$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: lM36/418x1OqusG5FgA581Az85qzK9G9oZZiQysttJE= Subject key identifier: BD:31:CD:2A:10:42:C8:18:B6:51:CA:C7:9E:F5:3C:A1:57:8B:CD:4C Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 2CA21DEEF5506A25C32BA1F83245D7F70818E1DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: 4C Signing time: Sat 13 Jun 2026 22:17:18 +0000 Manifest this update: Sat 13 Jun 2026 22:12:18 +0000 Manifest next update: Mon 15 Jun 2026 01:11:18 +0000 Files and hashes: 1: 3130332e38312e342e302f32322d3232203d3e203633373034.roa (hash: xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=) 2: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) 3: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (hash: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk=) 4: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 5: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: BWW+Wy7cgk8IN83ohkbIkZZCmnoCkfNB1XLFmPpkagg=) 6: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (hash: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=) 7: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) 8: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a2:1d:ee:f5:50:6a:25:c3:2b:a1:f8:32:45:d7:f7:08:18:e1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Jun 13 22:12:18 2026 GMT Not After : Jun 15 01:11:18 2026 GMT Subject: CN=BD31CD2A1042C818B651CAC79EF53CA1578BCD4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:ab:c4:3a:0c:3b:17:67:9f:52:b7:19:a2: 62:59:c4:79:7f:c6:6b:0b:c2:4b:52:cd:0b:c8:2f: 27:c8:de:24:71:19:ad:5c:7c:05:af:04:37:8c:c9: 61:79:8e:e1:07:97:e0:0e:a4:9d:26:ab:87:88:81: 52:2f:a5:9b:0e:83:84:2c:82:62:91:6f:76:f4:6a: 20:0c:32:c0:2d:de:27:46:79:21:49:65:f8:0d:7b: ea:c5:d1:14:1f:ad:21:20:5e:ad:ec:1c:40:78:cd: 46:78:b4:c7:9f:49:53:f1:2d:3a:69:fb:5a:ff:f3: 8c:c9:58:b4:95:69:11:c6:e8:be:40:fd:1a:8d:0c: e7:dc:8b:8e:c2:a5:5e:2c:c5:77:b1:c1:6d:86:03: bb:d5:a9:2c:3c:ab:b2:97:85:57:66:72:07:01:69: 43:89:a1:6e:d8:be:1d:94:96:0c:74:19:41:f8:a3: 95:a9:f1:1c:90:86:1b:2d:fc:11:f7:5d:8a:1d:ff: 9c:fc:df:b6:52:68:41:d9:ab:40:32:69:43:f2:8f: 5c:30:53:a4:41:b7:99:6a:d8:3c:29:f1:e8:48:2c: 39:06:d7:9a:98:7b:a7:69:8e:99:1e:79:64:ea:35: 5d:1f:c2:37:b9:c0:5f:9b:b5:98:78:f6:45:44:10: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:CD:2A:10:42:C8:18:B6:51:CA:C7:9E:F5:3C:A1:57:8B:CD:4C X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:51:bb:e2:76:a2:67:46:f8:7e:14:b0:ab:9e:46:d9:38: bf:22:86:1b:1d:fa:0e:ca:db:de:39:ce:b2:1e:b6:1c:9d:a6: 53:9b:cd:5d:09:0c:77:64:09:10:3c:28:a4:4d:5c:f6:ec:fa: 6f:d8:09:09:d0:b9:1f:cc:cf:2f:bf:1a:9d:47:5f:1f:c7:0f: 1c:f7:b7:34:cf:2c:1d:53:41:da:93:1f:30:a4:78:55:62:08: 5d:a0:f7:40:ce:24:42:74:6f:65:b3:6b:27:7f:50:8d:08:09: a3:c7:7b:ca:29:9b:df:6a:d8:65:2a:39:8c:56:64:11:a8:a0: ff:1f:ea:c0:6e:f9:ed:97:d6:c8:6e:08:4a:71:89:0f:8b:69: ca:38:6e:b5:4c:af:56:32:94:0d:8e:05:bd:94:2d:31:41:15: 9e:69:8f:09:73:63:5c:73:6c:1a:fb:97:ca:8c:85:32:2c:bc: a4:fc:ae:d1:00:f4:5f:3f:8e:72:30:cb:c4:cb:b6:72:2e:ac: ef:a2:1d:14:7b:f7:ec:3d:56:5a:8d:e7:0e:60:5a:83:cf:70: 25:4b:95:ef:79:4a:86:93:38:52:01:47:6c:40:8d:7c:f7:f3: 39:b2:d2:29:09:4a:16:0b:63:d3:5d:f1:18:ee:4c:49:e7:e0: 2e:20:dc:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULKId7vVQaiXDK6H4MkXX9wgY4dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA2MTMyMjEyMThaFw0yNjA2MTUwMTExMThaMDMxMTAvBgNV BAMTKEJEMzFDRDJBMTA0MkM4MThCNjUxQ0FDNzlFRjUzQ0ExNTc4QkNENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGo6vEOgw7F2efUrcZomJZxHl/ xmsLwktSzQvILyfI3iRxGa1cfAWvBDeMyWF5juEHl+AOpJ0mq4eIgVIvpZsOg4Qs gmKRb3b0aiAMMsAt3idGeSFJZfgNe+rF0RQfrSEgXq3sHEB4zUZ4tMefSVPxLTpp +1r/84zJWLSVaRHG6L5A/RqNDOfci47CpV4sxXexwW2GA7vVqSw8q7KXhVdmcgcB aUOJoW7Yvh2Ulgx0GUH4o5Wp8RyQhhst/BH3XYod/5z837ZSaEHZq0AyaUPyj1ww U6RBt5lq2Dwp8ehILDkG15qYe6dpjpkeeWTqNV0fwje5wF+btZh49kVEEFjnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvTHNKhBCyBi2UcrHnvU8oVeLzUwwHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlBRu+J2omdG +H4UsKueRtk4vyKGGx36Dsrb3jnOsh62HJ2mU5vNXQkMd2QJEDwopE1c9uz6b9gJ CdC5H8zPL78anUdfH8cPHPe3NM8sHVNB2pMfMKR4VWIIXaD3QM4kQnRvZbNrJ39Q jQgJo8d7yimb32rYZSo5jFZkEaig/x/qwG757ZfWyG4ISnGJD4tpyjhutUyvVjKU DY4FvZQtMUEVnmmPCXNjXHNsGvuXyoyFMiy8pPyu0QD0Xz+OcjDLxMu2ci6s76Id FHv37D1WWo3nDmBag89wJUuV73lKhpM4UgFHbECNfPfzObLSKQlKFgtj013xGO5M SefgLiDclA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:07 2026 by rpki-client