$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: LfOuVb+tUaMS4JpvCYH4F9AykHc878FQxqH/fy74UwE= Subject key identifier: 0A:F5:0C:50:FC:81:14:79:6B:92:79:51:EB:EF:71:73:EB:E4:54:EE Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: 7E6E6981D71DBED95A4C55E5092982EEFB25CB5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 10 Signing time: Sat 13 Jun 2026 18:12:04 +0000 Manifest this update: Sat 13 Jun 2026 18:07:04 +0000 Manifest next update: Sun 14 Jun 2026 21:52:04 +0000 Files and hashes: 1: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: W09xQa5QgamxVubeHCtM1WYYy5wYhfxch6xu/14q9EA=) 2: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6e:69:81:d7:1d:be:d9:5a:4c:55:e5:09:29:82:ee:fb:25:cb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Jun 13 18:07:04 2026 GMT Not After : Jun 14 21:52:04 2026 GMT Subject: CN=0AF50C50FC8114796B927951EBEF7173EBE454EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:6d:d1:87:5e:0f:ef:43:9b:a1:09:62:2d: 6a:65:45:75:40:f7:fb:05:12:7a:59:69:5f:b3:3e: f7:da:c1:a4:55:1c:97:9f:b1:89:5b:e9:5f:5f:01: 54:e9:ef:82:80:fd:c4:1d:aa:8e:af:bd:cd:a8:29: 54:1e:25:57:85:ca:38:85:4f:04:d4:f1:be:2f:d1: d5:83:18:72:c4:ac:4e:6b:8f:40:9e:de:aa:99:b5: d5:0a:74:f4:f4:54:92:cd:58:9c:30:36:4d:f9:6c: 1e:06:8c:b0:69:bd:1e:19:87:dc:f8:81:f8:b8:7e: 73:ed:7a:b9:de:2f:7f:79:ac:9c:43:b6:2b:03:0c: 00:bd:49:b0:f9:11:44:ff:70:29:86:82:04:2d:e2: 71:85:f0:e5:78:b6:87:bc:74:08:7e:31:47:cf:7d: 14:36:b3:60:9d:64:dc:b1:8b:b4:bd:6d:37:a0:c1: 95:fa:27:1f:ff:95:93:e6:86:aa:e2:6f:84:f9:e2: d9:b5:91:a3:f3:d7:68:23:1b:65:32:9b:14:3a:ee: 86:90:b4:84:1f:c2:cd:48:2b:59:34:60:f2:92:0b: cc:56:4e:61:94:38:23:98:df:9f:06:e8:cb:3f:96: 5c:68:d7:9f:c8:a3:16:e0:17:cc:9e:0d:02:b5:08: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F5:0C:50:FC:81:14:79:6B:92:79:51:EB:EF:71:73:EB:E4:54:EE X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:22:3f:46:cc:8a:d1:18:4f:ec:a1:83:ce:20:0a:1c:bb:96: 29:46:99:4f:7c:d6:42:c9:2e:d7:37:9c:83:df:98:e5:c8:c9: 4b:be:97:08:24:72:8f:7b:c0:38:d0:21:e7:1a:df:56:38:d0: 4f:a5:77:ec:45:27:53:66:ad:2b:b8:45:6e:db:0e:d8:ce:0e: f9:97:6c:33:07:74:b5:84:13:13:ab:56:50:09:8d:b2:1c:93: 89:65:34:a3:8f:8e:98:43:10:e2:d2:88:a0:4a:1a:11:6a:15: 71:a4:f4:7e:ff:f7:72:19:3f:30:2f:db:b2:77:7c:fd:a8:e5: cd:11:2d:cb:f2:e9:fb:c0:5c:a1:ec:13:5f:97:d2:40:79:dd: 5e:d8:cb:45:29:c2:77:73:ee:e7:80:53:5f:e4:37:bf:1f:6c: 66:b8:7f:65:b3:25:c8:08:86:e8:dd:a5:66:10:2e:e5:72:d9: 99:0c:d0:1b:c6:fb:67:12:d5:c6:a7:c6:61:46:d8:d0:58:be: ee:a0:6c:04:f3:5d:d7:d7:44:f7:f7:df:71:a8:d6:41:e2:b9: 47:81:03:cb:d1:af:a7:e5:4e:e8:13:48:bd:db:2d:04:5a:63: 3f:4c:ff:52:c5:d1:5c:16:75:59:2e:b7:9f:44:c9:20:17:ef: d6:a2:65:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfm5pgdcdvtlaTFXlCSmC7vsly18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjA2MTMxODA3MDRaFw0yNjA2MTQyMTUyMDRaMDMxMTAvBgNV BAMTKDBBRjUwQzUwRkM4MTE0Nzk2QjkyNzk1MUVCRUY3MTczRUJFNDU0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z23Rh14P70OboQliLWplRXVA 9/sFEnpZaV+zPvfawaRVHJefsYlb6V9fAVTp74KA/cQdqo6vvc2oKVQeJVeFyjiF TwTU8b4v0dWDGHLErE5rj0Ce3qqZtdUKdPT0VJLNWJwwNk35bB4GjLBpvR4Zh9z4 gfi4fnPterneL395rJxDtisDDAC9SbD5EUT/cCmGggQt4nGF8OV4toe8dAh+MUfP fRQ2s2CdZNyxi7S9bTegwZX6Jx//lZPmhqrib4T54tm1kaPz12gjG2UymxQ67oaQ tIQfws1IK1k0YPKSC8xWTmGUOCOY358G6Ms/llxo15/IoxbgF8yeDQK1CCvXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCvUMUPyBFHlrknlR6+9xc+vkVO4wHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCI/RsyK0RhP 7KGDziAKHLuWKUaZT3zWQsku1zecg9+Y5cjJS76XCCRyj3vAONAh5xrfVjjQT6V3 7EUnU2atK7hFbtsO2M4O+ZdsMwd0tYQTE6tWUAmNshyTiWU0o4+OmEMQ4tKIoEoa EWoVcaT0fv/3chk/MC/bsnd8/ajlzREty/Lp+8BcoewTX5fSQHndXtjLRSnCd3Pu 54BTX+Q3vx9sZrh/ZbMlyAiG6N2lZhAu5XLZmQzQG8b7ZxLVxqfGYUbY0Fi+7qBs BPNd19dE9/ffcajWQeK5R4EDy9Gvp+VO6BNIvdstBFpjP0z/UsXRXBZ1WS63n0TJ IBfv1qJldQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:00 2026 by rpki-client