$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: WvlsQaUMBsPCaAM+F3xoC2qXiafQvQWRQIEF5Bj9zyE= Subject key identifier: A5:11:7E:A9:ED:A0:95:A9:5E:D2:72:B4:92:C4:C6:01:6A:D0:B4:10 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 3F175D8AAF28F77D48949E141EAFF1B2E3AA0EC5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: BF Signing time: Thu 11 Jun 2026 19:39:19 +0000 Manifest this update: Thu 11 Jun 2026 19:34:19 +0000 Manifest next update: Fri 12 Jun 2026 19:55:19 +0000 Files and hashes: 1: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 2: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: /fVt7ErEjFsi07sdKpBeXh0H3IUg4q+SQNX+aNzNAbs=) 3: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) 4: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 5: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:17:5d:8a:af:28:f7:7d:48:94:9e:14:1e:af:f1:b2:e3:aa:0e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Jun 11 19:34:19 2026 GMT Not After : Jun 12 19:55:19 2026 GMT Subject: CN=A5117EA9EDA095A95ED272B492C4C6016AD0B410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:8d:22:69:f7:a4:bf:60:65:3b:d3:96:cf: f4:f8:91:7a:11:2e:32:a4:36:c1:0e:32:a2:5c:83: 78:32:46:c3:52:d9:0b:cc:88:65:26:1c:71:26:27: 6d:50:6b:35:9e:bf:f8:30:61:8a:44:71:26:8e:b7: 20:6e:0f:f2:01:38:a7:47:a2:b2:4c:d8:d9:fe:f3: 21:ea:60:d0:e0:ab:67:9d:c0:26:02:a7:8f:28:4c: 21:7a:55:c2:5a:d3:75:cf:38:68:5d:77:fe:8d:65: 72:b8:99:7f:0d:b2:d3:5c:c4:fc:dc:2f:d6:84:6c: d3:2b:c5:aa:3e:14:88:1a:f0:76:28:fb:99:2f:51: 26:5d:eb:6a:69:bd:05:9a:86:db:43:06:04:5f:a4: 3d:8d:37:42:4c:7f:ae:7f:26:81:04:95:5a:bc:81: f3:20:f7:f2:f3:52:a7:3f:c6:78:c5:80:ba:d0:ee: 1d:14:12:1e:6e:5b:96:7a:e3:87:f2:cb:dc:58:e1: 7c:73:43:79:6a:55:e0:10:e1:bc:cf:0f:54:30:81: f0:f9:e9:ca:22:26:02:d5:e3:62:08:3f:1d:49:54: ac:7f:c0:b8:25:a5:54:0b:2c:6c:65:f8:6e:cf:4d: 95:0f:2c:69:35:d4:fb:12:be:70:90:a7:85:07:b6: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:7E:A9:ED:A0:95:A9:5E:D2:72:B4:92:C4:C6:01:6A:D0:B4:10 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:86:19:58:d9:6a:de:67:bc:08:c6:28:72:fe:b7:a9:1e:47: 74:22:cc:67:53:2e:3a:46:7e:d8:28:e1:c3:03:00:f4:d2:92: 7c:51:17:d3:52:37:1c:d1:08:47:8a:76:cf:5c:bb:38:75:b0: 69:37:f3:17:57:d4:4f:e9:18:e2:c4:25:9f:dc:cd:97:b1:0c: eb:d8:fa:d9:bf:89:f3:0f:65:12:bb:41:6b:3f:3e:14:3f:81: 47:88:dd:b5:c4:9c:d4:06:66:15:de:c4:06:b2:1b:cd:87:7e: c9:1e:bd:c1:fe:7d:67:b8:d8:0c:8d:3b:8d:cc:4b:c6:ba:7a: 3c:47:f3:71:7e:2a:1c:2d:c0:6c:1c:8f:cb:9f:d5:3d:f7:d3: 50:1b:10:03:1e:5c:3b:26:6f:2f:94:ed:d3:09:2e:84:91:58: c7:f0:36:2b:09:b1:d2:fe:ce:71:ba:e1:ab:10:03:b1:1e:b9: b8:60:d1:4e:8a:2e:47:86:13:e2:aa:63:82:dc:ff:c0:14:66: 82:be:21:67:f9:31:8b:da:b5:36:72:96:da:53:54:ee:e3:54: fa:66:7f:1e:2c:fd:ce:2e:c5:11:aa:41:e1:17:35:da:69:2d: 18:28:cf:a4:a8:8c:5a:5d:ff:5b:73:d6:86:aa:83:3e:3a:35: 40:1d:a1:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPxddiq8o931IlJ4UHq/xsuOqDsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjA2MTExOTM0MTlaFw0yNjA2MTIxOTU1MTlaMDMxMTAvBgNV BAMTKEE1MTE3RUE5RURBMDk1QTk1RUQyNzJCNDkyQzRDNjAxNkFEMEI0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxo0iafekv2BlO9OWz/T4kXoR LjKkNsEOMqJcg3gyRsNS2QvMiGUmHHEmJ21QazWev/gwYYpEcSaOtyBuD/IBOKdH orJM2Nn+8yHqYNDgq2edwCYCp48oTCF6VcJa03XPOGhdd/6NZXK4mX8NstNcxPzc L9aEbNMrxao+FIga8HYo+5kvUSZd62ppvQWahttDBgRfpD2NN0JMf65/JoEElVq8 gfMg9/LzUqc/xnjFgLrQ7h0UEh5uW5Z644fyy9xY4XxzQ3lqVeAQ4bzPD1QwgfD5 6coiJgLV42IIPx1JVKx/wLglpVQLLGxl+G7PTZUPLGk11PsSvnCQp4UHthJjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpRF+qe2glale0nK0ksTGAWrQtBAwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4YZWNlq3me8 CMYocv63qR5HdCLMZ1MuOkZ+2CjhwwMA9NKSfFEX01I3HNEIR4p2z1y7OHWwaTfz F1fUT+kY4sQln9zNl7EM69j62b+J8w9lErtBaz8+FD+BR4jdtcSc1AZmFd7EBrIb zYd+yR69wf59Z7jYDI07jcxLxrp6PEfzcX4qHC3AbByPy5/VPffTUBsQAx5cOyZv L5Tt0wkuhJFYx/A2Kwmx0v7OcbrhqxADsR65uGDRToouR4YT4qpjgtz/wBRmgr4h Z/kxi9q1NnKW2lNU7uNU+mZ/Hiz9zi7FEapB4Rc12mktGCjPpKiMWl3/W3PWhqqD Pjo1QB2hgg== -----END CERTIFICATE-----Generated at Fri Jun 12 04:14:15 2026 by rpki-client