$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft File: 823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json) Hash identifier: jjw0PrQ1lkLk8IcxTT5yrBaa53q1vU9gS9ygtBtREh0= Subject key identifier: 3F:F2:33:F4:54:A3:23:F5:39:5A:15:60:F0:27:41:DB:70:53:7E:4A Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 3D379C7D2CEB875F829B2ECF9239EBDA7A4CE6F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft Manifest number: 08 Signing time: Sat 13 Jun 2026 21:37:15 +0000 Manifest this update: Sat 13 Jun 2026 21:32:15 +0000 Manifest next update: Sun 14 Jun 2026 23:40:15 +0000 Files and hashes: 1: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: HH+mH0IcfpJ6EV0yuD7/LpGZiJZ5c9e9sPnSDEwbvnc=) 2: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=) 3: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:37:9c:7d:2c:eb:87:5f:82:9b:2e:cf:92:39:eb:da:7a:4c:e6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jun 13 21:32:15 2026 GMT Not After : Jun 14 23:40:15 2026 GMT Subject: CN=3FF233F454A323F5395A1560F02741DB70537E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:73:b2:56:ee:38:79:b3:0d:cd:50:a2:35: 67:47:fb:a3:2a:81:30:3c:a2:5f:cc:a4:d0:97:72: b7:ef:31:d8:7d:57:63:e6:3c:b0:df:bf:41:e2:4d: c3:bf:41:9b:fa:83:96:be:3f:dc:0f:3a:cf:a8:5d: 9c:dc:71:86:44:7f:24:27:2b:15:d4:fc:8e:e5:0a: 78:a6:0f:79:ca:50:52:07:74:a0:13:9e:0c:67:f8: d6:ee:b1:96:9d:a0:b8:7a:f4:a0:6e:fe:1c:08:1b: a1:58:61:57:26:12:77:7b:47:8d:2f:88:a2:0f:a1: 0a:cf:d8:28:97:bd:fe:e8:1c:24:b5:c6:6f:9f:ca: a3:b8:2b:ce:2d:f8:ce:50:08:cd:25:55:9a:c6:c9: 88:03:a6:b1:31:27:03:0c:ac:b7:fa:1a:e9:af:8b: 0f:85:59:21:d6:bc:c8:83:81:42:64:40:28:c4:85: de:68:95:df:8f:32:55:51:d5:95:9c:cb:88:ed:93: ed:88:17:c8:e3:99:85:ad:ca:89:b7:11:cc:3d:63: a7:c4:ff:b4:01:31:1c:ab:ca:78:55:a9:78:ed:27: 64:67:7c:d3:5e:9b:50:dc:ac:1e:09:ff:bb:71:2f: c0:e7:2f:ba:ba:c6:63:e0:fb:a9:fd:41:e4:6b:06: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:33:F4:54:A3:23:F5:39:5A:15:60:F0:27:41:DB:70:53:7E:4A X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:0c:45:78:f7:e9:73:41:23:b4:be:b2:9b:99:12:06:3e: cd:bd:20:65:98:cc:71:6f:cb:69:e4:ed:b8:9a:50:8e:13:e7: 04:7d:28:9d:cd:66:75:11:b9:e7:69:8a:05:70:5b:49:88:04: 6d:17:64:0a:b7:02:be:32:a9:2d:fa:28:21:53:3d:00:96:55: c8:96:57:53:3b:95:d7:54:ba:cd:f9:96:7c:9e:36:79:c0:a7: 69:ee:fb:42:47:01:89:8c:45:60:8a:d0:1a:b9:e9:b0:5c:7e: 21:fc:f3:42:78:c8:ac:4b:57:fb:40:bd:19:61:cd:ff:12:43: 46:04:b2:bc:ec:cd:d1:90:b4:2a:96:ba:42:99:c4:7c:a2:b2: da:e2:29:18:16:1d:d9:3b:95:1a:f3:88:31:3f:15:88:c4:14: a7:00:27:26:b8:f7:40:2a:7a:93:b9:61:6c:b3:cc:5c:ec:24: 27:65:d8:e6:14:4b:cb:c6:c4:ea:76:03:9f:e5:4f:5a:d8:dc: ac:cc:44:cd:6d:e0:ee:4d:96:1d:43:c7:7c:0f:3e:7c:21:9f: e6:a2:a0:fa:cd:87:68:75:90:df:27:ed:6a:37:10:78:68:76: 73:58:4d:2e:81:20:7d:0c:bc:fa:ff:89:0e:ef:d7:80:6d:21: 6d:5e:ba:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPTecfSzrh1+Cmy7Pkjnr2npM5vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA2MTMyMTMyMTVaFw0yNjA2MTQyMzQwMTVaMDMxMTAvBgNV BAMTKDNGRjIzM0Y0NTRBMzIzRjUzOTVBMTU2MEYwMjc0MURCNzA1MzdFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLnOyVu44ebMNzVCiNWdH+6Mq gTA8ol/MpNCXcrfvMdh9V2PmPLDfv0HiTcO/QZv6g5a+P9wPOs+oXZzccYZEfyQn KxXU/I7lCnimD3nKUFIHdKATngxn+NbusZadoLh69KBu/hwIG6FYYVcmEnd7R40v iKIPoQrP2CiXvf7oHCS1xm+fyqO4K84t+M5QCM0lVZrGyYgDprExJwMMrLf6Gumv iw+FWSHWvMiDgUJkQCjEhd5old+PMlVR1ZWcy4jtk+2IF8jjmYWtyom3Ecw9Y6fE /7QBMRyrynhVqXjtJ2RnfNNem1DcrB4J/7txL8DnL7q6xmPg+6n9QeRrBiEHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP/Iz9FSjI/U5WhVg8CdB23BTfkowHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMi84MjNBOUQyNDgwMkFC MTAwMjYwOTVEOTI5NTJCRUM5MzYxMjBDOUYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhQMRXj36XNB I7S+spuZEgY+zb0gZZjMcW/LaeTtuJpQjhPnBH0onc1mdRG552mKBXBbSYgEbRdk CrcCvjKpLfooIVM9AJZVyJZXUzuV11S6zfmWfJ42ecCnae77QkcBiYxFYIrQGrnp sFx+IfzzQnjIrEtX+0C9GWHN/xJDRgSyvOzN0ZC0Kpa6QpnEfKKy2uIpGBYd2TuV GvOIMT8ViMQUpwAnJrj3QCp6k7lhbLPMXOwkJ2XY5hRLy8bE6nYDn+VPWtjcrMxE zW3g7k2WHUPHfA8+fCGf5qKg+s2HaHWQ3yftajcQeGh2c1hNLoEgfQy8+v+JDu/X gG0hbV66fA== -----END CERTIFICATE-----Generated at Sun Jun 14 03:46:31 2026 by rpki-client