$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: zAG8X1cWNbHfgqueGGDYCCCH3+gFL6x5sacE83kWjcc= Subject key identifier: E6:4E:9E:5D:8E:17:90:38:42:2D:B9:00:8C:D3:C5:F5:5B:63:1B:F8 Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 1A1330F5E2981E15F4A59260D3AB5F81626CDDF1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 83 Signing time: Thu 04 Jun 2026 15:49:41 +0000 Manifest this update: Thu 04 Jun 2026 15:44:41 +0000 Manifest next update: Fri 05 Jun 2026 16:54:41 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: TjtWEbE08A/raFSGoArVr5k1NstMsOjhnWP4Joozx8U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 16:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:30:f5:e2:98:1e:15:f4:a5:92:60:d3:ab:5f:81:62:6c:dd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Jun 4 15:44:41 2026 GMT Not After : Jun 5 16:54:41 2026 GMT Subject: CN=E64E9E5D8E179038422DB9008CD3C5F55B631BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:c4:c9:ac:3b:54:10:bf:8e:0f:8d:1c:2d: 99:13:ed:a3:c6:87:0c:87:73:e4:28:b9:60:08:48: d0:49:01:77:4b:dc:6d:44:57:0a:aa:b2:fd:40:0b: 55:de:49:69:75:6e:3e:54:fa:22:d4:79:f6:64:e2: 93:e3:f6:e4:f6:89:17:af:fd:f5:ab:58:ae:92:b0: 7a:15:7a:e0:7d:91:0c:77:55:57:d4:73:55:fc:63: df:dc:92:a9:7f:82:83:bf:33:fc:2d:c9:f0:8d:4e: af:59:b4:db:8e:b6:a5:39:61:69:28:ef:15:c3:eb: 73:6f:b3:eb:4f:3c:c7:5d:36:5e:5a:fd:3d:ae:70: 59:2d:d8:27:60:d8:0a:bd:8b:cd:59:b4:c9:7f:7a: 68:ba:c1:12:e1:27:cc:72:7f:31:3e:95:44:6e:b5: fd:5b:75:94:77:9c:e9:43:51:95:10:1b:f2:8e:a5: fa:92:02:7e:c0:2d:3f:64:a8:e0:12:4a:8d:00:49: a4:32:89:d0:96:85:ce:a1:b1:e0:53:21:c4:74:87: 22:ed:dd:42:ca:e1:8d:26:87:3d:fc:98:b7:7c:81: d5:90:6e:32:0b:c5:3c:31:b1:4d:5f:c9:5d:b3:f3: bd:ed:7a:e1:a0:56:ce:5b:f7:c9:df:44:14:ea:b3: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4E:9E:5D:8E:17:90:38:42:2D:B9:00:8C:D3:C5:F5:5B:63:1B:F8 X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:07:4d:44:58:5a:7d:7e:65:1d:ee:1a:86:77:3b:d5:3e:c7: 83:c5:15:66:32:ce:2b:9f:46:38:f9:45:bd:fe:ec:d7:12:12: 31:0c:47:61:c7:67:b9:da:4c:02:39:56:8e:2b:6b:a6:52:68: 08:3c:5a:31:d4:2c:00:cb:8f:e8:6b:b6:fb:2d:08:18:db:1b: 53:27:e0:8d:75:cb:ba:4d:dc:92:c1:6c:48:e0:a7:60:79:7e: 0e:cc:6a:f1:8a:de:33:a9:aa:9f:5d:fa:4b:73:6d:3f:cc:ce: 1c:ec:cb:8f:0e:2e:92:bd:56:1d:be:f6:c8:95:98:6b:c5:c4: 75:a3:9e:ca:00:f3:72:91:a8:09:e3:e2:3a:d6:d4:ba:c7:ae: 72:9f:a8:02:ab:4f:54:85:ff:02:ca:7e:38:ff:17:a5:1b:b7: ff:b7:9d:d0:a5:c8:ec:10:1b:0c:9c:6b:54:3c:39:70:44:27: 41:f9:73:88:a3:09:42:46:2a:34:65:42:d6:83:33:d8:8a:f3: 49:3c:59:42:3a:e7:84:d2:1f:01:9b:4d:d5:0f:5d:57:47:a8: ca:58:a1:b4:81:96:9b:e0:f7:71:15:a4:94:81:8c:db:25:2a: 57:52:1a:5e:95:20:1a:bd:06:a9:cd:9f:57:20:66:96:ad:b5: e0:75:26:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGhMw9eKYHhX0pZJg06tfgWJs3fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA2MDQxNTQ0NDFaFw0yNjA2MDUxNjU0NDFaMDMxMTAvBgNV BAMTKEU2NEU5RTVEOEUxNzkwMzg0MjJEQjkwMDhDRDNDNUY1NUI2MzFCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+8TJrDtUEL+OD40cLZkT7aPG hwyHc+QouWAISNBJAXdL3G1EVwqqsv1AC1XeSWl1bj5U+iLUefZk4pPj9uT2iRev /fWrWK6SsHoVeuB9kQx3VVfUc1X8Y9/ckql/goO/M/wtyfCNTq9ZtNuOtqU5YWko 7xXD63Nvs+tPPMddNl5a/T2ucFkt2Cdg2Aq9i81ZtMl/emi6wRLhJ8xyfzE+lURu tf1bdZR3nOlDUZUQG/KOpfqSAn7ALT9kqOASSo0ASaQyidCWhc6hseBTIcR0hyLt 3ULK4Y0mhz38mLd8gdWQbjILxTwxsU1fyV2z873teuGgVs5b98nfRBTqs9d3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5k6eXY4XkDhCLbkAjNPF9VtjG/gwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgdNRFhafX5l He4ahnc71T7Hg8UVZjLOK59GOPlFvf7s1xISMQxHYcdnudpMAjlWjitrplJoCDxa MdQsAMuP6Gu2+y0IGNsbUyfgjXXLuk3cksFsSOCnYHl+Dsxq8YreM6mqn136S3Nt P8zOHOzLjw4ukr1WHb72yJWYa8XEdaOeygDzcpGoCePiOtbUuseucp+oAqtPVIX/ Asp+OP8XpRu3/7ed0KXI7BAbDJxrVDw5cEQnQflziKMJQkYqNGVC1oMz2IrzSTxZ QjrnhNIfAZtN1Q9dV0eoylihtIGWm+D3cRWklIGM2yUqV1IaXpUgGr0Gqc2fVyBm lq214HUmdQ== -----END CERTIFICATE-----Generated at Thu Jun 4 19:43:11 2026 by rpki-client