$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: OZ5TrOYXzP8cNZFQxnxXJHVmGp7lrgTiUzz3TnDKO6Y= Subject key identifier: A7:AA:6F:71:62:1F:7E:CC:C3:E9:76:8B:D9:5D:66:86:4F:B8:8C:46 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 7CCA820FAF6077B59CD2D7B5534663D158E119A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 0F Signing time: Sat 13 Jun 2026 12:51:49 +0000 Manifest this update: Sat 13 Jun 2026 12:46:49 +0000 Manifest next update: Sun 14 Jun 2026 16:39:49 +0000 Files and hashes: 1: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 2: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 3: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 4: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 5: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: 9HRs/LMvAZSzEcoQG7LtFUUStFjeMQWEutAZiLbBbNc=) 6: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 7: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 8: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 9: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ca:82:0f:af:60:77:b5:9c:d2:d7:b5:53:46:63:d1:58:e1:19:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jun 13 12:46:49 2026 GMT Not After : Jun 14 16:39:49 2026 GMT Subject: CN=A7AA6F71621F7ECCC3E9768BD95D66864FB88C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:e8:2e:4f:f7:30:3f:36:2b:a2:68:80:c5: 9a:1e:f0:63:d4:43:6a:19:47:2d:ac:3d:da:f8:97: 75:90:b1:6d:cd:10:d8:5a:ac:87:22:a6:ad:82:96: f7:a3:95:df:0c:ac:7b:ab:2e:1b:2b:c1:79:da:7e: 4f:2b:5e:d5:f1:4a:e1:1e:63:35:3b:0b:2c:18:d9: ed:e9:f8:2c:dc:de:9a:de:2e:b3:5e:67:82:6d:ca: 61:fd:e5:e4:f1:dd:a0:94:9f:bf:09:96:f5:5e:c4: 20:ba:92:d2:46:52:d9:ea:e7:dc:63:e5:11:53:03: ab:96:ae:bc:cf:7d:29:00:ad:99:b1:b5:51:e3:4f: cb:db:77:5d:08:a4:fc:ce:5e:b6:19:89:cc:cc:a4: 6d:cd:36:fc:4c:fb:7e:8c:53:6b:32:5e:48:ba:50: 0f:03:2b:73:20:38:6b:ba:18:8a:55:45:4f:2d:26: f9:c6:66:89:0c:6f:d0:ca:16:8d:97:77:f1:56:56: 2d:f7:d7:53:e2:ba:6b:8b:b3:84:c0:21:d4:40:09: 8b:1e:16:b2:37:cc:12:fd:76:4d:c4:c9:bb:c4:39: d2:3d:6d:3f:87:be:8d:19:21:cb:4f:38:b3:76:df: a5:52:ef:3f:88:84:a0:05:9a:25:cb:b3:57:4c:de: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:6F:71:62:1F:7E:CC:C3:E9:76:8B:D9:5D:66:86:4F:B8:8C:46 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:72:be:41:7e:db:34:b7:62:23:0c:db:3b:3a:52:bb:66:6f: c8:5a:21:5e:5b:63:17:5e:6d:62:75:de:fb:bd:3a:05:de:45: ed:82:1f:e0:13:7a:fa:9b:dc:db:31:34:d6:f4:70:d3:84:16: 54:e0:65:04:f7:eb:32:88:aa:d9:aa:58:18:41:f4:a9:9b:34: d8:9c:5d:90:e0:b7:98:2a:99:3d:a9:d4:0d:ca:29:fe:35:6b: 29:c7:d4:fe:51:0a:84:b1:02:68:8b:5b:37:b6:07:ed:76:75: bd:9e:a6:54:65:f8:b4:09:f4:e3:da:12:57:4e:c6:16:81:0a: be:90:01:dd:f2:36:bd:8f:64:aa:6d:37:66:8d:7b:2c:5e:35: ba:74:3f:09:9f:4a:05:92:3c:bb:fd:bf:2b:18:d4:9b:a8:41: e6:bf:4b:a7:38:55:c3:d6:38:94:e2:bf:57:1c:b8:2c:bd:9b: f7:bb:d4:75:23:bb:48:fe:fd:8e:f6:07:1e:50:5c:2a:fa:03: b4:d8:d3:bc:56:4e:ef:6d:7f:e9:15:0d:32:cc:d5:67:6d:42: fc:91:dc:1d:c3:03:f1:8e:ef:94:2b:7a:d0:9f:63:42:1d:93: 81:39:86:92:a7:3d:0f:d9:53:9d:ea:85:3b:df:25:3e:5d:fd: a4:e2:aa:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfMqCD69gd7Wc0te1U0Zj0VjhGakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA2MTMxMjQ2NDlaFw0yNjA2MTQxNjM5NDlaMDMxMTAvBgNV BAMTKEE3QUE2RjcxNjIxRjdFQ0NDM0U5NzY4QkQ5NUQ2Njg2NEZCODhDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ROguT/cwPzYromiAxZoe8GPU Q2oZRy2sPdr4l3WQsW3NENharIcipq2Clvejld8MrHurLhsrwXnafk8rXtXxSuEe YzU7CywY2e3p+Czc3preLrNeZ4JtymH95eTx3aCUn78JlvVexCC6ktJGUtnq59xj 5RFTA6uWrrzPfSkArZmxtVHjT8vbd10IpPzOXrYZiczMpG3NNvxM+36MU2syXki6 UA8DK3MgOGu6GIpVRU8tJvnGZokMb9DKFo2Xd/FWVi3311PiumuLs4TAIdRACYse FrI3zBL9dk3EybvEOdI9bT+Hvo0ZIctPOLN236VS7z+IhKAFmiXLs1dM3m1pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp6pvcWIffszD6XaL2V1mhk+4jEYwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnK+QX7bNLdi IwzbOzpSu2ZvyFohXltjF15tYnXe+706Bd5F7YIf4BN6+pvc2zE01vRw04QWVOBl BPfrMoiq2apYGEH0qZs02JxdkOC3mCqZPanUDcop/jVrKcfU/lEKhLECaItbN7YH 7XZ1vZ6mVGX4tAn049oSV07GFoEKvpAB3fI2vY9kqm03Zo17LF41unQ/CZ9KBZI8 u/2/KxjUm6hB5r9LpzhVw9Y4lOK/Vxy4LL2b97vUdSO7SP79jvYHHlBcKvoDtNjT vFZO721/6RUNMszVZ21C/JHcHcMD8Y7vlCt60J9jQh2TgTmGkqc9D9lTneqFO98l Pl39pOKq0w== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:04 2026 by rpki-client