$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: jtakahUVMqZjsXC6cbUTkdaAngd8k0Kl4ridbvFa2zM= Subject key identifier: C7:5C:D7:20:1A:45:EA:63:37:38:C3:46:BA:8D:06:FB:EC:94:94:95 Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 02F9D2423E0FD63B4E6CBAA693D1CAFFD7889A48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 19 Signing time: Sat 13 Jun 2026 09:51:42 +0000 Manifest this update: Sat 13 Jun 2026 09:46:42 +0000 Manifest next update: Sun 14 Jun 2026 12:29:42 +0000 Files and hashes: 1: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) 2: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 3: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 4: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: ysgtzzUzx81MtnTme/ApqDAc3A3dLODbapd8SSOY0ko=) 5: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f9:d2:42:3e:0f:d6:3b:4e:6c:ba:a6:93:d1:ca:ff:d7:88:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: Jun 13 09:46:42 2026 GMT Not After : Jun 14 12:29:42 2026 GMT Subject: CN=C75CD7201A45EA633738C346BA8D06FBEC949495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:eb:19:12:0e:81:e2:f5:6c:75:fe:fd:c0: 65:b9:10:e0:e4:3b:be:f8:b9:b9:4f:7f:83:8a:ed: 40:f6:a6:b0:e5:35:4b:08:98:b7:a5:08:6b:e5:95: eb:c9:44:2a:89:af:8f:e6:0f:68:fc:78:81:61:95: 11:0b:04:b7:e2:15:6f:e4:cc:83:32:f6:a3:d9:83: 53:bc:cc:f3:f0:68:a4:88:c0:5e:3c:bb:d5:f0:d8: 7d:2d:99:cb:32:6d:2f:d3:54:75:9a:8b:d5:3a:fc: a3:c0:9d:eb:bb:0a:2f:a9:e9:e0:bf:48:ae:a2:e3: 6b:8d:89:9c:7d:3c:13:b8:cb:ae:b4:81:ad:d1:84: 02:2b:9a:d5:9f:25:af:7d:b1:ab:8c:63:d9:45:47: 74:c2:26:c7:78:d7:eb:b8:25:41:53:da:1f:bc:c7: e8:73:23:b2:e9:01:d1:50:42:1a:c7:f1:04:49:d4: db:aa:33:ae:49:de:d3:4c:bb:2d:51:74:28:45:c0: a1:da:4a:22:c1:b0:0f:72:04:a2:cf:01:68:31:41: b0:b9:ba:d3:b6:96:70:5d:08:23:b9:d2:65:fb:13: 7b:a0:7c:60:57:f5:c2:25:42:b2:31:ed:78:0a:38: e6:31:6b:6f:ff:e9:78:9d:4f:a4:e8:b1:a0:e1:55: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5C:D7:20:1A:45:EA:63:37:38:C3:46:BA:8D:06:FB:EC:94:94:95 X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:99:de:37:12:aa:e3:ca:c9:17:2b:39:1b:1d:e4:ad:a9:0e: 3d:6a:57:b1:98:d3:71:4a:93:0e:01:64:5a:45:7a:0f:cf:ff: 61:46:a1:79:e3:a0:f9:b3:b5:42:df:cc:7f:24:2e:94:c5:58: 23:98:95:e0:53:b7:3f:78:f0:7b:03:26:fe:e1:bb:ca:cd:81: 01:f0:7c:ef:0b:de:86:99:78:5e:6b:26:96:6a:5a:f2:22:1d: 93:c8:a5:41:5c:28:1b:6e:79:6f:b5:6e:b9:07:3d:71:83:a2: e4:74:bf:3a:0a:b9:aa:6e:87:f4:53:e8:b8:97:d7:3c:3d:23: 6a:50:f1:67:f8:0e:4f:e9:84:80:7d:5d:60:99:c5:67:64:ba: 57:f8:2c:3e:bf:24:f1:26:b2:e1:d0:75:46:d0:63:b9:cc:2d: 14:1a:71:01:b7:83:a3:34:f1:d1:1d:cb:04:05:fe:45:48:35: 8e:3c:92:b6:2b:d2:62:bc:7c:b7:51:51:39:48:cc:d5:74:f0: 98:2c:31:4b:60:58:d5:d6:c0:20:4b:df:ee:4f:eb:71:df:0d: 78:54:0f:e9:a5:6b:38:c6:8f:43:d5:04:c4:81:d4:49:f2:12: 94:cc:ce:ca:4d:2a:8c:76:6f:95:a4:bb:c3:19:4f:63:c7:27: 87:05:14:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAvnSQj4P1jtObLqmk9HK/9eImkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA2MTMwOTQ2NDJaFw0yNjA2MTQxMjI5NDJaMDMxMTAvBgNV BAMTKEM3NUNENzIwMUE0NUVBNjMzNzM4QzM0NkJBOEQwNkZCRUM5NDk0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDOsZEg6B4vVsdf79wGW5EODk O774ublPf4OK7UD2prDlNUsImLelCGvllevJRCqJr4/mD2j8eIFhlRELBLfiFW/k zIMy9qPZg1O8zPPwaKSIwF48u9Xw2H0tmcsybS/TVHWai9U6/KPAneu7Ci+p6eC/ SK6i42uNiZx9PBO4y660ga3RhAIrmtWfJa99sauMY9lFR3TCJsd41+u4JUFT2h+8 x+hzI7LpAdFQQhrH8QRJ1NuqM65J3tNMuy1RdChFwKHaSiLBsA9yBKLPAWgxQbC5 utO2lnBdCCO50mX7E3ugfGBX9cIlQrIx7XgKOOYxa2//6XidT6TosaDhVT1BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx1zXIBpF6mM3OMNGuo0G++yUlJUwHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpneNxKq48rJ Fys5Gx3krakOPWpXsZjTcUqTDgFkWkV6D8//YUaheeOg+bO1Qt/MfyQulMVYI5iV 4FO3P3jwewMm/uG7ys2BAfB87wvehpl4Xmsmlmpa8iIdk8ilQVwoG255b7VuuQc9 cYOi5HS/Ogq5qm6H9FPouJfXPD0jalDxZ/gOT+mEgH1dYJnFZ2S6V/gsPr8k8Say 4dB1RtBjucwtFBpxAbeDozTx0R3LBAX+RUg1jjyStivSYrx8t1FROUjM1XTwmCwx S2BY1dbAIEvf7k/rcd8NeFQP6aVrOMaPQ9UExIHUSfISlMzOyk0qjHZvlaS7wxlP Y8cnhwUUWA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:31:02 2026 by rpki-client