$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: gOqvhHARKkRWEFjg8ctAdcPg3/7R0dOucWcg4XmDee8= Subject key identifier: 8F:F1:77:2C:E9:1A:2A:7B:B4:5A:30:69:A9:1C:09:73:55:CB:3B:98 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 4F8C140045C936A65DB122DEB76A44ED34638F85 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 46 Signing time: Fri 05 Jun 2026 23:06:36 +0000 Manifest this update: Fri 05 Jun 2026 23:01:36 +0000 Manifest next update: Sun 07 Jun 2026 02:41:36 +0000 Files and hashes: 1: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 2: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: VLsAdMoiu5zGhlaOugCF1FUO+jfQ32HK2lqExnJPsqo=) 3: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 4: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 5: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 02:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8c:14:00:45:c9:36:a6:5d:b1:22:de:b7:6a:44:ed:34:63:8f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Jun 5 23:01:36 2026 GMT Not After : Jun 7 02:41:36 2026 GMT Subject: CN=8FF1772CE91A2A7BB45A3069A91C097355CB3B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:45:68:47:8b:8f:eb:ba:5b:d2:e9:d1:95: 5e:98:91:32:b9:73:84:7a:3c:8b:68:88:62:40:24: 25:ff:9f:ea:9f:8d:2a:7b:eb:23:5e:88:15:1a:67: 28:17:9c:de:1d:22:69:55:34:1c:07:8c:ca:14:f0: 70:aa:2e:78:a2:54:ac:99:d9:4c:ae:f3:77:30:c3: 40:97:b6:8c:a2:bf:b5:75:af:92:df:58:a0:d4:de: 64:95:00:23:61:68:92:d4:9e:20:9e:25:9c:fc:b2: d7:10:56:bc:f0:91:4d:c8:ca:11:58:de:7a:06:39: cc:2a:7e:d9:b7:f0:44:18:b3:17:88:ca:de:e7:a2: b0:4e:f2:aa:f5:46:e3:aa:d9:54:90:a5:77:cb:21: e7:8d:aa:93:42:0b:e3:ef:df:fd:ad:f9:a2:0e:4c: 40:38:53:b4:ad:51:d1:85:aa:0e:14:3f:1f:16:79: 2f:32:0d:2d:4e:1c:b3:07:e4:cb:33:2e:e7:35:cc: 3a:49:79:99:30:07:6f:7e:c5:05:ec:48:41:9c:97: 0c:0c:5c:62:4d:c0:42:a8:b9:f5:c8:38:75:ab:db: f2:89:a9:57:d5:98:d9:f7:b7:dc:6a:e1:12:d3:43: aa:a1:52:c2:cd:fc:d0:4f:f0:45:e1:52:ab:7f:08: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F1:77:2C:E9:1A:2A:7B:B4:5A:30:69:A9:1C:09:73:55:CB:3B:98 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ad:57:e9:68:ed:b8:10:ab:15:4d:b4:73:0c:0a:ea:c4:e4: f6:fb:88:f3:8d:cd:32:78:a2:d0:b5:2b:0e:bc:c9:9d:18:9a: d3:10:ed:8d:64:6f:36:03:b0:b0:f3:ea:e3:ef:2a:3c:af:03: 8c:9c:33:ab:4d:ed:57:c7:89:16:61:91:8f:19:04:ad:32:a0: 05:fb:7e:ac:b1:7a:c6:e8:dd:8f:0b:2a:2e:95:f9:ee:a4:88: ef:0e:65:86:ef:84:b0:1e:c7:f6:b9:73:f5:33:14:c9:de:27: 7a:53:26:95:b6:f6:bb:f3:81:0a:e0:f4:4d:f4:48:c4:56:fb: b3:69:e9:ae:77:e0:ab:9b:ff:95:6f:be:55:9b:7f:0c:b4:c6: 3a:d7:e9:87:56:49:5f:eb:1c:22:35:7d:c9:ef:26:76:20:be: 6c:ad:40:40:56:e3:68:cf:d5:07:e6:c5:50:aa:a5:39:6f:22: f3:ed:04:e4:d6:1e:27:5e:87:90:01:5b:74:31:84:2a:54:87: b1:10:f1:b3:78:a7:5f:a1:f2:e0:52:16:bf:08:11:e9:08:39: 0b:19:2a:cd:c3:9e:54:97:60:b7:92:d8:7b:06:b2:29:af:fc: ff:5c:04:3a:96:73:b0:ac:dc:8e:b5:0a:f9:ff:05:ea:b8:c6: ba:2d:fd:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT4wUAEXJNqZdsSLet2pE7TRjj4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA2MDUyMzAxMzZaFw0yNjA2MDcwMjQxMzZaMDMxMTAvBgNV BAMTKDhGRjE3NzJDRTkxQTJBN0JCNDVBMzA2OUE5MUMwOTczNTVDQjNCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRUVoR4uP67pb0unRlV6YkTK5 c4R6PItoiGJAJCX/n+qfjSp76yNeiBUaZygXnN4dImlVNBwHjMoU8HCqLniiVKyZ 2Uyu83cww0CXtoyiv7V1r5LfWKDU3mSVACNhaJLUniCeJZz8stcQVrzwkU3IyhFY 3noGOcwqftm38EQYsxeIyt7norBO8qr1RuOq2VSQpXfLIeeNqpNCC+Pv3/2t+aIO TEA4U7StUdGFqg4UPx8WeS8yDS1OHLMH5MszLuc1zDpJeZkwB29+xQXsSEGclwwM XGJNwEKoufXIOHWr2/KJqVfVmNn3t9xq4RLTQ6qhUsLN/NBP8EXhUqt/CPZHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj/F3LOkaKnu0WjBpqRwJc1XLO5gwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsq1X6WjtuBCr FU20cwwK6sTk9vuI843NMnii0LUrDrzJnRia0xDtjWRvNgOwsPPq4+8qPK8DjJwz q03tV8eJFmGRjxkErTKgBft+rLF6xujdjwsqLpX57qSI7w5lhu+EsB7H9rlz9TMU yd4nelMmlbb2u/OBCuD0TfRIxFb7s2nprnfgq5v/lW++VZt/DLTGOtfph1ZJX+sc IjV9ye8mdiC+bK1AQFbjaM/VB+bFUKqlOW8i8+0E5NYeJ16HkAFbdDGEKlSHsRDx s3inX6Hy4FIWvwgR6Qg5CxkqzcOeVJdgt5LYewayKa/8/1wEOpZzsKzcjrUK+f8F 6rjGui39iA== -----END CERTIFICATE-----Generated at Sat Jun 6 18:08:14 2026 by rpki-client