$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: aQpbPg8WJkOsBUeCtXprC97V2Y1kjAZEQOAyQizGcp8= Subject key identifier: 9B:AD:3D:07:81:3A:7B:84:AE:FF:05:8D:3B:AF:D7:F0:BD:8F:8B:0F Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 5D8198324469ED135F9DAA908962BAFF456B05A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 06 Signing time: Sat 13 Jun 2026 11:16:45 +0000 Manifest this update: Sat 13 Jun 2026 11:11:45 +0000 Manifest next update: Sun 14 Jun 2026 12:58:45 +0000 Files and hashes: 1: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: 1t1q0tlbQRQ3DrENA++E2r4atfNlJJcyy4L0SG4ss0U=) 2: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:81:98:32:44:69:ed:13:5f:9d:aa:90:89:62:ba:ff:45:6b:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Jun 13 11:11:45 2026 GMT Not After : Jun 14 12:58:45 2026 GMT Subject: CN=9BAD3D07813A7B84AEFF058D3BAFD7F0BD8F8B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:49:d8:ef:be:93:ad:44:81:c2:38:13:e3: 48:44:84:92:8b:e5:b8:c4:7d:34:5a:c8:30:6b:f9: 96:d6:dd:a7:76:39:24:2e:6e:f0:b2:15:5a:d9:a7: f3:59:83:44:27:2f:28:c9:dc:14:28:7e:42:f8:a0: 56:2c:b8:3d:74:a0:02:0f:36:6c:93:b1:e9:a3:1e: dc:ce:df:12:f7:16:7c:cb:ee:1c:89:12:7d:51:7c: e2:e9:22:84:3b:24:94:0e:75:60:07:a8:10:41:c5: 07:d9:cb:0e:d3:1b:2a:8e:d2:78:af:fd:65:66:0c: 47:20:a4:da:4b:0d:51:fb:83:ea:f2:46:36:4d:ed: 38:a3:b5:79:02:dd:cd:4d:31:c1:4d:cf:66:e4:67: 5a:22:82:0b:8e:75:5b:da:2a:b5:fe:7d:4e:5e:e6: 1b:98:9d:1d:64:be:e9:70:a1:59:a1:f1:7e:59:eb: da:8d:cb:63:a6:73:53:2e:36:6b:fb:b2:56:1b:ea: c9:c1:cc:c1:36:9a:59:ce:a6:6b:ac:71:04:06:43: 3f:22:e3:9b:db:f9:75:47:77:f5:2f:31:75:18:cc: b3:62:07:0f:1c:55:76:04:59:1a:4c:62:03:3e:1b: 48:4f:a7:2e:e0:35:4d:f6:41:8a:00:97:2b:e6:05: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:3D:07:81:3A:7B:84:AE:FF:05:8D:3B:AF:D7:F0:BD:8F:8B:0F X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:19:2f:5e:c0:5f:7b:df:c5:1e:31:a7:49:65:27:0c:80: d2:e7:d0:54:a5:9f:cf:9a:f4:60:8f:5f:2a:42:04:a8:00:e6: 1b:bf:fa:b3:3e:29:29:65:f7:7e:0c:7b:91:99:ae:07:d0:dc: e3:38:f6:cc:35:89:67:e6:b9:8c:c6:56:c0:0d:0c:7b:08:5d: 36:62:ea:94:21:dd:2e:06:b9:3f:c2:b3:b2:09:8a:42:53:ad: ab:df:9c:5b:6a:d2:e6:5f:ea:04:c7:19:50:7d:ab:b6:4b:27: b1:50:f0:bf:29:df:0a:c2:7c:2f:12:28:13:8c:e2:25:07:0d: 5c:d1:b6:b6:2d:76:42:f7:75:56:cb:2d:15:9b:83:09:e1:6e: af:58:11:54:a7:33:f8:bd:48:58:95:59:4b:d1:bd:0d:ef:00: 6c:dd:65:1e:0d:72:77:e9:61:f4:e0:b0:eb:88:b1:ea:28:f5: e4:7f:1d:13:8b:a1:a3:08:83:97:be:89:a7:e3:2b:54:b7:b7: b5:dc:58:ee:7f:e2:8d:40:1c:8e:23:2f:08:e2:21:dd:9a:b1: cf:9d:30:ab:22:70:cf:ab:45:7a:5c:71:8c:3b:bc:aa:ca:ac: 34:27:63:b5:4a:0f:e3:64:17:d6:96:b1:21:8d:e6:fa:bc:65: 22:f8:d6:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXYGYMkRp7RNfnaqQiWK6/0VrBaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjA2MTMxMTExNDVaFw0yNjA2MTQxMjU4NDVaMDMxMTAvBgNV BAMTKDlCQUQzRDA3ODEzQTdCODRBRUZGMDU4RDNCQUZEN0YwQkQ4RjhCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjUnY776TrUSBwjgT40hEhJKL 5bjEfTRayDBr+ZbW3ad2OSQubvCyFVrZp/NZg0QnLyjJ3BQofkL4oFYsuD10oAIP NmyTsemjHtzO3xL3FnzL7hyJEn1RfOLpIoQ7JJQOdWAHqBBBxQfZyw7TGyqO0niv /WVmDEcgpNpLDVH7g+ryRjZN7TijtXkC3c1NMcFNz2bkZ1oigguOdVvaKrX+fU5e 5huYnR1kvulwoVmh8X5Z69qNy2Omc1MuNmv7slYb6snBzME2mlnOpmuscQQGQz8i 45vb+XVHd/UvMXUYzLNiBw8cVXYEWRpMYgM+G0hPpy7gNU32QYoAlyvmBV9DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm609B4E6e4Su/wWNO6/X8L2Piw8wHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7QZL17AX3vf xR4xp0llJwyA0ufQVKWfz5r0YI9fKkIEqADmG7/6sz4pKWX3fgx7kZmuB9Dc4zj2 zDWJZ+a5jMZWwA0MewhdNmLqlCHdLga5P8KzsgmKQlOtq9+cW2rS5l/qBMcZUH2r tksnsVDwvynfCsJ8LxIoE4ziJQcNXNG2ti12Qvd1VsstFZuDCeFur1gRVKcz+L1I WJVZS9G9De8AbN1lHg1yd+lh9OCw64ix6ij15H8dE4uhowiDl76Jp+MrVLe3tdxY 7n/ijUAcjiMvCOIh3Zqxz50wqyJwz6tFelxxjDu8qsqsNCdjtUoP42QX1paxIY3m +rxlIvjW7Q== -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:01 2026 by rpki-client