$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json) Hash identifier: 0jVSdBa0a5PCYYF5WBg4A855ykh48eupOLmNgeM/fns= Subject key identifier: D6:42:EA:3C:7A:F7:B3:98:D8:5B:D7:27:62:4A:AB:F9:1E:5F:7A:3F Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Certificate serial: 32E3AAE632DD84471A8CDDE00D957FD6F57A1E50 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft Manifest number: 4F Signing time: Sat 13 Jun 2026 19:27:10 +0000 Manifest this update: Sat 13 Jun 2026 19:22:10 +0000 Manifest next update: Sun 14 Jun 2026 19:54:10 +0000 Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: M/pthRbrZEQM9K7G0HznHcsV1J3oGlXEPHduku0HNd4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:aa:e6:32:dd:84:47:1a:8c:dd:e0:0d:95:7f:d6:f5:7a:1e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Validity Not Before: Jun 13 19:22:10 2026 GMT Not After : Jun 14 19:54:10 2026 GMT Subject: CN=D642EA3C7AF7B398D85BD727624AABF91E5F7A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:43:f8:ac:64:47:5c:b9:0a:64:03:5e:6f: eb:1a:05:f8:86:3a:52:a3:e3:db:42:ea:4b:91:80: 4c:ea:c5:c5:3c:c6:b0:64:81:82:9c:08:a2:ca:f1: 41:d9:2a:84:8c:a8:87:13:0b:50:89:7b:5a:51:97: 02:c9:93:75:96:c5:ce:fe:52:92:fb:79:ca:ff:21: f3:45:12:bd:6a:4d:35:48:3b:c5:1f:bf:cd:eb:05: a8:d8:28:fa:b8:e9:45:8d:1f:00:fd:0f:89:e7:12: 02:86:c0:0e:4f:24:5b:5c:f3:4f:a2:9e:9c:47:a0: e3:1f:f2:bd:4b:81:9b:aa:2f:c7:7a:21:f4:e2:cd: 08:dd:28:53:84:9c:29:9d:e8:d9:c8:ba:fd:99:c5: 16:9f:53:47:73:c1:06:36:df:3b:f8:07:b7:a4:8b: d5:22:96:58:7e:e0:08:1c:4a:f6:b4:1e:f5:96:81: 1e:74:95:30:b9:bf:b5:9a:e8:70:8c:a6:f4:83:69: 65:cd:8c:7f:8d:00:72:36:45:92:6c:df:2c:f1:67: 37:f2:6e:31:1a:ba:61:7d:a5:0b:b4:79:cc:59:44: 76:ff:96:cb:f6:b2:0c:2e:6a:c5:85:ab:60:44:37: da:14:41:e4:4d:7d:f8:a0:fa:4b:fd:1e:be:6e:3e: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:42:EA:3C:7A:F7:B3:98:D8:5B:D7:27:62:4A:AB:F9:1E:5F:7A:3F X509v3 Authority Key Identifier: keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f6:25:4f:e4:65:c5:39:74:36:0b:b0:54:de:1b:da:d0:f7: 15:ee:4c:96:c0:44:b0:4d:4f:7f:91:4e:de:c0:86:e7:a8:76: 50:0a:a9:dc:f5:0a:d1:e0:8b:1f:89:f6:08:66:29:e6:43:4e: a0:b3:07:42:66:4f:63:43:f1:97:98:88:fe:9f:2f:d2:01:d4: 1d:71:7b:45:6e:35:cd:84:15:d5:fe:f7:45:cb:28:2c:62:a1: 73:0f:7a:7e:0c:9d:aa:af:20:6c:84:cf:c1:8c:13:b4:9c:68: 7c:59:32:a7:f2:2c:57:0f:42:c7:c9:e2:7c:63:16:94:dd:a9: 77:5e:6f:02:94:32:67:cc:74:20:ed:6b:f2:eb:f5:5a:ab:51: 74:73:ec:12:d5:62:59:78:4f:d3:82:6d:fa:26:67:fe:d3:f5: 78:b2:29:93:56:03:ba:6a:6b:30:5d:d4:8b:a4:4f:05:26:26: 93:74:b3:a5:9e:3e:a0:d3:21:4c:e1:aa:54:a6:08:47:c7:be: 9d:39:0a:1a:71:c6:5a:85:a0:4a:d7:30:bb:5d:35:1b:c9:1b: e1:a8:37:5b:84:9a:4d:cd:d4:3e:e4:b1:d4:61:1b:f3:a6:52: b7:0a:a5:62:6b:d1:7f:18:ab:5a:db:bc:6f:66:48:f4:59:61: ee:b9:50:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMuOq5jLdhEcajN3gDZV/1vV6HlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVC QkNGM0RDNDAeFw0yNjA2MTMxOTIyMTBaFw0yNjA2MTQxOTU0MTBaMDMxMTAvBgNV BAMTKEQ2NDJFQTNDN0FGN0IzOThEODVCRDcyNzYyNEFBQkY5MUU1RjdBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBsUP4rGRHXLkKZANeb+saBfiG OlKj49tC6kuRgEzqxcU8xrBkgYKcCKLK8UHZKoSMqIcTC1CJe1pRlwLJk3WWxc7+ UpL7ecr/IfNFEr1qTTVIO8Ufv83rBajYKPq46UWNHwD9D4nnEgKGwA5PJFtc80+i npxHoOMf8r1LgZuqL8d6IfTizQjdKFOEnCmd6NnIuv2ZxRafU0dzwQY23zv4B7ek i9Uillh+4AgcSva0HvWWgR50lTC5v7Wa6HCMpvSDaWXNjH+NAHI2RZJs3yzxZzfy bjEaumF9pQu0ecxZRHb/lsv2sgwuasWFq2BEN9oUQeRNffig+kv9Hr5uPhB5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1kLqPHr3s5jYW9cnYkqr+R5fej8wHwYDVR0j BBgwFoAUlRgw+utT+Al8E18WKS4plbvPPcQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2NjA4MjEyNzEzNDcyMy8wLzk1MTgzMEZBRUI1M0Y4MDk3QzEzNUYxNjI5MkUy OTk1QkJDRjNEQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjYwODIxMjcxMzQ3MjMvMC85NTE4MzBGQUVCNTNG ODA5N0MxMzVGMTYyOTJFMjk5NUJCQ0YzREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPYlT+RlxTl0 NguwVN4b2tD3Fe5MlsBEsE1Pf5FO3sCG56h2UAqp3PUK0eCLH4n2CGYp5kNOoLMH QmZPY0Pxl5iI/p8v0gHUHXF7RW41zYQV1f73RcsoLGKhcw96fgydqq8gbITPwYwT tJxofFkyp/IsVw9Cx8nifGMWlN2pd15vApQyZ8x0IO1r8uv1WqtRdHPsEtViWXhP 04Jt+iZn/tP1eLIpk1YDumprMF3Ui6RPBSYmk3SzpZ4+oNMhTOGqVKYIR8e+nTkK GnHGWoWgStcwu101G8kb4ag3W4SaTc3UPuSx1GEb86ZStwqlYmvRfxirWtu8b2ZI 9Flh7rlQwg== -----END CERTIFICATE-----Generated at Sun Jun 14 08:36:26 2026 by rpki-client