$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json) Hash identifier: GKUweu6KnAg/BB7CNOawMVvUPb94YWUiocZpLn12GBc= Subject key identifier: F3:11:1B:05:42:BE:60:20:45:F7:46:D1:F9:9E:95:77:2B:20:FC:0B Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Certificate serial: 1D4E6F8530D0EDEB055C1678EFEBEEDDC0937BA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft Manifest number: 05 Signing time: Sat 13 Jun 2026 15:06:52 +0000 Manifest this update: Sat 13 Jun 2026 15:01:52 +0000 Manifest next update: Sun 14 Jun 2026 16:19:52 +0000 Files and hashes: 1: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: PKeDZ8uEnl4Vg0pHvL+CVAo9/10rCA+PebhlXQYQdo4=) 2: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4e:6f:85:30:d0:ed:eb:05:5c:16:78:ef:eb:ee:dd:c0:93:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Validity Not Before: Jun 13 15:01:52 2026 GMT Not After : Jun 14 16:19:52 2026 GMT Subject: CN=F3111B0542BE602045F746D1F99E95772B20FC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:8c:16:56:ce:0c:0b:27:ce:d2:f1:f3:0c: cd:4f:b3:8d:35:6a:5a:d0:d9:bb:11:98:02:b5:96: 3f:5c:91:70:c8:c5:18:77:62:df:46:59:37:c7:e6: 9f:65:a6:e8:88:82:5e:79:74:c6:f9:c6:e3:f1:44: da:e2:18:b6:20:ff:cb:df:ae:1b:68:59:2e:00:17: 27:e7:87:82:c7:ca:5a:c9:93:51:ee:08:57:e6:09: f5:db:58:50:7c:f5:97:b1:58:cc:76:b6:a6:21:62: 49:07:a4:1b:77:4a:ee:64:32:61:85:74:3c:70:df: db:7e:8c:3f:13:4c:c9:c9:bb:c7:c1:04:22:c6:36: cf:17:b0:cc:81:9d:57:aa:b6:d6:9a:22:4b:15:54: bf:76:6a:e0:01:f2:e5:3e:9a:5e:6a:a8:c8:e0:50: 1c:fd:91:75:75:46:43:ac:df:5b:6d:0c:40:1d:75: 0a:3d:86:8b:cd:0c:fd:53:b1:2d:87:04:97:20:e3: 7d:8d:c0:b4:6e:d0:cb:d6:64:9a:5a:3b:24:b5:2a: c1:bd:80:8c:a1:01:fa:df:40:a8:d0:d5:80:e5:ad: 8a:ed:02:74:b9:ee:74:20:bd:ca:74:c5:fb:ea:91: 79:bd:c4:86:5f:46:d2:65:91:39:b2:4b:40:19:5c: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:11:1B:05:42:BE:60:20:45:F7:46:D1:F9:9E:95:77:2B:20:FC:0B X509v3 Authority Key Identifier: keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:8f:aa:5c:64:16:bf:90:f4:db:8d:54:dc:db:68:0e:7c: 18:f8:46:97:ce:0b:52:e7:55:f0:a6:9b:f3:e5:31:27:e2:4a: 82:74:62:ea:2c:ee:92:9d:c9:d1:82:c5:47:14:da:e3:33:e7: 2e:7f:68:58:a0:18:69:73:50:af:b2:c8:50:b0:b1:6d:27:fb: 99:5e:2a:7d:ef:ee:51:a1:95:7f:00:fc:6e:af:de:d8:5b:f7: 0e:1b:89:9e:d7:32:46:77:27:07:a2:d5:b3:ef:83:0f:6c:c6: 05:08:6c:ec:ab:92:16:80:c0:5c:cb:19:71:a6:38:b4:7a:5f: 67:d5:02:29:82:f4:92:89:b8:15:07:47:bc:8f:62:e5:b2:50: 55:05:dd:66:8e:de:86:2b:02:e1:d0:ac:6b:70:c2:6b:64:22: c7:e6:ec:1f:2a:41:f3:7f:39:b8:ac:54:d9:b3:dc:0c:86:6c: 09:ff:f8:d7:70:ed:82:a4:b1:f4:47:67:cf:df:34:11:0e:b5: a5:c7:68:3e:4c:3f:25:ca:5d:ee:1f:dd:58:36:19:d8:76:cb: e0:c4:9d:7c:c8:53:6b:b3:fb:17:bd:34:ce:2f:83:11:5c:c2: 4f:8e:da:27:2c:52:1f:d8:f5:56:31:89:b7:2c:aa:8c:da:0b: 2e:1c:88:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHU5vhTDQ7esFXBZ47+vu3cCTe6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4 MjJCOEI3MTAeFw0yNjA2MTMxNTAxNTJaFw0yNjA2MTQxNjE5NTJaMDMxMTAvBgNV BAMTKEYzMTExQjA1NDJCRTYwMjA0NUY3NDZEMUY5OUU5NTc3MkIyMEZDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aIwWVs4MCyfO0vHzDM1Ps401 alrQ2bsRmAK1lj9ckXDIxRh3Yt9GWTfH5p9lpuiIgl55dMb5xuPxRNriGLYg/8vf rhtoWS4AFyfnh4LHylrJk1HuCFfmCfXbWFB89ZexWMx2tqYhYkkHpBt3Su5kMmGF dDxw39t+jD8TTMnJu8fBBCLGNs8XsMyBnVeqttaaIksVVL92auAB8uU+ml5qqMjg UBz9kXV1RkOs31ttDEAddQo9hovNDP1TsS2HBJcg432NwLRu0MvWZJpaOyS1KsG9 gIyhAfrfQKjQ1YDlrYrtAnS57nQgvcp0xfvqkXm9xIZfRtJlkTmyS0AZXCB5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8xEbBUK+YCBF90bR+Z6Vdysg/AswHwYDVR0j BBgwFoAUHAp8lE25nEQZw+KJ/6mA/4Iri3EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMyMjg5MjU5MDE4NjUyMS8wLzFDMEE3Qzk0NERCOTlDNDQxOUMzRTI4OUZGQTk4 MEZGODIyQjhCNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4MjJCOEI3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMjI4OTI1OTAxODY1MjEvMC8xQzBBN0M5NDREQjk5 QzQ0MTlDM0UyODlGRkE5ODBGRjgyMkI4QjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPWPqlxkFr+Q 9NuNVNzbaA58GPhGl84LUudV8Kab8+UxJ+JKgnRi6izukp3J0YLFRxTa4zPnLn9o WKAYaXNQr7LIULCxbSf7mV4qfe/uUaGVfwD8bq/e2Fv3DhuJntcyRncnB6LVs++D D2zGBQhs7KuSFoDAXMsZcaY4tHpfZ9UCKYL0kom4FQdHvI9i5bJQVQXdZo7ehisC 4dCsa3DCa2Qix+bsHypB8385uKxU2bPcDIZsCf/413DtgqSx9Ednz980EQ61pcdo Pkw/Jcpd7h/dWDYZ2HbL4MSdfMhTa7P7F700zi+DEVzCT47aJyxSH9j1VjGJtyyq jNoLLhyIbw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:04 2026 by rpki-client