$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: tLuSP/R37bAEBadH1yvgzYHUVgRbcrylD5MInTYO3HU= Subject key identifier: D4:A8:C7:51:BA:08:8A:B1:71:C8:12:F4:85:C0:C2:00:D4:80:1D:88 Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 02100ED02312DEE53E7877017CEADF8DF993D9B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 4C Signing time: Thu 11 Jun 2026 13:48:49 +0000 Manifest this update: Thu 11 Jun 2026 13:43:49 +0000 Manifest next update: Fri 12 Jun 2026 16:53:49 +0000 Files and hashes: 1: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: 5oneJiLbwm4R5GQaGtephJTVQq9AcJqXLtbzXZdyUm0=) 2: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:10:0e:d0:23:12:de:e5:3e:78:77:01:7c:ea:df:8d:f9:93:d9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Jun 11 13:43:49 2026 GMT Not After : Jun 12 16:53:49 2026 GMT Subject: CN=D4A8C751BA088AB171C812F485C0C200D4801D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:0d:05:18:f9:6c:cf:18:0c:b8:ae:1f:93: 75:5a:b6:85:c1:9d:98:1c:38:e8:17:fd:69:0c:f9: 52:7a:ea:af:22:e4:5a:63:24:cf:4b:69:99:f7:b3: 0f:8b:56:b8:41:e8:c2:3d:9f:8b:c9:aa:7c:3d:41: b6:37:73:0d:7b:25:b0:c6:ee:6e:3f:a1:a8:a5:86: 98:e8:0e:90:5f:9f:9c:ac:45:3a:f2:8c:53:30:91: 33:56:52:43:b2:9b:fa:a5:2b:fd:37:3d:cc:55:9d: e2:20:35:9a:cc:21:52:9c:ba:e5:4a:52:68:2a:93: 6b:34:23:cd:f4:76:6c:42:4b:e2:cc:8f:82:71:ec: a1:da:84:ea:ec:18:76:bb:26:a1:0f:76:64:5b:ef: a4:e9:aa:2f:f0:b0:c5:e6:e6:18:38:81:a8:cb:e3: b9:b2:3a:0d:15:a1:0d:d1:02:86:7d:4e:f2:35:f9: 7f:51:ac:3e:39:f5:16:aa:7f:ae:28:fc:db:83:dd: ab:e2:69:69:be:a8:70:1f:d7:18:d0:fd:58:93:37: 76:d1:f4:b7:33:25:25:b9:1a:f6:04:c1:6d:2a:f3: af:f8:09:12:0d:33:9a:f7:35:56:3e:53:ff:94:c9: da:64:70:02:32:19:41:0f:d5:0f:68:e0:52:6b:e4: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:C7:51:BA:08:8A:B1:71:C8:12:F4:85:C0:C2:00:D4:80:1D:88 X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:89:3f:57:9a:9b:0d:cc:44:48:bc:3a:ff:99:10:b7:d2:7f: 94:27:2c:9d:4d:13:3a:66:7a:f1:e5:99:98:9e:88:bc:49:3a: a3:4f:d6:f2:d7:d4:01:2f:7f:84:71:04:cd:df:ee:a9:d0:a4: 90:4c:c5:69:cd:2e:de:dc:0a:e6:2c:71:ca:8d:0a:dc:d0:84: 94:96:13:3a:f2:5c:d7:0b:ad:4c:11:ec:a9:7d:da:5a:d5:c8: bc:f5:dc:f2:d9:3f:8c:e9:24:6e:b7:2c:5a:00:03:2e:b9:53: 1b:f1:c1:de:26:43:99:76:09:58:30:31:8b:99:7d:81:28:b3: cd:73:d9:d8:a0:7d:64:39:f2:dd:0f:dd:c9:f3:d3:3b:0a:46: c3:20:c3:2b:77:2a:80:5f:b0:5c:67:32:ba:2d:3e:3c:f8:00: 6c:27:bd:a0:74:b2:37:b7:c8:4d:ce:a6:4f:76:73:db:f4:c1: e1:d2:5e:4a:6f:39:32:51:25:e7:df:e1:81:ae:75:af:a5:6a: 84:78:bf:09:ec:84:be:23:ec:0c:65:30:79:ee:d8:29:7e:bd: 79:1c:d0:21:0b:18:39:69:92:32:e2:35:88:9e:b9:b3:27:21: 8d:cf:b7:97:6a:a7:5e:31:50:70:d9:85:9b:9b:c7:48:a8:83: 15:72:52:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAhAO0CMS3uU+eHcBfOrfjfmT2bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA2MTExMzQzNDlaFw0yNjA2MTIxNjUzNDlaMDMxMTAvBgNV BAMTKEQ0QThDNzUxQkEwODhBQjE3MUM4MTJGNDg1QzBDMjAwRDQ4MDFEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynQ0FGPlszxgMuK4fk3VatoXB nZgcOOgX/WkM+VJ66q8i5FpjJM9LaZn3sw+LVrhB6MI9n4vJqnw9QbY3cw17JbDG 7m4/oailhpjoDpBfn5ysRTryjFMwkTNWUkOym/qlK/03PcxVneIgNZrMIVKcuuVK Umgqk2s0I830dmxCS+LMj4Jx7KHahOrsGHa7JqEPdmRb76Tpqi/wsMXm5hg4gajL 47myOg0VoQ3RAoZ9TvI1+X9RrD459Raqf64o/NuD3aviaWm+qHAf1xjQ/ViTN3bR 9LczJSW5GvYEwW0q86/4CRINM5r3NVY+U/+UydpkcAIyGUEP1Q9o4FJr5J+TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1KjHUboIirFxyBL0hcDCANSAHYgwHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4k/V5qbDcxE SLw6/5kQt9J/lCcsnU0TOmZ68eWZmJ6IvEk6o0/W8tfUAS9/hHEEzd/uqdCkkEzF ac0u3twK5ixxyo0K3NCElJYTOvJc1wutTBHsqX3aWtXIvPXc8tk/jOkkbrcsWgAD LrlTG/HB3iZDmXYJWDAxi5l9gSizzXPZ2KB9ZDny3Q/dyfPTOwpGwyDDK3cqgF+w XGcyui0+PPgAbCe9oHSyN7fITc6mT3Zz2/TB4dJeSm85MlEl59/hga51r6VqhHi/ CeyEviPsDGUwee7YKX69eRzQIQsYOWmSMuI1iJ65sychjc+3l2qnXjFQcNmFm5vH SKiDFXJS2w== -----END CERTIFICATE-----Generated at Fri Jun 12 03:55:52 2026 by rpki-client