$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: KDAUlbxbyqkCFXlXsRvyTwznxj8R2jJyeedR80IbOSM= Subject key identifier: 92:BE:D8:C8:FD:CE:BE:C8:AE:DB:56:07:DB:8E:C6:01:2F:AC:A3:85 Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 7915BB7D0A31B5F9672DAA784427E4702F823625 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: B7 Signing time: Wed 03 Jun 2026 23:13:58 +0000 Manifest this update: Wed 03 Jun 2026 23:08:58 +0000 Manifest next update: Fri 05 Jun 2026 02:35:58 +0000 Files and hashes: 1: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 2: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) 3: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: HXOGlXwqIuo5ndBgwN7bracoh4+ZxJp8JEqno3q/RGQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 02:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:bb:7d:0a:31:b5:f9:67:2d:aa:78:44:27:e4:70:2f:82:36:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Jun 3 23:08:58 2026 GMT Not After : Jun 5 02:35:58 2026 GMT Subject: CN=92BED8C8FDCEBEC8AEDB5607DB8EC6012FACA385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:9b:9c:a6:83:5e:ef:d8:a4:c5:2a:16:1a: d1:8b:e1:f9:6f:27:e8:f9:e4:f6:65:7a:f0:0b:bf: 5b:fa:57:c0:e4:22:12:2e:df:c2:1d:1a:92:0a:d1: 27:a9:81:c1:4a:44:98:22:0e:3a:b5:58:43:d0:1b: db:ea:ce:58:5f:f8:0c:83:43:a3:92:9c:71:1a:62: 35:81:34:c0:10:74:60:7c:d9:bd:49:68:a0:6a:b2: 74:5f:9b:91:0b:be:08:a4:48:ea:48:30:3b:36:9a: df:79:be:fb:e2:11:55:bb:a7:2a:0e:5b:ac:89:c4: 20:53:3d:c7:d3:17:82:34:73:1f:75:9a:68:a0:2a: 0b:9a:9b:44:ed:7e:60:22:cd:47:e5:23:7e:bb:27: e8:45:b9:de:d8:17:fd:6c:b9:97:89:1e:65:09:b4: 25:fd:ef:45:35:e7:2b:20:8c:bd:b3:0e:22:ac:f5: 83:d8:2a:0e:ab:36:71:86:62:d7:a5:55:28:88:3a: 49:ce:42:4d:cb:fa:4b:88:b7:01:6e:5c:44:18:28: 99:86:fc:1a:6e:4a:b3:c1:26:fa:5b:3c:5f:b2:96: 7d:8e:ab:0c:b8:bf:32:cf:f2:4a:09:e1:80:7a:5f: 82:56:30:78:f1:a0:58:86:03:19:6b:b0:fe:3e:0d: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:D8:C8:FD:CE:BE:C8:AE:DB:56:07:DB:8E:C6:01:2F:AC:A3:85 X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:38:df:57:14:85:8b:63:a6:ce:e5:4f:a1:e8:62:ec:aa:66: 65:d6:6b:5b:86:d6:e0:10:f1:11:7e:ba:91:49:8e:81:1f:ae: 23:64:62:54:ac:56:36:68:81:da:dd:aa:07:8a:64:9f:f1:3e: 66:e5:2e:61:d0:03:a4:1e:af:7d:eb:f5:59:5a:de:2c:47:dd: 1a:d7:ea:76:82:df:40:36:73:ee:5b:f0:69:33:70:8f:64:59: c0:dd:ee:4a:b3:9e:0b:79:28:65:96:8b:fb:28:ee:a3:31:84: c4:e6:17:c0:b9:79:02:3e:8d:1c:b3:24:73:36:20:c7:69:ec: 02:56:db:32:28:54:1d:32:54:fe:36:57:ba:4f:4b:07:4f:ee: 5a:60:04:95:62:9d:53:0c:30:13:b8:41:47:aa:f5:84:1e:8f: 06:a9:28:ba:ce:3d:0a:5c:88:cc:5a:5a:ba:18:e2:66:bf:ae: 0c:37:4a:5c:47:2c:16:f8:f5:da:4d:80:db:f7:78:54:7a:e4: 76:26:07:c8:e3:11:b3:51:8b:af:cd:bb:0e:80:af:65:74:21: cb:96:52:de:85:38:45:16:2d:f7:ff:a2:a7:ae:a2:28:6d:42: 72:9c:ea:e5:cc:b9:46:07:3c:80:40:84:6e:39:7f:e2:ff:62: 27:24:6e:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeRW7fQoxtflnLap4RCfkcC+CNiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA2MDMyMzA4NThaFw0yNjA2MDUwMjM1NThaMDMxMTAvBgNV BAMTKDkyQkVEOEM4RkRDRUJFQzhBRURCNTYwN0RCOEVDNjAxMkZBQ0EzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtR5ucpoNe79ikxSoWGtGL4flv J+j55PZlevALv1v6V8DkIhIu38IdGpIK0SepgcFKRJgiDjq1WEPQG9vqzlhf+AyD Q6OSnHEaYjWBNMAQdGB82b1JaKBqsnRfm5ELvgikSOpIMDs2mt95vvviEVW7pyoO W6yJxCBTPcfTF4I0cx91mmigKguam0TtfmAizUflI367J+hFud7YF/1suZeJHmUJ tCX970U15ysgjL2zDiKs9YPYKg6rNnGGYtelVSiIOknOQk3L+kuItwFuXEQYKJmG /BpuSrPBJvpbPF+yln2Oqwy4vzLP8koJ4YB6X4JWMHjxoFiGAxlrsP4+DXtdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkr7YyP3Ovsiu21YH247GAS+so4UwHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDjfVxSFi2Om zuVPoehi7KpmZdZrW4bW4BDxEX66kUmOgR+uI2RiVKxWNmiB2t2qB4pkn/E+ZuUu YdADpB6vfev1WVreLEfdGtfqdoLfQDZz7lvwaTNwj2RZwN3uSrOeC3koZZaL+yju ozGExOYXwLl5Aj6NHLMkczYgx2nsAlbbMihUHTJU/jZXuk9LB0/uWmAElWKdUwww E7hBR6r1hB6PBqkous49ClyIzFpauhjiZr+uDDdKXEcsFvj12k2A2/d4VHrkdiYH yOMRs1GLr827DoCvZXQhy5ZS3oU4RRYt9/+ip66iKG1Ccpzq5cy5Rgc8gECEbjl/ 4v9iJyRumw== -----END CERTIFICATE-----Generated at Thu Jun 4 15:18:31 2026 by rpki-client