$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: OPBtIm5SWpRh8AYhMYWEyXzUjyLCfHeL1neEIZ9wTPQ= Subject key identifier: 2C:24:D2:49:A7:71:38:E2:6B:5D:60:7D:AC:21:B1:72:0A:4E:CB:30 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 633A8DDAD1CE1FF49C47FF568E9FF9B701BC74D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 23 Signing time: Sat 13 Jun 2026 23:02:26 +0000 Manifest this update: Sat 13 Jun 2026 22:57:26 +0000 Manifest next update: Mon 15 Jun 2026 01:19:26 +0000 Files and hashes: 1: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: HWLh/Hm7h7Vx2FQbVssiIWZG7RzDYzgB9vK4Izq3zlI=) 2: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) 3: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3a:8d:da:d1:ce:1f:f4:9c:47:ff:56:8e:9f:f9:b7:01:bc:74:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Jun 13 22:57:26 2026 GMT Not After : Jun 15 01:19:26 2026 GMT Subject: CN=2C24D249A77138E26B5D607DAC21B1720A4ECB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:fd:f0:7d:5d:01:fc:ee:2e:14:ce:d7:1c: fe:f7:3e:f6:52:6b:ac:d9:4c:25:c2:31:ab:17:5b: 10:1a:ba:91:d0:90:1d:11:a9:18:29:c8:fe:41:b7: 37:50:b2:d7:ed:db:15:04:09:b5:cc:28:bd:de:1f: cf:ae:15:4a:03:2f:58:92:01:79:22:71:08:64:0c: 3d:6e:3e:1f:30:bc:41:a4:15:38:82:10:06:a8:3c: 81:dd:7a:5c:e2:d4:13:49:e3:3c:92:5b:e3:ab:69: 35:73:b7:fd:2d:67:75:eb:2e:38:dd:f3:6a:c7:1d: 45:92:d3:ed:9a:dd:48:bb:f2:9f:32:91:56:f3:a5: e6:0e:87:81:b3:47:7a:b1:d8:db:9e:9b:d4:24:8a: 7d:47:ba:9d:c8:2c:3c:fd:6a:20:69:36:53:9e:eb: c7:3d:71:20:e7:c4:5e:58:3d:34:00:ea:c6:c0:52: ac:e9:21:64:9d:9b:56:17:ad:06:a1:b5:42:fb:24: 48:8b:55:4d:c8:c2:2d:62:59:ca:ce:6e:a0:d8:f0: ba:79:82:1d:e4:fc:4c:1e:90:14:4c:18:54:50:cf: bb:f4:20:6c:66:5c:e2:66:39:30:1c:c2:f6:15:12: e5:84:3e:ad:fa:95:24:6d:c5:96:fb:28:49:7f:67: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:24:D2:49:A7:71:38:E2:6B:5D:60:7D:AC:21:B1:72:0A:4E:CB:30 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:5d:1e:e7:70:10:42:f6:4d:8c:dc:33:93:58:c0:2d:92: a0:ce:59:97:93:51:ac:06:bf:77:15:5a:67:fa:44:74:23:cf: be:79:f1:0f:4d:d7:dd:6a:a2:e9:1c:eb:9f:2c:56:15:d7:cf: 78:47:21:d5:4d:b2:37:35:9f:e4:08:05:cb:3b:a1:e0:b8:89: e7:47:3b:4e:84:59:15:43:69:32:bd:08:6c:e8:75:35:de:ba: 5d:d1:03:06:6b:7c:c1:20:52:60:00:7d:88:94:71:de:01:d5: 01:ed:a6:b0:f5:aa:f7:c1:10:a3:71:cb:3c:27:99:8b:82:a8: b9:6f:28:3b:91:3a:43:85:e3:9f:23:c6:ef:87:37:b7:48:43: e8:ba:65:58:61:d9:27:12:5e:f0:d6:4c:47:60:f5:45:70:04: 63:1c:35:6f:18:44:a4:7c:2c:d8:7f:6f:c8:e3:b9:66:8e:c7: 9c:31:97:a9:36:d1:03:c7:cc:f4:ac:0c:df:46:eb:39:99:c3: 4f:8d:fe:d7:5f:59:40:d6:3e:49:51:e2:fd:75:b6:eb:2b:27: e9:c2:f7:48:a4:91:1e:85:d3:af:ad:45:1a:ca:1e:c8:26:47: 32:eb:69:4f:25:0d:41:c3:35:f0:47:82:de:13:03:8d:92:29: 41:9b:76:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYzqN2tHOH/ScR/9Wjp/5twG8dNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjA2MTMyMjU3MjZaFw0yNjA2MTUwMTE5MjZaMDMxMTAvBgNV BAMTKDJDMjREMjQ5QTc3MTM4RTI2QjVENjA3REFDMjFCMTcyMEE0RUNCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDf3wfV0B/O4uFM7XHP73PvZS a6zZTCXCMasXWxAaupHQkB0RqRgpyP5BtzdQstft2xUECbXMKL3eH8+uFUoDL1iS AXkicQhkDD1uPh8wvEGkFTiCEAaoPIHdelzi1BNJ4zySW+OraTVzt/0tZ3XrLjjd 82rHHUWS0+2a3Ui78p8ykVbzpeYOh4GzR3qx2Nuem9Qkin1Hup3ILDz9aiBpNlOe 68c9cSDnxF5YPTQA6sbAUqzpIWSdm1YXrQahtUL7JEiLVU3Iwi1iWcrObqDY8Lp5 gh3k/EwekBRMGFRQz7v0IGxmXOJmOTAcwvYVEuWEPq36lSRtxZb7KEl/Z/vpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULCTSSadxOOJrXWB9rCGxcgpOyzAwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoNdHudwEEL2 TYzcM5NYwC2SoM5Zl5NRrAa/dxVaZ/pEdCPPvnnxD03X3Wqi6RzrnyxWFdfPeEch 1U2yNzWf5AgFyzuh4LiJ50c7ToRZFUNpMr0IbOh1Nd66XdEDBmt8wSBSYAB9iJRx 3gHVAe2msPWq98EQo3HLPCeZi4KouW8oO5E6Q4XjnyPG74c3t0hD6LplWGHZJxJe 8NZMR2D1RXAEYxw1bxhEpHws2H9vyOO5Zo7HnDGXqTbRA8fM9KwM30brOZnDT43+ 119ZQNY+SVHi/XW26ysn6cL3SKSRHoXTr61FGsoeyCZHMutpTyUNQcM18EeC3hMD jZIpQZt2sw== -----END CERTIFICATE-----Generated at Sun Jun 14 06:43:45 2026 by rpki-client