VQazjtHKz cAZvj+KeWF28UyFspF0jdYF6TcuFTx47+u6h1gwKT3fLKeBxeQQ8zr09emGuRgWK l85Xyow0wWh5e8243PCZI/8KGpzyalcryPOOzwPTDSUFiwki+8VQCY8xKMSAJTlF i55WoVELo5OHO0niT0PHZ0pVY+8XqEiibnjuyOuEjFr8KbbCzQnltBGLHIFhW2Jc nkKIXD2oscm0LwbSZRYQ19CDSA7bK6GGT61PFcXDyH32ykFryVAWOGW85MAfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgsNVY+5EOyPlaVLqXOkefpIHCFMwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8g4Yog8jvPpq RXVtJ3QAP2iAUEqGlq6pfffqm0wsx+zYUoiSut4hDKxKHT49jDryvHvk9K2Rq9PX diidLUKsHF2uy2DLttfY5T405y0UIM8eKL2LN2Lg1O5oIoKkVqaMwfni3rrQOAJW 0qH51bZ5z53uYSdq3QA/QSC1S/eckLCjeATB0gbwij3bd2h7EMxe22l4eJKCj7Yz 4ICDFarx20MRuZCGcq6TG2xJYkf5u8NDKXL6LdPkwemYWgAMVjRRxkf5YovIiZb7 pA7BbKc7ebLrv07PWs+jrT2KhPA10FkQY5vXPFfAFYtPF48RAlnYLMw0y+KTjqBm XrlwNpDP9w== -----END CERTIFICATE-----Generated at Sat Jun 13 23:42:35 2026 by rpki-client