$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: iij2d17S077EkpxrP4eYHN/Vrrgat7HoiouwojIUYx8= Subject key identifier: 3B:54:04:F6:10:29:BF:30:A5:B7:DD:59:87:FF:24:39:EE:98:56:EB Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 43AFE04876608F9654FF84263EBA2C41313C11BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 22:22:20 +0000 Manifest this update: Sat 13 Jun 2026 22:17:20 +0000 Manifest next update: Sun 14 Jun 2026 23:13:20 +0000 Files and hashes: 1: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) 2: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: 90gySvjnyV5Pk+XdpiUQz0h7MsBURcOWvk7E+F3Nbw0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:af:e0:48:76:60:8f:96:54:ff:84:26:3e:ba:2c:41:31:3c:11:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Jun 13 22:17:20 2026 GMT Not After : Jun 14 23:13:20 2026 GMT Subject: CN=3B5404F61029BF30A5B7DD5987FF2439EE9856EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:13:3e:fc:64:3f:d1:65:37:18:e2:1c:5a: b2:5d:13:18:5b:63:fe:e6:94:f3:a7:f5:55:cd:37: 34:a1:93:b1:cc:9a:b9:f4:fb:78:da:9d:5d:af:9a: 46:62:9e:1a:04:e6:c6:01:8a:dc:85:81:65:6f:08: 07:96:15:c1:b0:4a:ec:b5:29:4b:46:c3:21:71:f3: f5:eb:05:3e:e0:87:a9:84:53:19:77:5a:59:31:36: e8:0b:d6:cd:61:18:36:63:13:93:a1:13:47:30:c4: d9:8a:8f:d3:73:d1:98:33:a0:80:72:01:03:12:c5: d0:4c:b9:4e:52:c0:58:de:eb:37:73:23:f9:39:f8: 4a:f8:e6:1f:5b:b4:92:0d:60:87:fb:70:84:43:a7: 32:18:25:ba:2b:ca:e5:df:58:f6:ef:30:f3:02:7a: e9:56:f6:0c:22:d4:db:2f:64:64:c2:ab:df:97:16: 48:9e:95:de:13:ed:5f:ba:a4:62:84:24:2e:16:d5: 9d:d3:2f:52:0d:dd:9f:ca:ee:ae:6c:28:be:51:b7: 6f:37:a3:2d:b2:ed:22:b3:1c:39:b4:54:58:81:8a: 7c:d2:9e:2e:f7:4f:96:02:3d:95:91:69:fd:80:6b: 54:36:f6:93:8d:5b:09:be:3c:c0:09:8e:46:d1:df: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:04:F6:10:29:BF:30:A5:B7:DD:59:87:FF:24:39:EE:98:56:EB X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:89:77:c1:13:84:0f:21:51:b6:43:20:bf:6c:06:36:0c:c6: 3d:ca:59:09:25:d3:4d:57:95:ce:54:f1:18:54:9d:f3:4d:7e: c5:6f:61:0d:0a:09:6f:d2:62:43:f1:bc:d2:e1:a6:22:4e:62: e2:4e:f1:b1:2d:62:b8:6d:c0:21:e8:d8:74:07:cb:da:be:53: c4:05:ae:c3:d6:47:fb:9a:1d:2d:f3:24:65:fa:9a:d3:6a:d0: b1:66:3a:0b:2b:74:e1:6d:8e:6e:07:98:2b:6b:ef:2d:d3:a8: d4:fb:45:f7:45:5a:f3:94:d8:df:4b:cd:24:f6:e1:68:18:d4: c1:0f:3e:ca:3f:36:57:64:88:4c:4d:bc:e1:f3:7e:4e:73:94: 59:55:cf:58:6b:c3:f8:3b:83:34:af:16:6e:ce:1f:aa:9f:7f: 37:f9:bb:37:36:44:47:ca:bc:28:98:1e:a5:ab:62:0d:e7:03: a1:49:05:e0:66:e9:fd:72:e0:61:93:bb:d1:cc:43:ec:87:fc: e6:ff:24:e0:ab:e9:35:6a:98:20:5d:10:59:71:ea:68:f0:0c: 12:31:9c:15:f4:ec:fb:60:f8:f6:ae:50:dd:08:ba:67:44:1b: f0:1a:5b:7a:06:c1:c6:34:28:d4:ed:09:44:a2:53:f7:61:af: 87:84:f2:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ6/gSHZgj5ZU/4QmProsQTE8Eb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA2MTMyMjE3MjBaFw0yNjA2MTQyMzEzMjBaMDMxMTAvBgNV BAMTKDNCNTQwNEY2MTAyOUJGMzBBNUI3REQ1OTg3RkYyNDM5RUU5ODU2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2hM+/GQ/0WU3GOIcWrJdExhb Y/7mlPOn9VXNNzShk7HMmrn0+3janV2vmkZinhoE5sYBityFgWVvCAeWFcGwSuy1 KUtGwyFx8/XrBT7gh6mEUxl3WlkxNugL1s1hGDZjE5OhE0cwxNmKj9Nz0ZgzoIBy AQMSxdBMuU5SwFje6zdzI/k5+Er45h9btJINYIf7cIRDpzIYJboryuXfWPbvMPMC eulW9gwi1NsvZGTCq9+XFkield4T7V+6pGKEJC4W1Z3TL1IN3Z/K7q5sKL5Rt283 oy2y7SKzHDm0VFiBinzSni73T5YCPZWRaf2Aa1Q29pONWwm+PMAJjkbR31SVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO1QE9hApvzClt91Zh/8kOe6YVuswHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYl3wROEDyFR tkMgv2wGNgzGPcpZCSXTTVeVzlTxGFSd801+xW9hDQoJb9JiQ/G80uGmIk5i4k7x sS1iuG3AIejYdAfL2r5TxAWuw9ZH+5odLfMkZfqa02rQsWY6Cyt04W2ObgeYK2vv LdOo1PtF90Va85TY30vNJPbhaBjUwQ8+yj82V2SITE284fN+TnOUWVXPWGvD+DuD NK8Wbs4fqp9/N/m7NzZER8q8KJgepatiDecDoUkF4Gbp/XLgYZO70cxD7If85v8k 4KvpNWqYIF0QWXHqaPAMEjGcFfTs+2D49q5Q3Qi6Z0Qb8BpbegbBxjQo1O0JRKJT 92Gvh4Ty2w== -----END CERTIFICATE-----Generated at Sun Jun 14 09:58:11 2026 by rpki-client