$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: u4bjl1uVC40D5wWygO8CqbbR/ggg0w/8Cs/6rfpwaYY= Subject key identifier: 89:C6:11:99:B2:D6:5C:3B:6A:06:CC:AF:B7:BE:FE:02:FE:2F:2B:1E Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 0E0A7903BB003550805D9A4C2FD6C69EBFED54C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: 4D Signing time: Sat 13 Jun 2026 06:41:21 +0000 Manifest this update: Sat 13 Jun 2026 06:36:21 +0000 Manifest next update: Sun 14 Jun 2026 09:18:21 +0000 Files and hashes: 1: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: hyAkGtGsjWhByYnPvYxu/QSbZG3xq0w0xbB5GFbXN74=) 2: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0a:79:03:bb:00:35:50:80:5d:9a:4c:2f:d6:c6:9e:bf:ed:54:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Jun 13 06:36:21 2026 GMT Not After : Jun 14 09:18:21 2026 GMT Subject: CN=89C61199B2D65C3B6A06CCAFB7BEFE02FE2F2B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:e7:a3:6b:9a:48:4f:2c:ca:90:2d:99:ef: f1:a0:50:57:3c:13:2c:90:03:52:f0:32:11:0e:1b: ef:7d:bf:7e:d5:44:55:df:de:4a:8d:d7:03:39:25: 6a:e7:3d:10:51:72:db:e2:e9:d2:1c:2e:f8:2a:3e: b7:21:88:5c:3c:70:14:48:52:67:61:78:0c:59:da: f7:b6:d2:6e:94:c3:05:78:f6:7a:31:f1:cb:f8:22: 58:86:cc:e8:e7:23:bd:de:37:d7:f4:27:74:e8:56: b4:a0:f2:c1:b0:cc:d8:a1:d3:ff:c0:07:48:e4:72: 33:7f:31:8b:bc:57:ae:fd:af:16:77:19:67:5d:2f: bc:4c:bb:77:a7:89:d2:84:b4:23:07:fe:cc:6b:94: 16:42:e0:c3:25:c3:cc:31:b9:44:48:c3:cf:6d:13: 84:a2:7c:ef:43:0c:6d:a2:8d:1f:f6:a5:29:95:f0: 7e:8a:4f:26:9a:c9:09:48:f6:e1:36:ae:52:6f:04: 82:1d:da:e1:f8:77:39:91:ed:7f:30:a5:f7:11:9d: 6f:f4:5e:1c:7f:f1:7f:c6:b8:ad:c4:47:df:8d:35: 8a:20:a6:71:2c:b1:ea:91:42:c2:24:3f:b1:1e:5e: c4:f4:a2:de:06:f1:c9:90:7f:a5:98:c9:24:5d:38: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:11:99:B2:D6:5C:3B:6A:06:CC:AF:B7:BE:FE:02:FE:2F:2B:1E X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:17:66:55:ba:15:08:34:76:b5:05:a8:58:27:2f:ae:18: 89:da:36:f7:15:2b:d2:12:84:ce:b6:f8:72:81:89:c5:59:05: a2:4c:2b:dc:46:42:30:93:c1:31:0b:b9:29:87:dc:6f:62:80: 7b:df:83:f3:ff:3a:20:61:72:5a:ab:23:e3:03:d0:30:0d:80: 2a:cd:4a:3b:7e:ba:dc:c8:4c:0d:40:e5:d6:41:45:43:19:84: e5:1e:4f:a1:01:92:a3:aa:cb:b4:40:e3:1d:06:28:88:78:a3: 6e:3e:e4:19:fd:ff:1a:ff:3e:70:26:c5:80:4a:7b:4e:aa:80: f5:c9:aa:f1:4b:06:8d:d0:ce:90:96:3c:e8:a3:ed:c7:6a:f1: a1:47:7f:61:0a:bd:28:a9:3c:a8:fe:bf:fe:02:ab:f6:e1:f4: c8:ab:c3:cf:f5:cb:7c:b7:02:ca:5f:f9:2e:0f:2b:c4:c6:6b: bb:ae:81:33:81:d9:bc:a6:fa:5d:12:07:a2:48:c2:f2:20:82: 93:1b:dd:65:d9:bc:b3:f5:82:da:66:8d:ae:aa:1e:2b:e5:40: ab:53:18:3a:dc:d7:c4:ba:b7:87:ef:45:27:f5:37:37:02:d7: 41:bc:8e:20:80:fb:ad:39:63:39:d3:3f:bf:95:33:69:9e:e4: 70:58:e9:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDgp5A7sANVCAXZpML9bGnr/tVMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA2MTMwNjM2MjFaFw0yNjA2MTQwOTE4MjFaMDMxMTAvBgNV BAMTKDg5QzYxMTk5QjJENjVDM0I2QTA2Q0NBRkI3QkVGRTAyRkUyRjJCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8ueja5pITyzKkC2Z7/GgUFc8 EyyQA1LwMhEOG+99v37VRFXf3kqN1wM5JWrnPRBRctvi6dIcLvgqPrchiFw8cBRI UmdheAxZ2ve20m6UwwV49nox8cv4IliGzOjnI73eN9f0J3ToVrSg8sGwzNih0//A B0jkcjN/MYu8V679rxZ3GWddL7xMu3enidKEtCMH/sxrlBZC4MMlw8wxuURIw89t E4SifO9DDG2ijR/2pSmV8H6KTyaayQlI9uE2rlJvBIId2uH4dzmR7X8wpfcRnW/0 Xhx/8X/GuK3ER9+NNYogpnEsseqRQsIkP7EeXsT0ot4G8cmQf6WYySRdOG9pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUicYRmbLWXDtqBsyvt77+Av4vKx4wHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJEXZlW6FQg0 drUFqFgnL64Yido29xUr0hKEzrb4coGJxVkFokwr3EZCMJPBMQu5KYfcb2KAe9+D 8/86IGFyWqsj4wPQMA2AKs1KO3663MhMDUDl1kFFQxmE5R5PoQGSo6rLtEDjHQYo iHijbj7kGf3/Gv8+cCbFgEp7TqqA9cmq8UsGjdDOkJY86KPtx2rxoUd/YQq9KKk8 qP6//gKr9uH0yKvDz/XLfLcCyl/5Lg8rxMZru66BM4HZvKb6XRIHokjC8iCCkxvd Zdm8s/WC2maNrqoeK+VAq1MYOtzXxLq3h+9FJ/U3NwLXQbyOIID7rTljOdM/v5Uz aZ7kcFjpmA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:14:20 2026 by rpki-client