$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: lV+U9dcBtoJ2S/8kJVGJUqHeKmUxVPNpNw8L5ywEHN0= Subject key identifier: 80:1A:D3:99:43:AF:C4:99:E5:38:BD:19:3A:56:09:89:C3:46:BD:7E Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 3A19A6BDE0B6D49E2616AFB03DE836AB0F11D02C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 40 Signing time: Sat 13 Jun 2026 18:47:08 +0000 Manifest this update: Sat 13 Jun 2026 18:42:08 +0000 Manifest next update: Sun 14 Jun 2026 21:19:08 +0000 Files and hashes: 1: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: tHXqQZTPv4WyPCMw9scyOVTJWkRtY/P3rHoF3Ku/gHE=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:19:a6:bd:e0:b6:d4:9e:26:16:af:b0:3d:e8:36:ab:0f:11:d0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Jun 13 18:42:08 2026 GMT Not After : Jun 14 21:19:08 2026 GMT Subject: CN=801AD39943AFC499E538BD193A560989C346BD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:e6:3a:ea:81:78:e8:42:4a:23:05:3d:fa: d5:40:20:a4:fc:22:42:5b:4c:75:b9:bb:de:9a:20: 25:77:25:dc:fd:27:9e:23:d1:d1:d3:e3:eb:aa:27: de:e5:0c:f6:41:93:64:54:4e:7a:82:b4:f6:67:98: 32:3c:e9:a4:9a:ec:00:f5:1c:b1:72:46:c6:e4:0c: 1a:2e:d5:58:9e:0d:23:dd:18:0f:62:cc:89:2e:9d: 2a:06:c5:b2:a9:84:8a:44:ee:a0:7e:b1:b9:26:82: 00:46:f0:1f:83:35:26:aa:a5:0f:02:36:51:e7:95: 41:2e:88:86:bf:8b:48:01:31:4a:47:89:d6:3a:8a: 4c:dd:32:1f:0a:d6:ff:d0:8d:43:33:d8:78:a6:f1: ac:7b:0b:1d:ac:f6:4b:c3:3b:ad:d2:14:f2:ce:6b: a5:be:35:6a:c3:16:44:2a:81:12:91:f2:4e:fc:08: 5b:15:1b:0b:38:52:f5:a8:23:f3:8e:08:94:92:7d: c9:aa:8e:46:99:18:ba:98:8a:76:26:97:ac:65:42: 72:de:47:d0:32:b6:29:20:ed:17:ee:fa:c9:22:40: 29:15:92:83:6a:89:62:9f:aa:dd:07:6c:40:b6:00: e0:fd:c9:dc:ff:55:33:62:72:7a:b7:23:4e:a9:40: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:D3:99:43:AF:C4:99:E5:38:BD:19:3A:56:09:89:C3:46:BD:7E X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:94:e0:57:0f:7f:c6:c3:19:c7:0f:7b:6f:09:38:9a:a2:7f: 51:b5:db:a4:61:f6:a2:92:cc:cf:9b:e9:a0:cd:90:fb:9d:b1: 9a:26:b9:75:a2:d2:e8:3a:0f:46:9f:29:cf:e9:df:7b:4d:e1: f1:b7:e6:ca:b2:60:68:1b:f2:c5:7d:10:e8:61:19:d2:ef:f2: 29:3e:3b:f3:69:4c:b3:0b:8d:d4:d0:bf:bc:94:d5:6b:88:7a: d8:ad:f6:13:54:52:89:47:45:34:33:5f:ac:39:c3:70:62:87: 06:83:95:6a:6d:28:c4:77:ba:a5:0d:60:dd:a8:94:17:2e:0f: d6:5c:b1:50:c4:e7:a4:4a:f4:5a:0a:56:92:15:37:a1:55:fd: 04:c7:a4:52:43:3f:9d:7a:0e:f7:50:e9:25:fd:bc:6b:8a:59: f2:6f:54:34:92:79:c5:5c:57:80:d2:62:02:8a:aa:9e:a6:34: dc:38:7e:33:bd:1d:54:10:ee:d0:af:fb:5e:08:b9:3b:28:e4: 53:d6:fe:43:3d:86:9f:37:0c:5b:55:90:69:a0:96:d0:fc:14: 72:5b:bd:d2:70:a6:9e:29:7c:ba:39:66:c0:4f:e4:40:35:fa: 14:2f:2d:01:3e:16:b2:51:09:d1:c9:9c:e7:06:01:df:a1:42: 63:1d:a1:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOhmmveC21J4mFq+wPeg2qw8R0CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA2MTMxODQyMDhaFw0yNjA2MTQyMTE5MDhaMDMxMTAvBgNV BAMTKDgwMUFEMzk5NDNBRkM0OTlFNTM4QkQxOTNBNTYwOTg5QzM0NkJEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVreY66oF46EJKIwU9+tVAIKT8 IkJbTHW5u96aICV3Jdz9J54j0dHT4+uqJ97lDPZBk2RUTnqCtPZnmDI86aSa7AD1 HLFyRsbkDBou1VieDSPdGA9izIkunSoGxbKphIpE7qB+sbkmggBG8B+DNSaqpQ8C NlHnlUEuiIa/i0gBMUpHidY6ikzdMh8K1v/QjUMz2Him8ax7Cx2s9kvDO63SFPLO a6W+NWrDFkQqgRKR8k78CFsVGws4UvWoI/OOCJSSfcmqjkaZGLqYinYml6xlQnLe R9Aytikg7Rfu+skiQCkVkoNqiWKfqt0HbEC2AOD9ydz/VTNicnq3I06pQDdXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgBrTmUOvxJnlOL0ZOlYJicNGvX4wHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpTgVw9/xsMZ xw97bwk4mqJ/UbXbpGH2opLMz5vpoM2Q+52xmia5daLS6DoPRp8pz+nfe03h8bfm yrJgaBvyxX0Q6GEZ0u/yKT4782lMswuN1NC/vJTVa4h62K32E1RSiUdFNDNfrDnD cGKHBoOVam0oxHe6pQ1g3aiUFy4P1lyxUMTnpEr0WgpWkhU3oVX9BMekUkM/nXoO 91DpJf28a4pZ8m9UNJJ5xVxXgNJiAoqqnqY03Dh+M70dVBDu0K/7Xgi5OyjkU9b+ Qz2GnzcMW1WQaaCW0PwUclu90nCmnil8ujlmwE/kQDX6FC8tAT4WslEJ0cmc5wYB 36FCYx2h6g== -----END CERTIFICATE-----Generated at Sun Jun 14 01:02:47 2026 by rpki-client