$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json) Hash identifier: VS1rw5uw2LLUnVv3GNYBHsUma3rDssSc48nrPglpwx8= Subject key identifier: 4A:B1:0A:4F:26:7B:CE:A7:8C:FC:6B:8A:FD:81:06:FF:32:52:CE:59 Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 3B6EEFB39C6D897C2AE338A73548785E515939F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft Manifest number: 22 Signing time: Sat 13 Jun 2026 22:22:19 +0000 Manifest this update: Sat 13 Jun 2026 22:17:19 +0000 Manifest next update: Sun 14 Jun 2026 23:24:19 +0000 Files and hashes: 1: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: 3gIWDy8a5AHwAo2/bA4KmOLZdS2cHf9zbPsStwNUccA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:ef:b3:9c:6d:89:7c:2a:e3:38:a7:35:48:78:5e:51:59:39:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 13 22:17:19 2026 GMT Not After : Jun 14 23:24:19 2026 GMT Subject: CN=4AB10A4F267BCEA78CFC6B8AFD8106FF3252CE59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:01:a5:33:1c:59:46:78:e6:5f:40:7d:b9: 3f:df:ef:0f:68:ae:a9:14:5b:03:48:2d:fc:1d:46: 5b:43:46:8d:80:8d:99:b5:99:10:19:f5:56:fd:0a: 88:20:75:fa:a8:36:3b:8b:dc:2a:7a:26:cd:3a:26: cb:4b:fb:83:8e:54:68:70:a4:e1:c0:b4:e6:28:4f: eb:77:d3:fc:b0:3a:cc:3a:e8:9a:2e:2c:f0:78:1d: 4b:a8:58:ab:b9:4c:3b:46:a1:ba:e5:92:86:8f:23: 59:ba:c1:be:85:86:ef:77:e5:ed:e5:c9:92:70:c8: d6:4d:82:22:17:39:b1:1d:64:80:e6:10:ec:1e:27: f9:69:bd:73:11:cd:50:ab:22:8e:95:58:d4:b8:ce: b7:20:da:6f:4b:69:72:91:fa:f7:42:cb:77:7c:7e: cb:1d:ae:48:52:80:63:2d:4a:fc:f2:fe:61:78:7e: e5:0f:b1:ca:10:a8:2d:e2:c4:46:0c:db:58:36:15: 0d:3d:a1:d3:90:e4:bb:f9:79:81:86:b1:c6:f7:66: 29:a6:da:0e:46:cb:84:a1:0a:4e:8a:e3:5d:54:4e: 72:8d:99:18:89:4e:01:94:f3:cf:d6:78:f5:48:77: 97:d8:03:e7:a6:41:8f:57:b9:aa:5f:5f:09:18:19: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:0A:4F:26:7B:CE:A7:8C:FC:6B:8A:FD:81:06:FF:32:52:CE:59 X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:c6:80:5a:55:3f:1e:cf:8a:3f:31:8c:63:24:7d:8f:f1: 1f:9a:94:df:4b:56:9a:6f:cd:ae:dd:50:ed:6a:1c:4b:ce:dd: df:93:ab:ff:5e:e9:78:a3:a0:39:66:41:03:f6:59:c2:42:73: 38:25:a5:a1:db:d7:ce:68:69:8c:0a:f5:2e:9e:ae:0e:d5:18: 66:03:a7:2c:79:63:28:ea:ba:53:00:ad:e9:62:da:d8:38:7c: be:fa:2a:9f:09:b8:76:19:02:a0:d3:7e:e9:5f:11:a5:e8:dd: 2b:07:3c:79:04:c0:06:1b:26:55:d3:cd:05:cc:0a:cc:8b:06: 61:2b:5b:fe:a5:99:f7:6d:75:9f:f5:df:da:39:d0:87:66:21: 80:95:bc:e1:01:c9:f0:0c:7d:39:2e:d6:90:9e:ee:7b:0f:cc: 12:93:d7:e2:53:1f:ad:f9:ca:c5:5a:a7:fd:a5:2a:f2:ea:2a: 28:aa:d5:92:65:e0:e0:50:d4:6b:04:6d:9e:90:13:7e:6b:05: fa:a9:f1:79:53:a9:4f:13:e4:9c:30:a8:c6:ac:b8:25:0a:42: e2:85:47:2f:5f:18:b9:72:82:bb:38:f2:cc:fe:bb:f9:fd:c7: 9f:de:cc:51:a5:2d:82:23:f5:32:a4:bc:5c:37:13:0d:ef:09: bf:b7:03:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO27vs5xtiXwq4zinNUh4XlFZOfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MTMyMjE3MTlaFw0yNjA2MTQyMzI0MTlaMDMxMTAvBgNV BAMTKDRBQjEwQTRGMjY3QkNFQTc4Q0ZDNkI4QUZEODEwNkZGMzI1MkNFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fQGlMxxZRnjmX0B9uT/f7w9o rqkUWwNILfwdRltDRo2AjZm1mRAZ9Vb9CoggdfqoNjuL3Cp6Js06JstL+4OOVGhw pOHAtOYoT+t30/ywOsw66JouLPB4HUuoWKu5TDtGobrlkoaPI1m6wb6Fhu935e3l yZJwyNZNgiIXObEdZIDmEOweJ/lpvXMRzVCrIo6VWNS4zrcg2m9LaXKR+vdCy3d8 fssdrkhSgGMtSvzy/mF4fuUPscoQqC3ixEYM21g2FQ09odOQ5Lv5eYGGscb3Zimm 2g5Gy4ShCk6K411UTnKNmRiJTgGU88/WePVId5fYA+emQY9XuapfXwkYGXT7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSrEKTyZ7zqeM/GuK/YEG/zJSzlkwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzNTQwMzY4Njk0NjQwODUvMC9CNTE0ODY0NkYyQzQ1 MTg2NEUyMDY5NkU0RjFDOTI2QTA5OEJDOEQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMfGgFpVPx7P ij8xjGMkfY/xH5qU30tWmm/Nrt1Q7WocS87d35Or/17peKOgOWZBA/ZZwkJzOCWl odvXzmhpjAr1Lp6uDtUYZgOnLHljKOq6UwCt6WLa2Dh8vvoqnwm4dhkCoNN+6V8R pejdKwc8eQTABhsmVdPNBcwKzIsGYStb/qWZ9211n/Xf2jnQh2YhgJW84QHJ8Ax9 OS7WkJ7uew/MEpPX4lMfrfnKxVqn/aUq8uoqKKrVkmXg4FDUawRtnpATfmsF+qnx eVOpTxPknDCoxqy4JQpC4oVHL18YuXKCuzjyzP67+f3Hn97MUaUtgiP1MqS8XDcT De8Jv7cD5g== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:03 2026 by rpki-client