$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: iHLQSo2ah/QUZsMjGie/mLRZcEaBYT4t2ADj4Yjl/gM= Subject key identifier: 60:D7:8C:4B:30:1F:D5:7F:14:CE:13:69:5B:52:A6:7D:94:35:83:BF Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 3902F09B62AD7530B43BB471E38260D71DBF12FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: 2A Signing time: Sat 13 Jun 2026 09:41:41 +0000 Manifest this update: Sat 13 Jun 2026 09:36:41 +0000 Manifest next update: Sun 14 Jun 2026 13:23:41 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: LZI/dC5FRz7xsrzbUUVPPk1Er3/DhmVSPMv6Bi37aLk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:02:f0:9b:62:ad:75:30:b4:3b:b4:71:e3:82:60:d7:1d:bf:12:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: Jun 13 09:36:41 2026 GMT Not After : Jun 14 13:23:41 2026 GMT Subject: CN=60D78C4B301FD57F14CE13695B52A67D943583BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:73:61:71:c8:aa:cd:58:59:02:c7:02:59: d3:67:d8:9d:d9:e0:86:00:f4:b2:b8:6b:93:99:d0: 61:44:91:5d:3c:18:bc:3f:9a:39:e6:5e:4b:71:a2: ae:16:16:24:a2:26:52:c6:c8:16:65:26:bf:56:b3: 92:38:08:fc:04:9d:0c:20:0a:92:05:85:bd:37:24: ec:f0:c3:54:70:c2:a8:62:c9:d1:50:38:00:30:a0: 3b:fc:a0:3c:41:09:64:5b:e4:5b:72:2b:bf:f9:10: db:e8:4c:0b:d7:df:c8:4a:75:25:6f:57:73:f7:19: 69:af:50:7a:c5:4c:36:b5:d6:38:8c:0b:5c:50:50: 7d:dd:fb:9a:a1:7c:84:42:22:f2:ec:17:4c:8e:97: 05:7d:67:97:bd:3e:76:6a:34:27:99:c2:eb:e5:b8: 99:ec:12:9b:83:c5:f2:cd:99:8b:41:a5:03:4e:bc: e6:f3:f1:89:22:af:2e:52:79:3d:1b:f7:0a:bf:5e: 1b:55:ec:2b:a7:54:02:32:0e:b1:f3:fd:2d:fa:09: 6f:89:55:dc:73:5d:e8:75:f1:27:66:32:4a:0b:69: af:78:92:38:86:32:58:dd:a3:d4:a8:0d:09:d2:fd: 53:23:f7:44:f4:a1:4b:d1:e3:86:ed:11:f9:8b:b6: 28:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:8C:4B:30:1F:D5:7F:14:CE:13:69:5B:52:A6:7D:94:35:83:BF X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:40:b5:fc:72:93:88:e9:bb:bd:90:b9:13:8e:0c:24:88:7a: 7d:2a:85:97:2e:d3:47:fa:d4:4c:21:56:ef:99:0b:fa:6a:78: 3e:a3:af:e9:de:df:f0:ef:56:4d:e2:0e:c2:05:89:21:5c:c4: 25:da:93:d5:54:45:2f:0d:99:9f:bb:5d:b2:97:db:35:d9:9c: f1:2e:c1:25:08:bd:a2:c6:f0:bf:e0:2a:6c:f3:11:7e:d1:4e: 0b:a0:3e:69:c9:65:f6:1c:c4:b3:0b:97:43:66:a4:80:a2:34: 4c:b0:3c:83:a0:0e:73:8a:36:5d:89:2c:64:58:58:78:1e:eb: 64:e8:d2:6d:71:c8:79:2c:14:2d:d3:70:77:ad:f6:a1:b6:3e: cf:e1:cb:73:cc:ea:2f:51:98:52:65:5d:0e:e8:5e:bf:de:bd: dd:b6:f7:22:42:26:aa:3e:76:8d:33:45:a3:75:aa:92:46:72: 5e:fc:48:a3:cb:c9:bd:50:f3:c3:8d:e4:1e:98:85:d0:ce:5b: ff:c8:11:8f:8a:5b:d3:9e:33:66:f4:e2:8b:94:b3:64:0c:4a: 36:cc:cc:c7:80:04:d4:cf:ab:27:34:ba:d0:36:88:54:f1:a0: b0:36:08:28:0a:eb:e9:0b:43:9c:24:91:33:7f:85:a7:04:1a: 77:b9:0e:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOQLwm2KtdTC0O7Rx44Jg1x2/EvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjA2MTMwOTM2NDFaFw0yNjA2MTQxMzIzNDFaMDMxMTAvBgNV BAMTKDYwRDc4QzRCMzAxRkQ1N0YxNENFMTM2OTVCNTJBNjdEOTQzNTgzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP3NhcciqzVhZAscCWdNn2J3Z 4IYA9LK4a5OZ0GFEkV08GLw/mjnmXktxoq4WFiSiJlLGyBZlJr9Ws5I4CPwEnQwg CpIFhb03JOzww1RwwqhiydFQOAAwoDv8oDxBCWRb5FtyK7/5ENvoTAvX38hKdSVv V3P3GWmvUHrFTDa11jiMC1xQUH3d+5qhfIRCIvLsF0yOlwV9Z5e9PnZqNCeZwuvl uJnsEpuDxfLNmYtBpQNOvObz8Ykiry5SeT0b9wq/XhtV7CunVAIyDrHz/S36CW+J VdxzXeh18SdmMkoLaa94kjiGMljdo9SoDQnS/VMj90T0oUvR44btEfmLtih5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYNeMSzAf1X8UzhNpW1KmfZQ1g78wHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkC1/HKTiOm7 vZC5E44MJIh6fSqFly7TR/rUTCFW75kL+mp4PqOv6d7f8O9WTeIOwgWJIVzEJdqT 1VRFLw2Zn7tdspfbNdmc8S7BJQi9osbwv+AqbPMRftFOC6A+acll9hzEswuXQ2ak gKI0TLA8g6AOc4o2XYksZFhYeB7rZOjSbXHIeSwULdNwd632obY+z+HLc8zqL1GY UmVdDuhev9693bb3IkImqj52jTNFo3WqkkZyXvxIo8vJvVDzw43kHpiF0M5b/8gR j4pb054zZvTii5SzZAxKNszMx4AE1M+rJzS60DaIVPGgsDYIKArr6QtDnCSRM3+F pwQad7kOfg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:06 2026 by rpki-client