$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: 2OVPQDzNeJrV9gYtNuDm2aSetT1nGdIcXRbWDWiNfIw= Subject key identifier: 85:CF:F3:9B:AC:E2:CC:F1:3F:3D:84:E4:32:08:9C:11:86:CC:43:84 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 3EE583DC36783FDB0379993818E31E237D35F81A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 1F Signing time: Sat 13 Jun 2026 09:16:39 +0000 Manifest this update: Sat 13 Jun 2026 09:11:39 +0000 Manifest next update: Sun 14 Jun 2026 12:42:39 +0000 Files and hashes: 1: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 2: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 3: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 4: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 5: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 6: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 7: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 8: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 9: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 10: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 11: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 12: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 13: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 14: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 15: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: Fd8nQv3o46nMmUSd4Xiq9sgzHXmnUOQP3Smbc9+RS7Q=) 16: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 17: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 18: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 19: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 20: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 21: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 22: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 23: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 24: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e5:83:dc:36:78:3f:db:03:79:99:38:18:e3:1e:23:7d:35:f8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jun 13 09:11:39 2026 GMT Not After : Jun 14 12:42:39 2026 GMT Subject: CN=85CFF39BACE2CCF13F3D84E432089C1186CC4384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:14:41:50:67:31:11:eb:12:aa:54:06:d5: cb:03:7c:6a:6f:96:dd:aa:38:90:2b:6a:74:7d:b4: cd:b3:47:27:68:aa:6c:57:d8:a0:84:9b:c0:31:40: 9c:dc:dd:92:f0:ae:c1:b4:e4:a8:3a:d8:b2:3c:4d: 6c:91:d2:43:a8:a8:b4:d6:83:21:01:df:38:25:3e: 23:6b:9e:a3:6a:ae:d9:26:78:bd:37:88:7d:15:6f: 79:e5:e2:e9:0b:c1:fc:6d:cd:5c:d2:f8:ce:75:ea: 42:4a:be:c4:41:a3:3a:8f:51:ce:ad:37:7d:95:84: f4:79:73:b4:33:93:f6:6a:14:e4:11:e3:e0:12:6e: 58:3e:83:b2:a7:d8:c5:44:c4:fe:ea:d2:f9:76:5f: 08:e6:fc:a2:30:c1:99:1c:33:a9:19:03:e4:6e:dc: 38:12:2a:75:77:2c:74:81:4d:c7:f5:0e:81:93:75: 92:9a:06:e1:7a:c5:bf:3d:0c:14:f0:49:e5:71:7d: f6:e3:71:a9:f5:35:71:04:88:f8:7a:95:39:58:c4: 80:72:cc:24:10:b3:4e:62:59:66:a1:0d:28:3a:bb: cf:c3:be:39:89:b7:3d:71:c4:d2:d5:5c:47:d3:e9: 7b:a9:7f:9f:80:76:eb:0b:44:ad:45:a6:58:16:1a: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:F3:9B:AC:E2:CC:F1:3F:3D:84:E4:32:08:9C:11:86:CC:43:84 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:64:a5:53:ab:21:19:de:62:8c:aa:c1:13:95:76:50:1f:3c: b4:c2:b1:81:d3:4a:0e:28:be:04:0d:95:df:a4:90:e9:bd:f5: 43:6a:ed:a3:1a:da:06:f0:af:56:8c:eb:25:4d:93:6c:cc:18: 55:3d:37:22:5a:01:14:1f:89:01:64:b5:b2:63:18:27:06:4d: c1:3c:68:66:49:02:90:c5:f2:17:6b:80:5a:97:9b:b8:42:6e: 67:38:03:8d:2a:10:84:81:d3:69:66:0c:fc:7f:d3:46:14:39: 08:f1:54:6c:29:e6:a5:72:3f:bb:c3:41:10:40:6f:28:01:3f: 56:89:7d:77:b6:10:fe:51:82:fa:38:6c:8f:09:66:51:7c:ed: c0:d0:e3:7b:58:54:1a:b3:0d:e2:9f:38:2b:a4:a1:5e:21:f8: ac:a2:c4:ee:de:1e:02:37:11:89:2a:fc:85:ba:99:e9:6e:d8: 8d:49:ad:34:e7:26:88:a9:12:ce:08:21:79:3f:27:07:4c:cc: 86:90:a6:42:c2:dc:ae:e9:c7:bf:d2:74:dc:84:7d:ac:e5:7c: 0c:43:b5:50:c6:c6:9e:03:cd:9b:84:c1:34:dd:31:40:8f:aa: 33:e1:b5:8f:86:60:7f:df:39:ad:87:ed:83:74:a6:0a:ad:47: 16:6d:ff:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPuWD3DZ4P9sDeZk4GOMeI301+BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA2MTMwOTExMzlaFw0yNjA2MTQxMjQyMzlaMDMxMTAvBgNV BAMTKDg1Q0ZGMzlCQUNFMkNDRjEzRjNEODRFNDMyMDg5QzExODZDQzQzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQhRBUGcxEesSqlQG1csDfGpv lt2qOJAranR9tM2zRydoqmxX2KCEm8AxQJzc3ZLwrsG05Kg62LI8TWyR0kOoqLTW gyEB3zglPiNrnqNqrtkmeL03iH0Vb3nl4ukLwfxtzVzS+M516kJKvsRBozqPUc6t N32VhPR5c7Qzk/ZqFOQR4+ASblg+g7Kn2MVExP7q0vl2Xwjm/KIwwZkcM6kZA+Ru 3DgSKnV3LHSBTcf1DoGTdZKaBuF6xb89DBTwSeVxffbjcan1NXEEiPh6lTlYxIBy zCQQs05iWWahDSg6u8/DvjmJtz1xxNLVXEfT6Xupf5+AdusLRK1FplgWGufBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhc/zm6zizPE/PYTkMgicEYbMQ4QwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2SlU6shGd5i jKrBE5V2UB88tMKxgdNKDii+BA2V36SQ6b31Q2rtoxraBvCvVozrJU2TbMwYVT03 IloBFB+JAWS1smMYJwZNwTxoZkkCkMXyF2uAWpebuEJuZzgDjSoQhIHTaWYM/H/T RhQ5CPFUbCnmpXI/u8NBEEBvKAE/Vol9d7YQ/lGC+jhsjwlmUXztwNDje1hUGrMN 4p84K6ShXiH4rKLE7t4eAjcRiSr8hbqZ6W7YjUmtNOcmiKkSzggheT8nB0zMhpCm QsLcrunHv9J03IR9rOV8DEO1UMbGngPNm4TBNN0xQI+qM+G1j4Zgf985rYftg3Sm Cq1HFm3/mQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:40:17 2026 by rpki-client