$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: H/DVPVTRq4lIHkeGdmGi8MlznxLbCOM1LM4+45WC6yE= Subject key identifier: C7:4F:AB:57:DE:34:67:20:40:EE:57:C8:C8:2A:78:A0:07:9A:73:8A Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 6BD6CF17C4CEEF01E6E2821E0A927FBE3CA10AEC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 11 Signing time: Sat 13 Jun 2026 13:16:49 +0000 Manifest this update: Sat 13 Jun 2026 13:11:49 +0000 Manifest next update: Sun 14 Jun 2026 15:23:49 +0000 Files and hashes: 1: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 2: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 3: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 4: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 5: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 6: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 7: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: qMMY2T87fKkCuFBoR8Wt3LxEktfBkmfCphHrV9/rSeQ=) 8: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d6:cf:17:c4:ce:ef:01:e6:e2:82:1e:0a:92:7f:be:3c:a1:0a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Jun 13 13:11:49 2026 GMT Not After : Jun 14 15:23:49 2026 GMT Subject: CN=C74FAB57DE34672040EE57C8C82A78A0079A738A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:3d:5c:c6:49:44:4d:6b:f3:95:c1:9d:59: 4a:11:17:fe:0d:9e:5d:90:44:fa:28:64:a6:3b:cb: 9d:e8:fb:4e:a0:65:04:3f:67:20:b2:32:2f:cf:c4: 28:4c:b8:8d:69:68:1e:3c:e9:d9:47:13:75:7c:8a: 78:88:02:fa:ac:6f:0f:e8:29:a9:c9:b7:f9:fe:32: c5:d4:4c:50:0b:c5:93:1a:9e:ec:90:68:22:6a:7a: ac:19:a5:39:d7:cb:a3:08:d1:5e:b4:51:cb:17:0c: 38:35:b8:b8:22:59:27:86:a9:95:c5:d7:4f:9e:3a: 4b:d9:4d:f6:fa:6c:78:09:be:78:36:55:2c:75:27: 24:a6:2a:4a:e1:4d:8f:22:b2:b8:a2:7d:39:07:a2: 64:90:36:d3:e5:cd:ae:09:ef:49:a6:70:41:82:d4: 73:9f:f5:9b:f1:ab:cc:6b:2e:15:7a:69:4e:4c:80: bd:9b:f4:a6:34:1a:1e:fa:87:31:71:3c:62:02:39: 6e:48:41:07:01:f9:3e:81:f3:4f:00:a5:7b:f8:f6: ee:c1:e9:e8:25:83:75:b1:e7:6a:9a:27:d4:39:05: 2d:87:20:9a:ed:bc:68:68:17:bc:59:0f:22:89:44: 8e:42:a0:e0:9d:7b:39:82:75:8d:ab:3d:7b:94:15: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:AB:57:DE:34:67:20:40:EE:57:C8:C8:2A:78:A0:07:9A:73:8A X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:18:0e:2b:16:ad:b7:9e:f4:fe:5a:d3:6f:03:b4:9a:1c:df: cb:56:c1:a6:c0:6c:e2:1f:f4:88:7a:6c:a0:ef:8f:2a:60:6f: 32:39:1d:a1:fb:f6:a6:58:73:c8:83:24:67:89:d5:d2:9f:ba: 6a:33:99:cc:ba:58:c0:6a:de:15:6b:63:e8:4a:fc:ff:0a:09: d3:84:81:d9:14:ae:32:9e:78:5c:39:04:cb:3b:74:35:5e:2f: bb:65:de:52:9a:c1:87:11:f5:45:db:3e:3a:5e:55:17:c2:39: 55:28:9f:16:86:74:b2:03:f8:aa:de:58:95:ae:3d:0a:ac:e8: 3d:01:b9:93:09:7a:ba:3b:ba:03:fa:ec:dd:ee:f4:65:3a:fb: bb:71:7a:6d:2b:31:6f:20:5c:14:24:3c:a9:02:3c:03:e3:42: 29:fa:e8:0c:94:a7:d7:85:9e:d9:cd:9c:a9:07:e7:5f:8a:46: ff:d8:e3:aa:ad:94:4f:60:b4:fe:59:10:d7:9d:a9:53:20:93: 8d:d5:f3:e7:b7:0a:f1:52:0d:dd:d6:56:b7:1a:8e:45:be:f7: d5:90:0c:d4:53:78:bb:1d:60:36:5d:aa:b8:f7:5f:42:33:03: 4f:f3:3e:dc:8e:20:c9:78:8c:16:f2:01:d7:fb:10:2f:89:70: 37:7e:fb:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa9bPF8TO7wHm4oIeCpJ/vjyhCuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA2MTMxMzExNDlaFw0yNjA2MTQxNTIzNDlaMDMxMTAvBgNV BAMTKEM3NEZBQjU3REUzNDY3MjA0MEVFNTdDOEM4MkE3OEEwMDc5QTczOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxz1cxklETWvzlcGdWUoRF/4N nl2QRPooZKY7y53o+06gZQQ/ZyCyMi/PxChMuI1paB486dlHE3V8iniIAvqsbw/o KanJt/n+MsXUTFALxZManuyQaCJqeqwZpTnXy6MI0V60UcsXDDg1uLgiWSeGqZXF 10+eOkvZTfb6bHgJvng2VSx1JySmKkrhTY8isriifTkHomSQNtPlza4J70mmcEGC 1HOf9Zvxq8xrLhV6aU5MgL2b9KY0Gh76hzFxPGICOW5IQQcB+T6B808ApXv49u7B 6eglg3Wx52qaJ9Q5BS2HIJrtvGhoF7xZDyKJRI5CoOCdezmCdY2rPXuUFWNLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx0+rV940ZyBA7lfIyCp4oAeac4owHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRgOKxatt570 /lrTbwO0mhzfy1bBpsBs4h/0iHpsoO+PKmBvMjkdofv2plhzyIMkZ4nV0p+6ajOZ zLpYwGreFWtj6Er8/woJ04SB2RSuMp54XDkEyzt0NV4vu2XeUprBhxH1Rds+Ol5V F8I5VSifFoZ0sgP4qt5Yla49CqzoPQG5kwl6uju6A/rs3e70ZTr7u3F6bSsxbyBc FCQ8qQI8A+NCKfroDJSn14We2c2cqQfnX4pG/9jjqq2UT2C0/lkQ152pUyCTjdXz 57cK8VIN3dZWtxqORb731ZAM1FN4ux1gNl2quPdfQjMDT/M+3I4gyXiMFvIB1/sQ L4lwN377mQ== -----END CERTIFICATE-----Generated at Sun Jun 14 03:35:23 2026 by rpki-client