$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft File: 37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json) Hash identifier: 3735R/2eogGbEj338SwxTzUOLIB1Xe5l//MDWn1LJPk= Subject key identifier: B7:A6:38:FA:22:6D:7E:E9:18:07:D3:5A:CB:5B:E3:00:09:C4:9F:4C Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Certificate serial: 14D77C81578C8E95F18FDA021BF03FF745E92968 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft Manifest number: CD Signing time: Mon 22 Jun 2026 06:57:19 +0000 Manifest this update: Mon 22 Jun 2026 06:52:19 +0000 Manifest next update: Tue 23 Jun 2026 08:23:19 +0000 Files and hashes: 1: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=) 2: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=) 3: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=) 4: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=) 5: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=) 6: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=) 7: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=) 8: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: 7wVCNz0147ClfXGQgXrNQa0y/pTv1yQU8PZ2jn6Umy4=) 9: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=) 10: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=) 11: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=) 12: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Jun 2026 04:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d7:7c:81:57:8c:8e:95:f1:8f:da:02:1b:f0:3f:f7:45:e9:29:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Validity Not Before: Jun 22 06:52:19 2026 GMT Not After : Jun 23 08:23:19 2026 GMT Subject: CN=B7A638FA226D7EE91807D35ACB5BE30009C49F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:63:10:4c:56:b1:ee:22:dc:75:d0:c0:00: ec:ee:88:73:03:c6:44:c0:bd:b5:8b:a4:93:98:a0: 31:8d:e5:c8:1f:81:c4:ca:fa:3d:5a:40:d1:26:d8: 0d:60:0e:d4:03:3c:a5:a1:59:d4:15:86:a9:4b:af: 58:30:9f:7f:3f:9e:d6:f4:a6:80:2a:06:b0:48:a0: 4c:80:d4:eb:d7:2f:45:b4:49:25:fb:49:57:f6:4f: fa:26:f7:17:4d:62:f4:af:db:6d:f3:f3:c1:d5:3d: 18:2c:4d:33:33:e0:71:e9:c9:97:1a:5d:78:52:a6: 32:dd:3c:e3:a7:aa:43:ca:e9:ab:72:48:4d:12:9d: 99:78:b7:5a:ab:66:7c:12:e0:f3:b8:f4:01:61:d0: 05:e3:5a:8d:e4:f7:33:62:e6:8d:38:ee:4b:23:7e: 32:c3:e5:4e:2e:db:bf:26:76:6b:e0:26:49:c8:0f: f5:3b:98:de:c2:93:c2:46:a8:9b:87:4d:71:38:0b: c5:2e:19:b9:83:80:d4:b5:7f:f7:8c:43:b9:7b:20: bb:4b:17:5c:78:72:15:ee:13:d5:0b:a1:89:c1:5e: aa:41:f2:f7:da:d3:9d:30:76:58:1a:b7:b0:f7:40: 29:00:65:87:35:8a:4c:3d:2e:3f:a1:20:6e:f8:0b: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:38:FA:22:6D:7E:E9:18:07:D3:5A:CB:5B:E3:00:09:C4:9F:4C X509v3 Authority Key Identifier: keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b8:24:1b:ef:8e:3c:2d:fc:31:f0:7b:f2:cf:50:44:a2:51: 2a:d0:bd:4d:ef:2b:2f:1a:f7:11:1e:48:ea:b5:d6:49:23:91: f3:cf:6c:b7:a2:0a:9d:d3:2d:7c:61:86:77:ec:60:ed:bd:98: e3:31:4f:59:6a:54:1f:85:9c:be:bd:12:90:42:40:e0:11:5f: 94:a8:0c:e4:c7:19:cc:fd:7b:f6:df:fe:93:dc:94:ef:1c:45: 26:34:60:0b:40:ad:96:8f:e5:b4:d7:03:47:1d:c3:bc:5c:a9: f8:10:8a:e9:12:89:de:b3:14:e7:c9:ee:17:f4:b9:a2:4c:00: 50:cf:23:a6:9a:6c:26:4b:de:6f:06:eb:28:6e:58:fe:07:50: 61:c9:e0:96:4f:2d:4a:e1:d5:66:95:1d:95:c2:95:dc:fd:de: e2:4a:47:7d:43:2a:b5:26:ab:ae:2b:62:64:ab:e3:3d:da:8a: 24:bb:2b:83:5f:7b:e0:85:ad:94:29:54:63:de:93:77:b5:ae: 31:10:0f:fc:53:99:8a:eb:df:a3:ca:be:27:4b:bb:50:8b:9c: 81:0d:c2:2d:9d:25:77:d9:39:25:36:be:71:0e:f5:6d:36:10: 31:23:61:13:49:13:fe:ae:7c:e3:17:92:f8:3e:04:2b:fa:43: 95:4c:08:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFNd8gVeMjpXxj9oCG/A/90XpKWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0 RjhFMzgyNzAeFw0yNjA2MjIwNjUyMTlaFw0yNjA2MjMwODIzMTlaMDMxMTAvBgNV BAMTKEI3QTYzOEZBMjI2RDdFRTkxODA3RDM1QUNCNUJFMzAwMDlDNDlGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyWMQTFax7iLcddDAAOzuiHMD xkTAvbWLpJOYoDGN5cgfgcTK+j1aQNEm2A1gDtQDPKWhWdQVhqlLr1gwn38/ntb0 poAqBrBIoEyA1OvXL0W0SSX7SVf2T/om9xdNYvSv223z88HVPRgsTTMz4HHpyZca XXhSpjLdPOOnqkPK6atySE0SnZl4t1qrZnwS4PO49AFh0AXjWo3k9zNi5o047ksj fjLD5U4u278mdmvgJknID/U7mN7Ck8JGqJuHTXE4C8UuGbmDgNS1f/eMQ7l7ILtL F1x4chXuE9ULoYnBXqpB8vfa050wdlgat7D3QCkAZYc1ikw9Lj+hIG74Czb9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt6Y4+iJtfukYB9Nay1vjAAnEn0wwHwYDVR0j BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMC8zN0U2NUQzRDYwQjQ1 QzE0Mjk2Nzg0MTUxM0Q4RTU2RDRGOEUzODI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7gkG++OPC38 MfB78s9QRKJRKtC9Te8rLxr3ER5I6rXWSSOR889st6IKndMtfGGGd+xg7b2Y4zFP WWpUH4Wcvr0SkEJA4BFflKgM5McZzP179t/+k9yU7xxFJjRgC0Ctlo/ltNcDRx3D vFyp+BCK6RKJ3rMU58nuF/S5okwAUM8jpppsJkvebwbrKG5Y/gdQYcnglk8tSuHV ZpUdlcKV3P3e4kpHfUMqtSarritiZKvjPdqKJLsrg1974IWtlClUY96Td7WuMRAP /FOZiuvfo8q+J0u7UIucgQ3CLZ0ld9k5JTa+cQ71bTYQMSNhE0kT/q584xeS+D4E K/pDlUwI7w== -----END CERTIFICATE-----Generated at Mon Jun 22 10:47:09 2026 by rpki-client