$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: 5RIXNQ16ZQ7VlSKH3FQ5hOPjhfXTF1Qk8SsCDQcqA8s= Subject key identifier: E1:7F:3B:ED:6D:96:28:DB:C0:84:EB:4D:38:B2:AD:97:FB:F8:88:FB Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 0170AA46D7BFA72D7832B2E7A7FF2897A385B31A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: 6D Signing time: Thu 04 Jun 2026 02:24:08 +0000 Manifest this update: Thu 04 Jun 2026 02:19:08 +0000 Manifest next update: Fri 05 Jun 2026 05:05:08 +0000 Files and hashes: 1: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: ev6EWBT6zicuEIlz8ovWQF3WONdWKEqyA06ghCoLREs=) 2: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 05:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:70:aa:46:d7:bf:a7:2d:78:32:b2:e7:a7:ff:28:97:a3:85:b3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Jun 4 02:19:08 2026 GMT Not After : Jun 5 05:05:08 2026 GMT Subject: CN=E17F3BED6D9628DBC084EB4D38B2AD97FBF888FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:82:0e:98:71:b5:35:55:2b:2a:18:e7:06: 7e:41:68:db:69:d3:b0:01:b7:36:88:a2:f2:fb:65: df:57:0f:b9:54:02:a3:07:26:82:07:5a:93:29:74: 7a:f9:f4:ce:6c:d9:eb:5e:e9:e3:36:8a:81:28:2a: e1:ac:de:3e:0e:2e:c8:00:fd:49:c5:5d:12:3c:65: a4:61:6f:54:23:9d:30:70:b1:7b:be:ab:19:25:e6: 78:ee:e2:3c:9b:10:c8:b0:7a:65:75:9c:d1:3a:fc: 5d:4c:e2:03:07:26:c5:91:78:9c:62:0c:e2:67:e3: 02:c2:40:76:07:b8:b8:0b:5f:cc:88:12:58:a6:94: 51:20:63:76:b2:49:17:08:58:a9:4c:6c:80:f8:7b: 71:18:ab:cd:4a:bb:28:db:d8:21:78:78:26:2b:69: 04:f3:66:19:cc:ce:4a:16:11:4e:c6:40:77:15:5c: 72:26:79:9c:2a:8e:fc:61:ba:58:56:d4:be:d4:7f: 91:51:48:f5:3e:d4:89:dd:9c:ff:04:d9:53:1b:46: 65:21:be:10:9c:58:f3:e1:5a:6f:12:eb:41:5f:5d: c6:1f:4b:a7:76:6f:56:f4:80:79:ce:9f:2c:b3:d4: a6:b7:3c:fb:bc:a5:35:11:10:92:2d:3f:4e:0c:c2: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:3B:ED:6D:96:28:DB:C0:84:EB:4D:38:B2:AD:97:FB:F8:88:FB X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9e:be:47:71:8b:30:fc:49:9e:38:bf:79:46:cd:a4:f0:f0: 51:a6:24:75:d6:0a:6c:84:3f:e5:69:56:0c:d4:58:8c:60:c3: e2:a2:6e:59:af:da:4d:31:32:06:68:c8:68:e7:22:97:5f:96: 2b:d0:a0:85:ca:8d:c9:62:cc:2b:df:fb:03:6d:56:c1:33:bc: 1b:4a:a4:a9:af:b9:59:0d:6c:09:6a:05:9c:66:68:31:20:87: 39:84:00:3d:de:78:1c:90:b9:81:28:db:07:af:27:f4:df:59: c8:fc:93:24:69:38:01:2a:08:a8:62:d8:69:24:bc:43:52:fd: fe:78:a3:2f:a1:a9:9a:ce:4c:a5:ab:a5:68:26:b8:12:7c:bc: 29:fb:ec:e8:26:c1:d5:ed:13:87:ab:e0:4f:4d:dd:f1:2c:41: 5e:3f:18:11:87:8e:4d:f0:24:15:32:1a:1f:fb:e0:b4:b6:79: 76:31:af:8d:44:2d:02:c8:3c:f0:9e:cd:0c:8a:ff:4d:e3:2b: 34:d4:60:4a:e8:a2:24:35:a3:ce:c9:a0:56:51:d4:78:13:9d: b6:36:de:dc:50:47:9d:ae:27:76:18:d9:96:28:5d:55:e4:36: c2:70:cd:89:4e:0e:b6:98:cc:2a:8e:54:8e:fc:aa:71:34:4c: e4:3c:3a:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAXCqRte/py14MrLnp/8ol6OFsxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA2MDQwMjE5MDhaFw0yNjA2MDUwNTA1MDhaMDMxMTAvBgNV BAMTKEUxN0YzQkVENkQ5NjI4REJDMDg0RUI0RDM4QjJBRDk3RkJGODg4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCIIOmHG1NVUrKhjnBn5BaNtp 07ABtzaIovL7Zd9XD7lUAqMHJoIHWpMpdHr59M5s2ete6eM2ioEoKuGs3j4OLsgA /UnFXRI8ZaRhb1QjnTBwsXu+qxkl5nju4jybEMiwemV1nNE6/F1M4gMHJsWReJxi DOJn4wLCQHYHuLgLX8yIElimlFEgY3aySRcIWKlMbID4e3EYq81Kuyjb2CF4eCYr aQTzZhnMzkoWEU7GQHcVXHImeZwqjvxhulhW1L7Uf5FRSPU+1IndnP8E2VMbRmUh vhCcWPPhWm8S60FfXcYfS6d2b1b0gHnOnyyz1Ka3PPu8pTUREJItP04MwspXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4X877W2WKNvAhOtNOLKtl/v4iPswHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJ6+R3GLMPxJ nji/eUbNpPDwUaYkddYKbIQ/5WlWDNRYjGDD4qJuWa/aTTEyBmjIaOcil1+WK9Cg hcqNyWLMK9/7A21WwTO8G0qkqa+5WQ1sCWoFnGZoMSCHOYQAPd54HJC5gSjbB68n 9N9ZyPyTJGk4ASoIqGLYaSS8Q1L9/nijL6Gpms5MpaulaCa4Eny8Kfvs6CbB1e0T h6vgT03d8SxBXj8YEYeOTfAkFTIaH/vgtLZ5djGvjUQtAsg88J7NDIr/TeMrNNRg SuiiJDWjzsmgVlHUeBOdtjbe3FBHna4ndhjZlihdVeQ2wnDNiU4OtpjMKo5Ujvyq cTRM5Dw6Fg== -----END CERTIFICATE-----Generated at Thu Jun 4 15:09:25 2026 by rpki-client