$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: ABYn5yeYh1s5XRgrqnt/87W9k8lATY1yYkV9IvBnnRs= Subject key identifier: 2A:AF:F0:57:1E:1B:5F:A6:E7:EA:B8:AA:F5:28:9E:01:D0:D8:14:34 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 6D39DDA1F32A9E3AEA0D45676385441C10B63EAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 47 Signing time: Thu 04 Jun 2026 04:24:14 +0000 Manifest this update: Thu 04 Jun 2026 04:19:14 +0000 Manifest next update: Fri 05 Jun 2026 08:20:14 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 7U1dk1dQ+kUnlV0swP4bMCNm4/rcyCQj1NW5dIGVvaY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 08:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:39:dd:a1:f3:2a:9e:3a:ea:0d:45:67:63:85:44:1c:10:b6:3e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Jun 4 04:19:14 2026 GMT Not After : Jun 5 08:20:14 2026 GMT Subject: CN=2AAFF0571E1B5FA6E7EAB8AAF5289E01D0D81434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:b2:96:f0:2b:f3:9a:e6:b9:dc:70:cf:e6: 27:a7:fd:28:f8:7e:cd:5d:ad:ef:9a:08:b0:ef:00: c0:e3:9a:89:00:90:46:e2:6e:b2:b4:86:78:17:82: 47:6a:21:b8:e4:40:3b:18:82:52:a6:1e:56:db:26: 4a:58:b2:03:7f:81:49:87:27:a4:73:b1:6a:fd:81: f1:66:95:15:b1:5e:2b:76:42:dc:4f:5b:39:3a:fd: 85:c5:25:4b:68:a2:7e:58:cb:ca:30:e5:e0:59:73: 6a:f3:d4:04:ef:38:50:55:a9:e1:a0:7e:f5:de:8a: 8a:80:08:29:36:13:34:ad:e1:23:41:7f:d9:a1:34: 6a:56:64:f1:d2:ed:ff:4a:bd:28:97:fb:40:84:37: e8:53:12:d3:0c:37:3a:bf:20:c4:7c:09:5a:65:17: 36:da:47:23:e5:b0:25:fa:9c:93:9a:3d:a4:56:7b: 21:c2:b0:41:20:78:8a:db:d9:85:0d:4d:68:88:a7: e7:55:8d:61:1e:57:8d:44:57:b6:43:45:27:df:39: 0e:59:44:bc:4b:eb:82:de:ea:2d:8a:55:6e:8e:87: 1e:b9:1f:07:81:ab:4f:b9:31:de:99:f0:60:c8:6f: 5f:40:df:e6:c6:19:83:45:41:8f:c0:ff:49:5c:ef: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AF:F0:57:1E:1B:5F:A6:E7:EA:B8:AA:F5:28:9E:01:D0:D8:14:34 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ee:fc:56:7e:eb:75:54:aa:e9:99:4f:88:b0:c0:54:26:e4: 9e:26:a1:d3:56:19:2c:f0:54:b2:13:1c:fb:e1:0d:a0:cb:41: 3d:1e:fb:29:7b:f5:b6:01:1c:01:23:94:0b:eb:ae:88:a4:c8: a8:53:37:7c:33:90:60:44:40:8a:5f:d6:21:e8:5b:ff:a6:d2: a1:41:04:16:08:33:dd:55:47:ac:20:43:7c:9a:a8:ff:89:12: b6:c1:62:d4:e1:c7:51:5c:18:6e:80:64:12:8a:c6:74:53:cf: 86:bb:38:fe:b6:74:bc:da:bd:2a:fe:d6:c9:36:fd:22:fc:21: ce:17:17:2a:47:89:fe:58:78:a8:db:6d:c1:3b:1c:d1:a5:4d: e1:dd:9e:b0:2c:79:3d:6e:4e:ec:7e:95:3b:12:ec:4d:c3:4e: eb:c7:8a:f6:d4:eb:5b:8e:4e:48:a1:5d:20:ff:11:b4:19:b2: 4e:2e:9c:28:c4:c8:5d:fd:5a:4f:3f:76:a7:1c:00:9a:5c:44: ff:02:3b:e4:48:0d:f9:6d:47:19:ef:6a:39:df:e3:89:7c:15: 2c:b6:ff:d7:42:f4:11:b0:36:a3:aa:af:c8:5d:c6:e9:ea:1c: 38:21:a1:e9:22:e5:4a:33:b8:07:a1:c8:d9:9c:96:7e:12:02: 24:2b:2a:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbTndofMqnjrqDUVnY4VEHBC2Pq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA2MDQwNDE5MTRaFw0yNjA2MDUwODIwMTRaMDMxMTAvBgNV BAMTKDJBQUZGMDU3MUUxQjVGQTZFN0VBQjhBQUY1Mjg5RTAxRDBEODE0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+bKW8Cvzmua53HDP5ien/Sj4 fs1dre+aCLDvAMDjmokAkEbibrK0hngXgkdqIbjkQDsYglKmHlbbJkpYsgN/gUmH J6RzsWr9gfFmlRWxXit2QtxPWzk6/YXFJUtoon5Yy8ow5eBZc2rz1ATvOFBVqeGg fvXeioqACCk2EzSt4SNBf9mhNGpWZPHS7f9KvSiX+0CEN+hTEtMMNzq/IMR8CVpl FzbaRyPlsCX6nJOaPaRWeyHCsEEgeIrb2YUNTWiIp+dVjWEeV41EV7ZDRSffOQ5Z RLxL64Le6i2KVW6Ohx65HweBq0+5Md6Z8GDIb19A3+bGGYNFQY/A/0lc77o1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKq/wVx4bX6bn6riq9SieAdDYFDQwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu78Vn7rdVSq 6ZlPiLDAVCbkniah01YZLPBUshMc++ENoMtBPR77KXv1tgEcASOUC+uuiKTIqFM3 fDOQYERAil/WIehb/6bSoUEEFggz3VVHrCBDfJqo/4kStsFi1OHHUVwYboBkEorG dFPPhrs4/rZ0vNq9Kv7WyTb9IvwhzhcXKkeJ/lh4qNttwTsc0aVN4d2esCx5PW5O 7H6VOxLsTcNO68eK9tTrW45OSKFdIP8RtBmyTi6cKMTIXf1aTz92pxwAmlxE/wI7 5EgN+W1HGe9qOd/jiXwVLLb/10L0EbA2o6qvyF3G6eocOCGh6SLlSjO4B6HI2ZyW fhICJCsqug== -----END CERTIFICATE-----Generated at Thu Jun 4 15:08:49 2026 by rpki-client