$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: TDAAPU9pAQIBTfsbN1effUti0ZYiR3pi51zzF95/WNc= Subject key identifier: 22:BF:EC:C7:73:FC:00:E4:93:36:95:49:24:7B:EC:AB:8B:C1:30:B8 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 1B40D2953F3969A0686CBF5FAFBF4401DDCF69CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 51 Signing time: Sat 13 Jun 2026 18:01:59 +0000 Manifest this update: Sat 13 Jun 2026 17:56:59 +0000 Manifest next update: Sun 14 Jun 2026 18:26:59 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: 0rnoAMiiQktpr+TjWo1VjkCJuwAJq9a46Vvbu91bOA0=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:40:d2:95:3f:39:69:a0:68:6c:bf:5f:af:bf:44:01:dd:cf:69:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Jun 13 17:56:59 2026 GMT Not After : Jun 14 18:26:59 2026 GMT Subject: CN=22BFECC773FC00E493369549247BECAB8BC130B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:75:7f:cd:ac:40:32:f2:79:bf:0e:62:05: 54:74:27:29:12:51:34:0d:8b:37:22:c9:e6:1b:d7: 16:0c:18:5a:9b:dc:89:fc:07:97:2c:f3:2f:b4:8d: b4:32:a9:94:8b:6d:1e:41:69:94:be:37:24:9a:e2: 3c:ae:c2:1d:f3:55:a6:64:eb:24:56:82:5f:7a:4e: 8a:67:7f:22:22:0a:4e:9b:34:51:eb:7f:31:92:4b: e9:50:24:17:78:b9:52:74:80:19:54:83:4d:fe:8c: d9:56:32:a8:ab:c3:0b:1a:6a:6c:ae:e3:52:ae:ec: 1d:fe:2e:bb:82:49:24:ae:d9:15:17:25:be:58:71: 73:80:cd:11:94:ac:c3:aa:b6:93:22:0f:73:37:c5: c9:65:5c:c2:f2:28:95:d8:bc:f2:ef:fe:db:aa:78: 72:54:db:92:1a:c4:79:93:da:8d:c5:f2:40:1a:24: ba:aa:82:12:0e:7f:42:b0:79:20:ee:30:2e:4c:1d: 5f:73:83:83:0a:7a:0c:dc:08:f1:16:55:0e:25:0a: 89:6d:58:a1:f5:49:00:86:a1:46:1f:5a:ea:34:b7: db:5c:34:f6:d7:1c:37:39:9c:1b:1f:ce:07:c5:4d: 53:0b:38:31:b3:60:44:f6:3a:db:19:e7:e6:aa:13: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BF:EC:C7:73:FC:00:E4:93:36:95:49:24:7B:EC:AB:8B:C1:30:B8 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:43:4c:2d:30:3b:42:57:4d:6a:a3:30:e6:67:3c:b2:ac:1d: 89:c0:f3:0e:8c:19:42:2b:23:80:66:32:2e:3c:49:eb:35:48: ae:db:c7:5d:89:1d:36:59:b7:aa:88:72:2f:cc:3d:68:88:43: 0a:76:40:04:ec:68:87:c5:58:be:96:ae:7e:85:93:06:c6:99: 7f:33:5b:3d:96:cc:73:ec:62:5e:f8:34:19:22:a5:04:dc:57: fc:11:36:d3:8c:e4:c1:ab:4d:ac:e0:6b:59:db:05:34:6c:d9: 42:b8:46:c4:dc:65:4d:4e:aa:7d:b6:da:6e:45:ce:c3:05:2e: 79:86:f7:6c:c3:bf:6a:0f:14:6d:cb:9d:05:68:fc:7c:73:5e: 3f:99:35:6a:db:b8:e2:16:b4:58:78:70:6a:17:2d:1d:d5:3b: a4:87:f1:59:03:cd:31:e1:42:dd:5b:3f:05:90:d4:fd:f7:e2: 4c:19:17:03:66:53:7c:aa:ed:51:03:91:ad:cc:c6:0a:89:06: 33:a6:7c:90:11:b1:40:50:98:f8:26:13:5e:ca:f3:3e:a7:75: 3b:dc:b2:9b:56:c4:d8:a9:ca:1f:6c:95:19:c8:ec:34:c6:bd: 5e:76:4e:7f:34:03:51:43:81:79:69:c2:af:8f:2c:6d:e9:aa: f8:cc:e8:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG0DSlT85aaBobL9fr79EAd3Pac4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA2MTMxNzU2NTlaFw0yNjA2MTQxODI2NTlaMDMxMTAvBgNV BAMTKDIyQkZFQ0M3NzNGQzAwRTQ5MzM2OTU0OTI0N0JFQ0FCOEJDMTMwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpj3V/zaxAMvJ5vw5iBVR0JykS UTQNizciyeYb1xYMGFqb3In8B5cs8y+0jbQyqZSLbR5BaZS+NySa4jyuwh3zVaZk 6yRWgl96TopnfyIiCk6bNFHrfzGSS+lQJBd4uVJ0gBlUg03+jNlWMqirwwsaamyu 41Ku7B3+LruCSSSu2RUXJb5YcXOAzRGUrMOqtpMiD3M3xcllXMLyKJXYvPLv/tuq eHJU25IaxHmT2o3F8kAaJLqqghIOf0KweSDuMC5MHV9zg4MKegzcCPEWVQ4lColt WKH1SQCGoUYfWuo0t9tcNPbXHDc5nBsfzgfFTVMLODGzYET2OtsZ5+aqE/pXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIr/sx3P8AOSTNpVJJHvsq4vBMLgwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0NMLTA7QldN aqMw5mc8sqwdicDzDowZQisjgGYyLjxJ6zVIrtvHXYkdNlm3qohyL8w9aIhDCnZA BOxoh8VYvpaufoWTBsaZfzNbPZbMc+xiXvg0GSKlBNxX/BE204zkwatNrOBrWdsF NGzZQrhGxNxlTU6qfbbabkXOwwUueYb3bMO/ag8UbcudBWj8fHNeP5k1atu44ha0 WHhwahctHdU7pIfxWQPNMeFC3Vs/BZDU/ffiTBkXA2ZTfKrtUQORrczGCokGM6Z8 kBGxQFCY+CYTXsrzPqd1O9yym1bE2KnKH2yVGcjsNMa9XnZOfzQDUUOBeWnCr48s bemq+MzoBA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:29:51 2026 by rpki-client