$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: hdZiF2xxVqSOgHT7KxQTwFgId3jkZLZTJsrLMtPffho= Subject key identifier: AA:E1:94:00:19:CB:44:B9:5C:28:85:63:EB:EE:0B:35:0D:BC:E4:14 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 41FD5C54A3BF50123F1407FE80B1C09DBC667358 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: 24 Signing time: Sat 13 Jun 2026 19:32:10 +0000 Manifest this update: Sat 13 Jun 2026 19:27:10 +0000 Manifest next update: Sun 14 Jun 2026 22:16:10 +0000 Files and hashes: 1: 3231302e322e342e302f32342d3234203d3e203234313531.roa (hash: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c=) 2: 323030313a6463373a623a3a2f34382d3438203d3e203234313531.roa (hash: nCmmLKf7p/+gDBZjpiG7vY0+piKta/7HzgAV8Daoohw=) 3: 3231302e322e342e302f32342d3234203d3e203234343039.roa (hash: dsVTcMJyEhqmVODGZAIkGc623cScIW3ZMfG651m2w+c=) 4: 312e322e342e302f32342d3234203d3e203234343039.roa (hash: nEQtgygHVMKG47GK6dkWFFlZukvt0PGUFnlFtUuFZLY=) 5: 312e322e342e302f32342d3234203d3e203234313531.roa (hash: TBnC2LzR+6Db4WOI7E+8pudN/0AB0HhXouySfw2xuiY=) 6: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (hash: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs=) 7: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: mcpmilVxdXgJmjL+2K0Lr2AScYVqljn9JQD3CCWbygg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fd:5c:54:a3:bf:50:12:3f:14:07:fe:80:b1:c0:9d:bc:66:73:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Jun 13 19:27:10 2026 GMT Not After : Jun 14 22:16:10 2026 GMT Subject: CN=AAE1940019CB44B95C288563EBEE0B350DBCE414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:a0:f4:66:e6:d3:82:3f:40:08:6f:9d:cc: ea:3d:d3:29:25:44:69:b8:c5:20:55:40:d2:f7:65: fe:6d:71:de:f6:55:3f:67:f6:fa:25:6c:99:bb:f6: d9:e9:f6:15:15:8a:07:4a:61:83:91:63:0a:e7:d5: 40:12:48:35:22:45:a9:54:39:32:d4:63:9c:5c:7a: 1f:bf:0f:3b:56:a4:bd:ef:ab:ad:54:ff:96:4e:b8: 08:de:35:15:26:6a:88:01:31:84:23:79:d9:07:58: ea:53:13:12:84:17:9c:bd:b4:36:97:22:ad:0a:21: 6c:7d:11:52:98:89:e6:fc:71:41:a2:f4:ba:dd:b0: 62:41:88:32:e0:f8:16:1a:fe:c9:91:21:72:fa:6a: ae:14:ef:74:d4:9b:c2:7c:e3:d3:c4:b9:9d:af:17: 9a:22:8a:b0:13:a3:aa:f1:6e:77:de:ba:46:d7:ad: 9d:04:27:f9:e7:3f:78:83:87:5d:91:e9:75:67:92: ba:bf:a4:65:5b:58:f1:77:6b:70:c8:b8:06:a6:f0: ed:33:53:64:2c:4a:1a:4e:8a:c5:f3:ad:bc:2d:5a: f4:94:4b:6d:a9:09:74:03:36:c5:84:91:ed:1c:ea: c7:e0:d9:e8:9a:af:89:9c:7d:76:7b:eb:3f:11:8d: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:94:00:19:CB:44:B9:5C:28:85:63:EB:EE:0B:35:0D:BC:E4:14 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:99:bf:0e:79:d2:60:da:4c:0d:63:11:09:5f:1c:00:7f:b9: ce:98:75:ab:b2:70:ee:eb:8a:b6:93:ed:66:3f:ef:21:11:f9: f4:a7:ae:f7:f7:9b:b7:f4:45:09:ee:26:f6:18:ab:d7:b9:a0: c2:b2:75:c2:17:d7:9c:d1:32:1c:e4:7e:43:19:7d:e2:4b:e9: 64:73:b4:d8:38:4f:a0:79:09:2f:59:a5:c6:d3:85:e0:16:93: 01:a8:0c:7c:87:a1:d2:99:12:16:0a:54:c5:90:1a:23:97:26: 94:c5:57:6b:e5:e0:4c:7d:c7:d3:90:92:c7:47:94:ba:99:06: 86:ca:81:17:9c:a7:3a:9a:e1:ba:42:3e:72:81:c9:c3:ec:00: a7:82:cc:76:9f:a9:9d:b3:2a:b3:67:78:f4:34:68:33:17:ec: 57:f9:a8:a0:d6:62:72:19:70:70:09:85:af:ec:05:f0:be:9c: 50:04:22:04:ee:e0:b1:6f:60:62:45:49:d7:cd:6f:1f:7a:c3: 72:c1:87:0a:34:55:ab:c8:68:5d:60:dd:a7:5e:53:fa:39:23: d5:ad:db:a8:8a:4f:48:f6:5c:d7:66:75:ea:82:54:e3:be:f2: 28:44:da:81:a5:d3:4c:1d:90:cd:23:ca:62:50:f6:39:32:15: c1:de:5a:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQf1cVKO/UBI/FAf+gLHAnbxmc1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA2MTMxOTI3MTBaFw0yNjA2MTQyMjE2MTBaMDMxMTAvBgNV BAMTKEFBRTE5NDAwMTlDQjQ0Qjk1QzI4ODU2M0VCRUUwQjM1MERCQ0U0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllaD0ZubTgj9ACG+dzOo90ykl RGm4xSBVQNL3Zf5tcd72VT9n9volbJm79tnp9hUVigdKYYORYwrn1UASSDUiRalU OTLUY5xceh+/DztWpL3vq61U/5ZOuAjeNRUmaogBMYQjedkHWOpTExKEF5y9tDaX Iq0KIWx9EVKYieb8cUGi9LrdsGJBiDLg+BYa/smRIXL6aq4U73TUm8J849PEuZ2v F5oiirATo6rxbnfeukbXrZ0EJ/nnP3iDh12R6XVnkrq/pGVbWPF3a3DIuAam8O0z U2QsShpOisXzrbwtWvSUS22pCXQDNsWEke0c6sfg2eiar4mcfXZ76z8RjQ3xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUquGUABnLRLlcKIVj6+4LNQ285BQwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJm/DnnSYNpM DWMRCV8cAH+5zph1q7Jw7uuKtpPtZj/vIRH59Keu9/ebt/RFCe4m9hir17mgwrJ1 whfXnNEyHOR+Qxl94kvpZHO02DhPoHkJL1mlxtOF4BaTAagMfIeh0pkSFgpUxZAa I5cmlMVXa+XgTH3H05CSx0eUupkGhsqBF5ynOprhukI+coHJw+wAp4LMdp+pnbMq s2d49DRoMxfsV/mooNZichlwcAmFr+wF8L6cUAQiBO7gsW9gYkVJ181vH3rDcsGH CjRVq8hoXWDdp15T+jkj1a3bqIpPSPZc12Z16oJU477yKETagaXTTB2QzSPKYlD2 OTIVwd5aHw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:06 2026 by rpki-client