$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: 7B1VVUFWf35t1miKHrgJLpc1SEpkjiWUMLnTQBD9Evc= Subject key identifier: 0B:B2:9D:92:EB:C7:0B:8E:17:42:63:E6:EC:72:CF:0E:CF:C1:A9:95 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 752EC673B2B1EA44E9DE783D7369F2697188C51E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 4D Signing time: Sat 13 Jun 2026 17:16:58 +0000 Manifest this update: Sat 13 Jun 2026 17:11:58 +0000 Manifest next update: Sun 14 Jun 2026 21:01:58 +0000 Files and hashes: 1: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 2: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 3: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 4: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 5: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 6: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: LZwG2P/j1uikN2jpvwM2eey//olESBeOlvBj0XwBnFQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2e:c6:73:b2:b1:ea:44:e9:de:78:3d:73:69:f2:69:71:88:c5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Jun 13 17:11:58 2026 GMT Not After : Jun 14 21:01:58 2026 GMT Subject: CN=0BB29D92EBC70B8E174263E6EC72CF0ECFC1A995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:69:28:2e:42:a1:a0:ad:9d:59:4b:db:79: 2a:db:12:d1:11:af:ad:54:d4:8e:b4:b8:74:45:54: 5f:2e:9d:c3:77:43:25:7f:f2:09:85:5e:df:bd:b5: 38:ca:81:ae:6a:7a:63:27:73:04:ed:5f:ed:a3:60: ca:07:a8:d7:e9:80:49:e4:bc:77:3b:49:85:f0:d6: c7:d4:b6:fc:d6:f3:e9:d6:1f:60:a2:6c:e5:36:e3: 31:37:64:04:19:a2:b2:98:80:9b:7d:d1:96:e4:7b: ed:19:42:b7:e8:e0:11:06:2d:23:42:35:e0:59:2a: a6:d7:07:96:8e:0c:23:3e:d8:dc:85:be:15:2d:7f: 0c:ad:e8:47:aa:52:77:62:ab:c9:ae:7a:ce:9d:60: 50:6d:23:77:3a:e3:aa:c5:0a:c2:dc:01:12:2d:cb: 9c:80:af:57:db:32:1d:94:e1:7d:83:61:95:c1:a0: 7f:11:51:f5:0e:6d:10:66:1e:77:82:11:de:d9:44: a8:a6:6d:e9:77:48:16:5d:2d:be:a2:fe:25:b4:0f: 23:05:19:2f:0e:e3:91:e5:59:61:33:4f:20:a1:e7: c6:1c:6f:95:77:84:93:20:a4:12:38:18:eb:17:aa: ef:78:44:f2:89:93:41:3d:66:70:6f:20:a5:2b:8a: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:9D:92:EB:C7:0B:8E:17:42:63:E6:EC:72:CF:0E:CF:C1:A9:95 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:97:4e:47:43:d1:15:ec:b7:4b:90:81:78:24:6a:1c:c5: cd:97:9b:75:2d:42:bc:a0:6d:95:b6:21:78:89:24:82:cb:92: 35:e5:e3:41:e5:17:64:59:8b:ef:85:23:73:25:c6:87:b1:70: e5:d5:76:d7:e9:eb:19:74:f2:ec:8b:27:d9:8b:da:8d:c7:dc: 7f:d2:ad:e5:86:15:40:17:4e:6c:6b:a7:da:67:ad:88:02:b8: 4e:44:43:c1:17:e9:c4:c8:53:d4:75:fd:7c:2c:05:bc:e5:db: 2c:91:57:4f:51:f7:1f:d6:7a:da:0e:c1:e8:fb:d8:10:18:5e: a8:a8:10:51:4f:c3:4b:f2:e3:4a:5f:f7:0d:a9:dc:b4:57:bc: 9a:64:ed:10:e1:da:f1:a8:37:8f:66:2a:95:e4:98:bb:c1:41: fe:35:30:01:77:33:b8:25:4a:07:61:60:35:39:95:3d:de:92: 43:38:5d:0f:b4:93:c2:8d:01:f5:91:44:0a:30:bf:bc:14:72: 1c:72:15:41:10:12:a5:51:b4:33:c1:eb:67:92:98:1a:50:01: f0:07:94:2e:9b:2a:bb:9b:56:d9:38:f8:8f:c9:dc:1d:85:3d: 25:6c:ad:18:c0:5e:dc:14:75:82:dd:6b:6b:6b:85:35:0b:ce: 2c:dd:ae:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdS7Gc7Kx6kTp3ng9c2nyaXGIxR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA2MTMxNzExNThaFw0yNjA2MTQyMTAxNThaMDMxMTAvBgNV BAMTKDBCQjI5RDkyRUJDNzBCOEUxNzQyNjNFNkVDNzJDRjBFQ0ZDMUE5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJmkoLkKhoK2dWUvbeSrbEtER r61U1I60uHRFVF8uncN3QyV/8gmFXt+9tTjKga5qemMncwTtX+2jYMoHqNfpgEnk vHc7SYXw1sfUtvzW8+nWH2CibOU24zE3ZAQZorKYgJt90Zbke+0ZQrfo4BEGLSNC NeBZKqbXB5aODCM+2NyFvhUtfwyt6EeqUndiq8mues6dYFBtI3c646rFCsLcARIt y5yAr1fbMh2U4X2DYZXBoH8RUfUObRBmHneCEd7ZRKimbel3SBZdLb6i/iW0DyMF GS8O45HlWWEzTyCh58Ycb5V3hJMgpBI4GOsXqu94RPKJk0E9ZnBvIKUrild1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC7KdkuvHC44XQmPm7HLPDs/BqZUwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHKXTkdD0RXs t0uQgXgkahzFzZebdS1CvKBtlbYheIkkgsuSNeXjQeUXZFmL74UjcyXGh7Fw5dV2 1+nrGXTy7Isn2Yvajcfcf9Kt5YYVQBdObGun2metiAK4TkRDwRfpxMhT1HX9fCwF vOXbLJFXT1H3H9Z62g7B6PvYEBheqKgQUU/DS/LjSl/3DanctFe8mmTtEOHa8ag3 j2YqleSYu8FB/jUwAXczuCVKB2FgNTmVPd6SQzhdD7STwo0B9ZFECjC/vBRyHHIV QRASpVG0M8HrZ5KYGlAB8AeULpsqu5tW2Tj4j8ncHYU9JWytGMBe3BR1gt1ra2uF NQvOLN2uDQ== -----END CERTIFICATE-----Generated at Sun Jun 14 06:18:55 2026 by rpki-client