$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: eDwgpFjIt3epJ7+sfTJEqbxi6YNXAjjPDQFF4823MNM= Subject key identifier: C5:D7:06:09:79:7D:0D:FA:34:F0:75:8C:66:6A:28:C6:E3:DF:54:71 Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 2BEE0FDD0AE332E4E38C426E3CFC2384FF90197D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: 42 Signing time: Sun 14 Jun 2026 03:47:41 +0000 Manifest this update: Sun 14 Jun 2026 03:42:41 +0000 Manifest next update: Mon 15 Jun 2026 04:09:41 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 2: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: 6waP2tHDt7Z1t/IoopRNu0YYOnCNeKAw8ieM3lIzHHI=) 3: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 4: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) 5: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ee:0f:dd:0a:e3:32:e4:e3:8c:42:6e:3c:fc:23:84:ff:90:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Jun 14 03:42:41 2026 GMT Not After : Jun 15 04:09:41 2026 GMT Subject: CN=C5D70609797D0DFA34F0758C666A28C6E3DF5471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:c6:50:be:7c:84:dd:28:7e:5a:db:00:10: 88:3c:c4:bc:16:06:e9:14:3e:a7:90:b6:da:e2:ca: 53:b6:7a:04:a7:38:85:18:4a:c8:aa:0e:be:45:b1: c1:a0:91:79:86:28:e3:fe:ab:f9:45:8a:45:af:a3: 27:a3:d9:30:32:d4:72:1a:80:93:88:49:90:72:b3: 0f:52:0d:a8:2f:6b:c1:b6:f0:ed:25:89:23:fd:2a: 58:47:38:95:d8:96:18:ef:59:40:15:d9:33:e2:14: f2:ae:44:d7:02:a8:67:52:38:4d:89:85:43:40:45: 32:82:43:c0:85:3d:84:fe:ef:f5:bf:b6:09:f5:72: 61:a5:2f:6d:59:31:95:5f:b9:bf:5e:31:fc:ca:46: 04:bc:ec:75:71:0b:82:00:cb:f5:4b:fc:53:ee:08: 7a:ef:a2:8c:96:1e:1a:b2:50:bd:9a:64:47:20:ac: e3:3e:49:14:4c:2e:8a:43:94:35:29:bc:fc:3e:00: 0b:99:04:f2:94:cd:8e:53:d8:b4:e0:07:46:26:cf: de:8b:08:7a:e9:c3:39:2e:c2:a4:09:89:25:03:35: 8e:57:69:35:76:22:81:89:ff:cb:24:b5:26:59:77: 4c:ab:fc:90:fc:85:8f:c8:70:86:a5:d0:be:6e:27: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:06:09:79:7D:0D:FA:34:F0:75:8C:66:6A:28:C6:E3:DF:54:71 X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cd:32:c4:87:86:f7:7e:ef:d4:ae:57:db:26:47:c4:9a:4c: c8:e1:df:4f:61:ec:93:79:0a:ae:65:df:34:5f:68:0a:39:e7: bb:90:6d:fe:76:2b:8b:20:c4:5d:03:9b:25:07:44:e4:68:5f: 0e:8f:c0:6f:6b:47:82:16:83:e5:f2:fe:14:ef:60:e0:c2:65: 3f:bc:1d:a2:75:e3:02:f8:6f:d8:a2:09:cc:9a:da:99:22:cb: e8:b4:f0:fc:43:39:fd:14:16:c4:90:47:ca:f6:79:8f:02:eb: 4f:58:e0:02:87:cf:58:96:26:3c:b4:fa:5f:ac:c4:6f:6d:04: 43:ef:8f:48:35:45:f2:7e:21:50:39:11:8e:5d:9d:5a:e6:d0: 1c:2f:c8:96:f2:3d:be:7b:65:91:01:59:d9:88:52:54:15:0c: d8:6f:0b:f4:5a:16:a1:fa:a1:32:21:6e:7d:18:48:0b:dc:2a: 2a:38:ea:e7:88:eb:36:e5:5e:b1:41:25:61:ab:6a:a2:d5:9d: 0d:2e:dc:7a:d3:48:cd:ac:f3:83:c4:52:08:2b:ae:38:08:11: 17:77:b4:66:2c:e8:d4:82:fd:5a:5b:f9:b1:2c:61:90:10:6a: 85:f3:6e:0a:7c:d3:bd:76:f6:6e:d8:67:f2:b5:5e:96:6f:4a: 85:e8:cb:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK+4P3QrjMuTjjEJuPPwjhP+QGX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA2MTQwMzQyNDFaFw0yNjA2MTUwNDA5NDFaMDMxMTAvBgNV BAMTKEM1RDcwNjA5Nzk3RDBERkEzNEYwNzU4QzY2NkEyOEM2RTNERjU0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHMZQvnyE3Sh+WtsAEIg8xLwW BukUPqeQttriylO2egSnOIUYSsiqDr5FscGgkXmGKOP+q/lFikWvoyej2TAy1HIa gJOISZBysw9SDagva8G28O0liSP9KlhHOJXYlhjvWUAV2TPiFPKuRNcCqGdSOE2J hUNARTKCQ8CFPYT+7/W/tgn1cmGlL21ZMZVfub9eMfzKRgS87HVxC4IAy/VL/FPu CHrvooyWHhqyUL2aZEcgrOM+SRRMLopDlDUpvPw+AAuZBPKUzY5T2LTgB0Ymz96L CHrpwzkuwqQJiSUDNY5XaTV2IoGJ/8sktSZZd0yr/JD8hY/IcIal0L5uJ67ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxdcGCXl9Dfo08HWMZmooxuPfVHEwHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAts0yxIeG937v 1K5X2yZHxJpMyOHfT2Hsk3kKrmXfNF9oCjnnu5Bt/nYriyDEXQObJQdE5GhfDo/A b2tHghaD5fL+FO9g4MJlP7wdonXjAvhv2KIJzJramSLL6LTw/EM5/RQWxJBHyvZ5 jwLrT1jgAofPWJYmPLT6X6zEb20EQ++PSDVF8n4hUDkRjl2dWubQHC/IlvI9vntl kQFZ2YhSVBUM2G8L9FoWofqhMiFufRhIC9wqKjjq54jrNuVesUElYatqotWdDS7c etNIzazzg8RSCCuuOAgRF3e0Zizo1IL9Wlv5sSxhkBBqhfNuCnzTvXb2bthn8rVe lm9KhejLuw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:00 2026 by rpki-client