$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: UteHc8wMKXf4rJpt9r9ExhWz28JvCZaTm0lwvkGl2aI= Subject key identifier: B4:7D:D5:29:57:A7:42:7A:3D:55:D8:91:AB:C1:63:71:E5:E2:56:48 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 4A1683349043643C99E25DF3608E74F8765EE62B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: E6 Signing time: Fri 05 Jun 2026 20:16:25 +0000 Manifest this update: Fri 05 Jun 2026 20:11:25 +0000 Manifest next update: Sat 06 Jun 2026 22:52:25 +0000 Files and hashes: 1: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=) 2: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=) 3: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=) 4: AS54994.roa (hash: MDUJwCd33PvvwTsBT0VFMFYpk/fIGGq2G/hSuQ3skfk=) 5: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=) 6: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=) 7: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: 31JkHqPpkEr2l70JPESgiH0ZNUlr/puAdV2+ukixS+I=) 8: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=) 9: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 22:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:16:83:34:90:43:64:3c:99:e2:5d:f3:60:8e:74:f8:76:5e:e6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Jun 5 20:11:25 2026 GMT Not After : Jun 6 22:52:25 2026 GMT Subject: CN=B47DD52957A7427A3D55D891ABC16371E5E25648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:9c:0e:32:2d:73:2f:45:eb:66:ba:18:16: 9d:05:4d:b4:0a:d1:c7:59:2c:cb:be:e3:5c:b6:2b: 1d:e2:67:8a:21:d5:9a:88:bc:26:f9:56:b6:d3:bf: 58:5d:91:c1:1c:be:08:28:4a:e0:38:35:f1:08:98: 4b:4a:85:bf:23:03:1a:02:bb:bb:0d:15:dc:c9:34: fc:11:24:11:0c:8b:02:d8:6e:b9:81:3e:52:cd:a7: 43:eb:03:96:13:9b:80:b6:c6:8f:c3:4e:74:6b:c5: e4:e3:c5:40:98:c5:b6:7a:58:93:44:95:bb:aa:ca: 7c:0e:26:0e:c5:1f:12:dc:e4:75:e6:56:07:23:d7: 55:3c:f4:0a:62:a3:d1:52:04:55:41:e5:64:8a:28: 10:ad:88:2c:19:09:4c:db:6c:ac:98:cd:4d:15:b8: 32:6f:da:91:af:3f:e7:00:5d:ad:c6:73:99:40:50: f0:49:5e:e3:09:b3:91:5a:ff:b4:d8:76:86:9c:13: f1:34:87:94:32:0d:02:77:ef:6c:e9:fc:b1:3f:77: 93:8d:d6:81:c8:d0:2a:a2:b2:c1:5d:72:73:e2:d5: f6:10:b1:4b:d8:1c:ca:18:03:8c:a5:b7:41:09:02: 06:4c:c3:46:d3:e8:43:fa:59:d5:ec:fa:e8:95:47: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7D:D5:29:57:A7:42:7A:3D:55:D8:91:AB:C1:63:71:E5:E2:56:48 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:84:c3:31:9b:42:93:84:bf:0b:3b:e4:43:59:8d:b6:86:35: a1:cf:42:1a:a6:df:e0:a8:9c:18:53:5f:f9:05:01:48:07:53: 99:0d:78:8e:a5:3e:0b:a0:e0:b0:f9:a1:f8:43:22:92:18:da: 20:5c:ee:f6:e0:e4:07:06:8e:24:01:77:16:2c:80:79:97:7b: 56:38:64:a0:4f:3c:0c:25:c7:4b:ec:58:10:d7:38:b5:88:59: 06:c6:e2:f3:78:95:dc:ff:85:3b:24:c0:6e:eb:f6:f2:bd:52: 9d:0a:7a:be:c0:94:73:95:a6:20:0b:43:cc:7a:90:61:5b:86: a8:86:03:a2:09:d6:9b:1f:32:70:d4:bc:11:ff:6c:a3:8b:c6: 88:80:81:be:36:9e:76:24:e0:49:d7:b5:96:e1:0e:64:86:76: a7:a2:32:38:ac:a0:24:5c:4f:62:39:de:dd:62:7b:5e:ce:12: 41:6e:54:df:16:64:f5:6b:db:6a:bf:ea:3a:9e:32:77:97:f3: 01:f2:27:cf:e2:e9:4c:62:50:8c:4e:c4:da:eb:98:66:d7:a6: 3b:7f:ec:fa:fb:cc:a8:61:50:b6:f9:64:7a:6d:a8:54:cd:45: ae:34:21:6a:c3:db:27:d8:90:df:3b:d8:3e:79:88:5d:18:fe: df:bc:0c:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUShaDNJBDZDyZ4l3zYI50+HZe5iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA2MDUyMDExMjVaFw0yNjA2MDYyMjUyMjVaMDMxMTAvBgNV BAMTKEI0N0RENTI5NTdBNzQyN0EzRDU1RDg5MUFCQzE2MzcxRTVFMjU2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxZwOMi1zL0XrZroYFp0FTbQK 0cdZLMu+41y2Kx3iZ4oh1ZqIvCb5VrbTv1hdkcEcvggoSuA4NfEImEtKhb8jAxoC u7sNFdzJNPwRJBEMiwLYbrmBPlLNp0PrA5YTm4C2xo/DTnRrxeTjxUCYxbZ6WJNE lbuqynwOJg7FHxLc5HXmVgcj11U89Apio9FSBFVB5WSKKBCtiCwZCUzbbKyYzU0V uDJv2pGvP+cAXa3Gc5lAUPBJXuMJs5Fa/7TYdoacE/E0h5QyDQJ372zp/LE/d5ON 1oHI0CqissFdcnPi1fYQsUvYHMoYA4ylt0EJAgZMw0bT6EP6WdXs+uiVR0Z9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtH3VKVenQno9VdiRq8FjceXiVkgwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADITDMZtCk4S/ CzvkQ1mNtoY1oc9CGqbf4KicGFNf+QUBSAdTmQ14jqU+C6DgsPmh+EMikhjaIFzu 9uDkBwaOJAF3FiyAeZd7VjhkoE88DCXHS+xYENc4tYhZBsbi83iV3P+FOyTAbuv2 8r1SnQp6vsCUc5WmIAtDzHqQYVuGqIYDognWmx8ycNS8Ef9so4vGiICBvjaediTg Sde1luEOZIZ2p6IyOKygJFxPYjne3WJ7Xs4SQW5U3xZk9Wvbar/qOp4yd5fzAfIn z+LpTGJQjE7E2uuYZtemO3/s+vvMqGFQtvlkem2oVM1FrjQhasPbJ9iQ3zvYPnmI XRj+37wMMg== -----END CERTIFICATE-----Generated at Sat Jun 6 13:25:21 2026 by rpki-client