$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: E9MLqUKRzWx/36cq9lPlaCX58j0AH7eYve64Sh1A+uM= Subject key identifier: D1:E4:77:24:28:A1:EC:BE:A6:47:E2:A1:C8:2A:3D:8C:48:A9:0E:55 Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 21AFEA5023DE5FCD7C45A4AE3388677BE45190DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 11 Signing time: Sat 13 Jun 2026 09:11:39 +0000 Manifest this update: Sat 13 Jun 2026 09:06:39 +0000 Manifest next update: Sun 14 Jun 2026 11:48:39 +0000 Files and hashes: 1: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 2: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: Sjyp2928/s0l3SNEV89e1YMgHoIM6hy5C3aogz3SvWM=) 3: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 4: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 5: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 6: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) 7: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 8: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 9: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 10: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) 11: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 12: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 13: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 14: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 15: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 16: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 17: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 18: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 19: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 20: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 21: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 22: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 23: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:af:ea:50:23:de:5f:cd:7c:45:a4:ae:33:88:67:7b:e4:51:90:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Jun 13 09:06:39 2026 GMT Not After : Jun 14 11:48:39 2026 GMT Subject: CN=D1E4772428A1ECBEA647E2A1C82A3D8C48A90E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:a3:6c:40:6a:d3:44:b8:63:24:36:a7:26: ec:92:7d:b1:83:c4:41:12:53:6c:9b:cf:fb:b4:1d: 85:8e:2a:42:34:d5:a2:eb:d5:f6:b2:bc:cb:15:d5: b9:f8:e4:8a:e0:68:7a:05:8c:89:b6:5c:a2:7d:d9: 0a:eb:8c:98:ca:f2:e7:46:ae:93:f5:b6:02:fd:72: 3f:42:38:7f:86:17:87:58:cc:50:58:b8:b7:2c:47: 4c:ee:f8:0d:92:9f:68:fc:f1:b0:85:14:9f:58:a0: 5e:69:32:8b:bb:3a:c6:ea:65:1c:fb:45:98:22:16: 64:9c:0c:f5:e8:68:7d:ac:78:d1:c4:c0:97:d6:a3: 01:60:ec:19:ad:7c:5d:d1:f7:20:ec:39:fc:4b:3c: ee:33:53:a2:a6:07:15:9b:b7:4a:6c:24:b2:d7:24: 17:f3:07:91:c8:c0:94:a3:2d:63:e8:70:fd:77:a2: 1c:2a:e4:ba:4a:86:99:94:a6:65:38:1c:fa:ea:05: 78:fa:25:74:0d:db:4e:96:f7:99:a7:42:b8:c3:95: 94:02:b8:ed:9d:88:75:8d:3a:8e:8f:ed:ee:24:c2: 6e:24:90:c1:4d:be:5f:4a:58:a2:21:9d:cc:86:82: 66:da:41:f6:5d:b9:85:cc:3b:ce:56:73:e3:e3:f9: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E4:77:24:28:A1:EC:BE:A6:47:E2:A1:C8:2A:3D:8C:48:A9:0E:55 X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:14:e8:35:c1:3a:2a:ff:36:99:67:03:dc:37:34:81:03: 0a:20:42:d2:b1:6c:c5:b2:51:8c:e5:b9:19:46:59:11:f9:ad: 7b:78:24:82:a1:1a:29:dc:e2:31:f0:1b:64:94:44:dc:4f:7b: e1:75:7f:57:b4:31:1f:75:75:ed:45:f3:6b:12:83:54:75:ca: 6d:90:e0:a7:9e:d1:e4:0b:ab:55:53:5e:2c:76:5d:ef:21:50: 48:3a:6c:13:07:8f:71:7a:df:31:70:9f:e2:d0:2e:b2:1a:99: 1d:5c:05:f6:5a:d4:36:61:e1:0b:36:0c:15:67:60:40:e2:e0: 46:09:5f:f2:5e:51:60:d7:8f:2c:50:15:01:4e:1e:63:b6:98: 06:44:b4:f2:4d:de:f5:81:96:50:79:88:2f:e6:28:30:8f:8b: 94:9f:6a:d0:72:ef:11:53:ed:84:ff:3a:c2:20:ce:47:cc:d1: 59:75:ec:c1:81:d8:7c:c8:28:74:6f:0e:ed:f5:84:28:fa:83: 9e:f5:4f:ef:05:db:12:91:a3:ba:1a:d0:53:26:68:4b:5d:ae: 67:98:76:f6:7a:74:fb:6d:cd:16:2f:80:75:c1:3b:57:d8:e8: 4f:b2:0e:4a:a1:c2:7b:b9:c1:17:12:3e:fd:64:ba:01:86:0c: 08:95:9d:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIa/qUCPeX818RaSuM4hne+RRkNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA2MTMwOTA2MzlaFw0yNjA2MTQxMTQ4MzlaMDMxMTAvBgNV BAMTKEQxRTQ3NzI0MjhBMUVDQkVBNjQ3RTJBMUM4MkEzRDhDNDhBOTBFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kqNsQGrTRLhjJDanJuySfbGD xEESU2ybz/u0HYWOKkI01aLr1fayvMsV1bn45IrgaHoFjIm2XKJ92QrrjJjK8udG rpP1tgL9cj9COH+GF4dYzFBYuLcsR0zu+A2Sn2j88bCFFJ9YoF5pMou7OsbqZRz7 RZgiFmScDPXoaH2seNHEwJfWowFg7BmtfF3R9yDsOfxLPO4zU6KmBxWbt0psJLLX JBfzB5HIwJSjLWPocP13ohwq5LpKhpmUpmU4HPrqBXj6JXQN206W95mnQrjDlZQC uO2diHWNOo6P7e4kwm4kkMFNvl9KWKIhncyGgmbaQfZduYXMO85Wc+Pj+YRNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0eR3JCih7L6mR+KhyCo9jEipDlUwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff4U6DXBOir/ NplnA9w3NIEDCiBC0rFsxbJRjOW5GUZZEfmte3gkgqEaKdziMfAbZJRE3E974XV/ V7QxH3V17UXzaxKDVHXKbZDgp57R5AurVVNeLHZd7yFQSDpsEwePcXrfMXCf4tAu shqZHVwF9lrUNmHhCzYMFWdgQOLgRglf8l5RYNePLFAVAU4eY7aYBkS08k3e9YGW UHmIL+YoMI+LlJ9q0HLvEVPthP86wiDOR8zRWXXswYHYfMgodG8O7fWEKPqDnvVP 7wXbEpGjuhrQUyZoS12uZ5h29np0+23NFi+AdcE7V9joT7IOSqHCe7nBFxI+/WS6 AYYMCJWdYg== -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:45 2026 by rpki-client