$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: qAenxvuVgHoMmFOdiup8kokYCjW9CgPEnB1nKl0T2Pw= Subject key identifier: 3B:F6:22:7A:2D:35:A0:A8:42:6D:47:99:EF:13:A1:B9:0D:AD:60:34 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 10F5892AA823F3EFC508025B8770C1583CA8D007 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: BF Signing time: Thu 11 Jun 2026 15:48:57 +0000 Manifest this update: Thu 11 Jun 2026 15:43:57 +0000 Manifest next update: Fri 12 Jun 2026 16:37:57 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 2: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 3: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 4: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 5: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 6: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 7: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 8: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: Y59Dqzwnyc9zMXRqM9WJQUXMMIQV8yg8cuUsiaOARlM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f5:89:2a:a8:23:f3:ef:c5:08:02:5b:87:70:c1:58:3c:a8:d0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jun 11 15:43:57 2026 GMT Not After : Jun 12 16:37:57 2026 GMT Subject: CN=3BF6227A2D35A0A8426D4799EF13A1B90DAD6034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:4b:6a:6b:4d:05:f4:0a:ce:0e:c6:08:b0: e9:6a:f7:14:25:1f:f2:f8:97:0e:0f:2a:e9:88:4e: ca:03:0e:f9:04:ca:a1:1b:0e:d3:21:eb:3e:19:0e: c8:07:87:31:d6:87:87:f6:5e:2c:14:d5:bc:9e:f9: 79:af:a4:25:84:cc:1e:a3:5d:16:32:a9:0f:53:d0: 53:5d:bc:1f:e2:ff:ed:5b:fa:26:25:63:46:17:97: 0e:bd:c4:ea:af:f4:52:11:4a:0c:5b:e4:4b:69:cd: 9a:c9:2e:de:66:d2:09:85:2e:cf:ff:bd:50:60:78: 0a:0e:97:40:a2:5f:df:9e:88:ae:10:ef:94:85:fe: 93:8d:2b:91:19:f8:90:ff:50:26:72:a7:9b:c3:74: d8:0b:5b:5c:bc:17:4a:07:31:66:1e:86:3e:32:92: de:4d:e0:e9:9e:3f:9d:7a:56:96:ce:ff:26:58:6f: 37:c8:84:ad:b2:00:6b:59:de:73:ae:14:d3:a2:69: 7a:b1:48:7a:ee:1c:49:52:54:03:ca:50:a9:0a:ae: 9b:7c:5e:92:f0:e5:b4:a4:cd:53:42:fe:48:b4:28: 28:46:38:f5:bd:10:4b:fc:65:ee:e1:c7:72:99:83: 91:7f:79:19:f2:33:90:4b:df:b8:96:81:23:8b:6e: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:22:7A:2D:35:A0:A8:42:6D:47:99:EF:13:A1:B9:0D:AD:60:34 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fd:d4:09:43:b1:da:b5:2d:85:d7:d1:a9:0c:8b:d5:11:15: fa:d7:04:17:27:f1:46:f9:31:c7:c0:09:a6:e1:64:da:63:c7: c2:14:d5:77:ad:d7:0c:1e:43:7b:ad:e1:97:70:83:24:3f:e0: 62:81:07:90:4b:88:8b:67:c2:60:29:9c:7c:07:1c:d3:e0:83: 80:e7:ef:a7:d7:e5:8e:83:26:e1:c8:fb:8b:ac:df:01:2c:dd: e7:69:72:92:95:f5:3a:78:fc:20:75:4d:d3:ee:a0:f8:f6:c0: ea:aa:55:01:75:17:7d:21:3f:71:f9:6a:c5:0b:16:6c:67:8a: 16:47:f2:f2:67:13:75:b3:b1:49:48:d1:95:f8:73:0e:f9:84: fc:7a:8e:ec:64:88:fc:89:8d:9a:d6:87:b7:b2:1b:5c:d3:d5: 76:65:51:79:bb:b6:8e:e1:fb:91:13:a5:87:e0:13:dd:3d:d8: a0:6c:6f:8d:d2:7f:56:c8:c6:a2:2b:52:2c:4b:c2:2f:87:60: 99:f8:5c:6d:fb:80:d8:ca:d3:d5:15:c3:6b:e4:03:41:9a:2e: 7f:d2:55:f2:72:66:2b:9e:35:ec:e3:df:e0:52:93:e9:6a:33: 95:2b:69:55:26:4a:88:d1:41:7d:61:9f:35:b6:0c:fc:96:33: 2b:c3:c4:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEPWJKqgj8+/FCAJbh3DBWDyo0AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA2MTExNTQzNTdaFw0yNjA2MTIxNjM3NTdaMDMxMTAvBgNV BAMTKDNCRjYyMjdBMkQzNUEwQTg0MjZENDc5OUVGMTNBMUI5MERBRDYwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqUtqa00F9ArODsYIsOlq9xQl H/L4lw4PKumITsoDDvkEyqEbDtMh6z4ZDsgHhzHWh4f2XiwU1bye+XmvpCWEzB6j XRYyqQ9T0FNdvB/i/+1b+iYlY0YXlw69xOqv9FIRSgxb5EtpzZrJLt5m0gmFLs// vVBgeAoOl0CiX9+eiK4Q75SF/pONK5EZ+JD/UCZyp5vDdNgLW1y8F0oHMWYehj4y kt5N4OmeP516VpbO/yZYbzfIhK2yAGtZ3nOuFNOiaXqxSHruHElSVAPKUKkKrpt8 XpLw5bSkzVNC/ki0KChGOPW9EEv8Ze7hx3KZg5F/eRnyM5BL37iWgSOLbim/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO/Yiei01oKhCbUeZ7xOhuQ2tYDQwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf3UCUOx2rUt hdfRqQyL1REV+tcEFyfxRvkxx8AJpuFk2mPHwhTVd63XDB5De63hl3CDJD/gYoEH kEuIi2fCYCmcfAcc0+CDgOfvp9fljoMm4cj7i6zfASzd52lykpX1Onj8IHVN0+6g +PbA6qpVAXUXfSE/cflqxQsWbGeKFkfy8mcTdbOxSUjRlfhzDvmE/HqO7GSI/ImN mtaHt7IbXNPVdmVRebu2juH7kROlh+AT3T3YoGxvjdJ/VsjGoitSLEvCL4dgmfhc bfuA2MrT1RXDa+QDQZouf9JV8nJmK5417OPf4FKT6WozlStpVSZKiNFBfWGfNbYM /JYzK8PEeg== -----END CERTIFICATE-----Generated at Fri Jun 12 07:54:04 2026 by rpki-client