$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft File: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft (raw, json) Hash identifier: 4Uo8pb1ecuaIbRipYxlhvNdoRhcvORnFvODLPcubQ3s= Subject key identifier: F1:F8:CD:04:A9:8D:79:69:9D:7C:EF:83:84:6F:F3:CF:90:5B:58:C7 Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 Certificate issuer: /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Certificate serial: 02220BFD2EB1E6A42978A4CC310FE2DE8852F3AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft Manifest number: 33 Signing time: Sun 14 Jun 2026 03:02:38 +0000 Manifest this update: Sun 14 Jun 2026 02:57:38 +0000 Manifest next update: Mon 15 Jun 2026 05:38:38 +0000 Files and hashes: 1: 3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (hash: 8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=) 2: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl (hash: JgEWaVaap4mA8PJYr8Es9eLkUzJ3poyBEKcZMRplu3Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:22:0b:fd:2e:b1:e6:a4:29:78:a4:cc:31:0f:e2:de:88:52:f3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Validity Not Before: Jun 14 02:57:38 2026 GMT Not After : Jun 15 05:38:38 2026 GMT Subject: CN=F1F8CD04A98D79699D7CEF83846FF3CF905B58C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:ce:4c:52:6f:36:6c:a7:ad:af:31:ae:9e: 45:89:ac:1f:da:fd:81:24:f7:30:97:01:a8:43:07: ca:a3:5c:ce:41:2f:89:36:14:a6:38:23:29:6c:ec: 5a:80:23:4e:05:3c:cb:11:15:85:b9:6a:a1:46:cb: 17:24:1b:70:af:b7:b0:83:ee:06:a9:8f:a0:5d:9c: 2a:1c:20:da:0c:7c:58:5a:ef:58:3e:6f:f2:7d:9c: 1b:51:cf:2b:9e:d7:dd:13:05:96:b7:cd:57:df:68: 34:cb:a0:19:68:7d:37:53:b5:b5:44:89:99:dd:1c: 17:c2:ab:c3:72:9f:cd:1d:71:88:d4:e3:8b:c5:ab: 8b:41:4e:6c:21:52:69:53:8e:56:f0:79:24:07:ee: 3b:31:36:e8:9a:1b:00:86:a1:d2:b0:f6:62:26:e2: 15:ae:11:a8:ba:ce:b0:d7:3a:16:cc:30:e9:47:ef: b2:43:fa:e1:97:b8:e0:fe:9c:9e:d8:f9:b4:7a:fc: 8d:c1:ba:e0:57:42:c0:46:f7:cc:92:b2:f6:e6:b9: 91:13:3c:f4:48:39:14:f6:8b:3a:f8:3d:c8:e3:bb: b7:88:d3:a3:20:9c:0f:b2:21:ae:ab:53:44:65:fc: f2:34:cb:a1:5d:81:fd:31:db:5f:f3:35:65:ee:c7: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:CD:04:A9:8D:79:69:9D:7C:EF:83:84:6F:F3:CF:90:5B:58:C7 X509v3 Authority Key Identifier: keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8c:b5:6c:c4:2a:0d:9c:91:59:b7:3b:ba:ae:df:7f:6c:ff: 53:a0:41:df:d4:ee:1e:da:1a:b7:8a:9d:3f:a5:c9:bb:ef:bf: b3:2f:e5:cf:86:9f:60:b8:3c:0c:67:e9:90:15:b3:0e:f4:58: 13:08:f4:69:9a:2e:52:fa:b4:e9:1c:f1:30:f6:71:61:18:a9: 39:9a:63:82:9c:00:b9:b1:a0:ae:8f:a0:79:da:49:8b:82:1f: 98:8d:3c:12:ca:2e:ec:69:fe:64:04:43:8f:b4:d0:19:2d:b4: 73:45:25:d7:02:8b:96:03:07:83:bf:80:1c:75:04:4d:92:21: cc:92:e5:d8:1a:e4:9f:6b:e6:4f:b4:c8:a7:b0:90:94:26:35: c8:ce:06:72:19:de:b6:b0:39:cd:72:cd:2d:53:ff:db:f3:8b: 5c:7e:5d:42:67:a6:aa:92:4d:3f:c7:f1:94:7b:63:2e:fc:4c: 73:af:1b:33:5a:1e:fa:c6:36:75:3c:d2:31:ee:68:47:6c:34: 8b:3a:c3:9d:07:f3:0b:aa:90:51:cf:f0:70:ea:46:9a:47:1d: 88:32:f1:22:93:8b:34:9f:28:63:c9:e1:42:c2:c1:fa:89:6d: 48:12:76:ee:80:f4:e5:2e:a6:79:44:69:f1:6e:cc:db:48:9f: af:ee:31:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAiIL/S6x5qQpeKTMMQ/i3ohS864wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFF MDVFN0JCNjAeFw0yNjA2MTQwMjU3MzhaFw0yNjA2MTUwNTM4MzhaMDMxMTAvBgNV BAMTKEYxRjhDRDA0QTk4RDc5Njk5RDdDRUY4Mzg0NkZGM0NGOTA1QjU4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDax85MUm82bKetrzGunkWJrB/a /YEk9zCXAahDB8qjXM5BL4k2FKY4Iyls7FqAI04FPMsRFYW5aqFGyxckG3Cvt7CD 7gapj6BdnCocINoMfFha71g+b/J9nBtRzyue190TBZa3zVffaDTLoBlofTdTtbVE iZndHBfCq8Nyn80dcYjU44vFq4tBTmwhUmlTjlbweSQH7jsxNuiaGwCGodKw9mIm 4hWuEai6zrDXOhbMMOlH77JD+uGXuOD+nJ7Y+bR6/I3BuuBXQsBG98ySsvbmuZET PPRIORT2izr4Pcjju7eI06MgnA+yIa6rU0Rl/PI0y6Fdgf0x21/zNWXux+uFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8fjNBKmNeWmdfO+DhG/zz5BbWMcwHwYDVR0j BBgwFoAUgcYRnmpN97deFX5IoTY1seBee7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk1Njc1MzQ5OTM4OTk1Ny8wLzgxQzYxMTlFNkE0REY3Qjc1RTE1N0U0OEExMzYz NUIxRTA1RTdCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFFMDVFN0JCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NTY3NTM0OTkzODk5NTcvMC84MUM2MTE5RTZBNERG N0I3NUUxNTdFNDhBMTM2MzVCMUUwNUU3QkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYy1bMQqDZyR Wbc7uq7ff2z/U6BB39TuHtoat4qdP6XJu++/sy/lz4afYLg8DGfpkBWzDvRYEwj0 aZouUvq06RzxMPZxYRipOZpjgpwAubGgro+gedpJi4IfmI08Esou7Gn+ZARDj7TQ GS20c0Ul1wKLlgMHg7+AHHUETZIhzJLl2Brkn2vmT7TIp7CQlCY1yM4GchnetrA5 zXLNLVP/2/OLXH5dQmemqpJNP8fxlHtjLvxMc68bM1oe+sY2dTzSMe5oR2w0izrD nQfzC6qQUc/wcOpGmkcdiDLxIpOLNJ8oY8nhQsLB+oltSBJ27oD05S6meURp8W7M 20ifr+4x+A== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:00 2026 by rpki-client