$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: y7b8YzXJf41yMTauj+FjaAh0WtjpFDQ4QV83bDPVKxk= Subject key identifier: 2E:F4:99:83:F1:A2:88:07:5F:31:F1:2A:4D:4D:03:86:A6:ED:E1:7E Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 67C573C721D38B68F3DA588AFBC7EFF65CBFD47E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: B6 Signing time: Thu 04 Jun 2026 01:09:04 +0000 Manifest this update: Thu 04 Jun 2026 01:04:04 +0000 Manifest next update: Fri 05 Jun 2026 01:26:04 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: Jfj3SSUbrvjDSRaVvOposf+G6gV8s/6KzPJBNtP3BG0=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 3: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 01:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c5:73:c7:21:d3:8b:68:f3:da:58:8a:fb:c7:ef:f6:5c:bf:d4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Jun 4 01:04:04 2026 GMT Not After : Jun 5 01:26:04 2026 GMT Subject: CN=2EF49983F1A288075F31F12A4D4D0386A6EDE17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:81:77:57:da:87:90:ce:7a:10:cc:3d:37: 8c:ba:1c:87:e1:ce:eb:95:d4:5b:6d:9d:b5:09:8b: 17:51:0e:0e:f1:a9:89:38:3c:86:c0:aa:c8:0d:1c: c8:4c:fa:3f:cb:af:88:09:b3:6f:66:ad:bd:f8:9f: fd:0e:a0:c9:e8:1d:ec:95:08:1b:ca:0c:44:ec:b3: 6b:35:c0:4e:ec:47:66:8c:bd:68:23:e5:50:dc:fd: 1d:09:f1:aa:b2:92:51:88:41:81:07:f7:23:36:3a: 97:3c:76:05:fd:a4:3d:b1:1d:c3:00:0b:54:d8:81: de:a5:dc:c1:a6:51:58:41:a2:a4:97:a8:3f:2a:93: 76:2b:9b:e2:64:10:86:21:25:87:ee:cf:64:f2:84: dd:84:a2:db:b3:3d:b7:d3:2d:f7:c9:1b:79:13:0b: 56:cc:ac:bd:f8:91:20:a3:93:35:2a:6f:60:50:cb: 57:c6:09:e5:c6:94:c3:c6:c1:23:36:4b:01:fd:e6: 15:29:a8:05:44:be:14:91:ab:ee:57:32:8b:b3:29: 77:9b:84:3a:4f:35:96:4d:5b:98:c0:93:e1:a2:61: d1:58:c9:00:1f:2a:00:eb:5c:78:69:f7:7a:40:15: 77:dd:d9:10:8e:36:56:70:50:d6:e6:79:2c:90:40: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F4:99:83:F1:A2:88:07:5F:31:F1:2A:4D:4D:03:86:A6:ED:E1:7E X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b4:cf:97:89:75:54:e7:0c:2f:83:ff:39:b2:3d:7e:08:8b: fa:6e:20:14:8f:03:c9:bd:67:66:1c:69:3b:69:aa:d8:a0:47: eb:4c:de:10:6a:c4:53:70:79:45:4d:50:1c:52:28:03:c7:91: be:e6:68:f1:bd:d0:2e:7f:da:3a:df:ad:3c:17:92:7b:53:6a: 1c:f5:1f:8c:95:44:2c:30:1d:ac:50:39:2f:5f:70:7a:07:46: 6f:c3:8f:21:32:51:44:e8:39:3b:92:15:2a:95:45:1a:f4:ad: 34:ec:61:cb:de:92:e9:88:40:3d:7e:a1:49:b0:65:1e:0e:64: 42:6b:ef:b1:90:e6:50:26:58:0c:f5:2e:75:76:e8:9d:24:b2: ed:98:5a:f2:bd:79:ff:2b:30:27:b3:69:40:f2:0e:a7:40:d3: 11:33:ba:cd:30:8b:df:ac:b1:42:be:30:8b:c9:66:ea:2e:e9: f5:a2:fc:ab:37:db:d2:aa:f1:0c:03:5e:be:d5:88:3e:df:a1: 8d:16:6b:44:a3:93:3e:57:dd:7b:06:22:9b:e2:f2:ee:75:fc: 46:41:5b:a6:30:46:9b:16:47:18:07:d0:8c:0e:aa:58:9c:21: 2b:a6:a9:02:56:82:5c:72:88:f2:cb:14:46:e5:cd:95:e9:a7: 4a:48:6b:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ8VzxyHTi2jz2liK+8fv9ly/1H4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA2MDQwMTA0MDRaFw0yNjA2MDUwMTI2MDRaMDMxMTAvBgNV BAMTKDJFRjQ5OTgzRjFBMjg4MDc1RjMxRjEyQTRENEQwMzg2QTZFREUxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPjoF3V9qHkM56EMw9N4y6HIfh zuuV1FttnbUJixdRDg7xqYk4PIbAqsgNHMhM+j/Lr4gJs29mrb34n/0OoMnoHeyV CBvKDETss2s1wE7sR2aMvWgj5VDc/R0J8aqyklGIQYEH9yM2Opc8dgX9pD2xHcMA C1TYgd6l3MGmUVhBoqSXqD8qk3Yrm+JkEIYhJYfuz2TyhN2EotuzPbfTLffJG3kT C1bMrL34kSCjkzUqb2BQy1fGCeXGlMPGwSM2SwH95hUpqAVEvhSRq+5XMouzKXeb hDpPNZZNW5jAk+GiYdFYyQAfKgDrXHhp93pAFXfd2RCONlZwUNbmeSyQQESXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULvSZg/GiiAdfMfEqTU0Dhqbt4X4wHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7TPl4l1VOcM L4P/ObI9fgiL+m4gFI8Dyb1nZhxpO2mq2KBH60zeEGrEU3B5RU1QHFIoA8eRvuZo 8b3QLn/aOt+tPBeSe1NqHPUfjJVELDAdrFA5L19wegdGb8OPITJRROg5O5IVKpVF GvStNOxhy96S6YhAPX6hSbBlHg5kQmvvsZDmUCZYDPUudXbonSSy7Zha8r15/ysw J7NpQPIOp0DTETO6zTCL36yxQr4wi8lm6i7p9aL8qzfb0qrxDANevtWIPt+hjRZr RKOTPlfdewYim+Ly7nX8RkFbpjBGmxZHGAfQjA6qWJwhK6apAlaCXHKI8ssURuXN lemnSkhrIA== -----END CERTIFICATE-----Generated at Thu Jun 4 15:17:25 2026 by rpki-client