$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: RGyQ3r1+dc135BnKLm+5rK5JwuPAZeq40KlPzTwo6NY= Subject key identifier: A4:7A:ED:9E:BA:DC:48:A0:A4:78:54:C0:C7:87:1E:9C:37:24:11:BC Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 19FEB8B2DA82C4B8147A15878F7D7BFB97A05472 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 4B Signing time: Sun 14 Jun 2026 00:57:31 +0000 Manifest this update: Sun 14 Jun 2026 00:52:31 +0000 Manifest next update: Mon 15 Jun 2026 01:13:31 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: qZ650HUGvnS92+cZC4nh8HJSV41OxCtp27TlZovFBnk=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fe:b8:b2:da:82:c4:b8:14:7a:15:87:8f:7d:7b:fb:97:a0:54:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Jun 14 00:52:31 2026 GMT Not After : Jun 15 01:13:31 2026 GMT Subject: CN=A47AED9EBADC48A0A47854C0C7871E9C372411BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:a6:6e:ee:37:6c:e4:fa:59:67:2f:41:9a: cf:86:20:0b:9d:da:54:3f:6e:c6:f7:25:c1:8b:1e: 00:a8:ef:fd:0e:0a:d7:ea:26:d5:e7:a0:57:08:ec: b0:1d:10:83:37:2d:4e:f6:55:24:9e:61:82:58:33: 7c:9e:6b:c5:32:c2:6c:cc:dc:57:ef:9b:a1:9c:88: 63:7a:70:ff:64:23:d7:ec:fb:b9:fc:ac:3c:2b:06: 38:2e:9b:25:d0:7e:31:33:82:35:d2:75:05:87:7e: c4:3e:86:9e:83:ca:50:2a:de:31:d8:1e:e2:ed:6c: 58:82:86:de:a5:a1:11:fe:de:61:ca:7e:7a:be:6e: fc:1e:21:4e:e5:76:67:ea:c3:4a:17:08:d4:d4:3c: 0f:19:d8:94:0a:e1:ee:35:d7:3d:c6:b3:3a:5f:87: 7a:04:61:41:dd:44:76:00:25:b7:f8:49:c9:c5:78: 07:82:c8:02:06:3f:f5:76:3e:dd:6c:91:a7:7c:c8: b6:a6:b2:42:74:d3:f0:31:90:1b:55:f9:99:19:e8: fa:0e:31:ef:f8:45:da:4c:b8:f1:ff:a1:c5:5d:a6: a5:f9:c7:06:98:cd:7e:fa:59:cd:16:4b:96:2b:a7: 7d:c5:39:ab:86:26:43:ab:d3:26:24:b0:34:ac:17: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:ED:9E:BA:DC:48:A0:A4:78:54:C0:C7:87:1E:9C:37:24:11:BC X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:59:cb:da:d4:41:37:06:35:1d:74:48:da:f7:7a:23:22:52: fa:93:b1:12:24:9c:3e:cf:dd:44:9e:6e:ab:32:4b:6e:15:bf: ba:56:58:c6:5e:4d:21:24:80:4f:d7:a6:c1:47:49:67:cc:00: c4:29:bc:b4:90:58:53:10:3d:22:d8:c3:6b:53:06:b8:4e:5d: c4:dc:d0:9b:e8:6d:00:2e:9a:41:ac:0d:bd:52:7f:d5:c7:85: 9a:5e:4d:fd:98:93:1f:5f:e4:0c:be:bb:7c:ec:a3:9c:74:fa: 2f:ac:79:1f:68:71:4c:cd:39:a6:35:6a:f8:42:d8:b2:59:b0: a5:2c:5c:f6:30:07:bd:ef:8b:d3:91:0b:40:b2:05:71:99:1b: bd:f9:02:89:ab:9f:31:5d:29:cb:ac:59:8f:cd:05:04:78:db: 0f:29:20:cb:0e:4f:00:cb:b4:9b:6c:87:3e:63:7c:af:9a:a0: f3:e5:ab:06:7c:11:06:b3:d3:24:2b:de:2b:5b:32:71:ba:22: d6:85:85:10:47:92:db:cf:d8:02:b7:a4:50:ac:2d:ba:54:37: 69:de:35:da:a7:a1:2a:5f:15:e4:77:b3:40:d7:21:f9:b8:46: b0:38:da:af:be:32:77:1c:43:19:2f:96:65:02:09:a7:31:02: c2:e5:b0:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGf64stqCxLgUehWHj317+5egVHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA2MTQwMDUyMzFaFw0yNjA2MTUwMTEzMzFaMDMxMTAvBgNV BAMTKEE0N0FFRDlFQkFEQzQ4QTBBNDc4NTRDMEM3ODcxRTlDMzcyNDExQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfaZu7jds5PpZZy9Bms+GIAud 2lQ/bsb3JcGLHgCo7/0OCtfqJtXnoFcI7LAdEIM3LU72VSSeYYJYM3yea8UywmzM 3Ffvm6GciGN6cP9kI9fs+7n8rDwrBjgumyXQfjEzgjXSdQWHfsQ+hp6DylAq3jHY HuLtbFiCht6loRH+3mHKfnq+bvweIU7ldmfqw0oXCNTUPA8Z2JQK4e411z3Gszpf h3oEYUHdRHYAJbf4ScnFeAeCyAIGP/V2Pt1skad8yLamskJ00/AxkBtV+ZkZ6PoO Me/4RdpMuPH/ocVdpqX5xwaYzX76Wc0WS5Yrp33FOauGJkOr0yYksDSsF1AhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpHrtnrrcSKCkeFTAx4cenDckEbwwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1nL2tRBNwY1 HXRI2vd6IyJS+pOxEiScPs/dRJ5uqzJLbhW/ulZYxl5NISSAT9emwUdJZ8wAxCm8 tJBYUxA9ItjDa1MGuE5dxNzQm+htAC6aQawNvVJ/1ceFml5N/ZiTH1/kDL67fOyj nHT6L6x5H2hxTM05pjVq+ELYslmwpSxc9jAHve+L05ELQLIFcZkbvfkCiaufMV0p y6xZj80FBHjbDykgyw5PAMu0m2yHPmN8r5qg8+WrBnwRBrPTJCveK1sycboi1oWF EEeS28/YArekUKwtulQ3ad412qehKl8V5HezQNch+bhGsDjar74ydxxDGS+WZQIJ pzECwuWwYQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:05:53 2026 by rpki-client