$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json) Hash identifier: /pHmVuAeMCtx2yjqcfcXpPvvIUPzZItNx3pw0CmJyVI= Subject key identifier: 88:97:50:D0:BE:E9:8B:D6:05:EC:FC:5A:4F:92:05:01:B6:65:62:13 Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Certificate serial: 1FF1615714E5800B45CF761AD9B6A28EB2215DE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 23:02:26 +0000 Manifest this update: Sat 13 Jun 2026 22:57:26 +0000 Manifest next update: Mon 15 Jun 2026 01:41:26 +0000 Files and hashes: 1: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=) 2: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: nV7LcYsXjNWAGUvAonZdfkPk5FB0gNlpdU2mdxtcQlM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f1:61:57:14:e5:80:0b:45:cf:76:1a:d9:b6:a2:8e:b2:21:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Validity Not Before: Jun 13 22:57:26 2026 GMT Not After : Jun 15 01:41:26 2026 GMT Subject: CN=889750D0BEE98BD605ECFC5A4F920501B6656213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:a6:71:9c:16:b1:60:26:fe:f2:1d:66:5e: cc:91:52:78:63:27:6b:7a:e2:48:3b:4d:ae:71:e2: ae:ef:0f:8e:14:18:a7:69:10:08:82:40:79:1b:bb: 24:12:63:fa:87:10:95:38:6e:d0:1e:1e:7d:b7:d7: 02:57:f3:8d:70:77:17:4b:23:d9:df:d0:9f:e9:f1: 04:1b:3c:e6:21:dd:01:34:52:c8:4a:72:42:07:3e: 66:f3:63:05:70:51:f9:a4:74:65:10:b5:36:c7:fb: bc:cf:2e:9e:a1:d2:bb:56:3c:ea:5c:7b:3b:48:43: da:eb:a1:77:07:03:92:bb:3d:91:5b:93:79:06:e9: f0:d8:da:0e:2b:ae:c6:99:88:b8:29:03:1e:96:4f: ba:6d:ca:8c:55:a2:02:b1:26:1d:fa:38:f3:66:1a: 17:2d:9d:93:53:f8:8a:c1:95:53:8f:78:4c:d1:2b: 1e:f3:58:46:bf:17:08:6e:13:7b:1c:b1:31:01:77: 98:7f:9f:7c:a0:38:e5:b5:af:ff:aa:d9:18:ed:64: 4c:b5:b1:7e:ab:cf:dc:3a:2a:f8:c9:31:05:21:27: 8d:69:e8:5f:8b:3d:5b:1a:ca:43:c3:d6:b7:84:30: 8e:0a:8d:e6:ca:d2:b5:86:9c:83:59:f4:ef:98:1f: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:97:50:D0:BE:E9:8B:D6:05:EC:FC:5A:4F:92:05:01:B6:65:62:13 X509v3 Authority Key Identifier: keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:57:bc:11:83:fc:a6:2f:9c:ab:e8:db:ac:36:df:6f:20: 46:df:ad:5b:21:fa:26:77:46:2f:2e:8e:79:b4:44:ff:3a:61: ed:73:bd:4c:91:7f:f9:ff:b5:2a:c8:ca:1d:dd:c2:a8:78:50: 71:0a:e7:4b:f1:66:35:e1:23:ca:9b:85:6b:91:d4:a4:43:48: 93:8c:15:1e:d8:ec:a8:33:c8:40:18:f3:fd:7d:de:a5:45:83: 0e:87:3d:99:f5:3f:78:67:f8:8d:7d:66:7c:dd:38:d4:dd:eb: ed:82:b3:b1:3d:7a:35:d2:07:a1:b1:ad:80:53:87:fe:c0:d3: f4:51:0e:24:ee:03:c8:d7:51:21:16:4c:7a:69:90:73:b1:2f: 69:9a:3a:29:94:2b:9d:38:3b:ba:7d:64:43:67:22:36:13:94: e4:a8:66:26:95:e8:84:dd:f5:b1:f0:dd:1e:36:5a:6c:85:54: e7:2e:03:3a:79:74:76:58:69:3b:3f:70:62:cc:c9:be:6e:34: e1:d2:e0:43:8e:ac:16:ae:29:5a:28:20:1f:de:e6:6f:3d:3d: df:68:2f:a5:52:c9:73:19:30:c5:de:2d:f2:e8:e3:e2:0d:c1: ab:db:3d:85:b7:fa:77:06:c0:ed:68:b0:57:f9:19:7a:d0:e4: c0:a3:76:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH/FhVxTlgAtFz3Ya2baijrIhXeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5 RjdFRUQwOTAeFw0yNjA2MTMyMjU3MjZaFw0yNjA2MTUwMTQxMjZaMDMxMTAvBgNV BAMTKDg4OTc1MEQwQkVFOThCRDYwNUVDRkM1QTRGOTIwNTAxQjY2NTYyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMqZxnBaxYCb+8h1mXsyRUnhj J2t64kg7Ta5x4q7vD44UGKdpEAiCQHkbuyQSY/qHEJU4btAeHn231wJX841wdxdL I9nf0J/p8QQbPOYh3QE0UshKckIHPmbzYwVwUfmkdGUQtTbH+7zPLp6h0rtWPOpc eztIQ9rroXcHA5K7PZFbk3kG6fDY2g4rrsaZiLgpAx6WT7ptyoxVogKxJh36OPNm GhctnZNT+IrBlVOPeEzRKx7zWEa/FwhuE3scsTEBd5h/n3ygOOW1r/+q2RjtZEy1 sX6rz9w6KvjJMQUhJ41p6F+LPVsaykPD1reEMI4KjebK0rWGnINZ9O+YH09lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiJdQ0L7pi9YF7PxaT5IFAbZlYhMwHwYDVR0j BBgwFoAUGyx3Ew16raGEb/7+QW9QWZ9+7QkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAwODYyMzM2MjI0NDYxNS8wLzFCMkM3NzEzMEQ3QUFEQTE4NDZGRkVGRTQxNkY1 MDU5OUY3RUVEMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMDg2MjMzNjIyNDQ2MTUvMC8xQjJDNzcxMzBEN0FB REExODQ2RkZFRkU0MTZGNTA1OTlGN0VFRDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWodXvBGD/KYv nKvo26w2328gRt+tWyH6JndGLy6OebRE/zph7XO9TJF/+f+1KsjKHd3CqHhQcQrn S/FmNeEjypuFa5HUpENIk4wVHtjsqDPIQBjz/X3epUWDDoc9mfU/eGf4jX1mfN04 1N3r7YKzsT16NdIHobGtgFOH/sDT9FEOJO4DyNdRIRZMemmQc7EvaZo6KZQrnTg7 un1kQ2ciNhOU5KhmJpXohN31sfDdHjZabIVU5y4DOnl0dlhpOz9wYszJvm404dLg Q46sFq4pWiggH97mbz0932gvpVLJcxkwxd4t8ujj4g3Bq9s9hbf6dwbA7WiwV/kZ etDkwKN2gQ== -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:47 2026 by rpki-client