$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: 6+Uu7HsKzyCAHWMtZR9jv34a2zH3a2wQb6Sodt77c7Q= Subject key identifier: 6F:F7:57:B4:F5:32:14:AA:D9:A1:46:4F:FE:41:57:D9:7A:B7:FE:B9 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 4190C6C6CC6A0BD0B4AF2857197731F0E4877638 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 48 Signing time: Thu 11 Jun 2026 20:59:23 +0000 Manifest this update: Thu 11 Jun 2026 20:54:23 +0000 Manifest next update: Sat 13 Jun 2026 00:35:23 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: pFb4oixyYfk0OWdwkvetM2KF8khHEVgSUMxvRcL6ohc=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 00:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:90:c6:c6:cc:6a:0b:d0:b4:af:28:57:19:77:31:f0:e4:87:76:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Jun 11 20:54:23 2026 GMT Not After : Jun 13 00:35:23 2026 GMT Subject: CN=6FF757B4F53214AAD9A1464FFE4157D97AB7FEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:0f:c5:a5:0d:aa:9d:56:4d:76:e7:17:2a: 87:3f:b2:aa:61:27:31:79:54:c1:7c:a1:c6:2d:ae: c0:23:57:2f:45:2d:ee:24:bc:d2:82:a2:d8:6e:5a: 7e:a6:b9:ed:ac:38:a4:4c:75:3b:ac:fa:e6:a1:3b: 72:1a:c7:d4:7c:84:b6:e4:b1:a4:66:f3:17:4b:2b: fc:28:9f:17:3f:7b:ce:7d:f5:b5:6e:fe:31:d3:a0: d5:b2:c2:e6:2b:22:2d:38:7a:18:e9:4f:d1:49:64: 9a:23:35:f2:67:b4:3d:9c:93:cb:f2:28:df:cd:41: f5:61:ee:e4:d4:36:7b:9e:bb:f6:6b:5f:7f:db:58: 26:22:29:0f:e0:92:33:a7:45:80:53:90:8f:21:b5: 62:40:62:85:2a:ff:c2:f1:c9:39:3c:f7:e5:86:1c: 41:7b:b2:a9:b8:73:26:84:29:52:b5:a7:d2:bd:6e: 2e:0b:71:8a:2f:f0:4f:4c:aa:9b:c5:03:a4:8c:50: 46:af:84:7a:3e:90:f0:58:8c:15:fa:7c:86:df:b2: 75:38:9e:b3:b1:9c:09:8c:39:25:6d:75:d8:58:7c: aa:e7:90:d0:e0:e7:15:e1:ff:4a:4a:4f:80:8b:e8: 60:e7:01:5f:58:c4:28:27:72:52:cc:22:7a:0b:88: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F7:57:B4:F5:32:14:AA:D9:A1:46:4F:FE:41:57:D9:7A:B7:FE:B9 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bc:4e:6e:18:14:59:b2:9e:58:17:6f:f4:5a:0b:1b:4b:14: 17:c7:af:42:df:4a:d9:f5:97:39:4f:a2:64:6e:5e:4b:a0:d8: 16:1e:3a:eb:79:29:4a:03:67:17:1f:2b:2a:12:0f:8b:36:24: 9e:5e:85:74:95:fd:84:c6:54:b4:1b:05:0f:fc:f3:44:57:ed: d1:4a:6e:78:f9:11:8d:9e:c1:71:d3:7e:03:cc:3f:9c:06:c9: 94:92:84:0a:a3:eb:5f:66:20:14:9f:39:24:f5:51:cd:66:39: 8d:a4:b8:74:98:dc:fe:38:02:ea:09:5f:27:c4:6b:d1:b9:28: b3:bc:d8:d1:38:22:05:1c:c1:35:db:ae:c1:10:5c:a9:d0:9f: 3b:28:b8:9f:6a:dd:e7:fb:5a:a7:5b:6b:9f:7d:7f:2e:0d:ba: ad:9d:61:cd:a9:2f:f5:6d:1e:a6:f1:08:f3:32:db:12:5c:d0: 60:96:fa:f5:61:00:ed:1f:74:0a:80:94:2c:ce:87:28:7a:d1: ec:e5:53:85:d0:2d:a8:40:cc:6d:58:48:f4:51:22:13:60:82: 82:1d:77:23:af:17:19:0d:86:6f:cb:c4:01:7d:7c:3f:12:82: ac:7f:2d:c1:d3:df:5c:9a:75:a1:4f:13:81:21:d6:30:bd:9f: 9f:07:69:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQZDGxsxqC9C0ryhXGXcx8OSHdjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA2MTEyMDU0MjNaFw0yNjA2MTMwMDM1MjNaMDMxMTAvBgNV BAMTKDZGRjc1N0I0RjUzMjE0QUFEOUExNDY0RkZFNDE1N0Q5N0FCN0ZFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSg/FpQ2qnVZNducXKoc/sqph JzF5VMF8ocYtrsAjVy9FLe4kvNKCothuWn6mue2sOKRMdTus+uahO3Iax9R8hLbk saRm8xdLK/wonxc/e8599bVu/jHToNWywuYrIi04ehjpT9FJZJojNfJntD2ck8vy KN/NQfVh7uTUNnueu/ZrX3/bWCYiKQ/gkjOnRYBTkI8htWJAYoUq/8LxyTk89+WG HEF7sqm4cyaEKVK1p9K9bi4LcYov8E9MqpvFA6SMUEavhHo+kPBYjBX6fIbfsnU4 nrOxnAmMOSVtddhYfKrnkNDg5xXh/0pKT4CL6GDnAV9YxCgnclLMInoLiA0TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb/dXtPUyFKrZoUZP/kFX2Xq3/rkwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbxObhgUWbKe WBdv9FoLG0sUF8evQt9K2fWXOU+iZG5eS6DYFh4663kpSgNnFx8rKhIPizYknl6F dJX9hMZUtBsFD/zzRFft0UpuePkRjZ7BcdN+A8w/nAbJlJKECqPrX2YgFJ85JPVR zWY5jaS4dJjc/jgC6glfJ8Rr0bkos7zY0TgiBRzBNduuwRBcqdCfOyi4n2rd5/ta p1trn31/Lg26rZ1hzakv9W0epvEI8zLbElzQYJb69WEA7R90CoCULM6HKHrR7OVT hdAtqEDMbVhI9FEiE2CCgh13I68XGQ2Gb8vEAX18PxKCrH8twdPfXJp1oU8TgSHW ML2fnwdpcw== -----END CERTIFICATE-----Generated at Fri Jun 12 07:56:18 2026 by rpki-client