$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: Ag//zqUCtC2J5+HpTIaZFl3cr6pbyMcDTL9eghbZhCA= Subject key identifier: 54:D3:10:A8:E7:BF:2E:73:CB:D5:4E:97:38:5B:58:3C:96:3A:D5:0A Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 3CD6409833F69724F5C4A278583A009C7CF87CE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 49 Signing time: Sat 13 Jun 2026 21:07:13 +0000 Manifest this update: Sat 13 Jun 2026 21:02:13 +0000 Manifest next update: Sun 14 Jun 2026 21:28:13 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 2: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: umBpl82q9b0rhKsyK6LqU2NxXAdAUf4B04pG9Auy6H8=) 3: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 4: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d6:40:98:33:f6:97:24:f5:c4:a2:78:58:3a:00:9c:7c:f8:7c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Jun 13 21:02:13 2026 GMT Not After : Jun 14 21:28:13 2026 GMT Subject: CN=54D310A8E7BF2E73CBD54E97385B583C963AD50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:b7:d0:2f:81:b0:55:73:d5:da:b6:92:d2: f1:86:1c:7f:63:eb:eb:7f:6f:59:2e:12:bb:4f:1e: 30:02:ea:d2:4a:cb:61:8d:c9:39:f0:60:7f:e4:f5: 17:d1:48:53:19:fb:66:6c:50:9b:8e:bc:22:ff:51: e6:79:b1:ad:c5:0f:10:cc:e4:fd:9a:e2:8c:d9:12: 19:60:ee:d0:9e:99:30:a9:3a:40:55:cf:a6:bd:64: 04:ef:fc:6f:1c:94:19:1b:90:e5:13:a8:14:90:c5: 7a:a6:fe:c4:f5:b8:3c:f5:08:47:7e:a8:f5:5a:8c: 6e:99:b1:37:39:00:fe:59:e7:10:58:90:25:b0:0b: df:1e:0b:84:e5:10:58:7a:93:a3:5d:8d:6b:c3:65: 74:fb:4a:d2:14:df:c8:59:f1:9a:cf:b1:5f:d8:3b: 3b:31:5c:e1:ff:61:82:4d:75:ce:7e:37:b8:20:38: 8f:23:26:f0:3b:69:2f:e8:bb:71:54:54:a0:77:7c: 42:6c:15:26:1b:a6:c3:c0:62:22:7e:3a:4b:57:9e: 00:6f:8d:ac:ed:f9:3d:be:54:15:8f:bd:51:7d:d1: 6c:9f:e5:4c:40:54:85:d8:8e:8b:8a:59:28:f5:14: b7:e2:c3:38:71:36:76:77:50:3f:31:eb:66:de:66: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:10:A8:E7:BF:2E:73:CB:D5:4E:97:38:5B:58:3C:96:3A:D5:0A X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:38:3b:d4:e5:34:fe:66:b7:24:e7:d2:a6:ae:bf:e2:6f:14: a5:c1:64:67:1e:0a:5c:f7:fe:8f:44:3f:2e:aa:e0:1d:4e:a5: ed:21:e3:75:42:90:39:ea:5d:47:7d:f0:b2:69:34:6d:36:38: c1:67:aa:9c:c7:05:4c:d2:fc:23:45:7b:ea:82:b0:15:f7:42: 0f:5f:a2:b7:0c:15:d0:da:62:b7:1e:e8:d4:3c:22:dd:ca:04: 3e:ff:32:f7:8b:98:a1:1e:17:fb:82:52:ec:8f:3f:36:05:d8: 4f:62:ef:1b:8f:0c:bd:99:1f:de:01:3a:39:94:77:62:0f:95: 98:db:f4:b1:ea:47:06:24:29:f9:ec:0a:aa:b0:ea:53:1a:f7: c5:46:aa:db:78:8a:bb:b1:7b:10:76:48:18:16:75:ad:80:3a: 40:2c:82:98:7e:62:90:3b:51:8c:ad:3d:b3:96:8f:34:da:90: 27:c9:c0:91:09:07:26:88:ed:ef:a2:9b:d1:dc:1e:6f:5a:6d: 55:25:7b:96:3d:ab:ca:65:7c:e6:54:b6:dc:41:53:e4:86:3e: 29:ef:d6:f2:16:07:20:28:5c:05:9f:6f:b3:2a:2e:04:bc:59: 23:a0:17:60:3e:74:d5:1f:22:18:3d:21:2c:3d:62:55:67:ad: b8:ae:97:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPNZAmDP2lyT1xKJ4WDoAnHz4fOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA2MTMyMTAyMTNaFw0yNjA2MTQyMTI4MTNaMDMxMTAvBgNV BAMTKDU0RDMxMEE4RTdCRjJFNzNDQkQ1NEU5NzM4NUI1ODNDOTYzQUQ1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsrfQL4GwVXPV2raS0vGGHH9j 6+t/b1kuErtPHjAC6tJKy2GNyTnwYH/k9RfRSFMZ+2ZsUJuOvCL/UeZ5sa3FDxDM 5P2a4ozZEhlg7tCemTCpOkBVz6a9ZATv/G8clBkbkOUTqBSQxXqm/sT1uDz1CEd+ qPVajG6ZsTc5AP5Z5xBYkCWwC98eC4TlEFh6k6NdjWvDZXT7StIU38hZ8ZrPsV/Y OzsxXOH/YYJNdc5+N7ggOI8jJvA7aS/ou3FUVKB3fEJsFSYbpsPAYiJ+OktXngBv jazt+T2+VBWPvVF90Wyf5UxAVIXYjouKWSj1FLfiwzhxNnZ3UD8x62beZrmjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVNMQqOe/LnPL1U6XOFtYPJY61QowHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjg71OU0/ma3 JOfSpq6/4m8UpcFkZx4KXPf+j0Q/LqrgHU6l7SHjdUKQOepdR33wsmk0bTY4wWeq nMcFTNL8I0V76oKwFfdCD1+itwwV0Npitx7o1Dwi3coEPv8y94uYoR4X+4JS7I8/ NgXYT2LvG48MvZkf3gE6OZR3Yg+VmNv0sepHBiQp+ewKqrDqUxr3xUaq23iKu7F7 EHZIGBZ1rYA6QCyCmH5ikDtRjK09s5aPNNqQJ8nAkQkHJojt76Kb0dweb1ptVSV7 lj2rymV85lS23EFT5IY+Ke/W8hYHIChcBZ9vsyouBLxZI6AXYD501R8iGD0hLD1i VWetuK6XPA== -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:39 2026 by rpki-client