$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: ULTHz8y5bTg5FMMeyXQTG/XOD7vyJuVfXe5zgsMn2Ho= Subject key identifier: FB:56:B5:97:4D:7F:BB:F0:C8:CD:07:E2:28:36:44:19:D7:2C:2E:77 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 7B0443B314654708B574F65D110BB3B69D9B2476 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 1D Signing time: Thu 11 Jun 2026 21:34:25 +0000 Manifest this update: Thu 11 Jun 2026 21:29:25 +0000 Manifest next update: Fri 12 Jun 2026 22:52:25 +0000 Files and hashes: 1: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 2: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 3: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 4: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 5: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 6: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 7: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 8: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 9: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 10: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 11: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 12: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 13: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 14: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 15: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 16: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: 3oudnNVPBlqMWKGUf8K8wUKyizmRhnlAZKb6uwKJ79o=) 17: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 18: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 19: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 20: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 21: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 22: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 23: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 24: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 22:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:04:43:b3:14:65:47:08:b5:74:f6:5d:11:0b:b3:b6:9d:9b:24:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jun 11 21:29:25 2026 GMT Not After : Jun 12 22:52:25 2026 GMT Subject: CN=FB56B5974D7FBBF0C8CD07E228364419D72C2E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:5e:cf:3a:d3:e9:cc:41:81:a8:17:51:3a: 26:a7:33:a0:52:3d:ef:f5:02:9a:7c:cd:89:07:40: 5f:0b:13:07:af:88:b1:5c:d7:a9:99:f9:30:19:5c: 33:d0:2d:64:96:48:74:aa:2a:57:5b:c1:d6:43:b4: d6:07:7a:a7:65:2d:d4:39:86:1d:c4:90:c7:81:97: f4:ee:7f:49:9d:1c:43:f2:88:71:eb:47:ed:98:c0: f1:0d:75:21:75:0e:8c:83:37:16:20:36:ee:d9:49: 48:c9:7e:92:27:78:59:3d:a8:50:98:89:7c:b7:e8: 58:fb:c2:c5:e8:58:0d:a3:89:ff:cd:c1:c0:6f:3a: dc:97:0f:85:26:65:e5:82:53:12:b6:6c:8f:57:0e: 53:68:5d:6b:11:f2:c7:f2:fe:6c:8c:61:cc:ee:58: e3:28:03:f8:f9:ce:af:a3:c1:f1:21:e2:57:57:5a: 97:5b:ba:90:92:6c:bc:6b:73:69:15:1f:8b:d5:41: ff:87:6e:8a:83:7c:3b:9d:ab:d2:86:96:51:4a:8f: 48:f8:19:0e:89:33:bb:ae:61:a7:99:e6:99:b4:0d: 19:78:20:19:a5:f6:c5:06:d4:0c:f9:83:41:1d:de: f7:c1:db:56:94:24:95:58:b7:6a:5a:ab:52:0b:9f: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:B5:97:4D:7F:BB:F0:C8:CD:07:E2:28:36:44:19:D7:2C:2E:77 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c8:b0:e9:14:d5:66:4e:3f:ea:2a:6f:a3:1f:c4:66:37:54: ea:33:cb:98:4a:ad:2b:2c:fc:f1:db:4e:35:46:8e:30:b1:8b: 42:89:07:03:ed:b3:0b:78:2a:06:e1:d6:9c:d8:a5:de:72:45: 7b:9f:d6:cd:12:c4:8c:f5:3c:dc:f0:e5:31:dc:31:09:72:7e: d1:66:db:8f:fa:f9:e4:cc:ec:f6:5d:07:81:47:ec:65:d9:ca: 28:1a:f5:1f:bc:89:5e:25:a8:7c:ee:43:12:df:61:78:5b:58: f4:d1:cf:9d:d7:b9:71:2b:3c:76:ce:c9:e1:42:8e:20:44:fd: d6:7e:e3:83:98:f1:6f:ef:ce:62:a4:02:d6:b7:20:77:19:fa: 7b:4f:4e:7d:a7:28:2a:bf:9b:6a:95:6a:76:b3:30:61:2e:ed: 90:9e:73:8f:3b:8d:8c:03:69:56:96:62:b9:86:25:2a:7d:77: 19:0e:b2:f2:ab:2b:3a:8a:22:66:66:57:b9:ac:b5:76:87:4d: 3f:a4:3f:73:3a:c8:62:1e:c3:68:b1:bd:e9:3c:dd:ca:17:69: bc:47:f5:6c:ef:ca:e9:4a:fe:e2:1b:a7:fa:33:87:23:51:d6: 6d:64:4c:cc:da:4a:8c:f2:9e:3b:86:f5:29:4d:3d:45:6b:ae: e4:37:32:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUewRDsxRlRwi1dPZdEQuztp2bJHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA2MTEyMTI5MjVaFw0yNjA2MTIyMjUyMjVaMDMxMTAvBgNV BAMTKEZCNTZCNTk3NEQ3RkJCRjBDOENEMDdFMjI4MzY0NDE5RDcyQzJFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr6l7POtPpzEGBqBdROianM6BS Pe/1App8zYkHQF8LEweviLFc16mZ+TAZXDPQLWSWSHSqKldbwdZDtNYHeqdlLdQ5 hh3EkMeBl/Tuf0mdHEPyiHHrR+2YwPENdSF1DoyDNxYgNu7ZSUjJfpIneFk9qFCY iXy36Fj7wsXoWA2jif/NwcBvOtyXD4UmZeWCUxK2bI9XDlNoXWsR8sfy/myMYczu WOMoA/j5zq+jwfEh4ldXWpdbupCSbLxrc2kVH4vVQf+HboqDfDudq9KGllFKj0j4 GQ6JM7uuYaeZ5pm0DRl4IBml9sUG1Az5g0Ed3vfB21aUJJVYt2paq1ILnxnXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+1a1l01/u/DIzQfiKDZEGdcsLncwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8iw6RTVZk4/ 6ipvox/EZjdU6jPLmEqtKyz88dtONUaOMLGLQokHA+2zC3gqBuHWnNil3nJFe5/W zRLEjPU83PDlMdwxCXJ+0Wbbj/r55Mzs9l0HgUfsZdnKKBr1H7yJXiWofO5DEt9h eFtY9NHPnde5cSs8ds7J4UKOIET91n7jg5jxb+/OYqQC1rcgdxn6e09OfacoKr+b apVqdrMwYS7tkJ5zjzuNjANpVpZiuYYlKn13GQ6y8qsrOooiZmZXuay1dodNP6Q/ czrIYh7DaLG96TzdyhdpvEf1bO/K6Ur+4hun+jOHI1HWbWRMzNpKjPKeO4b1KU09 RWuu5DcyXg== -----END CERTIFICATE-----Generated at Fri Jun 12 03:34:17 2026 by rpki-client