$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: etC3vNxRaW4a9cQG8a2YVSGXXzJR6VKwObZrEXDpQNU= Subject key identifier: BF:93:91:CD:65:84:72:5E:D6:F2:49:C0:CA:6F:A2:69:F6:3A:6C:78 Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 086B38A9B5148C97BD73FB4A6C23B02C67474261 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 46 Signing time: Thu 11 Jun 2026 17:54:07 +0000 Manifest this update: Thu 11 Jun 2026 17:49:07 +0000 Manifest next update: Fri 12 Jun 2026 19:05:07 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 2: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 3: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 4: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: TadvS7yczpaQKT+XDxXjX8wt0itJkfCemS1FtleWSKQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6b:38:a9:b5:14:8c:97:bd:73:fb:4a:6c:23:b0:2c:67:47:42:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Jun 11 17:49:07 2026 GMT Not After : Jun 12 19:05:07 2026 GMT Subject: CN=BF9391CD6584725ED6F249C0CA6FA269F63A6C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:99:90:2a:74:6a:2d:5a:38:88:8f:f1:44: 25:9e:71:de:d5:bc:33:ab:76:a8:4c:d9:f6:df:4b: b9:3b:ca:ae:84:cf:ee:0f:d5:af:82:11:ad:76:59: 88:bf:95:df:26:87:46:f0:ec:bc:b9:ef:dd:5e:cc: 0f:cf:d1:56:8d:36:61:93:c5:e7:51:f3:18:24:63: d7:4c:69:b7:dd:c2:42:f3:5f:34:3c:8c:ea:2b:5f: 93:ed:81:21:5f:e4:6e:bd:5b:90:28:d4:ae:3f:82: eb:8a:87:28:61:ab:3d:49:7e:40:01:4f:67:50:48: d6:3b:cf:d1:86:6b:65:3a:7c:cc:04:e8:76:6a:f2: 57:26:eb:68:c4:c0:da:51:51:72:b3:14:09:ae:37: 5d:62:0d:65:d9:31:b2:dc:d4:41:88:27:d9:3d:82: 52:25:2e:57:51:93:73:75:d3:a2:2e:33:6e:88:f8: 6e:df:94:07:ba:43:f1:c2:2b:c7:d7:23:aa:de:68: 95:2b:be:0a:28:53:c0:a0:33:35:4c:2d:0e:7f:73: 8e:22:c7:e6:8e:52:eb:a4:8c:7a:2b:49:d0:04:11: 2b:d8:96:5f:ba:a8:87:16:84:d2:83:d0:26:32:18: 9e:e3:72:4b:15:3f:2a:94:5e:98:02:d3:b2:2b:d6: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:91:CD:65:84:72:5E:D6:F2:49:C0:CA:6F:A2:69:F6:3A:6C:78 X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9f:f2:86:b8:9c:ca:04:25:66:50:ae:f2:55:af:9d:32:48: 2b:72:d3:9f:73:a1:5e:14:32:87:2f:e5:21:6e:db:8f:78:36: 5f:f8:78:39:82:42:77:3d:ec:61:f0:1b:42:f7:4b:8b:bb:e1: 98:72:d4:3f:54:d9:af:87:b2:71:1c:23:bf:54:e4:9b:8e:38: 30:8c:eb:38:59:36:04:ba:9f:f6:34:ac:88:5a:c2:63:79:80: 52:41:8c:69:40:5c:99:12:92:50:b5:d1:d2:1a:05:6e:fc:ce: 6a:0b:14:7d:b2:6e:43:e0:78:46:99:f6:1f:36:ee:3b:75:5e: 3a:c8:3c:f1:e0:8d:4b:d2:c2:7b:2c:a4:c4:5f:2e:f6:26:eb: 60:8b:d8:09:17:73:2c:87:d1:2c:7a:c3:d5:03:40:7d:9f:93: b6:d0:76:d2:30:24:04:8f:37:88:fc:94:6e:4e:32:e6:14:9b: 4c:c2:fa:0f:20:52:4e:d8:b8:78:47:0e:a1:36:3c:19:8a:a3: 5d:49:21:ea:39:a9:34:5b:b1:5b:46:61:79:4c:4d:23:df:2c: 3b:53:6a:6c:ba:47:0f:15:d8:4d:6e:5a:bf:59:ac:00:21:be: c4:bb:50:b4:19:c7:17:0b:6a:2d:6c:23:1d:e4:71:e4:15:0c: 65:32:c0:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGs4qbUUjJe9c/tKbCOwLGdHQmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA2MTExNzQ5MDdaFw0yNjA2MTIxOTA1MDdaMDMxMTAvBgNV BAMTKEJGOTM5MUNENjU4NDcyNUVENkYyNDlDMENBNkZBMjY5RjYzQTZDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAJmQKnRqLVo4iI/xRCWecd7V vDOrdqhM2fbfS7k7yq6Ez+4P1a+CEa12WYi/ld8mh0bw7Ly5791ezA/P0VaNNmGT xedR8xgkY9dMabfdwkLzXzQ8jOorX5PtgSFf5G69W5Ao1K4/guuKhyhhqz1JfkAB T2dQSNY7z9GGa2U6fMwE6HZq8lcm62jEwNpRUXKzFAmuN11iDWXZMbLc1EGIJ9k9 glIlLldRk3N106IuM26I+G7flAe6Q/HCK8fXI6reaJUrvgooU8CgMzVMLQ5/c44i x+aOUuukjHorSdAEESvYll+6qIcWhNKD0CYyGJ7jcksVPyqUXpgC07Ir1r7fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv5ORzWWEcl7W8knAym+iafY6bHgwHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ/yhricygQl ZlCu8lWvnTJIK3LTn3OhXhQyhy/lIW7bj3g2X/h4OYJCdz3sYfAbQvdLi7vhmHLU P1TZr4eycRwjv1Tkm444MIzrOFk2BLqf9jSsiFrCY3mAUkGMaUBcmRKSULXR0hoF bvzOagsUfbJuQ+B4Rpn2HzbuO3VeOsg88eCNS9LCeyykxF8u9ibrYIvYCRdzLIfR LHrD1QNAfZ+TttB20jAkBI83iPyUbk4y5hSbTML6DyBSTti4eEcOoTY8GYqjXUkh 6jmpNFuxW0ZheUxNI98sO1NqbLpHDxXYTW5av1msACG+xLtQtBnHFwtqLWwjHeRx 5BUMZTLAhQ== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:23 2026 by rpki-client