$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: QhJ7EnlYvw+keKey6g7L+4VGof7TjhvD8+JGo+rThpY= Subject key identifier: 41:57:6E:27:F5:AF:CD:3A:50:83:44:3A:54:69:B4:92:0F:42:15:85 Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 2E8EA73D158472ED12752175064506C968E662E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 34 Signing time: Sat 13 Jun 2026 12:46:49 +0000 Manifest this update: Sat 13 Jun 2026 12:41:49 +0000 Manifest next update: Sun 14 Jun 2026 13:25:49 +0000 Files and hashes: 1: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 2: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) 3: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: yD/fgom35p0Kyk9xJ5Ps5I7N+puYVRIi5B4hoMJs7Bc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8e:a7:3d:15:84:72:ed:12:75:21:75:06:45:06:c9:68:e6:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Jun 13 12:41:49 2026 GMT Not After : Jun 14 13:25:49 2026 GMT Subject: CN=41576E27F5AFCD3A5083443A5469B4920F421585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:47:d0:f8:28:b7:1b:98:38:61:4c:24:52: d3:49:02:a5:34:ac:e0:cb:72:fe:fd:6d:1d:18:d1: 46:ef:60:58:ef:93:d6:e3:9b:9e:db:a8:64:17:e4: 05:8f:04:f7:0b:ac:49:6b:e4:20:83:75:a8:fa:8a: 54:90:d3:d2:c9:97:dd:12:ce:47:ee:26:4f:d6:f3: 7f:01:72:90:c1:98:3c:a9:03:76:be:be:b3:b1:e8: 44:c8:6f:00:e7:2f:af:bc:a2:38:59:35:58:fa:02: 7e:4b:f3:10:02:55:ed:b1:70:8d:1b:9c:45:29:bc: 8d:cc:1f:30:f0:fa:be:d5:82:5d:24:9d:14:db:50: 94:e3:36:c9:85:0a:a2:d8:d7:ae:5d:c5:ac:46:dd: 15:4e:98:f3:49:84:2f:55:6e:44:22:46:37:c2:f5: 46:be:1a:a3:51:0e:65:5a:62:15:cc:2a:c2:99:1a: 8c:11:5f:d2:13:06:fe:0b:1a:da:96:a4:58:2c:a4: 06:77:b5:db:91:eb:14:16:e0:db:c2:9f:44:9e:6f: 59:19:7b:c3:46:52:8e:f7:67:0a:80:aa:51:e2:4e: db:d9:94:e7:03:ba:d2:12:c0:ff:56:b3:57:4c:24: 96:e4:74:45:06:eb:1e:f8:e0:45:cd:ee:28:49:6f: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:6E:27:F5:AF:CD:3A:50:83:44:3A:54:69:B4:92:0F:42:15:85 X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:ee:14:dd:fe:db:2b:c1:a2:5a:9f:99:f8:fe:f2:47:96: 29:81:ee:7c:cb:72:55:e6:c9:b1:08:97:8a:69:29:4d:3a:5e: 44:95:f1:db:a7:12:4d:0a:00:b1:53:fa:65:06:67:8b:8e:22: b9:bf:99:7d:02:e9:e9:2b:2a:18:3d:5c:f0:d6:00:b5:63:56: bb:70:fe:db:03:59:98:b8:b9:5d:3e:a4:22:76:02:db:21:5f: 97:8e:e8:e3:66:54:86:08:e0:c8:47:86:af:ba:64:b1:fc:17: af:c6:92:16:74:32:f9:86:f7:b6:ef:e3:b1:67:51:8c:6a:49: 3a:eb:75:eb:04:42:a9:9c:58:07:fd:20:99:97:ac:47:61:89: 68:57:3a:b6:2d:71:67:1f:1b:31:53:22:64:98:21:64:9b:ce: 90:61:c4:90:e0:50:75:0a:31:08:ba:29:17:52:71:44:63:24: cb:40:1c:75:45:e2:c1:fd:46:74:a5:40:52:63:26:98:8d:ac: fc:b3:66:53:09:09:d9:3a:f7:fa:92:a6:0d:2f:f1:9a:e0:16: dd:45:60:6f:3c:69:73:ae:09:92:0f:ca:83:58:42:8e:64:6d: e6:5d:a2:60:26:51:f4:3f:7f:e8:97:c6:13:2d:d2:9a:f0:50: 1d:a3:8f:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULo6nPRWEcu0SdSF1BkUGyWjmYuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA2MTMxMjQxNDlaFw0yNjA2MTQxMzI1NDlaMDMxMTAvBgNV BAMTKDQxNTc2RTI3RjVBRkNEM0E1MDgzNDQzQTU0NjlCNDkyMEY0MjE1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DkfQ+Ci3G5g4YUwkUtNJAqU0 rODLcv79bR0Y0UbvYFjvk9bjm57bqGQX5AWPBPcLrElr5CCDdaj6ilSQ09LJl90S zkfuJk/W838BcpDBmDypA3a+vrOx6ETIbwDnL6+8ojhZNVj6An5L8xACVe2xcI0b nEUpvI3MHzDw+r7Vgl0knRTbUJTjNsmFCqLY165dxaxG3RVOmPNJhC9VbkQiRjfC 9Ua+GqNRDmVaYhXMKsKZGowRX9ITBv4LGtqWpFgspAZ3tduR6xQW4NvCn0Seb1kZ e8NGUo73ZwqAqlHiTtvZlOcDutISwP9Ws1dMJJbkdEUG6x744EXN7ihJb1L/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQVduJ/WvzTpQg0Q6VGm0kg9CFYUwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCruFN3+2yvB olqfmfj+8keWKYHufMtyVebJsQiXimkpTTpeRJXx26cSTQoAsVP6ZQZni44iub+Z fQLp6SsqGD1c8NYAtWNWu3D+2wNZmLi5XT6kInYC2yFfl47o42ZUhgjgyEeGr7pk sfwXr8aSFnQy+Yb3tu/jsWdRjGpJOut16wRCqZxYB/0gmZesR2GJaFc6ti1xZx8b MVMiZJghZJvOkGHEkOBQdQoxCLopF1JxRGMky0AcdUXiwf1GdKVAUmMmmI2s/LNm UwkJ2Tr3+pKmDS/xmuAW3UVgbzxpc64Jkg/Kg1hCjmRt5l2iYCZR9D9/6JfGEy3S mvBQHaOPmA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:51:43 2026 by rpki-client