$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: opjGzBzcgcODrcxbYQ5RAnS9TqNggmyFDNswi+ibIug= Subject key identifier: 61:87:90:E6:3D:F0:B9:76:08:D6:99:0A:35:49:88:2E:19:46:EF:C7 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 2839ED6805A94880461783A426816C14C9454E3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: F4 Signing time: Thu 04 Jun 2026 00:24:03 +0000 Manifest this update: Thu 04 Jun 2026 00:19:03 +0000 Manifest next update: Fri 05 Jun 2026 03:35:03 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 2: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 3: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: aNq6BsmW0eIRBUH6I5Q5OToz2Jh4gFs1QAHCcuKsP0o=) 4: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 5: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 6: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:ed:68:05:a9:48:80:46:17:83:a4:26:81:6c:14:c9:45:4e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Jun 4 00:19:03 2026 GMT Not After : Jun 5 03:35:03 2026 GMT Subject: CN=618790E63DF0B97608D6990A3549882E1946EFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:f1:da:7c:70:4b:b5:23:e4:f9:68:01:b3: 1b:39:d0:4d:a2:39:d5:8b:c2:25:e6:af:2f:32:1a: b7:d9:79:53:2f:ef:d5:28:76:a6:e5:30:b1:be:b6: 57:87:cc:e6:e0:d0:14:c1:7d:77:e9:6d:f6:ac:51: 44:e6:c1:ad:50:fe:31:8a:29:f3:02:4a:c6:0e:60: 5e:6b:70:27:7e:6d:27:69:1c:30:a8:0d:15:fb:eb: f9:36:3e:72:ac:f3:9b:db:40:f8:73:f8:4e:85:c0: a2:6c:6a:90:cd:b5:85:c1:6a:08:33:73:87:87:1f: 7d:67:d3:55:e7:86:0c:8c:56:f7:ff:cd:28:b5:a1: 5e:6a:93:09:c7:59:ee:98:5c:d0:ce:81:94:c4:ad: 19:b0:ce:d2:4e:7c:79:84:70:5a:c9:0b:00:c6:55: d2:e3:b2:8e:84:09:2f:16:42:69:91:ee:5c:d7:46: 2b:35:39:11:af:02:3d:97:a2:69:4a:4f:9a:ee:78: 88:7d:a4:2f:71:d4:09:b9:21:cc:c9:7a:7e:fe:78: f1:df:90:03:c1:65:cf:52:01:67:7e:8d:5e:02:7b: f8:4f:7f:1d:7e:ee:0e:cd:05:68:63:2e:f8:d4:f8: 6c:b7:ab:ad:22:5e:54:22:82:db:81:ca:99:3b:36: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:90:E6:3D:F0:B9:76:08:D6:99:0A:35:49:88:2E:19:46:EF:C7 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b4:f9:ca:e4:ec:81:39:db:47:78:76:d6:3f:ba:8e:5b:88: 69:89:01:81:f3:14:4a:22:13:73:98:1c:9e:2c:88:bc:09:49: 59:31:85:0c:3e:17:21:d2:2e:24:96:6f:27:e8:03:20:48:79: 87:a2:98:30:5d:14:05:20:bb:85:3d:8f:86:5c:a4:fe:d5:72: 86:20:01:6a:a4:75:ea:72:84:7c:88:44:da:77:20:d2:aa:81: 22:90:cd:9f:42:83:af:5c:36:c5:8f:c4:85:a1:a9:1a:7c:ce: 1f:00:a0:4b:7c:66:8f:34:d1:7d:20:ed:ac:4e:df:5b:a2:df: d5:0a:79:19:8d:2c:14:59:8c:15:cb:df:7a:e8:dc:e9:da:db: 6b:bc:77:62:e8:b7:e9:c4:b1:e5:3e:6f:a2:ba:88:57:39:b2: 95:80:0f:16:58:68:9a:48:51:8f:78:47:2d:1b:24:f2:79:b0: 7e:76:52:bd:32:f9:e1:3f:cf:df:b3:14:45:3f:a5:1b:03:c1: dc:71:d5:d9:39:75:3f:e2:c2:76:d9:f9:0b:26:b6:0e:a2:c8: 95:c3:b4:2b:62:3e:81:fa:99:e9:9d:86:33:a4:77:5f:d8:3b: 96:e3:70:ff:61:05:5e:45:d5:c0:47:4c:31:67:60:80:0b:d0: 36:87:ae:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKDntaAWpSIBGF4OkJoFsFMlFTj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA2MDQwMDE5MDNaFw0yNjA2MDUwMzM1MDNaMDMxMTAvBgNV BAMTKDYxODc5MEU2M0RGMEI5NzYwOEQ2OTkwQTM1NDk4ODJFMTk0NkVGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVp/HafHBLtSPk+WgBsxs50E2i OdWLwiXmry8yGrfZeVMv79UodqblMLG+tleHzObg0BTBfXfpbfasUUTmwa1Q/jGK KfMCSsYOYF5rcCd+bSdpHDCoDRX76/k2PnKs85vbQPhz+E6FwKJsapDNtYXBaggz c4eHH31n01XnhgyMVvf/zSi1oV5qkwnHWe6YXNDOgZTErRmwztJOfHmEcFrJCwDG VdLjso6ECS8WQmmR7lzXRis1ORGvAj2XomlKT5rueIh9pC9x1Am5IczJen7+ePHf kAPBZc9SAWd+jV4Ce/hPfx1+7g7NBWhjLvjU+Gy3q60iXlQigtuBypk7Nj+zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYYeQ5j3wuXYI1pkKNUmILhlG78cwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbT5yuTsgTnb R3h21j+6jluIaYkBgfMUSiITc5gcniyIvAlJWTGFDD4XIdIuJJZvJ+gDIEh5h6KY MF0UBSC7hT2Phlyk/tVyhiABaqR16nKEfIhE2ncg0qqBIpDNn0KDr1w2xY/EhaGp GnzOHwCgS3xmjzTRfSDtrE7fW6Lf1Qp5GY0sFFmMFcvfeujc6drba7x3Yui36cSx 5T5vorqIVzmylYAPFlhomkhRj3hHLRsk8nmwfnZSvTL54T/P37MURT+lGwPB3HHV 2Tl1P+LCdtn5Cya2DqLIlcO0K2I+gfqZ6Z2GM6R3X9g7luNw/2EFXkXVwEdMMWdg gAvQNoeuaQ== -----END CERTIFICATE-----Generated at Thu Jun 4 15:16:07 2026 by rpki-client