$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: yLkTIBycMz03HI+rmTX0+HoNpVtNNiirpTl1cfaezSE= Subject key identifier: 48:A4:4A:F2:76:36:64:DF:A3:00:FB:DC:CB:77:6C:77:7B:AF:A3:50 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 24E09828D0797B928819FB25B76ACB4BEF8CD0A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: B6 Signing time: Thu 04 Jun 2026 02:24:08 +0000 Manifest this update: Thu 04 Jun 2026 02:19:08 +0000 Manifest next update: Fri 05 Jun 2026 03:04:08 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: 4T6+8poR1fauq1+nMcf10LkeEGOi8QrpkMVgUKPVOms=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e0:98:28:d0:79:7b:92:88:19:fb:25:b7:6a:cb:4b:ef:8c:d0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jun 4 02:19:08 2026 GMT Not After : Jun 5 03:04:08 2026 GMT Subject: CN=48A44AF2763664DFA300FBDCCB776C777BAFA350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:e8:ae:70:eb:8c:d3:f0:89:c6:4b:c6:9f: 36:78:63:cd:9a:e3:3d:ed:80:01:31:24:41:25:a7: a1:47:24:3e:fc:e1:1a:2d:b5:85:07:91:41:35:c7: b7:d4:82:de:2c:fa:33:a7:4a:e4:e4:22:53:78:50: 3c:78:73:3c:ac:45:ed:d4:50:48:df:05:75:ca:82: 42:0a:be:ee:36:b0:08:97:8c:89:e5:7c:6b:f5:64: 14:e9:b7:f0:9f:c4:f8:a6:a2:ff:5d:8e:73:2d:21: a4:8c:8b:f3:e4:94:cb:9b:35:b5:c0:c1:ef:e6:1d: 03:d9:87:b3:71:b3:b5:11:d6:51:f6:54:7c:4a:12: e3:81:80:2f:22:c9:64:e6:e7:69:0b:f7:0c:4a:39: aa:ed:8b:ad:00:d0:a9:e3:53:10:36:aa:ae:af:02: 57:ac:00:65:e5:eb:e0:4e:57:fc:1b:99:bd:f3:d8: 4f:3f:ac:fb:01:80:7b:41:b2:9c:a4:61:44:0c:2e: e2:ea:3d:47:f8:ee:e4:0c:b1:9f:47:74:12:61:ad: 50:fe:2c:c0:21:f6:59:33:31:6f:76:16:be:13:83: bd:9e:d9:89:76:90:30:9e:b5:06:2e:07:18:7e:4f: 82:29:97:97:f2:53:52:d1:ba:e6:ee:fa:86:9a:79: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A4:4A:F2:76:36:64:DF:A3:00:FB:DC:CB:77:6C:77:7B:AF:A3:50 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4d:aa:e3:89:03:ea:02:fa:a3:74:b0:4d:e5:cd:88:4f:cb: 10:86:6f:58:2d:ca:e5:8f:b7:26:36:13:fa:dd:49:ba:0f:c2: 6b:db:fd:90:22:b5:da:5c:ca:35:67:cc:61:20:19:99:d1:aa: 00:6d:01:92:a0:bd:37:94:00:2e:df:20:2f:ad:c7:01:a4:d2: 45:90:30:3a:ed:f9:73:3b:32:bf:b3:72:eb:3e:a6:37:33:50: f7:05:94:73:44:58:35:76:b5:ef:ce:8c:6c:16:0c:10:73:19: 44:41:5e:f4:f8:70:81:d0:3a:34:0b:e1:fc:04:88:25:9e:56: 67:de:e1:21:09:7a:2c:e1:58:6f:55:9b:76:37:0a:3d:46:5e: 72:cc:0d:d2:fd:41:9c:6e:42:c5:15:58:07:15:86:f3:43:83: 31:f9:d6:d9:07:6a:0e:af:06:a3:9e:e6:28:b0:e6:11:99:cd: c7:a2:f3:dd:05:ff:c5:17:eb:dc:77:b0:d4:3f:eb:f6:bd:dc: 5b:c5:16:4c:53:cb:b5:32:96:47:14:91:d6:76:b9:5b:94:fc: c6:b5:9f:26:db:f6:7b:af:21:07:eb:9a:c6:ee:1c:9b:1b:f5: f1:a7:9e:ee:93:7b:c4:0b:5d:34:f7:52:12:d8:b6:5d:10:28: 63:d4:75:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJOCYKNB5e5KIGfslt2rLS++M0KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA2MDQwMjE5MDhaFw0yNjA2MDUwMzA0MDhaMDMxMTAvBgNV BAMTKDQ4QTQ0QUYyNzYzNjY0REZBMzAwRkJEQ0NCNzc2Qzc3N0JBRkEzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwOiucOuM0/CJxkvGnzZ4Y82a 4z3tgAExJEElp6FHJD784RottYUHkUE1x7fUgt4s+jOnSuTkIlN4UDx4czysRe3U UEjfBXXKgkIKvu42sAiXjInlfGv1ZBTpt/CfxPimov9djnMtIaSMi/PklMubNbXA we/mHQPZh7Nxs7UR1lH2VHxKEuOBgC8iyWTm52kL9wxKOarti60A0KnjUxA2qq6v AlesAGXl6+BOV/wbmb3z2E8/rPsBgHtBspykYUQMLuLqPUf47uQMsZ9HdBJhrVD+ LMAh9lkzMW92Fr4Tg72e2Yl2kDCetQYuBxh+T4Ipl5fyU1LRuubu+oaaebI5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSKRK8nY2ZN+jAPvcy3dsd3uvo1AwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV02q44kD6gL6 o3SwTeXNiE/LEIZvWC3K5Y+3JjYT+t1Jug/Ca9v9kCK12lzKNWfMYSAZmdGqAG0B kqC9N5QALt8gL63HAaTSRZAwOu35czsyv7Ny6z6mNzNQ9wWUc0RYNXa1786MbBYM EHMZREFe9PhwgdA6NAvh/ASIJZ5WZ97hIQl6LOFYb1WbdjcKPUZecswN0v1BnG5C xRVYBxWG80ODMfnW2QdqDq8Go57mKLDmEZnNx6Lz3QX/xRfr3Hew1D/r9r3cW8UW TFPLtTKWRxSR1na5W5T8xrWfJtv2e68hB+uaxu4cmxv18aee7pN7xAtdNPdSEti2 XRAoY9R10g== -----END CERTIFICATE-----Generated at Thu Jun 4 15:17:51 2026 by rpki-client