$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: xDFQxkpDf6OeBPvRgukEfn6WF0y31VvWUnMibkrThuo= Subject key identifier: 0E:06:85:09:9C:FD:5E:F8:A1:54:57:E4:34:EA:0E:8B:08:5E:63:31 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 479989918212CCF38D8A353828F5CF97E2F98755 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 1C Signing time: Wed 24 Jun 2026 04:36:52 +0000 Manifest this update: Wed 24 Jun 2026 04:31:52 +0000 Manifest next update: Thu 25 Jun 2026 04:54:52 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: bgBomM37XE57L5DcFBxfWk5fKjjAaqZAI5Itvb9VvK8=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 04:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:99:89:91:82:12:cc:f3:8d:8a:35:38:28:f5:cf:97:e2:f9:87:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Jun 24 04:31:52 2026 GMT Not After : Jun 25 04:54:52 2026 GMT Subject: CN=0E0685099CFD5EF8A15457E434EA0E8B085E6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:dd:a7:7e:76:e7:e3:4b:75:86:60:16:2b: 47:04:ae:40:70:ba:d0:ff:24:cf:81:73:dd:ee:82: 46:b3:68:d8:01:ec:14:7d:03:49:4c:e7:97:a3:1c: fc:91:95:67:71:4c:4c:a2:e5:98:1e:ad:dc:a4:45: db:57:af:dc:87:63:53:33:9b:ca:6a:1a:0f:dd:68: ef:07:4a:50:47:5b:0e:81:3c:52:71:5d:4c:a3:eb: 23:59:cf:d4:b4:57:c4:3e:fb:3b:4b:e8:04:92:e0: 2d:0b:5a:ae:41:b3:7b:c1:60:af:67:b3:a9:d7:ac: 59:b7:55:85:15:07:5e:3d:51:ff:15:cb:11:c1:84: 8b:0c:70:cc:c8:d5:c5:41:87:ee:07:66:7e:4e:a8: 31:9f:8e:b0:d7:9c:d9:6e:ab:df:fd:c2:8f:01:4e: 38:94:76:e7:b7:a3:a0:01:fc:da:67:35:b7:2a:7d: 3a:f9:15:e5:56:ad:60:ab:65:87:69:26:8e:36:54: 4b:21:43:2d:aa:9d:7a:1e:73:c2:90:b3:55:2b:bc: d0:42:10:0d:28:f5:cd:d4:40:cc:97:50:ff:af:c6: f5:9c:89:cb:c6:c3:e9:64:65:1c:45:79:0d:ec:7d: 81:11:b7:73:78:d5:fe:a3:ef:6c:bb:b5:a8:8b:de: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:85:09:9C:FD:5E:F8:A1:54:57:E4:34:EA:0E:8B:08:5E:63:31 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:91:61:41:cc:b5:3f:5f:72:1d:74:05:63:43:6a:0c:5d: 37:4b:3d:b6:f7:ee:07:7f:56:9e:0d:21:c6:07:9b:ed:00:0c: c0:a4:7b:37:37:49:b1:92:91:11:51:4f:7d:b9:d1:82:f0:c3: d6:3d:34:20:18:c4:1e:4d:3e:d3:d7:b1:18:b6:5f:30:9f:99: 6e:15:86:e4:e7:a1:8a:7d:2b:8d:73:4e:57:e6:ca:6d:9c:08: e3:2c:ca:98:63:bb:28:4d:8a:88:6d:9c:ef:5c:62:88:2a:d1: 1b:44:2c:b5:80:d3:ab:e3:d7:a7:71:e0:83:3d:b7:59:84:02: 52:13:bf:de:65:26:a5:15:4e:70:61:89:09:48:ac:47:c1:11: 61:2a:be:27:bf:71:f8:e4:7d:95:d6:85:0b:11:00:61:df:25: ee:db:3b:f2:88:b9:3c:43:47:89:db:03:76:e6:c5:04:c1:fc: 2c:62:60:cc:d0:d7:a7:7e:15:75:d2:f1:97:8a:3d:ca:7c:d3: 28:ca:cf:07:82:59:d7:f6:4c:f1:2b:6e:a4:e1:a9:7a:8a:6e: 27:5e:9b:15:14:bd:e2:48:e2:18:ef:ce:e2:97:17:4e:be:f2: 35:0c:9e:a8:5c:16:6e:1d:3d:b4:a5:31:07:30:43:fd:9e:c3: 70:29:04:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR5mJkYISzPONijU4KPXPl+L5h1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjA2MjQwNDMxNTJaFw0yNjA2MjUwNDU0NTJaMDMxMTAvBgNV BAMTKDBFMDY4NTA5OUNGRDVFRjhBMTU0NTdFNDM0RUEwRThCMDg1RTYzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkId2nfnbn40t1hmAWK0cErkBw utD/JM+Bc93ugkazaNgB7BR9A0lM55ejHPyRlWdxTEyi5ZgerdykRdtXr9yHY1Mz m8pqGg/daO8HSlBHWw6BPFJxXUyj6yNZz9S0V8Q++ztL6ASS4C0LWq5Bs3vBYK9n s6nXrFm3VYUVB149Uf8VyxHBhIsMcMzI1cVBh+4HZn5OqDGfjrDXnNluq9/9wo8B TjiUdue3o6AB/NpnNbcqfTr5FeVWrWCrZYdpJo42VEshQy2qnXoec8KQs1UrvNBC EA0o9c3UQMyXUP+vxvWcicvGw+lkZRxFeQ3sfYERt3N41f6j72y7taiL3gZ7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDgaFCZz9XvihVFfkNOoOiwheYzEwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfuRYUHMtT9f ch10BWNDagxdN0s9tvfuB39Wng0hxgeb7QAMwKR7NzdJsZKREVFPfbnRgvDD1j00 IBjEHk0+09exGLZfMJ+ZbhWG5Oehin0rjXNOV+bKbZwI4yzKmGO7KE2KiG2c71xi iCrRG0QstYDTq+PXp3Hggz23WYQCUhO/3mUmpRVOcGGJCUisR8ERYSq+J79x+OR9 ldaFCxEAYd8l7ts78oi5PENHidsDdubFBMH8LGJgzNDXp34VddLxl4o9ynzTKMrP B4JZ1/ZM8StupOGpeopuJ16bFRS94kjiGO/O4pcXTr7yNQyeqFwWbh09tKUxBzBD /Z7DcCkEzg== -----END CERTIFICATE-----Generated at Wed Jun 24 16:56:44 2026 by rpki-client