$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: L6/P1vGL6EW1EDSN1e3di2Qzz615jIRmVoH40K/Hkrw= Subject key identifier: D0:A0:28:EB:03:CF:50:01:4D:8B:DF:B9:66:3A:A9:D4:A9:A7:60:88 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 6C7C05B625628C4EF7BFACD8086AC1613403B5AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: 2A Signing time: Sat 13 Jun 2026 07:21:27 +0000 Manifest this update: Sat 13 Jun 2026 07:16:27 +0000 Manifest next update: Sun 14 Jun 2026 08:30:27 +0000 Files and hashes: 1: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: zQ6sPT9N8wY5cHES5h0KKcak0/MEEkAcx7YbXVOhZWk=) 2: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 3: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 08:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7c:05:b6:25:62:8c:4e:f7:bf:ac:d8:08:6a:c1:61:34:03:b5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Jun 13 07:16:27 2026 GMT Not After : Jun 14 08:30:27 2026 GMT Subject: CN=D0A028EB03CF50014D8BDFB9663AA9D4A9A76088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:98:41:ab:22:13:93:56:d5:49:b7:a4:2f: 70:f2:8b:09:eb:06:b3:dc:13:1b:1a:e9:16:12:1e: 16:b7:6c:08:82:a7:3a:56:4d:6f:c5:28:24:24:25: 6d:60:da:c6:41:5c:ce:1a:fc:2d:7a:44:31:39:00: ee:7e:91:e1:f0:22:9e:d9:38:1e:ea:e5:09:ff:a4: c5:3d:68:66:3b:92:f1:f6:b5:97:c0:6d:30:8a:b5: 31:a3:80:72:58:1a:f4:2a:36:3d:32:22:ea:2c:38: 49:cf:b7:31:9f:82:0e:bf:05:47:e7:c8:ab:a6:a1: 4e:09:84:9e:19:9c:01:53:2c:92:11:c1:67:99:01: 40:33:e0:5e:47:c0:c9:13:86:14:6c:aa:04:fd:4f: 22:c7:d6:63:5b:c5:33:c2:f7:41:6d:67:df:14:29: 8d:28:d1:86:26:bd:a7:cf:2a:8c:03:db:dc:36:dd: 9d:4c:b4:b8:17:e6:f0:29:61:62:6f:8f:0d:2b:fe: 64:ea:ac:19:be:ff:20:e9:23:50:c8:b2:6f:5c:82: 70:20:ff:7a:24:02:f7:7b:c6:93:be:7c:22:34:50: 18:2e:ed:c5:d9:ad:87:bb:63:09:25:1c:a0:0b:5e: 2b:c5:6c:14:eb:59:db:89:d1:90:11:d1:36:6e:a8: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:28:EB:03:CF:50:01:4D:8B:DF:B9:66:3A:A9:D4:A9:A7:60:88 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:77:4d:32:f3:8b:58:77:4b:db:8f:54:83:4b:2f:52:b3:e8: fb:56:b8:3a:4c:23:ba:c8:f6:1d:05:3d:0a:57:19:81:a6:e8: 2b:be:62:24:2f:ad:c1:04:d7:ee:f3:7d:f6:92:e6:7f:21:46: 31:4b:6a:98:34:11:c0:dd:e6:f3:14:aa:f5:41:0a:35:44:e9: 5a:b4:f2:0d:e1:28:bb:38:4e:97:11:7d:e4:ed:3d:d7:11:7f: 00:8d:e2:38:2a:89:35:56:07:04:ad:17:1b:f3:3f:a8:07:44: 28:d3:1a:24:bb:94:be:8f:54:ed:ea:1f:a3:41:5a:ae:94:74: 6a:b4:99:69:58:da:12:3f:f1:75:cf:4d:77:6a:32:44:83:2d: d4:49:47:cf:a6:8e:12:a4:ec:72:92:83:19:56:a2:8c:66:b9: 12:de:8a:cc:05:44:b4:59:29:89:b7:d2:f9:1d:9e:51:d5:87: 0c:55:9e:31:6b:07:0e:75:e6:d2:c0:39:e3:96:ba:13:64:89: 29:6b:b7:45:2d:b6:c8:26:ec:c6:77:c3:51:4a:e4:ec:d6:b6: c9:cb:d9:0a:7c:5b:5b:7e:89:12:1c:46:ba:6e:26:b8:db:f2: 0b:04:cc:3a:e7:64:68:09:a9:50:29:48:63:37:35:12:8d:50: 22:ca:a2:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbHwFtiVijE73v6zYCGrBYTQDtaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjA2MTMwNzE2MjdaFw0yNjA2MTQwODMwMjdaMDMxMTAvBgNV BAMTKEQwQTAyOEVCMDNDRjUwMDE0RDhCREZCOTY2M0FBOUQ0QTlBNzYwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFAZhBqyITk1bVSbekL3Dyiwnr BrPcExsa6RYSHha3bAiCpzpWTW/FKCQkJW1g2sZBXM4a/C16RDE5AO5+keHwIp7Z OB7q5Qn/pMU9aGY7kvH2tZfAbTCKtTGjgHJYGvQqNj0yIuosOEnPtzGfgg6/BUfn yKumoU4JhJ4ZnAFTLJIRwWeZAUAz4F5HwMkThhRsqgT9TyLH1mNbxTPC90FtZ98U KY0o0YYmvafPKowD29w23Z1MtLgX5vApYWJvjw0r/mTqrBm+/yDpI1DIsm9cgnAg /3okAvd7xpO+fCI0UBgu7cXZrYe7YwklHKALXivFbBTrWduJ0ZAR0TZuqJe9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0KAo6wPPUAFNi9+5Zjqp1KmnYIgwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXdNMvOLWHdL 249Ug0svUrPo+1a4Okwjusj2HQU9ClcZgaboK75iJC+twQTX7vN99pLmfyFGMUtq mDQRwN3m8xSq9UEKNUTpWrTyDeEouzhOlxF95O091xF/AI3iOCqJNVYHBK0XG/M/ qAdEKNMaJLuUvo9U7eofo0FarpR0arSZaVjaEj/xdc9Nd2oyRIMt1ElHz6aOEqTs cpKDGVaijGa5Et6KzAVEtFkpibfS+R2eUdWHDFWeMWsHDnXm0sA545a6E2SJKWu3 RS22yCbsxnfDUUrk7Na2ycvZCnxbW36JEhxGum4muNvyCwTMOudkaAmpUClIYzc1 Eo1QIsqizw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:02:34 2026 by rpki-client