$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: 54k7sGSQtecDAMzQ6pIBn2oYBvUhSoDPKu4deJviUFQ= Subject key identifier: 51:77:B5:15:C7:C5:24:C6:A8:BF:11:2D:52:99:DB:D8:C7:DB:84:20 Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 5EDFFB2D97AACFA6FB28DF6AB35063297683743F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: 41 Signing time: Thu 11 Jun 2026 14:58:51 +0000 Manifest this update: Thu 11 Jun 2026 14:53:51 +0000 Manifest next update: Fri 12 Jun 2026 15:41:51 +0000 Files and hashes: 1: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: 61zYe4Sf/n7pnb2JleRya8QV1x1m1ANX0HYssWeZBkw=) 2: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) 3: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 15:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:df:fb:2d:97:aa:cf:a6:fb:28:df:6a:b3:50:63:29:76:83:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Jun 11 14:53:51 2026 GMT Not After : Jun 12 15:41:51 2026 GMT Subject: CN=5177B515C7C524C6A8BF112D5299DBD8C7DB8420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:fc:3f:99:8c:ce:ba:d2:ed:95:69:2a:a2: f6:7d:f3:12:57:be:7c:c6:26:3d:5a:6c:11:fd:5b: 78:51:2b:ff:0c:6f:00:54:0a:9d:51:cb:15:61:dd: 70:95:e9:e3:cb:21:90:f8:66:9b:f5:7b:b0:2d:8d: 47:c8:b7:3e:22:e0:5a:c4:96:40:8c:3a:66:2a:6c: 9f:95:b6:6d:8b:7c:ee:5a:ac:91:75:84:b5:d3:54: 5a:76:71:91:f4:42:3d:f7:8e:3f:a3:60:15:da:3d: 45:27:b5:d8:08:da:54:d0:18:8a:34:a5:d3:64:85: 9f:87:f3:78:4f:d6:85:78:40:c3:d8:7f:42:e9:b0: 8a:2b:d4:f0:e9:68:a6:ee:24:9d:b6:a7:f9:74:0f: 51:51:58:7b:34:fc:77:09:83:03:e4:eb:38:a7:e8: d0:d2:cc:3d:09:49:b0:2d:f0:81:af:20:f3:86:c1: 99:76:ce:84:c0:4b:3b:45:da:7e:9a:d1:ce:a1:c8: 89:9a:58:38:a5:c9:2c:ae:f5:e1:ad:2a:3b:02:24: e6:85:1d:8a:bd:2f:00:df:e5:a0:b5:c9:c5:fa:ca: d8:f3:f4:c3:b5:b3:bb:a9:c9:cf:a9:da:fa:f8:3f: 9c:e0:15:0c:d6:12:18:96:81:c4:b6:fd:e7:73:80: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:B5:15:C7:C5:24:C6:A8:BF:11:2D:52:99:DB:D8:C7:DB:84:20 X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c4:59:26:66:92:c8:d0:bf:ca:e6:79:d9:68:4c:03:85:64: 7d:55:70:2d:83:0e:22:cc:e5:9a:ae:74:d1:ec:6e:bb:5c:62: fb:c9:64:0f:8a:88:82:9e:f5:a0:89:4b:e9:b7:eb:b9:7d:15: 08:be:43:6e:83:e1:ea:eb:e6:6f:73:10:77:99:97:6c:bc:79: c8:b8:9c:e5:9d:fd:19:5a:15:07:63:78:88:ea:0c:2d:b8:5c: da:a5:03:8e:4b:1c:3f:4a:f1:ba:32:43:82:ec:fb:18:4d:c9: e7:3f:c8:87:bc:b8:6a:85:5d:7a:f8:7b:c1:5d:71:e0:68:68: 8f:23:fe:b0:44:22:4e:5e:ec:8e:f0:36:99:26:0d:ab:e2:75: b4:d5:c4:ee:ff:69:6d:31:9b:79:fe:39:ea:5d:dc:d2:a7:7f: d5:4f:28:5c:b4:a8:ae:08:df:23:b6:d2:0e:44:69:3e:70:ab: 2b:86:c5:5e:49:98:c4:4e:d9:f4:4b:54:e4:75:c4:27:c4:fe: 84:c1:cb:f0:53:83:f6:4b:38:84:c4:f2:54:b5:a7:52:31:25: f4:d8:ea:46:94:a8:3d:d8:e1:07:f6:7c:2e:b4:ac:b1:49:7f: 58:46:7b:8b:2a:d0:33:50:88:49:84:ac:e2:70:8f:40:0b:c1: 92:be:d2:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXt/7LZeqz6b7KN9qs1BjKXaDdD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjA2MTExNDUzNTFaFw0yNjA2MTIxNTQxNTFaMDMxMTAvBgNV BAMTKDUxNzdCNTE1QzdDNTI0QzZBOEJGMTEyRDUyOTlEQkQ4QzdEQjg0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1fw/mYzOutLtlWkqovZ98xJX vnzGJj1abBH9W3hRK/8MbwBUCp1RyxVh3XCV6ePLIZD4Zpv1e7AtjUfItz4i4FrE lkCMOmYqbJ+Vtm2LfO5arJF1hLXTVFp2cZH0Qj33jj+jYBXaPUUntdgI2lTQGIo0 pdNkhZ+H83hP1oV4QMPYf0LpsIor1PDpaKbuJJ22p/l0D1FRWHs0/HcJgwPk6zin 6NDSzD0JSbAt8IGvIPOGwZl2zoTASztF2n6a0c6hyImaWDilySyu9eGtKjsCJOaF HYq9LwDf5aC1ycX6ytjz9MO1s7upyc+p2vr4P5zgFQzWEhiWgcS2/edzgB69AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUXe1FcfFJMaovxEtUpnb2MfbhCAwHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMRZJmaSyNC/ yuZ52WhMA4VkfVVwLYMOIszlmq500exuu1xi+8lkD4qIgp71oIlL6bfruX0VCL5D boPh6uvmb3MQd5mXbLx5yLic5Z39GVoVB2N4iOoMLbhc2qUDjkscP0rxujJDguz7 GE3J5z/Ih7y4aoVdevh7wV1x4GhojyP+sEQiTl7sjvA2mSYNq+J1tNXE7v9pbTGb ef456l3c0qd/1U8oXLSorgjfI7bSDkRpPnCrK4bFXkmYxE7Z9EtU5HXEJ8T+hMHL 8FOD9ks4hMTyVLWnUjEl9NjqRpSoPdjhB/Z8LrSssUl/WEZ7iyrQM1CISYSs4nCP QAvBkr7Snw== -----END CERTIFICATE-----Generated at Fri Jun 12 04:14:15 2026 by rpki-client