$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: GxaBipkqMFMbavWNWMWXE7cG9s4X1+5ego+UB6HhsyU= Subject key identifier: C9:D2:1E:D6:FE:24:BF:C7:F8:D7:ED:78:42:B4:DE:E7:F2:58:4A:7E Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 3C3CF86D659C5F42FC3169DD080BBB97DD472E8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 4F Signing time: Sat 13 Jun 2026 23:07:26 +0000 Manifest this update: Sat 13 Jun 2026 23:02:26 +0000 Manifest next update: Mon 15 Jun 2026 00:41:26 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: SCtl118KIjwFo21J6bBJpDgo8QprgJvwfSm9iUFI7RY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3c:f8:6d:65:9c:5f:42:fc:31:69:dd:08:0b:bb:97:dd:47:2e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Jun 13 23:02:26 2026 GMT Not After : Jun 15 00:41:26 2026 GMT Subject: CN=C9D21ED6FE24BFC7F8D7ED7842B4DEE7F2584A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:37:b3:d1:ef:d3:0c:61:36:1a:b2:1a:19: 1d:db:59:cf:ae:07:b2:af:72:74:6a:99:03:da:0d: b5:da:cd:39:26:16:f9:88:4b:38:7a:a4:78:a4:3d: 36:78:a7:68:59:fe:89:88:98:d8:d6:bf:a9:39:1c: 6e:5a:1b:c8:a4:e5:7a:d1:66:89:7a:13:77:a8:d3: ef:78:02:70:9e:12:20:84:53:fe:bb:cb:19:85:6d: ca:15:a0:51:b1:2f:23:0e:dd:5f:bf:85:9b:84:75: dd:95:9a:0a:26:9d:c3:ee:6c:09:86:a3:4e:6a:0b: 16:37:21:52:c9:5a:67:f5:e2:ce:9a:4c:ca:f0:10: e3:ac:a8:8e:85:ea:d0:69:d8:87:bb:92:69:cd:1d: 87:81:29:eb:d9:9f:cf:c5:ff:30:96:9d:f7:43:e2: bf:10:94:e3:a1:00:b3:79:26:3e:f9:7e:e9:1e:a2: 8c:55:67:a2:84:6a:e1:9e:57:12:71:7e:7a:f8:c8: 1f:08:a9:1e:9a:91:e3:98:41:16:8d:97:28:cc:e4: 42:ea:e9:5b:9e:13:f9:b5:06:18:96:9d:84:bf:3f: f3:83:11:cf:3d:96:86:29:35:0a:cf:d8:49:ba:ec: e4:b3:53:0d:eb:15:eb:fb:15:44:db:2c:7b:36:fb: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:1E:D6:FE:24:BF:C7:F8:D7:ED:78:42:B4:DE:E7:F2:58:4A:7E X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ed:02:6e:b9:f2:1b:ad:8a:87:bf:d5:6d:3f:49:4b:26:0c: 31:44:40:1e:b3:6d:ca:d3:5b:6b:16:84:1f:ed:2a:50:8c:9c: ff:f9:79:2b:a6:1c:18:ae:72:7f:a2:76:b1:2f:8f:f7:f8:8a: 15:4f:75:86:b1:91:b0:1a:36:40:c5:7e:08:b4:22:68:c4:e5: 10:85:d5:f7:15:a2:a9:0c:ea:85:34:77:2f:1a:18:6d:1e:c8: d9:7c:6e:dc:d2:81:81:43:1b:47:90:3f:7e:81:8d:62:80:e6: 66:8d:0c:88:57:0b:56:1e:ff:5b:55:b3:6d:e4:22:d7:9f:47: 33:c2:e4:75:d2:b5:65:00:45:5b:42:4d:bb:cd:c7:43:ae:1e: b4:15:18:ba:84:6d:02:a6:9d:80:62:d0:9e:07:ff:5d:9b:c1: 2a:1a:ed:e0:ec:52:cc:c4:6c:c9:ef:6c:11:a6:35:33:a1:c0: d5:59:5a:9c:1b:2d:6b:ed:ed:c2:73:5b:f4:20:69:cc:95:47: 41:bc:51:cb:b7:8a:19:9f:dd:7d:a6:1e:ee:b3:1c:f7:fe:a8: 1a:51:b4:a7:48:c9:1d:86:bc:44:a7:03:1b:b1:2f:0d:a2:cd: fe:8e:4c:c8:40:7b:ba:3e:cc:12:4d:13:61:4e:a7:d7:12:1b: 91:e0:ea:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPDz4bWWcX0L8MWndCAu7l91HLowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA2MTMyMzAyMjZaFw0yNjA2MTUwMDQxMjZaMDMxMTAvBgNV BAMTKEM5RDIxRUQ2RkUyNEJGQzdGOEQ3RUQ3ODQyQjRERUU3RjI1ODRBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwDez0e/TDGE2GrIaGR3bWc+u B7KvcnRqmQPaDbXazTkmFvmISzh6pHikPTZ4p2hZ/omImNjWv6k5HG5aG8ik5XrR Zol6E3eo0+94AnCeEiCEU/67yxmFbcoVoFGxLyMO3V+/hZuEdd2VmgomncPubAmG o05qCxY3IVLJWmf14s6aTMrwEOOsqI6F6tBp2Ie7kmnNHYeBKevZn8/F/zCWnfdD 4r8QlOOhALN5Jj75fukeooxVZ6KEauGeVxJxfnr4yB8IqR6akeOYQRaNlyjM5ELq 6VueE/m1BhiWnYS/P/ODEc89loYpNQrP2Em67OSzUw3rFev7FUTbLHs2+zr/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUydIe1v4kv8f41+14QrTe5/JYSn4wHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+0CbrnyG62K h7/VbT9JSyYMMURAHrNtytNbaxaEH+0qUIyc//l5K6YcGK5yf6J2sS+P9/iKFU91 hrGRsBo2QMV+CLQiaMTlEIXV9xWiqQzqhTR3LxoYbR7I2Xxu3NKBgUMbR5A/foGN YoDmZo0MiFcLVh7/W1WzbeQi159HM8LkddK1ZQBFW0JNu83HQ64etBUYuoRtAqad gGLQngf/XZvBKhrt4OxSzMRsye9sEaY1M6HA1VlanBsta+3twnNb9CBpzJVHQbxR y7eKGZ/dfaYe7rMc9/6oGlG0p0jJHYa8RKcDG7EvDaLN/o5MyEB7uj7MEk0TYU6n 1xIbkeDqIg== -----END CERTIFICATE-----Generated at Sun Jun 14 08:10:25 2026 by rpki-client