$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: ZrdW92K9/u3vE62GoF73HtWfOSI1wHHh5AVrIe0a4Gs= Subject key identifier: 90:60:C4:97:52:A8:B4:AD:8D:85:EA:B0:4B:E0:BF:6F:81:00:A8:E8 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 75A39F69CAD2597D89AFBE2047F57DB33B821440 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 23 Signing time: Sat 13 Jun 2026 14:51:52 +0000 Manifest this update: Sat 13 Jun 2026 14:46:52 +0000 Manifest next update: Sun 14 Jun 2026 15:09:52 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: Ea+DRcYiWAy/UvnOwTTjZ70nvBok5+zOV/T3EMUE+Vo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a3:9f:69:ca:d2:59:7d:89:af:be:20:47:f5:7d:b3:3b:82:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Jun 13 14:46:52 2026 GMT Not After : Jun 14 15:09:52 2026 GMT Subject: CN=9060C49752A8B4AD8D85EAB04BE0BF6F8100A8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:04:3c:72:1d:22:35:9d:4f:a5:32:43:49: fc:58:18:bd:9c:2a:c8:31:bb:10:1f:63:52:34:94: 81:0f:37:d0:cc:8d:9f:6c:49:7b:56:e6:41:49:b6: 37:20:cd:a7:36:b9:bf:11:23:04:c8:f4:5c:a1:d4: 5d:0e:23:7c:59:bd:f7:49:fd:03:33:c8:01:28:36: 35:ae:9f:d8:c1:5f:9e:73:4d:ac:d5:e5:32:6e:4d: 82:eb:49:d9:a7:e8:94:90:11:1a:50:43:eb:de:04: 7e:75:fd:7a:5d:55:b0:ab:d6:be:64:4d:da:32:d2: 49:0b:3d:a6:14:4b:01:5a:a6:b5:bc:9c:6e:c3:85: 12:44:68:96:8d:e4:57:5d:a9:64:e1:41:29:7a:59: aa:72:32:76:c8:02:f7:44:53:87:ff:d4:fa:6e:04: 69:38:e2:2c:90:02:f0:bd:61:a5:23:a9:9e:62:b4: 25:70:62:d7:95:7b:ce:42:1b:66:16:c8:c1:6b:99: db:dd:22:a9:09:a7:d0:cf:16:68:87:b6:32:57:e9: 28:1b:65:69:bb:7b:f4:cf:d5:17:89:0d:5e:b0:7b: a9:df:78:14:76:51:e7:5d:1c:66:f8:53:d4:84:8f: d6:3d:3e:7c:e8:06:fb:7b:c8:9a:98:55:84:97:18: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:60:C4:97:52:A8:B4:AD:8D:85:EA:B0:4B:E0:BF:6F:81:00:A8:E8 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:be:4c:05:46:70:35:0f:6e:fd:61:e1:e8:43:70:90:cf:9d: 5a:aa:bc:c5:de:91:00:5a:2d:54:42:96:bf:69:b4:86:0f:60: bc:7a:df:2f:f9:59:5d:68:80:17:82:e3:08:b3:7f:05:3e:46: 22:7a:0c:27:63:9a:2f:d2:56:c8:c1:cb:e4:6e:ac:f6:b8:a1: e8:02:6e:cd:9b:a2:ef:a5:4d:a1:c4:7e:42:35:30:5d:f8:c3: a3:93:85:32:0c:71:44:1b:4d:e3:18:f5:77:fd:71:e2:30:89: bb:81:cc:c5:98:fe:aa:89:5a:74:4c:3b:23:fe:bd:e9:50:9a: fd:71:cf:17:9a:ce:f6:b2:3e:98:88:06:67:3d:55:f4:b5:4e: 7c:03:e4:ee:84:ac:52:57:30:0f:f4:ab:38:47:fd:7f:41:3a: b9:5a:02:18:de:3a:10:80:0e:12:e0:eb:69:89:7c:70:ff:e0: 27:ee:e0:01:d1:7d:22:21:f1:50:93:96:5e:eb:43:24:5b:d6: 8b:17:67:c7:69:97:3c:bd:38:e2:ed:3a:83:86:78:2a:93:c5: e2:27:f0:2e:6b:a5:5f:4d:cd:72:34:d5:4c:83:81:1c:1e:cd: b0:b5:bd:c1:a9:d8:bc:8a:42:6b:d5:71:1d:d1:df:82:71:3b: 67:05:92:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdaOfacrSWX2Jr74gR/V9szuCFEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA2MTMxNDQ2NTJaFw0yNjA2MTQxNTA5NTJaMDMxMTAvBgNV BAMTKDkwNjBDNDk3NTJBOEI0QUQ4RDg1RUFCMDRCRTBCRjZGODEwMEE4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fAQ8ch0iNZ1PpTJDSfxYGL2c KsgxuxAfY1I0lIEPN9DMjZ9sSXtW5kFJtjcgzac2ub8RIwTI9Fyh1F0OI3xZvfdJ /QMzyAEoNjWun9jBX55zTazV5TJuTYLrSdmn6JSQERpQQ+veBH51/XpdVbCr1r5k Tdoy0kkLPaYUSwFaprW8nG7DhRJEaJaN5FddqWThQSl6WapyMnbIAvdEU4f/1Ppu BGk44iyQAvC9YaUjqZ5itCVwYteVe85CG2YWyMFrmdvdIqkJp9DPFmiHtjJX6Sgb ZWm7e/TP1ReJDV6we6nfeBR2UeddHGb4U9SEj9Y9PnzoBvt7yJqYVYSXGJ3lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkGDEl1KotK2NheqwS+C/b4EAqOgwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD75MBUZwNQ9u /WHh6ENwkM+dWqq8xd6RAFotVEKWv2m0hg9gvHrfL/lZXWiAF4LjCLN/BT5GInoM J2OaL9JWyMHL5G6s9rih6AJuzZui76VNocR+QjUwXfjDo5OFMgxxRBtN4xj1d/1x 4jCJu4HMxZj+qoladEw7I/696VCa/XHPF5rO9rI+mIgGZz1V9LVOfAPk7oSsUlcw D/SrOEf9f0E6uVoCGN46EIAOEuDraYl8cP/gJ+7gAdF9IiHxUJOWXutDJFvWixdn x2mXPL044u06g4Z4KpPF4ifwLmulX03NcjTVTIOBHB7NsLW9wanYvIpCa9VxHdHf gnE7ZwWSFw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:05:08 2026 by rpki-client