$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: ZCS5jdAkB0h3ABGr4xSBrluzCvpKVOfyt1IbFRCFxGU= Subject key identifier: 35:25:AD:40:19:8C:A9:89:68:A7:2C:8C:33:28:99:17:BC:27:69:7A Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 313601808A54D14E9506CD26B3A8705F4250A91E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 12 Signing time: Sat 13 Jun 2026 19:47:12 +0000 Manifest this update: Sat 13 Jun 2026 19:42:12 +0000 Manifest next update: Sun 14 Jun 2026 22:44:12 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: IfqwTuB8H14hB0ASiombHHDUDKDeRSUccGHr3xT9Tnw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:36:01:80:8a:54:d1:4e:95:06:cd:26:b3:a8:70:5f:42:50:a9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Jun 13 19:42:12 2026 GMT Not After : Jun 14 22:44:12 2026 GMT Subject: CN=3525AD40198CA98968A72C8C33289917BC27697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:f9:b2:a9:f4:13:bb:82:63:0e:ce:fc:c7: 33:aa:6b:03:39:28:ae:c8:6f:d7:79:49:89:84:27: 46:e6:47:8e:ab:93:6c:e0:eb:a0:ea:6a:a5:b9:a0: 22:2a:cb:87:18:66:de:cf:b2:22:1e:b7:2a:49:f3: c5:be:87:4c:ce:ad:86:ac:ea:9f:1c:09:17:00:03: 20:ea:bc:4c:3f:30:cb:bf:a5:ed:8e:6e:40:62:8b: 0c:e8:f9:f1:b2:59:88:1e:13:76:95:c5:e8:df:18: e4:da:a7:d0:df:bb:90:91:c3:3a:57:41:f5:02:af: 5c:86:fb:bd:7a:76:e0:3d:c9:b3:d5:8d:d4:03:68: 83:60:85:ef:c2:f1:df:72:05:61:ba:88:8c:30:46: 1f:c2:c1:bf:28:11:a9:00:7e:25:66:5e:a2:34:14: b7:ae:d5:4b:cd:d7:75:69:8c:5d:73:56:db:e8:2a: e2:46:15:ed:84:d6:7f:00:11:9e:81:15:22:f6:5c: 34:f1:96:a9:84:87:6e:8c:0b:b4:c5:c2:e0:3f:59: 44:0e:e0:02:ae:dd:86:72:99:d6:23:de:af:af:bf: 3f:bc:50:17:da:14:8f:90:66:09:18:d2:96:c6:13: 94:15:26:23:b6:c5:df:63:cb:84:bb:49:49:1d:7a: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:25:AD:40:19:8C:A9:89:68:A7:2C:8C:33:28:99:17:BC:27:69:7A X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a6:08:fd:1e:66:ba:f8:14:31:b2:d3:2e:75:b2:29:80:f0: c7:c6:78:46:86:e2:32:54:61:de:48:84:d6:1d:95:0b:8c:d4: 8c:e3:38:90:bd:c2:f1:2e:3a:9f:88:3e:ad:da:24:15:b6:f8: 1f:70:0f:19:2f:b3:76:19:fc:9e:be:3a:a6:96:8b:db:6d:ea: ec:09:31:f2:45:b0:87:14:d7:87:34:3e:ac:46:5f:13:39:3b: 84:1d:16:77:43:ca:49:41:44:fb:aa:ba:22:c7:8f:2d:6d:aa: 35:d9:92:6f:98:09:f6:18:67:42:49:98:66:b8:d5:83:72:0a: 29:31:dd:bd:62:87:39:dc:7d:58:a4:60:9f:e7:a3:ed:0f:8d: 47:fd:c0:19:b6:3e:54:d1:d0:b1:db:18:3b:ba:b6:a8:bc:e1: 83:0b:71:b4:0c:4f:07:78:67:f7:00:01:ea:06:ee:1f:20:b2: be:0b:4e:7e:b3:73:d2:c2:11:ab:a9:49:3f:86:26:3b:fd:53: b9:fe:10:fc:ed:26:3f:1d:9f:07:89:e8:73:ac:73:bd:fa:fd: 45:cf:a5:ca:6a:87:56:aa:70:96:e0:9c:32:0e:e7:ab:d2:eb: ae:71:65:bb:78:36:63:ca:37:16:a3:ee:b0:d2:ca:0b:c8:03: 93:48:7d:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMTYBgIpU0U6VBs0ms6hwX0JQqR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjA2MTMxOTQyMTJaFw0yNjA2MTQyMjQ0MTJaMDMxMTAvBgNV BAMTKDM1MjVBRDQwMTk4Q0E5ODk2OEE3MkM4QzMzMjg5OTE3QkMyNzY5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2vmyqfQTu4JjDs78xzOqawM5 KK7Ib9d5SYmEJ0bmR46rk2zg66DqaqW5oCIqy4cYZt7PsiIetypJ88W+h0zOrYas 6p8cCRcAAyDqvEw/MMu/pe2ObkBiiwzo+fGyWYgeE3aVxejfGOTap9Dfu5CRwzpX QfUCr1yG+716duA9ybPVjdQDaINghe/C8d9yBWG6iIwwRh/Cwb8oEakAfiVmXqI0 FLeu1UvN13VpjF1zVtvoKuJGFe2E1n8AEZ6BFSL2XDTxlqmEh26MC7TFwuA/WUQO 4AKu3YZymdYj3q+vvz+8UBfaFI+QZgkY0pbGE5QVJiO2xd9jy4S7SUkderurAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNSWtQBmMqYlopyyMMyiZF7wnaXowHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKYI/R5muvgU MbLTLnWyKYDwx8Z4RobiMlRh3kiE1h2VC4zUjOM4kL3C8S46n4g+rdokFbb4H3AP GS+zdhn8nr46ppaL223q7Akx8kWwhxTXhzQ+rEZfEzk7hB0Wd0PKSUFE+6q6IseP LW2qNdmSb5gJ9hhnQkmYZrjVg3IKKTHdvWKHOdx9WKRgn+ej7Q+NR/3AGbY+VNHQ sdsYO7q2qLzhgwtxtAxPB3hn9wAB6gbuHyCyvgtOfrNz0sIRq6lJP4YmO/1Tuf4Q /O0mPx2fB4noc6xzvfr9Rc+lymqHVqpwluCcMg7nq9LrrnFlu3g2Y8o3FqPusNLK C8gDk0h9fQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:00 2026 by rpki-client