$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: G7eZFHclY62NtLeJoIXxrnzryFbcX5y/x+L53Vh7klM= Subject key identifier: 47:56:46:C6:2B:AD:0F:7E:87:0F:68:EC:4F:43:3A:0D:B7:E4:97:8B Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 0336136F71D90335ABC7EA2D122B37B0A3A09856 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 52 Signing time: Thu 11 Jun 2026 16:24:00 +0000 Manifest this update: Thu 11 Jun 2026 16:19:00 +0000 Manifest next update: Fri 12 Jun 2026 17:17:00 +0000 Files and hashes: 1: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 2: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: BSJ8dzyQxw36zoqd8jbyWe1dElR35hPwEBGE3JJ6aAk=) 3: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 4: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 5: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 6: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 17:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:36:13:6f:71:d9:03:35:ab:c7:ea:2d:12:2b:37:b0:a3:a0:98:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Jun 11 16:19:00 2026 GMT Not After : Jun 12 17:17:00 2026 GMT Subject: CN=475646C62BAD0F7E870F68EC4F433A0DB7E4978B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:04:43:a2:50:d6:1c:ec:8e:7b:6a:a8:a8: c5:2b:a9:50:54:85:5e:d8:ee:e6:85:73:bb:92:91: fc:fd:11:54:6e:e3:14:6a:8f:44:c2:e0:d8:dc:32: 97:ed:93:8e:a2:d5:61:a6:f1:64:02:fb:b3:4c:90: 9c:d0:52:7c:5a:41:3e:a9:ec:b2:00:d4:be:f9:a0: f8:84:44:ea:b7:16:2d:20:57:09:d3:5a:40:75:63: 1b:5e:bf:ce:f4:91:22:3e:ad:eb:91:74:68:71:78: 88:35:e8:fe:53:05:b3:f8:c5:5c:5e:97:5e:0e:38: e4:12:99:5d:1b:d0:ae:d0:9f:88:4e:3c:f8:e4:3e: f5:ee:d8:20:49:b6:46:71:9c:5d:25:ba:80:23:56: a2:e9:ab:f4:e4:48:a3:07:f1:45:b9:20:e5:49:62: e6:31:47:9f:99:81:b8:e2:6d:48:03:7f:21:5b:55: 3a:27:0f:71:8c:5a:12:36:bf:f3:8f:7b:62:66:7c: 0f:73:56:89:0f:c7:53:be:34:32:79:f3:54:30:bb: 69:1e:cf:f3:8b:27:3f:7a:68:0d:c6:2b:70:45:24: 5b:cf:8b:b2:cd:87:13:00:b9:39:cc:ba:9f:aa:8c: 08:9b:65:84:2a:1f:5f:18:3e:af:44:5a:3a:cb:2a: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:56:46:C6:2B:AD:0F:7E:87:0F:68:EC:4F:43:3A:0D:B7:E4:97:8B X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f9:08:db:28:2f:9d:ac:a2:08:ff:57:b7:83:02:83:6b:36: e4:3c:56:a2:dd:3a:66:0c:c4:61:d7:fe:52:49:11:67:16:b5: af:98:db:58:88:92:47:1e:43:20:09:44:74:43:09:5a:c8:d5: 23:81:d8:60:5b:d2:e2:86:71:fa:5b:4d:33:50:2a:2b:39:a2: c6:c8:1e:ff:ad:eb:b2:b7:bd:e2:aa:99:87:c4:68:00:5d:3c: 6e:bb:a5:3c:18:c0:3a:8e:b1:7e:ce:95:6e:31:37:35:f6:d7: 9b:af:fc:97:f6:9b:ee:c5:b9:79:79:2c:ec:e7:2b:e0:34:f3: 62:13:fa:f5:9a:76:58:1e:ad:66:6b:9b:78:c2:f0:4f:d4:d5: db:56:42:62:e5:2c:5b:0c:0a:fd:75:96:b5:52:88:41:26:a4: f8:fb:81:86:88:ef:ec:82:a7:5b:2d:84:d3:1f:fe:c5:b4:7a: 73:05:01:26:7d:2e:76:87:64:16:6d:64:73:90:10:fa:4d:ca: d7:77:00:a6:5d:48:b6:1d:59:31:a9:54:f0:6f:72:5b:63:06: be:1c:cc:b5:0f:e7:b3:94:0b:14:16:77:51:ef:e2:9a:eb:ad: ba:f4:45:95:9d:86:4e:80:de:e6:4a:3c:91:3e:ec:13:a8:d3: 9d:70:bb:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAzYTb3HZAzWrx+otEis3sKOgmFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA2MTExNjE5MDBaFw0yNjA2MTIxNzE3MDBaMDMxMTAvBgNV BAMTKDQ3NTY0NkM2MkJBRDBGN0U4NzBGNjhFQzRGNDMzQTBEQjdFNDk3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIgRDolDWHOyOe2qoqMUrqVBU hV7Y7uaFc7uSkfz9EVRu4xRqj0TC4NjcMpftk46i1WGm8WQC+7NMkJzQUnxaQT6p 7LIA1L75oPiEROq3Fi0gVwnTWkB1Yxtev870kSI+reuRdGhxeIg16P5TBbP4xVxe l14OOOQSmV0b0K7Qn4hOPPjkPvXu2CBJtkZxnF0luoAjVqLpq/TkSKMH8UW5IOVJ YuYxR5+ZgbjibUgDfyFbVTonD3GMWhI2v/OPe2JmfA9zVokPx1O+NDJ581Qwu2ke z/OLJz96aA3GK3BFJFvPi7LNhxMAuTnMup+qjAibZYQqH18YPq9EWjrLKpujAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR1ZGxiutD36HD2jsT0M6Dbfkl4swHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfkI2ygvnayi CP9Xt4MCg2s25DxWot06ZgzEYdf+UkkRZxa1r5jbWIiSRx5DIAlEdEMJWsjVI4HY YFvS4oZx+ltNM1AqKzmixsge/63rsre94qqZh8RoAF08brulPBjAOo6xfs6VbjE3 NfbXm6/8l/ab7sW5eXks7Ocr4DTzYhP69Zp2WB6tZmubeMLwT9TV21ZCYuUsWwwK /XWWtVKIQSak+PuBhojv7IKnWy2E0x/+xbR6cwUBJn0udodkFm1kc5AQ+k3K13cA pl1Ith1ZMalU8G9yW2MGvhzMtQ/ns5QLFBZ3Ue/imuutuvRFlZ2GToDe5ko8kT7s E6jTnXC7sQ== -----END CERTIFICATE-----Generated at Fri Jun 12 07:54:42 2026 by rpki-client