$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: sWDEpB4AjrZILZGaHNi7qC4uZfYL5yr+ovaeGTiGN78= Subject key identifier: 0D:DD:15:E3:88:66:8E:4A:A0:F1:9C:29:14:BB:1A:EF:28:90:4C:DC Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 45F63A362CCF0A4D7AA78CAC6CAC94CEF4F7BAC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: 59 Signing time: Fri 19 Jun 2026 22:02:10 +0000 Manifest this update: Fri 19 Jun 2026 21:57:10 +0000 Manifest next update: Sun 21 Jun 2026 01:14:10 +0000 Files and hashes: 1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) 2: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) 3: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: 6Dyf1f9fk21tgmHwHigvLsb/PEpOlCvyaGUV6yeccUE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f6:3a:36:2c:cf:0a:4d:7a:a7:8c:ac:6c:ac:94:ce:f4:f7:ba:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: Jun 19 21:57:10 2026 GMT Not After : Jun 21 01:14:10 2026 GMT Subject: CN=0DDD15E388668E4AA0F19C2914BB1AEF28904CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:3a:2a:89:25:53:b0:c7:0e:f0:66:88:b6: db:2a:1e:bd:b2:e9:3d:62:f5:73:68:43:fb:e2:6c: c4:d9:d7:90:4f:c3:93:32:83:de:5b:6b:05:68:26: 3b:21:be:ed:02:84:9e:42:7d:e6:2b:ca:fc:df:6b: 41:d5:f3:78:cf:f5:8d:57:5a:02:57:5a:8a:a8:87: 29:1a:73:89:74:d4:1f:d1:55:9f:c9:2b:b4:e1:51: 9a:44:24:05:78:a3:24:bd:5b:f4:e3:7b:81:3c:58: d9:63:a6:ef:4d:85:fc:83:08:24:6d:a7:27:67:c6: 56:f6:9f:6d:0a:6b:6f:b9:c4:8d:59:c7:c3:16:17: 43:54:ae:4d:4b:9e:b8:84:a3:b3:3c:95:f4:f8:73: b2:b4:77:32:1a:27:6d:7b:e0:b8:14:1d:e2:04:f3: 37:5e:dc:71:ff:8f:ad:b1:e0:2d:d2:73:d9:17:6d: 0f:3f:ab:62:fb:47:dc:1d:7f:6f:c0:01:73:c1:11: e0:d3:a3:f2:43:6d:17:2c:f9:f2:11:7f:8f:57:92: 64:ad:7c:4b:bf:41:bb:85:98:e2:82:1c:cb:4b:42: 23:8e:24:55:95:b4:01:f6:c7:9b:cd:4f:84:44:28: 76:48:6d:e8:cc:d1:1d:93:37:27:b9:4c:cd:ca:c9: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DD:15:E3:88:66:8E:4A:A0:F1:9C:29:14:BB:1A:EF:28:90:4C:DC X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:dc:a4:91:32:51:60:56:85:11:9b:f6:e2:af:60:86:a6:da: 1a:b9:f8:59:73:43:17:28:1f:5a:f4:2b:f2:d9:59:5f:77:dc: 86:84:66:57:83:1d:47:8d:05:d8:ea:23:9e:a6:f3:d8:34:c2: eb:38:60:8f:c8:7d:14:c0:46:91:31:8f:39:66:dd:6b:3a:ff: a1:c3:c6:af:e4:39:bc:9d:55:9a:cd:e3:0e:25:68:1e:8e:1a: fb:df:fd:13:f5:6f:4a:6f:f6:3a:77:73:dd:b0:3f:66:22:13: e2:87:bf:1c:41:4e:a1:63:28:97:0d:86:57:80:34:7a:e7:1a: 2a:d0:e8:6b:13:34:34:6f:71:f1:39:bc:4e:ac:37:dd:10:b4: dc:27:30:e9:39:20:7d:bb:60:bc:6c:b4:d1:74:7e:a9:3c:19: 02:e2:94:e5:d5:4e:63:c2:13:14:66:8c:f8:98:1a:fc:84:65: 1b:a4:8e:9e:6d:2f:71:47:54:ae:b0:f8:93:34:c0:da:07:d4: 22:3d:d1:41:8d:67:7a:ce:2e:94:5a:d7:f9:f9:93:eb:2b:a3: b9:fa:4a:4c:b4:19:92:86:48:48:ea:f5:ca:f1:82:0e:fb:fd: 8e:99:9a:aa:f4:8d:c1:b7:05:73:6f:dd:62:98:5e:03:c9:90: f0:34:13:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURfY6NizPCk16p4ysbKyUzvT3usYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA2MTkyMTU3MTBaFw0yNjA2MjEwMTE0MTBaMDMxMTAvBgNV BAMTKDBEREQxNUUzODg2NjhFNEFBMEYxOUMyOTE0QkIxQUVGMjg5MDRDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRzoqiSVTsMcO8GaIttsqHr2y 6T1i9XNoQ/vibMTZ15BPw5Myg95bawVoJjshvu0ChJ5CfeYryvzfa0HV83jP9Y1X WgJXWoqohykac4l01B/RVZ/JK7ThUZpEJAV4oyS9W/Tje4E8WNljpu9NhfyDCCRt pydnxlb2n20Ka2+5xI1Zx8MWF0NUrk1LnriEo7M8lfT4c7K0dzIaJ2174LgUHeIE 8zde3HH/j62x4C3Sc9kXbQ8/q2L7R9wdf2/AAXPBEeDTo/JDbRcs+fIRf49XkmSt fEu/QbuFmOKCHMtLQiOOJFWVtAH2x5vNT4REKHZIbejM0R2TNye5TM3KyUYjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDd0V44hmjkqg8ZwpFLsa7yiQTNwwHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtykkTJRYFaF EZv24q9ghqbaGrn4WXNDFygfWvQr8tlZX3fchoRmV4MdR40F2Oojnqbz2DTC6zhg j8h9FMBGkTGPOWbdazr/ocPGr+Q5vJ1Vms3jDiVoHo4a+9/9E/VvSm/2Ondz3bA/ ZiIT4oe/HEFOoWMolw2GV4A0eucaKtDoaxM0NG9x8Tm8Tqw33RC03Ccw6Tkgfbtg vGy00XR+qTwZAuKU5dVOY8ITFGaM+Jga/IRlG6SOnm0vcUdUrrD4kzTA2gfUIj3R QY1nes4ulFrX+fmT6yujufpKTLQZkoZISOr1yvGCDvv9jpmaqvSNwbcFc2/dYphe A8mQ8DQTWg== -----END CERTIFICATE-----Generated at Sat Jun 20 16:37:57 2026 by rpki-client