$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: OaidjsQyT+1wcLNL4Fx843A8DG6odBWuIj3uCIx1ix0= Subject key identifier: 75:69:0C:33:46:DF:9A:9E:BA:17:40:1C:D7:74:15:E9:68:3A:9A:9E Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 371FBFCE42F49D21A80EA56AEA21567977F81B67 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 4E Signing time: Thu 04 Jun 2026 03:29:11 +0000 Manifest this update: Thu 04 Jun 2026 03:24:11 +0000 Manifest next update: Fri 05 Jun 2026 06:50:11 +0000 Files and hashes: 1: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 2: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: DaIGgQkRQ/0neSw3ikb3niQUSEsFDzGtdy535dOtEbU=) 3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 06:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1f:bf:ce:42:f4:9d:21:a8:0e:a5:6a:ea:21:56:79:77:f8:1b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Jun 4 03:24:11 2026 GMT Not After : Jun 5 06:50:11 2026 GMT Subject: CN=75690C3346DF9A9EBA17401CD77415E9683A9A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:45:eb:03:6c:0c:54:45:eb:e0:95:f4:ad: 1f:b2:82:d6:13:25:58:74:9e:9a:7c:70:79:17:6d: 1c:f8:da:74:aa:b0:71:00:ac:dc:b3:86:2a:9b:e1: de:8b:5a:96:35:b6:d9:6f:f6:ee:f1:5d:ab:b4:bb: 01:58:c1:26:eb:70:61:f8:f5:3b:d4:c7:18:d5:d2: 5b:c0:67:1d:33:06:40:38:2c:f8:a0:51:05:e2:0a: a4:0b:5f:0b:b9:7c:44:43:b1:83:d8:27:97:b8:6c: 13:40:5f:c3:4b:2d:ea:2f:3d:64:6c:42:c1:f5:b1: f7:07:ae:c3:95:e0:4c:9b:5c:a4:66:1d:ed:bc:95: 43:77:7f:8d:2b:56:75:d0:3c:fa:11:45:82:fc:fe: f0:da:27:19:ce:a6:27:21:3e:42:a7:db:df:b8:2a: 24:dd:a9:d1:fe:4f:52:ba:06:e9:d5:e0:30:21:07: 9a:f9:e2:a5:88:95:2d:16:b9:03:e4:71:6f:db:d8: b1:de:ec:0c:d5:02:be:2a:cc:95:7b:3d:3d:6a:52: 27:aa:45:9e:6d:68:fe:eb:75:f4:ce:ff:70:0c:81: b2:02:6c:42:60:f5:d3:8b:4e:e2:00:3e:76:24:d5: 6f:68:7d:5b:9a:43:80:03:d5:a6:8c:df:ff:78:99: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:0C:33:46:DF:9A:9E:BA:17:40:1C:D7:74:15:E9:68:3A:9A:9E X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c1:02:42:b8:ce:94:96:fa:77:42:e1:3b:f2:e3:37:0d:a2: 7f:12:41:3a:48:b4:39:4a:34:c8:42:0c:cc:cf:c3:de:c3:e1: d3:b9:da:6c:47:3b:0b:38:4a:a9:7e:3b:eb:a0:cd:91:bf:0d: 44:b1:70:01:42:94:94:2b:3c:3b:98:ae:95:ff:ad:60:62:fd: 61:41:e9:55:bc:2d:5a:2a:b1:b2:0d:07:e6:90:09:d2:a1:71: 1a:27:2a:6b:b3:1e:6f:42:df:fe:6d:fa:c4:36:66:99:bd:8a: 74:dd:a1:e0:6e:b3:48:e2:bb:b0:70:0f:ac:72:4a:d7:2e:67: 44:9a:c5:71:41:4f:68:b9:7f:67:95:1e:3c:6e:f3:e5:b9:46: 9f:b8:a1:0e:68:af:56:b6:c3:29:17:e2:ff:1d:08:63:44:32: 28:49:1d:38:7c:e7:68:e0:a5:fa:c5:54:b5:44:01:eb:24:65: e3:6e:c7:0c:6c:67:db:7e:da:1e:78:db:bb:5e:54:cb:ec:ab: 13:cc:bb:16:79:3d:76:de:05:9d:14:4a:9d:bc:fb:09:e9:60: cf:9a:a7:90:32:77:4b:74:23:56:75:fa:a8:38:66:36:41:b2: ae:d7:18:2e:64:9d:5a:cc:4f:fd:25:39:0b:c3:1f:8b:e5:26: 27:3c:0b:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNx+/zkL0nSGoDqVq6iFWeXf4G2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA2MDQwMzI0MTFaFw0yNjA2MDUwNjUwMTFaMDMxMTAvBgNV BAMTKDc1NjkwQzMzNDZERjlBOUVCQTE3NDAxQ0Q3NzQxNUU5NjgzQTlBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK0kXrA2wMVEXr4JX0rR+ygtYT JVh0npp8cHkXbRz42nSqsHEArNyzhiqb4d6LWpY1ttlv9u7xXau0uwFYwSbrcGH4 9TvUxxjV0lvAZx0zBkA4LPigUQXiCqQLXwu5fERDsYPYJ5e4bBNAX8NLLeovPWRs QsH1sfcHrsOV4EybXKRmHe28lUN3f40rVnXQPPoRRYL8/vDaJxnOpichPkKn29+4 KiTdqdH+T1K6BunV4DAhB5r54qWIlS0WuQPkcW/b2LHe7AzVAr4qzJV7PT1qUieq RZ5taP7rdfTO/3AMgbICbEJg9dOLTuIAPnYk1W9ofVuaQ4AD1aaM3/94mUVPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdWkMM0bfmp66F0Ac13QV6Wg6mp4wHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8ECQrjOlJb6 d0LhO/LjNw2ifxJBOki0OUo0yEIMzM/D3sPh07nabEc7CzhKqX4766DNkb8NRLFw AUKUlCs8O5iulf+tYGL9YUHpVbwtWiqxsg0H5pAJ0qFxGicqa7Meb0Lf/m36xDZm mb2KdN2h4G6zSOK7sHAPrHJK1y5nRJrFcUFPaLl/Z5UePG7z5blGn7ihDmivVrbD KRfi/x0IY0QyKEkdOHznaOCl+sVUtUQB6yRl427HDGxn237aHnjbu15Uy+yrE8y7 Fnk9dt4FnRRKnbz7Celgz5qnkDJ3S3QjVnX6qDhmNkGyrtcYLmSdWsxP/SU5C8Mf i+UmJzwLSg== -----END CERTIFICATE-----Generated at Thu Jun 4 15:09:35 2026 by rpki-client