$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: i+VE13UrIkSIavrbgpkScZ+Wumx11hwPUHd3YJfNkKk= Subject key identifier: 96:65:B8:12:5F:43:83:AD:9A:80:88:CD:CF:4C:68:1E:67:BE:3B:67 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 6515D59F399C63CCB29E4F3F428F2BDE8CDCF142 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: 47 Signing time: Sat 13 Jun 2026 23:57:27 +0000 Manifest this update: Sat 13 Jun 2026 23:52:27 +0000 Manifest next update: Mon 15 Jun 2026 01:47:27 +0000 Files and hashes: 1: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) 2: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: ArpPfaDWRALNJzHFvcGDjnpXnqNckcX+Z/EFDdXmiyY=) 3: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 4: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 5: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 6: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 7: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 8: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 9: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:15:d5:9f:39:9c:63:cc:b2:9e:4f:3f:42:8f:2b:de:8c:dc:f1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Jun 13 23:52:27 2026 GMT Not After : Jun 15 01:47:27 2026 GMT Subject: CN=9665B8125F4383AD9A8088CDCF4C681E67BE3B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:5e:21:00:78:e6:90:24:92:5d:cd:b1:30: 06:21:1f:ec:f3:36:de:60:14:84:62:b0:17:1c:4a: 6e:44:46:7e:f1:26:24:2f:3c:06:3c:05:8b:b4:f2: 62:54:7d:51:da:94:04:b1:13:e5:05:2d:40:06:7a: cb:23:94:2e:fa:53:5f:d8:c4:fc:6c:d3:49:a9:fa: e2:e1:c2:07:33:5d:94:8a:8e:9a:bc:25:73:98:fd: db:29:26:80:9f:9b:6f:d0:dd:4b:1f:37:26:78:c6: a4:b1:99:d0:df:77:06:aa:4f:e5:99:c4:65:30:40: 51:e2:23:9a:0c:75:6d:6d:4f:ab:4f:39:1d:03:ad: fc:64:ce:77:45:af:94:4e:97:67:32:24:a9:d3:18: 46:f5:9f:fa:69:6b:32:2d:c6:d7:53:7b:01:d1:c3: 0b:21:33:7c:32:4a:2c:89:8b:71:77:e3:d6:80:3f: 20:75:9b:3d:fe:a2:68:42:4b:76:24:d3:9f:cc:56: 59:7f:7a:e2:1a:75:fb:eb:2d:d3:76:27:ed:4f:fb: 42:a2:da:2a:5d:18:21:44:3a:16:55:50:c9:84:1d: 2b:d6:5a:93:4f:1f:b4:73:06:aa:3d:74:c6:78:2d: 67:fb:5c:e3:58:53:9c:bb:e8:c3:fb:05:00:1f:92: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:B8:12:5F:43:83:AD:9A:80:88:CD:CF:4C:68:1E:67:BE:3B:67 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:65:fa:ea:cf:09:bd:06:a6:b1:a7:9e:03:09:e8:cd:76: 01:2e:67:94:62:de:51:07:51:d4:b5:bb:00:a3:96:57:d4:6e: ff:c2:ec:d1:68:5e:b5:b7:d8:ea:64:22:0a:f1:b5:13:8b:bf: cf:7f:0e:90:bf:5e:b6:31:a1:c5:3b:ee:bb:c3:24:96:ef:f0: f8:40:b2:a6:9f:7f:7f:c2:f5:f1:56:c2:fd:5a:59:78:fb:9a: 02:12:4b:1c:2d:f0:ba:2c:89:8f:f0:8c:65:7a:be:74:fa:e0: 78:12:19:6f:df:b3:d1:34:ba:bc:aa:09:d5:5c:b7:69:07:60: 96:95:32:44:72:31:5d:60:37:61:32:85:03:24:b2:a5:c1:85: 83:b8:80:e1:b4:83:f7:27:67:56:22:2d:0f:66:9c:3a:71:21: fa:f8:a3:b2:55:6a:3d:c0:92:e6:80:dc:8a:36:86:bd:c4:a8: 03:08:18:39:b6:70:f4:cc:65:e8:10:7a:c2:18:cb:94:09:1b: 1e:61:cc:e4:bf:bb:88:51:f5:be:26:31:e8:1a:54:d8:66:0d: 1d:9b:d4:f5:8e:d6:85:c0:cf:99:a3:5d:4a:c4:b1:bb:82:29: 76:2c:c7:a4:b0:4a:82:d6:5b:be:e5:9f:89:86:17:41:a7:49: 5f:88:cd:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZRXVnzmcY8yynk8/Qo8r3ozc8UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA2MTMyMzUyMjdaFw0yNjA2MTUwMTQ3MjdaMDMxMTAvBgNV BAMTKDk2NjVCODEyNUY0MzgzQUQ5QTgwODhDRENGNEM2ODFFNjdCRTNCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHl14hAHjmkCSSXc2xMAYhH+zz Nt5gFIRisBccSm5ERn7xJiQvPAY8BYu08mJUfVHalASxE+UFLUAGessjlC76U1/Y xPxs00mp+uLhwgczXZSKjpq8JXOY/dspJoCfm2/Q3UsfNyZ4xqSxmdDfdwaqT+WZ xGUwQFHiI5oMdW1tT6tPOR0DrfxkzndFr5ROl2cyJKnTGEb1n/ppazItxtdTewHR wwshM3wySiyJi3F349aAPyB1mz3+omhCS3Yk05/MVll/euIadfvrLdN2J+1P+0Ki 2ipdGCFEOhZVUMmEHSvWWpNPH7RzBqo9dMZ4LWf7XONYU5y76MP7BQAfksDHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlmW4El9Dg62agIjNz0xoHme+O2cwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn5l+urPCb0G prGnngMJ6M12AS5nlGLeUQdR1LW7AKOWV9Ru/8Ls0WhetbfY6mQiCvG1E4u/z38O kL9etjGhxTvuu8Mklu/w+ECypp9/f8L18VbC/VpZePuaAhJLHC3wuiyJj/CMZXq+ dPrgeBIZb9+z0TS6vKoJ1Vy3aQdglpUyRHIxXWA3YTKFAySypcGFg7iA4bSD9ydn ViItD2acOnEh+vijslVqPcCS5oDcijaGvcSoAwgYObZw9Mxl6BB6whjLlAkbHmHM 5L+7iFH1viYx6BpU2GYNHZvU9Y7WhcDPmaNdSsSxu4IpdizHpLBKgtZbvuWfiYYX QadJX4jNqA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:05:57 2026 by rpki-client