$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: sUC6c5nocL+AfTHZ3SoyaJFoAlnGRdhRBqKmmZab/Cc= Subject key identifier: 52:22:D7:E9:BB:A7:83:E6:17:58:B9:DC:35:09:57:0F:59:9E:41:34 Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 1D37BCA7F97563042248F0B909C7F4309C235E9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: 45 Signing time: Sun 14 Jun 2026 00:52:31 +0000 Manifest this update: Sun 14 Jun 2026 00:47:31 +0000 Manifest next update: Mon 15 Jun 2026 00:54:31 +0000 Files and hashes: 1: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 2: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 3: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 4: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 5: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: gLaJMoq3iUnzYcvPV8Ym9/BX5dbSekh3OuuF6kbFMJU=) 6: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:37:bc:a7:f9:75:63:04:22:48:f0:b9:09:c7:f4:30:9c:23:5e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Jun 14 00:47:31 2026 GMT Not After : Jun 15 00:54:31 2026 GMT Subject: CN=5222D7E9BBA783E61758B9DC3509570F599E4134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:0b:09:ac:43:90:21:1c:5f:38:b6:d5:9c: 9a:62:5b:84:07:53:a4:d0:3e:30:2a:de:53:fb:2f: 44:b2:fa:0c:9f:3f:02:08:25:68:53:48:ba:9d:40: 8d:d4:92:be:5f:bc:3a:1f:a0:b1:f4:05:1c:d6:60: 2d:66:83:42:f6:c3:28:f5:7a:ab:3c:91:fd:f9:64: 48:d4:fc:cf:2d:af:69:0f:67:f3:fd:ec:c5:3d:d7: c1:2e:f1:d7:8d:ce:6f:22:b4:09:36:31:4b:4d:78: f0:e2:2b:d6:f9:21:f6:ac:de:6c:a5:2b:3f:c1:e9: 97:83:7c:9d:f5:e6:a2:9e:bf:03:3b:14:60:0e:5c: b9:f0:d8:ce:6e:aa:59:ec:f9:4b:07:7c:76:46:e7: 6d:fe:70:ca:18:6e:c6:92:e5:14:bb:59:19:84:cb: a9:12:ef:fd:a2:50:10:22:e4:95:1f:08:98:92:a2: be:fc:14:25:c4:8a:e0:16:38:17:de:c7:6c:3d:a1: d4:92:06:cd:f7:99:4a:43:37:84:0c:e5:96:73:dd: d0:56:fe:3b:65:07:0d:03:82:5f:69:a1:a0:36:38: 15:6b:50:fb:57:0a:87:06:95:4d:f5:52:ca:25:17: 98:37:26:e9:be:ad:33:25:e9:bd:4a:ec:85:2d:bc: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:D7:E9:BB:A7:83:E6:17:58:B9:DC:35:09:57:0F:59:9E:41:34 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:57:cb:15:55:aa:ac:38:f2:91:68:be:96:d2:6b:8c:32:b6: 3b:1b:e8:ff:dd:f2:3c:9e:d8:d2:58:bf:5a:b2:e5:25:77:ac: c9:52:af:fb:ea:e4:05:63:42:3d:f9:3d:86:ba:d2:0c:51:c0: 77:69:a4:d4:ff:6e:07:20:d1:0d:a8:96:89:2a:55:43:3b:14: ea:e3:29:46:8b:d5:58:b3:c0:98:bc:28:85:67:77:2d:07:b1: 5b:0b:76:b8:73:b2:6d:95:2a:44:c6:32:23:b7:ee:0f:89:3e: 0c:cb:95:a8:56:0b:d6:df:4f:74:98:9d:8e:11:0b:d4:20:c1: b9:9b:33:d1:a4:19:e3:94:f9:69:29:05:a2:90:bf:04:db:44: 3d:63:14:de:dd:ed:25:07:bf:eb:54:5f:d3:b1:34:93:bb:ff: 1c:99:ef:3b:ed:1b:82:87:1a:17:ef:72:f7:1d:28:9d:05:84: e4:c4:35:9d:55:04:c0:0e:bc:58:c3:af:dc:9a:d4:ea:8d:81: 24:30:53:ed:b6:1e:b7:8a:83:13:e7:5b:aa:0b:78:da:a7:51: 14:26:16:c2:62:ea:f6:09:69:14:13:b9:30:f9:6f:7c:4e:e4: f8:b5:06:ed:de:57:ce:13:25:31:af:08:91:8b:d6:b8:bd:9f: 20:60:e0:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHTe8p/l1YwQiSPC5Ccf0MJwjXp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA2MTQwMDQ3MzFaFw0yNjA2MTUwMDU0MzFaMDMxMTAvBgNV BAMTKDUyMjJEN0U5QkJBNzgzRTYxNzU4QjlEQzM1MDk1NzBGNTk5RTQxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAwsJrEOQIRxfOLbVnJpiW4QH U6TQPjAq3lP7L0Sy+gyfPwIIJWhTSLqdQI3Ukr5fvDofoLH0BRzWYC1mg0L2wyj1 eqs8kf35ZEjU/M8tr2kPZ/P97MU918Eu8deNzm8itAk2MUtNePDiK9b5Ifas3myl Kz/B6ZeDfJ315qKevwM7FGAOXLnw2M5uqlns+UsHfHZG523+cMoYbsaS5RS7WRmE y6kS7/2iUBAi5JUfCJiSor78FCXEiuAWOBfex2w9odSSBs33mUpDN4QM5ZZz3dBW /jtlBw0Dgl9poaA2OBVrUPtXCocGlU31UsolF5g3Jum+rTMl6b1K7IUtvCgDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUiLX6bung+YXWLncNQlXD1meQTQwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVfLFVWqrDjy kWi+ltJrjDK2Oxvo/93yPJ7Y0li/WrLlJXesyVKv++rkBWNCPfk9hrrSDFHAd2mk 1P9uByDRDaiWiSpVQzsU6uMpRovVWLPAmLwohWd3LQexWwt2uHOybZUqRMYyI7fu D4k+DMuVqFYL1t9PdJidjhEL1CDBuZsz0aQZ45T5aSkFopC/BNtEPWMU3t3tJQe/ 61Rf07E0k7v/HJnvO+0bgocaF+9y9x0onQWE5MQ1nVUEwA68WMOv3JrU6o2BJDBT 7bYet4qDE+dbqgt42qdRFCYWwmLq9glpFBO5MPlvfE7k+LUG7d5XzhMlMa8IkYvW uL2fIGDgyA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:41 2026 by rpki-client