$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: WUeU6cd5MHcAdXjvjzLE5bDhn1F88G2TGloSDowWtdI= Subject key identifier: D1:DF:5E:56:68:B3:52:37:A6:D6:1B:36:03:21:69:B3:04:A5:C0:DD Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 014AECE21B2D4770456F24EF7B8941095B937B45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: DE Signing time: Mon 29 Jun 2026 08:09:03 +0000 Manifest this update: Mon 29 Jun 2026 08:04:03 +0000 Manifest next update: Tue 30 Jun 2026 11:55:03 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) 2: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: rc0FHKam5BGtkn/PgBagGyjs/0We8kzPUN70bE/J3SA=) 3: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 10:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4a:ec:e2:1b:2d:47:70:45:6f:24:ef:7b:89:41:09:5b:93:7b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Jun 29 08:04:03 2026 GMT Not After : Jun 30 11:55:03 2026 GMT Subject: CN=D1DF5E5668B35237A6D61B36032169B304A5C0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:4c:80:26:4e:0f:c3:75:17:d3:4b:40:91: 6f:fb:a4:c1:93:08:48:ae:3e:2d:d6:e4:fc:3a:0c: 4c:03:d9:fa:27:61:3a:12:7e:f1:fe:20:ca:d3:00: e0:c2:0a:85:61:f0:f8:62:cf:a0:41:cf:97:d2:5a: 8d:d3:3e:29:e0:7d:f6:ff:ac:2a:de:69:61:12:03: 2b:4e:98:8c:43:d0:1d:03:5d:ba:81:c0:70:85:6a: 2d:92:2d:cc:0f:85:26:82:18:22:7d:fa:f1:76:0d: 51:b5:e6:dc:79:c0:26:6d:4a:98:26:1b:b9:34:55: 3f:21:f5:53:db:5f:a0:31:ff:9b:00:6f:ee:3b:29: 7d:ba:ca:f1:88:6e:32:91:a2:86:26:ee:68:94:c1: 2c:dc:94:56:21:8d:25:53:0e:b2:d4:2d:0a:58:2e: a6:e2:a0:d4:28:ec:d4:4f:86:2e:57:23:1d:3a:63: a8:a7:8a:66:db:f8:16:03:d7:f3:bb:a3:fe:b2:40: 02:32:9a:54:b8:2b:34:32:b9:42:27:bd:8b:9a:1d: c2:2d:7b:3f:53:84:d2:0c:24:6b:88:5c:be:b2:f2: 73:9f:bb:30:a7:b9:b1:1f:75:a1:78:df:10:32:0a: 05:5f:0a:99:76:21:49:22:97:96:ac:f9:61:32:2d: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DF:5E:56:68:B3:52:37:A6:D6:1B:36:03:21:69:B3:04:A5:C0:DD X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:26:a7:dc:41:3b:0d:76:81:83:82:43:01:9e:34:e2:43:22: 2f:8c:c1:ef:e4:df:43:bd:ee:3a:72:73:81:05:0d:f7:80:7f: 16:70:52:53:64:f6:43:ab:b7:53:01:70:63:9a:57:3b:a4:b2: d0:0a:cb:2c:73:b5:9b:fb:18:70:7e:ae:37:da:76:cf:32:5d: 69:86:6d:22:93:a3:7d:3b:74:22:09:09:7d:c7:c1:d9:f7:c4: ef:aa:4f:65:af:95:f2:fb:a3:35:39:e6:7e:24:3e:f6:9c:b9: 98:56:1c:13:7b:2d:2c:13:4d:3f:5f:d5:11:60:32:d3:6a:40: a3:6c:90:24:3b:bb:34:12:ea:96:98:19:5e:6b:2f:76:ea:5f: 96:96:4e:8d:de:05:78:c6:9a:90:8d:e7:ae:38:1c:5b:88:c9: 26:da:3e:a5:c8:06:99:ae:81:6d:b2:e7:5b:cc:c2:0b:c1:c1: b9:a5:b1:fc:7d:d3:d9:3b:35:ef:cb:61:74:d0:3e:10:bf:cd: c4:d3:d7:fd:ce:34:ec:b7:42:2e:f8:cb:a3:1c:f3:d1:6c:32: a7:6d:fa:56:c1:2b:d9:29:f1:6a:e6:96:8f:8d:5c:9e:2d:bb: db:20:d0:01:ae:7e:3e:ed:60:60:8f:20:90:6c:f8:96:38:a7: f0:a8:59:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAUrs4hstR3BFbyTve4lBCVuTe0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjA2MjkwODA0MDNaFw0yNjA2MzAxMTU1MDNaMDMxMTAvBgNV BAMTKEQxREY1RTU2NjhCMzUyMzdBNkQ2MUIzNjAzMjE2OUIzMDRBNUMwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsEyAJk4Pw3UX00tAkW/7pMGT CEiuPi3W5Pw6DEwD2fonYToSfvH+IMrTAODCCoVh8Phiz6BBz5fSWo3TPingffb/ rCreaWESAytOmIxD0B0DXbqBwHCFai2SLcwPhSaCGCJ9+vF2DVG15tx5wCZtSpgm G7k0VT8h9VPbX6Ax/5sAb+47KX26yvGIbjKRooYm7miUwSzclFYhjSVTDrLULQpY LqbioNQo7NRPhi5XIx06Y6inimbb+BYD1/O7o/6yQAIymlS4KzQyuUInvYuaHcIt ez9ThNIMJGuIXL6y8nOfuzCnubEfdaF43xAyCgVfCpl2IUkil5as+WEyLa2rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0d9eVmizUjem1hs2AyFpswSlwN0wHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwian3EE7DXaB g4JDAZ404kMiL4zB7+TfQ73uOnJzgQUN94B/FnBSU2T2Q6u3UwFwY5pXO6Sy0ArL LHO1m/sYcH6uN9p2zzJdaYZtIpOjfTt0IgkJfcfB2ffE76pPZa+V8vujNTnmfiQ+ 9py5mFYcE3stLBNNP1/VEWAy02pAo2yQJDu7NBLqlpgZXmsvdupflpZOjd4FeMaa kI3nrjgcW4jJJto+pcgGma6BbbLnW8zCC8HBuaWx/H3T2Ts178thdNA+EL/NxNPX /c407LdCLvjLoxzz0Wwyp236VsEr2SnxauaWj41cni272yDQAa5+Pu1gYI8gkGz4 ljin8KhZQA== -----END CERTIFICATE-----Generated at Mon Jun 29 15:44:58 2026 by rpki-client