$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: 2B9xBXj2RP5p2f8GbOAu0dLqwK3QuUrLHUyXvrSaXNQ= Subject key identifier: 80:4F:86:32:53:C2:F9:06:9C:48:75:C0:B4:D2:B0:9A:A4:F4:22:97 Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 68827716F98C3F6489C7CD151F9B999D02B37121 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: 45 Signing time: Thu 11 Jun 2026 07:48:27 +0000 Manifest this update: Thu 11 Jun 2026 07:43:27 +0000 Manifest next update: Fri 12 Jun 2026 11:44:27 +0000 Files and hashes: 1: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: XopqknNozLIOxnPbIjLKj+xUN25fh77zS5ZKRc7PDhg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:82:77:16:f9:8c:3f:64:89:c7:cd:15:1f:9b:99:9d:02:b3:71:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Jun 11 07:43:27 2026 GMT Not After : Jun 12 11:44:27 2026 GMT Subject: CN=804F863253C2F9069C4875C0B4D2B09AA4F42297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:73:0c:60:29:a2:ea:2f:22:03:ba:12:d0: 03:af:f7:8b:1d:58:7d:81:51:99:31:dc:6e:3e:0c: 80:83:98:6f:91:0c:bc:bd:d7:f4:54:14:4f:4b:a9: 2a:34:49:a1:c6:62:9b:37:df:aa:31:f9:cd:1d:8e: 9f:d2:95:24:99:02:06:bd:d2:fe:00:43:fe:a7:ef: b6:a0:bc:8d:ff:37:64:50:a5:ae:fb:80:9d:3a:41: a2:16:d4:39:eb:41:3d:d1:34:7d:45:64:9e:08:fa: 8c:47:b3:1b:26:76:91:c6:20:2c:cd:a9:b6:0a:3d: e2:ac:48:9c:67:c7:e1:ff:b1:c7:2f:4a:5d:66:9a: 20:e4:3c:cb:9e:4b:47:fe:8d:b7:bb:66:b5:6a:32: 73:a0:87:9a:b7:54:ce:2d:71:f8:fd:03:f2:49:9b: f6:84:19:88:cb:01:b6:55:d6:ea:f9:2f:72:dc:70: c5:11:2d:65:9c:e3:f7:4d:a1:ce:a5:89:c5:17:07: ee:52:ab:4d:52:df:60:92:fc:69:99:cd:1c:d9:44: 76:82:45:e5:78:e2:8e:ca:83:b3:bc:78:18:73:47: 8e:14:52:d4:70:16:d2:cd:78:67:27:ae:2f:af:7b: d5:aa:c3:61:a4:63:28:4b:d1:df:55:85:e1:29:34: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4F:86:32:53:C2:F9:06:9C:48:75:C0:B4:D2:B0:9A:A4:F4:22:97 X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:a7:22:29:4d:f7:60:74:17:48:5b:90:1e:52:40:b9:5a:ba: 3f:80:80:05:9b:ab:1a:dc:5a:6d:5b:df:d7:1f:b6:e1:81:0d: f2:37:2f:72:17:aa:56:9b:59:1d:33:9b:fe:5a:26:4a:96:01: dd:be:17:39:c4:78:16:cb:42:4d:32:36:f9:35:ab:79:1d:cb: 6e:b9:07:ef:8e:87:be:ee:99:75:81:43:09:88:8f:a3:dc:10: ad:aa:a8:a7:5d:f8:c5:18:5d:15:7a:6b:11:f6:6c:a2:87:9f: 6f:21:02:d9:c1:ef:85:b6:26:83:65:a4:34:46:92:c2:fa:79: 52:78:09:b3:31:a1:4e:2c:76:f4:38:7f:7f:c6:4b:1f:7d:d9: 0f:e0:d6:c4:8c:a1:0a:39:7f:bc:44:6d:d7:18:70:7f:fd:23: 19:38:fd:f8:46:f6:a9:aa:97:d0:6b:cf:34:25:36:fe:7e:f5: 45:11:ba:75:b4:35:73:ee:cf:8f:cf:dd:7a:f6:f7:b9:e2:2f: 47:fb:be:b6:84:18:07:12:6f:5a:10:49:3d:bd:54:39:f3:26: 9e:70:0b:92:24:39:65:7a:5d:23:c5:a6:0a:aa:a6:cb:60:25: 84:9a:10:a5:e1:42:2b:16:e9:70:4a:ab:c1:0b:7d:e6:56:f4: 78:0e:4a:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaIJ3FvmMP2SJx80VH5uZnQKzcSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA2MTEwNzQzMjdaFw0yNjA2MTIxMTQ0MjdaMDMxMTAvBgNV BAMTKDgwNEY4NjMyNTNDMkY5MDY5QzQ4NzVDMEI0RDJCMDlBQTRGNDIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt3MMYCmi6i8iA7oS0AOv94sd WH2BUZkx3G4+DICDmG+RDLy91/RUFE9LqSo0SaHGYps336ox+c0djp/SlSSZAga9 0v4AQ/6n77agvI3/N2RQpa77gJ06QaIW1DnrQT3RNH1FZJ4I+oxHsxsmdpHGICzN qbYKPeKsSJxnx+H/sccvSl1mmiDkPMueS0f+jbe7ZrVqMnOgh5q3VM4tcfj9A/JJ m/aEGYjLAbZV1ur5L3LccMURLWWc4/dNoc6licUXB+5Sq01S32CS/GmZzRzZRHaC ReV44o7Kg7O8eBhzR44UUtRwFtLNeGcnri+ve9Wqw2GkYyhL0d9VheEpNI1BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgE+GMlPC+QacSHXAtNKwmqT0IpcwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4qciKU33YHQX SFuQHlJAuVq6P4CABZurGtxabVvf1x+24YEN8jcvcheqVptZHTOb/lomSpYB3b4X OcR4FstCTTI2+TWreR3LbrkH746Hvu6ZdYFDCYiPo9wQraqop134xRhdFXprEfZs ooefbyEC2cHvhbYmg2WkNEaSwvp5UngJszGhTix29Dh/f8ZLH33ZD+DWxIyhCjl/ vERt1xhwf/0jGTj9+Eb2qaqX0GvPNCU2/n71RRG6dbQ1c+7Pj8/devb3ueIvR/u+ toQYBxJvWhBJPb1UOfMmnnALkiQ5ZXpdI8WmCqqmy2AlhJoQpeFCKxbpcEqrwQt9 5lb0eA5KGA== -----END CERTIFICATE-----Generated at Fri Jun 12 03:40:49 2026 by rpki-client