$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: FNvb/e5GJmpvbe49MO84Yd84HyCGRx7NiXr+dwO9J4A= Subject key identifier: D3:DF:D4:B7:3E:5B:A5:84:44:9D:4A:9C:7F:39:06:D7:A8:31:DF:6D Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 469B9FE05566C3EF02F1E6BF383AE4F9C46F4C86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 20 Signing time: Sun 14 Jun 2026 03:22:39 +0000 Manifest this update: Sun 14 Jun 2026 03:17:39 +0000 Manifest next update: Mon 15 Jun 2026 06:57:39 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: VUXO6oaFuUMLpVb56M/q5385grSwlr0SzzGYJW+C4yg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9b:9f:e0:55:66:c3:ef:02:f1:e6:bf:38:3a:e4:f9:c4:6f:4c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Jun 14 03:17:39 2026 GMT Not After : Jun 15 06:57:39 2026 GMT Subject: CN=D3DFD4B73E5BA584449D4A9C7F3906D7A831DF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:90:a4:79:7f:c6:cb:a6:62:df:43:3c:ab: db:49:43:75:76:57:ed:54:ea:60:4d:a0:d9:92:a1: 76:11:95:27:32:72:da:12:87:04:a3:86:62:ab:2e: 93:78:a9:56:33:b0:0a:b2:54:bd:9f:1b:91:01:80: f7:b8:de:87:cb:34:d0:87:59:05:76:bc:ed:60:f3: a6:46:64:99:19:cc:9d:66:9c:7d:81:44:e5:2d:55: 99:c0:9a:dd:b0:6f:bf:d6:9c:a0:f8:85:68:c6:88: 82:4d:48:24:fb:2d:89:b2:92:8a:f4:31:07:06:33: b2:c5:e3:f7:5a:72:28:ac:f5:06:d3:c9:58:a5:88: 6b:dd:79:69:15:4c:9b:94:2a:1e:2f:aa:c1:69:f6: b9:82:b2:ef:88:61:b6:07:d3:ec:1b:44:00:4d:19: f6:b8:bd:b6:f4:f4:9a:e4:2e:9a:fd:75:c6:99:15: eb:59:c5:eb:99:6b:5b:ed:71:ea:d1:cb:8b:43:e7: 70:e9:14:9e:c7:ad:a6:d3:73:6b:ef:a6:fd:ac:8b: 89:d7:10:4f:4b:a9:99:b4:57:5b:14:3a:77:da:77: 13:94:09:6c:b1:e8:77:0f:15:f7:3e:d8:f5:a8:2c: be:df:2f:25:02:5c:ab:c6:20:df:3e:dc:2d:8e:e2: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:D4:B7:3E:5B:A5:84:44:9D:4A:9C:7F:39:06:D7:A8:31:DF:6D X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:b4:38:9e:3d:47:28:87:bb:9b:ad:5f:ed:31:5e:d9:88: 89:68:d6:6b:3e:4c:84:77:ad:89:25:96:d3:2e:79:b7:4e:07: fe:85:50:07:bc:3c:92:d0:b3:ae:a6:27:e6:8e:1b:1a:7a:a1: e0:ee:95:a5:a4:06:18:d8:b0:b2:6b:40:a2:b4:b2:11:7c:22: fa:61:1f:24:15:4a:6b:7d:05:06:29:5c:7f:b2:84:d1:50:99: 90:39:6e:77:04:33:4c:52:38:e9:bc:0d:3e:d2:cd:7f:1c:65: d8:6d:62:a2:30:a5:49:98:44:64:bf:5b:2f:df:2b:5b:61:5e: fa:37:53:5c:fd:ff:ad:a1:02:fb:76:d9:18:f5:ae:ae:82:e9: 60:95:1b:e6:22:f6:ac:56:8d:d3:6e:c6:73:88:92:4d:70:ff: 71:aa:df:0d:45:1b:8f:50:ee:a1:40:b0:32:8c:76:da:0d:54: 10:41:48:01:56:c5:4d:a5:2b:87:ed:20:27:f6:c4:95:a4:de: 1a:95:c9:24:58:8f:97:ec:8c:b2:05:3a:26:3e:bb:1c:c2:1d: 88:06:87:73:c6:b8:86:43:3f:ef:f3:50:3f:77:09:c5:d1:25: e9:c0:f1:a9:f0:ee:f3:28:70:09:07:bc:4e:35:60:cb:2b:7d: d3:fc:47:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURpuf4FVmw+8C8ea/ODrk+cRvTIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA2MTQwMzE3MzlaFw0yNjA2MTUwNjU3MzlaMDMxMTAvBgNV BAMTKEQzREZENEI3M0U1QkE1ODQ0NDlENEE5QzdGMzkwNkQ3QTgzMURGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcvpCkeX/Gy6Zi30M8q9tJQ3V2 V+1U6mBNoNmSoXYRlScyctoShwSjhmKrLpN4qVYzsAqyVL2fG5EBgPe43ofLNNCH WQV2vO1g86ZGZJkZzJ1mnH2BROUtVZnAmt2wb7/WnKD4hWjGiIJNSCT7LYmykor0 MQcGM7LF4/daciis9QbTyViliGvdeWkVTJuUKh4vqsFp9rmCsu+IYbYH0+wbRABN Gfa4vbb09JrkLpr9dcaZFetZxeuZa1vtcerRy4tD53DpFJ7HrabTc2vvpv2si4nX EE9LqZm0V1sUOnfadxOUCWyx6HcPFfc+2PWoLL7fLyUCXKvGIN8+3C2O4lUdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU09/Utz5bpYREnUqcfzkG16gx320wHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGC0OJ49RyiH u5utX+0xXtmIiWjWaz5MhHetiSWW0y55t04H/oVQB7w8ktCzrqYn5o4bGnqh4O6V paQGGNiwsmtAorSyEXwi+mEfJBVKa30FBilcf7KE0VCZkDludwQzTFI46bwNPtLN fxxl2G1iojClSZhEZL9bL98rW2Fe+jdTXP3/raEC+3bZGPWuroLpYJUb5iL2rFaN 027Gc4iSTXD/carfDUUbj1DuoUCwMox22g1UEEFIAVbFTaUrh+0gJ/bElaTeGpXJ JFiPl+yMsgU6Jj67HMIdiAaHc8a4hkM/7/NQP3cJxdEl6cDxqfDu8yhwCQe8TjVg yyt90/xH/g== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:01 2026 by rpki-client