$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: S9JQuuNcPDCa+mgCyJDUtVCJtu6osrHuKvPdQ5U1t/Y= Subject key identifier: 0A:72:04:44:51:26:11:93:DF:AE:DD:83:CB:95:68:DF:0C:87:FA:59 Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 034769D2F9F8B3D43DDB76A031B375BA2274CCE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 17 Signing time: Sat 13 Jun 2026 11:06:45 +0000 Manifest this update: Sat 13 Jun 2026 11:01:45 +0000 Manifest next update: Sun 14 Jun 2026 11:42:45 +0000 Files and hashes: 1: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) 2: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) 3: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: YR4zKv6gYz4GJzOgO6tC7RmjD9WmIOpr5mJVUHO8624=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:47:69:d2:f9:f8:b3:d4:3d:db:76:a0:31:b3:75:ba:22:74:cc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Jun 13 11:01:45 2026 GMT Not After : Jun 14 11:42:45 2026 GMT Subject: CN=0A72044451261193DFAEDD83CB9568DF0C87FA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:4c:60:2f:59:73:53:3b:61:99:14:33:a7: e4:13:94:21:e0:48:d5:c9:94:24:6d:e5:33:33:b7: 4f:a4:74:b3:31:38:b8:52:70:40:46:6f:18:19:ad: bf:b6:fb:5f:f7:46:b5:5f:37:ba:1f:f4:08:5b:b5: 6a:d4:8d:da:d3:d0:71:b0:1b:ee:42:03:1e:8d:55: 3f:6d:82:bf:06:1c:88:81:99:1e:56:fd:77:c9:99: 93:3a:7d:0d:21:1e:f0:10:21:75:02:fa:10:9b:ed: f2:a1:c0:08:cc:50:1d:6d:67:30:47:4b:2c:62:3a: 3b:cc:bd:1d:ce:96:d0:63:f9:6d:eb:c9:bf:3d:59: 1a:c7:6a:66:88:51:c2:3f:68:1b:9a:ef:6c:5a:ab: ef:ca:ff:08:75:a9:dd:7f:e4:be:9c:99:be:0d:cd: 4b:f8:02:0f:f3:9e:a1:f7:2b:d1:3d:44:88:bd:f0: 47:05:63:74:60:08:80:50:db:4a:3c:91:a8:83:63: cf:a6:7a:df:6b:25:ce:05:48:a5:26:a6:87:cc:d0: c3:80:d6:84:15:ec:ee:ee:73:00:fb:b2:73:0d:48: f4:42:d2:65:9b:d7:92:1f:8b:7a:64:63:3e:06:8d: cb:93:0d:bf:69:82:ee:2a:b0:52:2b:eb:e1:bd:e0: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:04:44:51:26:11:93:DF:AE:DD:83:CB:95:68:DF:0C:87:FA:59 X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:02:e4:7e:a4:82:45:22:9c:b5:b2:a5:07:62:57:30:03:1d: ff:67:22:60:80:76:50:ce:85:e6:37:0e:b4:01:19:09:f9:67: 7c:cc:79:97:46:ce:95:86:f9:73:f7:b7:bc:6d:81:5b:76:ab: 59:01:2f:db:63:c2:80:a1:d8:47:8e:2c:ed:30:8d:4d:f7:3a: 4b:80:bc:da:3a:e9:56:e0:79:57:06:07:4a:fe:ad:68:93:c4: de:e7:82:4a:51:23:f5:21:48:91:ea:83:68:00:73:d6:11:54: f0:0e:7a:74:38:e4:ee:ab:e1:80:8a:59:2e:42:25:36:81:2d: 95:b6:b1:84:21:44:8f:e8:22:c8:8b:a3:ac:66:b0:0e:60:4b: 9f:86:8d:a9:50:2a:fb:d9:4a:b5:df:35:9e:21:0f:85:19:38: fb:67:b5:df:75:1e:06:4a:d8:4b:78:c3:7d:e9:cf:77:0b:d6: 36:d6:85:f0:e5:0e:83:10:60:7f:8f:99:26:91:cf:49:4f:d8: 52:ba:78:6f:41:4a:78:d1:79:03:d4:56:a2:5d:26:c2:0a:16: c1:03:a0:67:ae:7c:d2:be:dd:4b:3b:b4:e9:6c:50:7a:a2:c5: 5a:b8:c8:5b:cb:5a:22:d3:db:a7:50:7d:04:5f:5e:e4:a2:b9: 1b:ee:ad:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA0dp0vn4s9Q923agMbN1uiJ0zOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA2MTMxMTAxNDVaFw0yNjA2MTQxMTQyNDVaMDMxMTAvBgNV BAMTKDBBNzIwNDQ0NTEyNjExOTNERkFFREQ4M0NCOTU2OERGMEM4N0ZBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUekxgL1lzUzthmRQzp+QTlCHg SNXJlCRt5TMzt0+kdLMxOLhScEBGbxgZrb+2+1/3RrVfN7of9AhbtWrUjdrT0HGw G+5CAx6NVT9tgr8GHIiBmR5W/XfJmZM6fQ0hHvAQIXUC+hCb7fKhwAjMUB1tZzBH SyxiOjvMvR3OltBj+W3ryb89WRrHamaIUcI/aBua72xaq+/K/wh1qd1/5L6cmb4N zUv4Ag/znqH3K9E9RIi98EcFY3RgCIBQ20o8kaiDY8+met9rJc4FSKUmpofM0MOA 1oQV7O7ucwD7snMNSPRC0mWb15Ifi3pkYz4GjcuTDb9pgu4qsFIr6+G94FnFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCnIERFEmEZPfrt2Dy5Vo3wyH+lkwHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPALkfqSCRSKc tbKlB2JXMAMd/2ciYIB2UM6F5jcOtAEZCflnfMx5l0bOlYb5c/e3vG2BW3arWQEv 22PCgKHYR44s7TCNTfc6S4C82jrpVuB5VwYHSv6taJPE3ueCSlEj9SFIkeqDaABz 1hFU8A56dDjk7qvhgIpZLkIlNoEtlbaxhCFEj+giyIujrGawDmBLn4aNqVAq+9lK td81niEPhRk4+2e133UeBkrYS3jDfenPdwvWNtaF8OUOgxBgf4+ZJpHPSU/YUrp4 b0FKeNF5A9RWol0mwgoWwQOgZ6580r7dSzu06WxQeqLFWrjIW8taItPbp1B9BF9e 5KK5G+6tQw== -----END CERTIFICATE-----Generated at Sun Jun 14 04:48:50 2026 by rpki-client