$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: Hb+W39fQprHt5xQ7NY+BCZE9etPz/CxKU2YgbveAghk= Subject key identifier: 47:DE:89:C8:10:24:83:DD:FC:3A:22:C8:F6:ED:85:9F:3B:1A:8F:87 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 41F87AA748F11432379F11DC066B025710EA873A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 4E Signing time: Thu 11 Jun 2026 12:33:47 +0000 Manifest this update: Thu 11 Jun 2026 12:28:47 +0000 Manifest next update: Fri 12 Jun 2026 15:11:47 +0000 Files and hashes: 1: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) 2: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: Ke3yvxGOeZC0Zc+qszxU86YAJWIyE3aJmeuw/CW0cwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 15:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f8:7a:a7:48:f1:14:32:37:9f:11:dc:06:6b:02:57:10:ea:87:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Jun 11 12:28:47 2026 GMT Not After : Jun 12 15:11:47 2026 GMT Subject: CN=47DE89C8102483DDFC3A22C8F6ED859F3B1A8F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:49:25:52:ea:14:74:18:69:e0:3c:07:a5: 1f:cf:64:0d:5e:e1:0f:bd:d1:7b:f4:53:60:22:20: 2d:50:f4:aa:50:6e:f5:5a:67:c7:e1:b2:8e:52:6d: 6a:1f:8f:ee:9a:77:fe:9d:0f:cd:cb:33:17:b6:21: fa:9a:47:0f:6d:73:25:d7:91:f3:d5:6c:cb:28:97: a6:0c:43:5d:8e:23:e9:43:fb:d3:53:5b:25:d4:83: d9:3e:1e:42:01:e7:7e:b9:cc:27:18:2d:33:2e:6c: 79:b8:ce:bc:b5:b4:ca:4a:ec:b3:08:8e:c7:f3:a1: 4e:eb:29:78:e7:fc:ae:e7:50:9a:aa:b5:a4:2d:57: 50:fd:93:fd:4f:49:0b:b2:ec:65:a0:8d:ff:5e:b2: c6:55:30:c4:ed:e5:76:84:d9:91:1f:34:21:5d:fd: fb:c2:5f:98:67:88:ae:f3:cc:a4:f1:df:08:ed:a4: e3:7b:e2:17:e5:b8:63:2e:54:d4:40:e6:41:e6:af: ad:6b:38:32:13:1b:7a:5c:7b:e7:01:fe:68:6e:46: 7a:6f:a8:30:73:24:ed:b1:6c:a9:83:3c:7d:5a:ac: 60:73:b1:25:fa:40:84:01:c3:99:24:1a:9d:66:b4: 15:24:04:a7:a2:0b:d6:0c:bd:08:70:c4:8c:d3:a1: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DE:89:C8:10:24:83:DD:FC:3A:22:C8:F6:ED:85:9F:3B:1A:8F:87 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:fe:6b:d6:e7:89:e3:44:a1:6d:8f:94:a3:7e:b1:9e:3d:ae: ba:cf:cc:23:2d:de:f4:c8:cc:b6:67:7c:ee:0a:d9:2d:ab:ed: 76:d6:df:90:cb:81:bd:92:c3:26:c6:9f:ca:54:50:87:56:97: 5c:dc:4f:ff:a9:dc:d4:a7:b8:5c:76:e8:9c:3f:c5:5d:8c:96: 27:31:fc:2d:53:51:76:c0:62:37:d6:6a:9c:9e:1f:74:a8:dc: d9:cd:49:34:6f:69:55:01:6d:73:2f:35:d0:66:c7:0d:30:76: f1:aa:9e:ed:10:08:4b:c6:e9:e3:d5:f3:45:93:b0:2f:3d:87: 1a:ab:ff:45:7a:7b:d8:c8:35:9a:3c:de:73:0c:6c:2f:03:03: 3d:d6:3e:69:3f:72:7a:0c:18:d9:b1:bb:04:1c:27:56:00:e5: 31:22:ad:2c:92:ed:2c:15:a1:e9:a5:be:bf:c7:22:8f:fc:a0: 8f:14:c5:5a:c1:ab:86:47:1e:d7:70:19:df:dd:02:a3:6f:9b: 4a:48:00:39:38:1e:0e:e8:70:81:29:fd:a8:ab:20:ae:79:73: 3f:32:6c:37:71:6f:93:91:c2:e9:39:0b:8c:1f:39:63:34:4c: 87:04:bd:78:73:87:d9:32:e6:eb:37:a1:d7:8f:c5:3b:bd:f9: e7:57:93:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQfh6p0jxFDI3nxHcBmsCVxDqhzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA2MTExMjI4NDdaFw0yNjA2MTIxNTExNDdaMDMxMTAvBgNV BAMTKDQ3REU4OUM4MTAyNDgzRERGQzNBMjJDOEY2RUQ4NTlGM0IxQThGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/UklUuoUdBhp4DwHpR/PZA1e 4Q+90Xv0U2AiIC1Q9KpQbvVaZ8fhso5SbWofj+6ad/6dD83LMxe2IfqaRw9tcyXX kfPVbMsol6YMQ12OI+lD+9NTWyXUg9k+HkIB5365zCcYLTMubHm4zry1tMpK7LMI jsfzoU7rKXjn/K7nUJqqtaQtV1D9k/1PSQuy7GWgjf9essZVMMTt5XaE2ZEfNCFd /fvCX5hniK7zzKTx3wjtpON74hfluGMuVNRA5kHmr61rODITG3pce+cB/mhuRnpv qDBzJO2xbKmDPH1arGBzsSX6QIQBw5kkGp1mtBUkBKeiC9YMvQhwxIzTobNPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR96JyBAkg938OiLI9u2Fnzsaj4cwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/5r1ueJ40Sh bY+Uo36xnj2uus/MIy3e9MjMtmd87grZLavtdtbfkMuBvZLDJsafylRQh1aXXNxP /6nc1Ke4XHbonD/FXYyWJzH8LVNRdsBiN9ZqnJ4fdKjc2c1JNG9pVQFtcy810GbH DTB28aqe7RAIS8bp49XzRZOwLz2HGqv/RXp72Mg1mjzecwxsLwMDPdY+aT9yegwY 2bG7BBwnVgDlMSKtLJLtLBWh6aW+v8cij/ygjxTFWsGrhkce13AZ390Co2+bSkgA OTgeDuhwgSn9qKsgrnlzPzJsN3Fvk5HC6TkLjB85YzRMhwS9eHOH2TLm6zeh14/F O73551eTdg== -----END CERTIFICATE-----Generated at Fri Jun 12 03:53:40 2026 by rpki-client