$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: PK0RGOeOodGic2AmFPqM0T6yh2S/1r0GP7ct1nRGRqY= Subject key identifier: 7E:0C:93:03:D8:11:C8:F2:90:24:87:B9:DC:40:F8:EB:0C:87:A0:0D Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 0BB914215757104B20C106F86DEBA7FEE851FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: CD Signing time: Mon 22 Jun 2026 03:11:58 +0000 Manifest this update: Mon 22 Jun 2026 03:06:58 +0000 Manifest next update: Tue 23 Jun 2026 05:12:58 +0000 Files and hashes: 1: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: jg6MJjeu3XGnRm7DkdssJy1PnKRxIJCOkbnUWOfsA4Y=) 4: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Jun 2026 03:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b9:14:21:57:57:10:4b:20:c1:06:f8:6d:eb:a7:fe:e8:51:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jun 22 03:06:58 2026 GMT Not After : Jun 23 05:12:58 2026 GMT Subject: CN=7E0C9303D811C8F2902487B9DC40F8EB0C87A00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:5c:13:96:07:75:23:d7:d1:8b:89:56:0a: b5:61:15:45:ce:cd:3a:ba:0e:54:6d:9b:e1:c8:b2: 28:21:9f:65:71:6a:45:dc:8b:d8:4e:2b:2c:2a:82: a6:9e:0f:56:69:d8:a4:14:98:f9:8a:74:ae:b4:f5: 70:73:cd:64:26:df:56:01:82:2d:5c:43:5a:06:5c: 61:96:92:0d:c5:8f:e8:f9:58:39:d7:4c:6b:a9:20: 9b:1a:99:d3:6e:de:a0:be:1c:ab:a7:84:7e:9f:3f: 03:87:d0:28:52:b7:80:be:1d:b0:f8:ac:23:0c:f0: 52:bf:a8:bc:0d:75:e2:2c:55:ec:97:9b:cb:67:27: 9d:8a:d1:c6:4f:82:d7:7b:52:02:ea:a5:b0:3d:20: b5:94:4e:c4:c2:5d:c1:05:23:1c:1c:ff:07:65:ca: d9:f2:f8:ff:d5:e1:db:a9:c8:12:e0:5d:28:d7:e1: c6:97:53:83:e7:23:24:86:75:d3:12:20:0f:c2:26: ae:af:8e:ac:20:7c:ce:53:e2:0a:ef:9a:22:20:f5: d4:81:cf:fa:0b:b3:49:e3:2e:df:37:4c:b1:61:e0: 42:5d:d5:b7:52:2f:35:6b:8d:bd:04:3f:2c:17:39: ab:51:ff:49:0e:ad:cf:54:24:02:4d:46:5c:46:18: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0C:93:03:D8:11:C8:F2:90:24:87:B9:DC:40:F8:EB:0C:87:A0:0D X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:78:03:90:aa:a6:85:30:c4:45:68:51:1f:a6:cb:8c:af:f3: b2:50:1d:08:55:94:c1:7d:f7:c5:75:ac:b0:e9:69:b8:82:18: 73:97:60:fe:78:35:e3:1c:c6:59:a9:46:a9:55:79:be:5a:04: 81:3e:1a:e3:63:17:93:cd:aa:c1:e3:9c:29:35:89:03:06:44: fd:de:ad:4f:82:84:27:a4:e1:31:99:fa:14:3b:50:29:ab:11: be:f1:ec:03:cf:87:42:14:0f:f3:03:8a:30:37:d3:72:c5:b6: 6d:e6:f3:70:79:16:3e:e5:6b:03:3f:71:fc:9d:e5:52:5c:e5: b4:3b:15:3d:c9:44:c8:a0:04:22:f9:11:04:c4:e4:af:24:5f: 2c:fe:80:68:4f:14:17:3d:e8:b9:ce:da:c4:12:e3:d5:4b:b9: c1:94:bb:18:9a:51:24:27:3f:32:92:dd:24:63:19:4e:38:c7: 29:70:9f:ad:c2:93:87:a5:4d:b7:9d:55:9a:11:4f:3a:d5:a7: 4e:10:e9:16:8e:49:74:97:5c:0e:91:c1:84:b4:e5:c0:46:34: 24:4b:fe:0d:ab:59:8e:c4:a0:e8:3c:4b:c4:59:83:61:51:b5: a8:67:b3:cf:98:a6:ba:8d:67:e0:e8:38:a9:4b:2f:28:ab:90: f0:39:59:9a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITC7kUIVdXEEsgwQb4beun/uhR/TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxQ0Y3MDlFRDlFMEIwMzM5NEI5RjlCRUI1N0VEOEQyQzIz MjYxREY0MB4XDTI2MDYyMjAzMDY1OFoXDTI2MDYyMzA1MTI1OFowMzExMC8GA1UE AxMoN0UwQzkzMDNEODExQzhGMjkwMjQ4N0I5REM0MEY4RUIwQzg3QTAwRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOszXBOWB3Uj19GLiVYKtWEVRc7N OroOVG2b4ciyKCGfZXFqRdyL2E4rLCqCpp4PVmnYpBSY+Yp0rrT1cHPNZCbfVgGC LVxDWgZcYZaSDcWP6PlYOddMa6kgmxqZ027eoL4cq6eEfp8/A4fQKFK3gL4dsPis IwzwUr+ovA114ixV7Jeby2cnnYrRxk+C13tSAuqlsD0gtZROxMJdwQUjHBz/B2XK 2fL4/9Xh26nIEuBdKNfhxpdTg+cjJIZ10xIgD8Imrq+OrCB8zlPiCu+aIiD11IHP +guzSeMu3zdMsWHgQl3Vt1IvNWuNvQQ/LBc5q1H/SQ6tz1QkAk1GXEYYrdcCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBR+DJMD2BHI8pAkh7ncQPjrDIegDTAfBgNVHSME GDAWgBQc9wntngsDOUufm+tX7Y0sIyYd9DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTg1NjQ5MzQ2MDg0ODY2LzEvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhE MkMyMzI2MURGNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MC8xQ0Y3MDlFRDlFMEIwMzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0LmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAz Mzk0QjlGOUJFQjU3RUQ4RDJDMjMyNjFERjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQeAOQqqaFMMRF aFEfpsuMr/OyUB0IVZTBfffFdayw6Wm4ghhzl2D+eDXjHMZZqUapVXm+WgSBPhrj YxeTzarB45wpNYkDBkT93q1PgoQnpOExmfoUO1ApqxG+8ewDz4dCFA/zA4owN9Ny xbZt5vNweRY+5WsDP3H8neVSXOW0OxU9yUTIoAQi+REExOSvJF8s/oBoTxQXPei5 ztrEEuPVS7nBlLsYmlEkJz8ykt0kYxlOOMcpcJ+twpOHpU23nVWaEU861adOEOkW jkl0l1wOkcGEtOXARjQkS/4Nq1mOxKDoPEvEWYNhUbWoZ7PPmKa6jWfg6DipSy8o q5DwOVma -----END CERTIFICATE-----Generated at Mon Jun 22 10:48:09 2026 by rpki-client