$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: TT+f8tM7pUVJ4KNCnrCq/rBI5RRDtp31iwDFhI6inOA= Subject key identifier: 0C:92:FC:7B:42:38:8D:5F:98:B0:13:CE:28:8C:6F:52:54:CA:58:A8 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 66B1C9AF8176E6E386DCFBABDF64A0EC50F6F72F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: C0 Signing time: Fri 12 Jun 2026 01:39:39 +0000 Manifest this update: Fri 12 Jun 2026 01:34:39 +0000 Manifest next update: Sat 13 Jun 2026 02:08:39 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: EV3GTnImPCAUpOFZE0cR05ZosatMqCUdi3mj4Bf/rRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 02:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b1:c9:af:81:76:e6:e3:86:dc:fb:ab:df:64:a0:ec:50:f6:f7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jun 12 01:34:39 2026 GMT Not After : Jun 13 02:08:39 2026 GMT Subject: CN=0C92FC7B42388D5F98B013CE288C6F5254CA58A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:7e:f8:f9:56:29:6e:3e:e0:6c:df:08:62: d6:8b:66:0f:8b:65:76:cd:cb:29:84:c0:9a:0c:ca: 77:27:ef:43:1d:06:74:1e:87:5a:e2:5b:e5:40:db: cd:fe:eb:63:c1:b4:a4:5b:9f:71:01:3e:f1:2f:81: b1:60:39:1e:80:e0:47:c7:c1:db:d6:de:e1:44:e0: 64:83:6c:72:aa:60:1d:01:89:7c:90:60:28:1d:b0: 3d:ef:f8:42:b1:9d:1d:3d:d5:65:76:ed:4f:a7:ba: 26:7b:31:2d:0c:de:3c:3d:78:67:2d:20:8b:5b:a0: ea:16:62:25:2c:26:6f:b6:81:34:e3:96:81:1b:e9: d1:1d:20:4f:97:28:24:8d:bb:e6:1a:d1:46:12:f6: fb:b8:0c:83:a2:03:6d:19:0b:9d:1f:93:91:84:66: 66:c1:9b:b0:52:30:8d:cf:98:89:a6:a8:c1:05:93: e6:dd:21:59:4f:6f:2a:c1:92:7a:31:32:a1:06:c4: b9:21:52:e5:0a:ed:25:81:8d:5f:5b:67:d1:ad:04: 3b:d2:41:fc:02:83:a2:04:0c:95:f5:1a:7b:fb:96: 12:d5:f9:1a:29:b9:59:32:e7:fa:63:5f:9c:d5:59: 15:94:9a:5e:9c:ea:36:f1:b5:0d:9c:7f:51:0d:1e: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:FC:7B:42:38:8D:5F:98:B0:13:CE:28:8C:6F:52:54:CA:58:A8 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:b8:ce:52:62:9d:0a:fd:38:64:18:c5:6f:fa:ed:0c:67: 1a:af:06:c0:b8:98:d5:91:a2:1c:0f:1f:34:df:74:56:f4:67: 78:2a:2c:b2:b3:95:8b:11:b8:54:d6:59:17:a6:96:36:1c:ce: cd:6a:c4:84:7a:d3:59:c9:7a:bb:a9:be:79:8f:32:e5:fd:1d: 61:f4:bd:ed:4f:e3:d7:b2:d2:3b:2a:03:87:f7:16:39:fb:cc: ea:a0:ae:62:0a:af:41:fc:43:84:87:86:47:de:5d:21:e5:f5: aa:6d:aa:41:64:92:53:b3:43:6c:e7:b6:f4:1b:7a:4c:4f:96: 11:84:b2:29:cb:3f:38:7a:b5:70:53:3a:be:15:0d:50:8c:8c: fa:2f:2e:33:b6:0a:3e:24:5d:2c:c3:aa:42:e3:9c:86:3f:77: 4e:03:e0:a5:43:91:0b:d5:9e:54:ce:ff:39:03:b9:61:4b:d1: 10:24:ea:91:72:ba:dc:5d:c5:1b:f1:d3:80:7f:42:35:1e:ea: 75:3f:ae:0e:f9:78:12:c2:fc:39:6b:d0:84:80:4f:d2:93:bc: 8b:94:60:57:4c:96:18:6c:60:ec:e9:fe:20:26:1d:1e:c5:7e: 8f:5b:6b:22:74:2f:1a:32:23:d8:48:89:8b:5c:05:45:1d:13: 94:31:60:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZrHJr4F25uOG3Pur32Sg7FD29y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA2MTIwMTM0MzlaFw0yNjA2MTMwMjA4MzlaMDMxMTAvBgNV BAMTKDBDOTJGQzdCNDIzODhENUY5OEIwMTNDRTI4OEM2RjUyNTRDQTU4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52H74+VYpbj7gbN8IYtaLZg+L ZXbNyymEwJoMyncn70MdBnQeh1riW+VA283+62PBtKRbn3EBPvEvgbFgOR6A4EfH wdvW3uFE4GSDbHKqYB0BiXyQYCgdsD3v+EKxnR091WV27U+nuiZ7MS0M3jw9eGct IItboOoWYiUsJm+2gTTjloEb6dEdIE+XKCSNu+Ya0UYS9vu4DIOiA20ZC50fk5GE ZmbBm7BSMI3PmImmqMEFk+bdIVlPbyrBknoxMqEGxLkhUuUK7SWBjV9bZ9GtBDvS QfwCg6IEDJX1Gnv7lhLV+RopuVky5/pjX5zVWRWUml6c6jbxtQ2cf1ENHlcxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDJL8e0I4jV+YsBPOKIxvUlTKWKgwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1i4zlJinQr9 OGQYxW/67QxnGq8GwLiY1ZGiHA8fNN90VvRneCossrOVixG4VNZZF6aWNhzOzWrE hHrTWcl6u6m+eY8y5f0dYfS97U/j17LSOyoDh/cWOfvM6qCuYgqvQfxDhIeGR95d IeX1qm2qQWSSU7NDbOe29Bt6TE+WEYSyKcs/OHq1cFM6vhUNUIyM+i8uM7YKPiRd LMOqQuOchj93TgPgpUORC9WeVM7/OQO5YUvRECTqkXK63F3FG/HTgH9CNR7qdT+u Dvl4EsL8OWvQhIBP0pO8i5RgV0yWGGxg7On+ICYdHsV+j1trInQvGjIj2EiJi1wF RR0TlDFgAA== -----END CERTIFICATE-----Generated at Fri Jun 12 03:56:03 2026 by rpki-client