$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: YT13f8sgVkZStM2c3PttcwaRcnyMl5ODNxH42csEQZY= Subject key identifier: 72:A5:69:74:B2:3C:C3:2B:4D:CE:10:BF:BA:BD:45:E2:E4:A3:BC:93 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 7CF856F0D3247D6987E0C9B1951CB26ACEA16B88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 54 Signing time: Thu 11 Jun 2026 17:09:04 +0000 Manifest this update: Thu 11 Jun 2026 17:04:04 +0000 Manifest next update: Fri 12 Jun 2026 20:18:04 +0000 Files and hashes: 1: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 2: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 3: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 4: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 5: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: 1B2xNjnEfENbC7HSZ6jYOrP52NayuFuIZfU09duG+qE=) 6: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 7: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 8: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 9: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 10: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 11: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 12: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 13: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 14: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 15: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 16: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 17: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 18: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 19: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 20: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 21: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 22: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 23: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 24: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 25: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 26: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 27: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 28: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 29: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 30: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 31: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 32: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 33: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 34: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 35: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 36: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 37: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 38: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 39: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 40: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 41: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f8:56:f0:d3:24:7d:69:87:e0:c9:b1:95:1c:b2:6a:ce:a1:6b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Jun 11 17:04:04 2026 GMT Not After : Jun 12 20:18:04 2026 GMT Subject: CN=72A56974B23CC32B4DCE10BFBABD45E2E4A3BC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:60:c2:fb:6f:db:e0:f7:8c:ae:95:5c:00: 6f:f3:40:92:6b:96:4a:a0:57:12:7c:18:43:71:ef: 47:72:90:9c:9b:0a:da:64:b6:4e:05:62:c5:f9:59: 20:9c:e1:31:94:91:f0:9b:04:e3:62:e2:39:dc:19: 41:b3:0f:38:6a:8c:c8:f8:b7:de:20:be:94:51:0c: a9:46:50:4a:f9:de:52:a1:de:a4:75:a1:4d:1e:9e: 86:d9:3e:cb:b2:d3:93:91:40:9c:cd:db:d1:e0:90: c8:90:55:49:ed:2c:4c:26:93:0a:17:54:5b:af:4f: 61:8c:1c:02:d7:fa:1c:50:8d:43:3f:e8:8c:5e:a2: 0d:a5:68:39:ab:71:7c:d6:12:cc:7b:87:ea:cf:50: 6f:56:ef:33:e6:cb:82:a6:27:c0:52:7b:33:29:93: c1:ed:10:6b:a4:7f:2b:f6:11:98:35:5b:a8:a6:ff: 49:df:e3:80:00:a8:5d:15:32:bc:e0:ef:1d:ba:3f: 07:24:ef:7b:17:ae:23:7e:9b:ce:ec:b2:80:4d:69: 17:42:d4:40:dd:0a:7a:da:1e:b7:35:da:ab:19:c5: d9:e4:08:3c:d3:bc:e8:10:5d:51:fd:e5:24:7f:92: df:a8:eb:64:f1:5a:d3:dc:03:45:29:66:76:36:78: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:69:74:B2:3C:C3:2B:4D:CE:10:BF:BA:BD:45:E2:E4:A3:BC:93 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:68:c3:a5:53:27:0d:c1:e5:bd:d4:5b:fe:84:4a:88:b7: 24:b2:a2:d3:b2:75:4e:f4:17:10:d1:c6:ae:fe:05:8c:ee:bb: 92:51:58:0b:a6:b9:22:81:2c:15:8c:22:2e:3e:9c:21:66:c3: ac:c2:7f:c0:a2:34:09:8f:42:4d:6d:70:f2:c1:0f:6b:1d:2b: 5b:f2:eb:bf:07:2b:d4:61:69:a1:0b:28:55:67:95:46:ac:3f: 7c:70:2e:68:7b:fb:82:73:6f:92:8b:36:e2:0d:1f:cb:ee:82: 57:88:41:a2:fa:f6:16:e3:cd:1f:22:65:75:e0:1c:bf:b4:7e: d1:e9:d1:86:b3:9b:a3:2b:86:4d:05:98:7f:00:57:fb:3c:55: cc:c8:a0:87:ee:26:ce:a1:8d:ef:7a:b6:e7:39:fe:01:ac:38: 11:5f:f4:1e:e7:1f:06:d7:91:78:3d:fe:8b:f0:a3:fc:00:99: 45:db:9f:45:f6:b5:cc:c4:a4:77:c3:bf:02:0a:3f:e3:e3:d0: c7:27:9f:b8:ee:8b:6a:17:5f:3c:e5:ac:58:aa:d8:c2:4a:06: 52:0e:c6:52:c9:55:14:13:43:c4:60:ba:e7:43:3b:cb:73:0c: 01:11:61:83:fc:dd:5c:79:e8:20:61:23:27:7c:5d:2e:43:c7: c7:87:5b:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfPhW8NMkfWmH4MmxlRyyas6ha4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA2MTExNzA0MDRaFw0yNjA2MTIyMDE4MDRaMDMxMTAvBgNV BAMTKDcyQTU2OTc0QjIzQ0MzMkI0RENFMTBCRkJBQkQ0NUUyRTRBM0JDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBmDC+2/b4PeMrpVcAG/zQJJr lkqgVxJ8GENx70dykJybCtpktk4FYsX5WSCc4TGUkfCbBONi4jncGUGzDzhqjMj4 t94gvpRRDKlGUEr53lKh3qR1oU0enobZPsuy05ORQJzN29HgkMiQVUntLEwmkwoX VFuvT2GMHALX+hxQjUM/6Ixeog2laDmrcXzWEsx7h+rPUG9W7zPmy4KmJ8BSezMp k8HtEGukfyv2EZg1W6im/0nf44AAqF0VMrzg7x26Pwck73sXriN+m87ssoBNaRdC 1EDdCnraHrc12qsZxdnkCDzTvOgQXVH95SR/kt+o62TxWtPcA0UpZnY2eDV3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcqVpdLI8wytNzhC/ur1F4uSjvJMwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/how6VTJw3B 5b3UW/6ESoi3JLKi07J1TvQXENHGrv4FjO67klFYC6a5IoEsFYwiLj6cIWbDrMJ/ wKI0CY9CTW1w8sEPax0rW/Lrvwcr1GFpoQsoVWeVRqw/fHAuaHv7gnNvkos24g0f y+6CV4hBovr2FuPNHyJldeAcv7R+0enRhrOboyuGTQWYfwBX+zxVzMigh+4mzqGN 73q25zn+Aaw4EV/0HucfBteReD3+i/Cj/ACZRdufRfa1zMSkd8O/Ago/4+PQxyef uO6LahdfPOWsWKrYwkoGUg7GUslVFBNDxGC650M7y3MMARFhg/zdXHnoIGEjJ3xd LkPHx4dbGQ== -----END CERTIFICATE-----Generated at Fri Jun 12 03:40:37 2026 by rpki-client