$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: nXtHmtO869MThdd2GSDc3MsFca45VqMPJ8lPh0/sXow= Subject key identifier: 45:1D:BB:CD:3B:17:BE:7D:50:71:F5:73:63:22:F7:D3:F4:5E:4C:76 Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 2ECFFD896673BD7B33200B679E79F5A7EB27BCA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: 4C Signing time: Sun 14 Jun 2026 01:52:37 +0000 Manifest this update: Sun 14 Jun 2026 01:47:37 +0000 Manifest next update: Mon 15 Jun 2026 02:09:37 +0000 Files and hashes: 1: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) 2: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: 477ZhhmfEBRlS4gM8CkG32DVK2sKakh7YryTll8CxJs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cf:fd:89:66:73:bd:7b:33:20:0b:67:9e:79:f5:a7:eb:27:bc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Jun 14 01:47:37 2026 GMT Not After : Jun 15 02:09:37 2026 GMT Subject: CN=451DBBCD3B17BE7D5071F5736322F7D3F45E4C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:4d:33:45:8f:b4:96:98:11:9f:dc:28:12: b0:3a:32:9c:57:3f:bb:a1:73:be:30:f1:16:c0:e5: a7:a0:39:f5:cc:ea:a3:d8:f5:6c:db:db:d3:d0:92: ae:69:6e:a1:e2:7f:b6:30:64:82:fb:fa:56:21:5a: 34:05:19:7d:8f:03:60:a6:42:19:d9:e2:f7:26:cf: b7:12:97:86:b6:d4:b5:ef:3f:9d:6e:10:3d:d3:b9: 35:b9:0d:9b:f0:24:10:ae:b0:1e:12:f6:56:b1:f1: b9:ea:6a:a6:96:25:e6:82:55:9e:40:8d:23:d9:36: d6:30:dd:f8:dd:de:5c:f0:a9:73:51:fa:50:01:e1: 48:9b:36:e8:3e:47:84:4e:39:5d:4d:3e:02:11:e5: 48:73:b9:0f:77:a3:79:7e:dc:f2:25:bf:7c:70:1e: 23:a1:02:2c:cd:16:c1:8a:9e:6f:de:22:f6:3d:4a: a4:ed:4d:6b:e9:b6:cd:49:b5:fb:88:d6:63:3d:da: a3:5d:7f:63:25:7e:a0:7b:b1:95:a8:12:60:47:c8: 12:57:84:17:69:7c:bf:7e:2b:a0:43:13:b5:b8:50: b7:ad:5a:42:5d:a3:28:e3:56:92:58:01:63:f1:f1: 6c:c2:e3:5b:46:f0:d9:24:21:90:86:e1:2d:27:2a: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:BB:CD:3B:17:BE:7D:50:71:F5:73:63:22:F7:D3:F4:5E:4C:76 X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:77:ce:eb:b6:64:f0:7b:a8:4d:f9:99:74:24:d2:6b:b2:1b: 22:79:80:fd:a7:5b:1c:4f:f8:f7:51:3c:b7:ce:57:87:0e:a5: 12:2a:28:2c:9b:73:de:ea:ca:64:50:ad:78:69:a6:08:9f:b9: 48:3e:60:e7:46:6a:aa:08:2a:6b:4f:67:00:45:f5:4a:88:a5: 6c:2b:2f:cd:9e:0d:49:8b:fd:2a:6f:c0:cf:b6:f2:c1:7f:c2: 2b:07:61:2a:b8:aa:fd:7a:ce:5e:40:6e:01:f2:5f:35:5e:96: aa:0d:2b:48:26:5e:73:a3:50:08:68:5c:78:18:d0:8d:d7:5d: bb:24:3d:02:2b:99:76:19:92:f9:7b:ec:e3:5d:6b:9b:de:ab: 9d:fe:8d:dd:f6:0b:ae:8c:69:a0:ce:70:36:bc:27:4b:7a:52: c0:d3:d9:a4:d6:ef:b0:c5:e6:6a:a0:c1:18:4f:79:fc:e1:1a: 07:4e:40:74:49:60:01:88:48:14:40:90:42:de:05:a7:41:1e: cd:40:73:c7:c6:1f:6a:66:af:67:6b:2c:8f:cb:12:bd:52:84: de:b5:c4:98:bb:5a:9f:b7:51:bc:60:ef:9d:ec:1b:07:65:7a: 1c:cb:2b:bf:2d:0a:f4:d9:9a:83:c4:6c:02:c7:5a:e4:7a:e2: c7:d3:1a:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULs/9iWZzvXszIAtnnnn1p+snvKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA2MTQwMTQ3MzdaFw0yNjA2MTUwMjA5MzdaMDMxMTAvBgNV BAMTKDQ1MURCQkNEM0IxN0JFN0Q1MDcxRjU3MzYzMjJGN0QzRjQ1RTRDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFk0zRY+0lpgRn9woErA6MpxX P7uhc74w8RbA5aegOfXM6qPY9Wzb29PQkq5pbqHif7YwZIL7+lYhWjQFGX2PA2Cm QhnZ4vcmz7cSl4a21LXvP51uED3TuTW5DZvwJBCusB4S9lax8bnqaqaWJeaCVZ5A jSPZNtYw3fjd3lzwqXNR+lAB4UibNug+R4ROOV1NPgIR5UhzuQ93o3l+3PIlv3xw HiOhAizNFsGKnm/eIvY9SqTtTWvpts1JtfuI1mM92qNdf2MlfqB7sZWoEmBHyBJX hBdpfL9+K6BDE7W4ULetWkJdoyjjVpJYAWPx8WzC41tG8NkkIZCG4S0nKnjJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURR27zTsXvn1QcfVzYyL30/ReTHYwHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynfO67Zk8Huo TfmZdCTSa7IbInmA/adbHE/491E8t85Xhw6lEiooLJtz3urKZFCteGmmCJ+5SD5g 50Zqqggqa09nAEX1SoilbCsvzZ4NSYv9Km/Az7bywX/CKwdhKriq/XrOXkBuAfJf NV6Wqg0rSCZec6NQCGhceBjQjddduyQ9AiuZdhmS+Xvs411rm96rnf6N3fYLroxp oM5wNrwnS3pSwNPZpNbvsMXmaqDBGE95/OEaB05AdElgAYhIFECQQt4Fp0EezUBz x8YfamavZ2ssj8sSvVKE3rXEmLtan7dRvGDvnewbB2V6HMsrvy0K9Nmag8RsAsda 5Hrix9MafA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:12 2026 by rpki-client