$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: KgyWjZXS78Gk7hG/daX+SDWb8gZHi3q+rcrRUcmKVzU= Subject key identifier: CF:1C:11:23:AC:B2:23:04:D7:A3:04:66:91:E3:E2:EC:52:15:72:E2 Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 3B3C0644E624D0C231360E80E50B8DE34EB16699 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 32 Signing time: Sat 13 Jun 2026 11:56:47 +0000 Manifest this update: Sat 13 Jun 2026 11:51:47 +0000 Manifest next update: Sun 14 Jun 2026 12:02:47 +0000 Files and hashes: 1: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: mCYbtz/a7w/za510D8EyPdvnqEZsjs1S6q1zJbLzQxE=) 2: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 3: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 4: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:06:44:e6:24:d0:c2:31:36:0e:80:e5:0b:8d:e3:4e:b1:66:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Jun 13 11:51:47 2026 GMT Not After : Jun 14 12:02:47 2026 GMT Subject: CN=CF1C1123ACB22304D7A3046691E3E2EC521572E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:ce:7e:5a:d6:04:02:6f:33:e7:0f:1c:cb: 1a:17:08:ac:fd:b1:a3:2a:03:f1:b2:dc:68:7d:20: 4d:48:39:f7:53:71:0c:b4:21:16:ad:e4:bf:08:67: c7:ec:fe:21:2d:fc:a4:40:2a:21:21:97:ee:85:b6: 21:cb:1f:07:ef:ac:00:15:75:09:4b:08:e8:c2:a3: 4b:56:74:14:6e:05:93:2d:7e:e7:e5:c7:4b:6b:f2: 9d:52:84:ce:d8:85:5d:82:25:10:97:2f:56:f4:12: de:eb:ff:aa:d9:00:d7:c9:94:6b:80:63:53:da:a8: fe:40:e5:b8:b2:2f:be:53:54:34:8c:af:e7:79:79: 1d:2d:3e:48:46:68:04:b5:2f:aa:40:e7:ef:6e:4e: 8b:61:6a:23:a5:20:02:1f:95:11:f2:15:2c:8f:76: 8b:b9:06:57:dd:14:48:59:b1:2d:f2:84:09:ed:32: 2e:87:a3:38:fe:af:c1:82:6d:b8:da:43:70:22:24: d2:b2:14:ec:31:36:46:25:81:82:55:38:02:58:a6: e0:c9:2f:48:8d:38:c1:27:7f:1a:2c:bb:13:ad:77: 56:22:52:36:ca:bf:6e:f8:ce:5b:f3:23:91:3d:f3: 31:e1:7c:2d:77:65:50:b5:dc:79:5a:e8:0f:b4:3e: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1C:11:23:AC:B2:23:04:D7:A3:04:66:91:E3:E2:EC:52:15:72:E2 X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:40:98:9b:f1:2b:2c:77:ca:18:ab:c6:51:40:13:79:e4:ae: ff:4f:d9:75:11:83:7e:e2:3e:40:3b:cd:74:7b:91:c2:44:a5: a2:41:f4:58:38:33:80:57:7a:88:62:09:21:19:2a:d5:88:0d: c4:5e:18:21:5e:cd:4a:47:43:ff:7d:ab:f8:35:3c:07:f1:e4: 6c:d9:db:6e:13:d0:fe:da:af:8d:83:67:d1:3e:c4:3a:60:28: 0b:c8:56:c3:4b:7f:df:1e:7a:00:b5:32:2a:cc:1f:ab:3e:c5: ec:ea:6e:10:4a:74:36:1c:40:2c:19:28:88:88:14:25:fe:51: 41:39:88:a3:ad:70:08:2f:5f:b2:a4:9b:26:a2:48:c5:14:1e: 55:28:55:21:d6:d8:7a:3e:22:82:ea:e2:86:f3:00:1f:85:53: ee:98:4c:97:97:9f:00:36:38:60:7c:ff:83:64:ac:68:cd:70: 6e:f2:52:a8:0e:c9:8c:4d:fc:35:03:53:d9:64:8c:89:83:c4: 7b:53:a5:31:54:c8:c0:3f:b5:e1:d6:2a:92:ec:20:1b:87:9a: 53:9e:92:f8:11:86:56:9c:63:81:28:85:18:a9:6e:b6:aa:ba: 36:77:83:32:ea:6d:87:86:7e:17:93:5e:f8:a1:a8:48:65:c8: 66:72:8d:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOzwGROYk0MIxNg6A5QuN406xZpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA2MTMxMTUxNDdaFw0yNjA2MTQxMjAyNDdaMDMxMTAvBgNV BAMTKENGMUMxMTIzQUNCMjIzMDREN0EzMDQ2NjkxRTNFMkVDNTIxNTcyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCers5+WtYEAm8z5w8cyxoXCKz9 saMqA/Gy3Gh9IE1IOfdTcQy0IRat5L8IZ8fs/iEt/KRAKiEhl+6FtiHLHwfvrAAV dQlLCOjCo0tWdBRuBZMtfuflx0tr8p1ShM7YhV2CJRCXL1b0Et7r/6rZANfJlGuA Y1PaqP5A5biyL75TVDSMr+d5eR0tPkhGaAS1L6pA5+9uTothaiOlIAIflRHyFSyP dou5BlfdFEhZsS3yhAntMi6Hozj+r8GCbbjaQ3AiJNKyFOwxNkYlgYJVOAJYpuDJ L0iNOMEnfxosuxOtd1YiUjbKv274zlvzI5E98zHhfC13ZVC13Hla6A+0PsWpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzxwRI6yyIwTXowRmkePi7FIVcuIwHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkCYm/ErLHfK GKvGUUATeeSu/0/ZdRGDfuI+QDvNdHuRwkSlokH0WDgzgFd6iGIJIRkq1YgNxF4Y IV7NSkdD/32r+DU8B/HkbNnbbhPQ/tqvjYNn0T7EOmAoC8hWw0t/3x56ALUyKswf qz7F7OpuEEp0NhxALBkoiIgUJf5RQTmIo61wCC9fsqSbJqJIxRQeVShVIdbYej4i gurihvMAH4VT7phMl5efADY4YHz/g2SsaM1wbvJSqA7JjE38NQNT2WSMiYPEe1Ol MVTIwD+14dYqkuwgG4eaU56S+BGGVpxjgSiFGKlutqq6NneDMupth4Z+F5Ne+KGo SGXIZnKNuA== -----END CERTIFICATE-----Generated at Sun Jun 14 03:25:00 2026 by rpki-client