$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: D51HQcfYIJYzZzOLQvEbCuPQ9KYm1/sF7bArRF9KGIo= Subject key identifier: 82:18:66:A5:40:4A:08:A2:21:AB:54:8B:E4:41:D0:C2:9D:F6:D9:B7 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 70821125942EF292BF0123154AE1C74072499E66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 4F Signing time: Sat 13 Jun 2026 07:56:32 +0000 Manifest this update: Sat 13 Jun 2026 07:51:32 +0000 Manifest next update: Sun 14 Jun 2026 10:16:32 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: /PRMY2RkLsjf+6hFxUYhzpYxGjEHCJ9qMcHqf8Umo84=) 2: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 3: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:82:11:25:94:2e:f2:92:bf:01:23:15:4a:e1:c7:40:72:49:9e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Jun 13 07:51:32 2026 GMT Not After : Jun 14 10:16:32 2026 GMT Subject: CN=821866A5404A08A221AB548BE441D0C29DF6D9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:1e:84:b9:df:e5:31:15:a0:f5:54:9d:32: 11:b4:51:70:a7:3a:e2:ac:62:d3:85:04:fd:51:22: e9:a7:59:98:41:f5:65:4f:97:90:7f:74:f1:49:60: 75:17:e8:e6:fe:fc:51:eb:0e:b8:00:6e:8b:51:ff: 3f:80:a0:6b:e6:4d:fa:ad:4e:35:00:24:b0:aa:5b: 1d:e7:4c:bd:23:b6:f6:84:9c:fd:c9:ce:23:3e:e8: 11:38:71:3f:bf:d8:ce:d9:53:b2:70:54:4d:76:1e: 26:44:9a:5d:a0:5d:ee:bf:5d:72:03:73:e0:50:cd: e3:02:e7:c6:9f:cf:09:63:72:51:0b:53:b0:92:c0: 9a:72:8f:4a:7b:ef:73:fe:c8:d5:33:3d:37:c2:3b: 44:21:93:c1:57:b4:6b:95:2d:a1:48:9a:b1:49:79: 1a:5e:78:6d:95:0e:8e:2b:38:c9:c9:3d:9b:c2:47: 27:4a:06:4d:c9:55:0f:73:8c:2a:7a:c2:15:89:75: 75:21:ba:28:9f:09:3a:67:4b:d2:11:6d:84:48:7b: ff:97:b3:53:43:5d:c9:9c:ed:26:3e:ad:df:13:28: af:d9:9f:8c:1a:b4:2b:37:6b:63:12:c5:98:15:cd: 82:d5:b1:36:ba:0b:1a:51:38:83:8c:57:7e:62:7b: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:66:A5:40:4A:08:A2:21:AB:54:8B:E4:41:D0:C2:9D:F6:D9:B7 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e7:f2:7e:22:3c:32:04:2a:ee:b5:82:f4:42:3a:47:d1:10: 3b:23:23:27:cc:e7:b3:fa:c7:6a:f5:96:79:73:c9:49:18:75: 16:04:5d:12:02:c1:19:2e:eb:15:39:9a:be:62:24:64:50:fd: 64:43:d2:dd:c2:7b:9b:80:9e:48:65:a7:6b:fb:17:1f:46:01: 36:b0:ef:d1:0a:0f:85:56:f5:ee:3c:0c:85:b1:58:0f:35:7a: 31:42:d0:6e:ea:f1:ad:6c:79:d9:58:a8:da:6c:d4:20:07:5e: a8:28:06:05:44:ef:a0:7f:dc:33:e0:b7:cc:fa:ee:af:9c:ed: 3a:be:15:8a:4c:62:dd:77:a6:36:8a:be:44:57:b7:ee:2d:54: df:2e:b5:9c:25:66:7a:06:2e:ab:b7:77:aa:95:92:20:63:71: c7:b2:78:b2:a9:a4:63:9d:f4:56:4e:14:27:80:ff:93:b7:2a: cc:f0:91:a1:47:64:23:de:8f:f2:2e:0c:72:8c:c2:e0:75:47: 8d:06:1e:2c:1e:2f:53:07:c8:d0:c6:4e:62:a9:55:42:b8:5b: cb:aa:31:b3:22:f2:ca:f8:c4:11:4c:b2:41:8c:2b:97:68:28: f9:0d:eb:86:79:d6:2b:52:13:c7:21:53:9c:1e:79:9a:17:28: bd:8d:66:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcIIRJZQu8pK/ASMVSuHHQHJJnmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA2MTMwNzUxMzJaFw0yNjA2MTQxMDE2MzJaMDMxMTAvBgNV BAMTKDgyMTg2NkE1NDA0QTA4QTIyMUFCNTQ4QkU0NDFEMEMyOURGNkQ5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqx6Eud/lMRWg9VSdMhG0UXCn OuKsYtOFBP1RIumnWZhB9WVPl5B/dPFJYHUX6Ob+/FHrDrgAbotR/z+AoGvmTfqt TjUAJLCqWx3nTL0jtvaEnP3JziM+6BE4cT+/2M7ZU7JwVE12HiZEml2gXe6/XXID c+BQzeMC58afzwljclELU7CSwJpyj0p773P+yNUzPTfCO0Qhk8FXtGuVLaFImrFJ eRpeeG2VDo4rOMnJPZvCRydKBk3JVQ9zjCp6whWJdXUhuiifCTpnS9IRbYRIe/+X s1NDXcmc7SY+rd8TKK/Zn4watCs3a2MSxZgVzYLVsTa6CxpROIOMV35ie0Z/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUghhmpUBKCKIhq1SL5EHQwp322bcwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaufyfiI8MgQq 7rWC9EI6R9EQOyMjJ8zns/rHavWWeXPJSRh1FgRdEgLBGS7rFTmavmIkZFD9ZEPS 3cJ7m4CeSGWna/sXH0YBNrDv0QoPhVb17jwMhbFYDzV6MULQburxrWx52Vio2mzU IAdeqCgGBUTvoH/cM+C3zPrur5ztOr4Vikxi3XemNoq+RFe37i1U3y61nCVmegYu q7d3qpWSIGNxx7J4sqmkY530Vk4UJ4D/k7cqzPCRoUdkI96P8i4McozC4HVHjQYe LB4vUwfI0MZOYqlVQrhby6oxsyLyyvjEEUyyQYwrl2go+Q3rhnnWK1ITxyFTnB55 mhcovY1mdQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:17:08 2026 by rpki-client