$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: LaKGmrKn93HSJ30acr/ev/Zg2FwUFAe1DWKCYJ22w/I= Subject key identifier: BA:A9:41:5F:D9:C7:3D:65:ED:EC:18:B5:BF:9A:BF:3A:6C:52:E6:8C Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 772B353F65E23E70DC3A9358E4E105897A682D40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: 63 Signing time: Fri 12 Jun 2026 05:24:49 +0000 Manifest this update: Fri 12 Jun 2026 05:19:49 +0000 Manifest next update: Sat 13 Jun 2026 09:21:49 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: PRbG6S94frZ0YmUvWyCBui6H9QgAfLsbZ9cx1itzStk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2b:35:3f:65:e2:3e:70:dc:3a:93:58:e4:e1:05:89:7a:68:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Jun 12 05:19:49 2026 GMT Not After : Jun 13 09:21:49 2026 GMT Subject: CN=BAA9415FD9C73D65EDEC18B5BF9ABF3A6C52E68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:8e:8c:4d:a5:b7:53:7a:36:76:21:3b:e4: a1:cf:c9:54:53:79:7c:6c:7f:d3:db:6c:12:1c:a7: 62:a1:29:0c:f9:82:f5:09:01:32:cc:84:e7:a3:e4: b7:4b:2c:b5:06:fc:61:73:1b:df:86:4e:6b:bb:06: 46:10:2c:1f:47:66:54:db:a4:81:3d:6b:6e:4c:90: b5:b7:0d:e4:4f:9a:dc:94:90:20:ff:b1:bd:8c:48: 05:61:3a:18:45:80:91:1f:a5:48:5d:6f:ba:9c:f8: f4:fe:f5:84:86:37:47:9e:f6:ac:4e:0f:19:d4:86: 28:5f:a4:c7:81:12:3a:b4:c5:84:8e:60:d1:8f:15: 73:f9:e9:31:a6:ae:06:e6:7a:06:8c:fa:b4:fa:92: 87:3f:61:d4:2d:a1:af:d3:01:37:3a:b7:39:b1:79: 7f:dd:0c:7c:00:35:c3:81:70:0d:a5:c2:61:1e:60: 9a:c5:af:c4:11:66:8a:e9:77:82:56:81:4f:e9:b7: 70:1d:44:c0:56:4c:bc:6c:1d:ce:31:f3:f3:8e:57: f1:38:80:dd:50:0d:97:56:c4:a3:8c:b1:01:a9:f4: 47:7e:2d:50:26:2a:d5:00:94:88:58:f6:0b:41:eb: 41:7f:c7:cd:10:9c:17:1b:25:3d:cf:d8:66:05:6a: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A9:41:5F:D9:C7:3D:65:ED:EC:18:B5:BF:9A:BF:3A:6C:52:E6:8C X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:4c:47:61:5c:d8:56:9b:e4:8e:21:63:98:23:1a:49:95: ae:85:d5:38:3e:04:c8:3e:a2:39:e3:cb:0b:c3:83:9b:30:29: b6:9f:c3:95:f8:57:4a:e8:31:65:ba:4f:35:39:84:24:85:92: 74:17:1f:00:71:df:35:ee:8e:7c:95:56:12:17:d4:6f:54:61: 99:86:4a:ac:7a:8b:f4:5d:a5:8f:59:2e:97:de:7e:61:f6:10: cf:be:90:17:7e:c4:66:7b:ef:91:07:e9:64:ce:d4:d1:cd:f2: 49:3c:51:1c:1d:74:4f:20:36:01:f6:ce:0a:76:63:ff:fc:ba: 8b:ab:81:0b:01:3e:d2:e2:c7:c1:e1:a3:6a:f1:db:5d:bb:76: 37:0c:8f:c1:a1:9d:49:2f:b2:5a:da:1a:48:25:0e:de:07:4b: d7:fb:2e:8f:24:34:1c:aa:64:83:c1:1d:83:6a:a7:d2:45:e0: ac:52:96:35:de:c8:f2:2c:4b:55:10:aa:18:3c:1b:9b:45:85: cc:d6:48:61:3b:d4:74:5a:b5:30:43:2e:a0:78:15:af:a8:d1: bc:22:2c:fb:6e:a9:b2:b1:ba:da:78:ce:bb:be:df:4b:ea:93: 86:37:d8:4b:40:81:6a:9f:87:91:e4:b5:16:79:28:ad:e3:c7: 3d:89:0e:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdys1P2XiPnDcOpNY5OEFiXpoLUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA2MTIwNTE5NDlaFw0yNjA2MTMwOTIxNDlaMDMxMTAvBgNV BAMTKEJBQTk0MTVGRDlDNzNENjVFREVDMThCNUJGOUFCRjNBNkM1MkU2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jI6MTaW3U3o2diE75KHPyVRT eXxsf9PbbBIcp2KhKQz5gvUJATLMhOej5LdLLLUG/GFzG9+GTmu7BkYQLB9HZlTb pIE9a25MkLW3DeRPmtyUkCD/sb2MSAVhOhhFgJEfpUhdb7qc+PT+9YSGN0ee9qxO DxnUhihfpMeBEjq0xYSOYNGPFXP56TGmrgbmegaM+rT6koc/YdQtoa/TATc6tzmx eX/dDHwANcOBcA2lwmEeYJrFr8QRZorpd4JWgU/pt3AdRMBWTLxsHc4x8/OOV/E4 gN1QDZdWxKOMsQGp9Ed+LVAmKtUAlIhY9gtB60F/x80QnBcbJT3P2GYFakvBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuqlBX9nHPWXt7Bi1v5q/OmxS5owwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJlMR2Fc2Fab 5I4hY5gjGkmVroXVOD4EyD6iOePLC8ODmzAptp/DlfhXSugxZbpPNTmEJIWSdBcf AHHfNe6OfJVWEhfUb1RhmYZKrHqL9F2lj1kul95+YfYQz76QF37EZnvvkQfpZM7U 0c3ySTxRHB10TyA2AfbOCnZj//y6i6uBCwE+0uLHweGjavHbXbt2NwyPwaGdSS+y WtoaSCUO3gdL1/sujyQ0HKpkg8Edg2qn0kXgrFKWNd7I8ixLVRCqGDwbm0WFzNZI YTvUdFq1MEMuoHgVr6jRvCIs+26psrG62njOu77fS+qThjfYS0CBap+HkeS1Fnko rePHPYkOfg== -----END CERTIFICATE-----Generated at Fri Jun 12 07:54:43 2026 by rpki-client