$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json) Hash identifier: z8FkcoC24unH0zAjg0hcuth+d2FG3y7WI8OwxC48Umk= Subject key identifier: 22:22:F2:44:23:AF:2A:D5:4B:66:6D:58:99:01:B9:67:39:E2:A3:63 Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Certificate serial: 605C45D0BC9AA68BE7DD2D23F45C1C790C548A18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft Manifest number: 1C Signing time: Wed 24 Jun 2026 01:16:31 +0000 Manifest this update: Wed 24 Jun 2026 01:11:31 +0000 Manifest next update: Thu 25 Jun 2026 04:18:31 +0000 Files and hashes: 1: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=) 2: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: xrrwluoBlkjzFniHqjt17wUMuLfZrjitag0yG6BbwyM=) 3: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 04:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5c:45:d0:bc:9a:a6:8b:e7:dd:2d:23:f4:5c:1c:79:0c:54:8a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Validity Not Before: Jun 24 01:11:31 2026 GMT Not After : Jun 25 04:18:31 2026 GMT Subject: CN=2222F24423AF2AD54B666D589901B96739E2A363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:1b:a1:65:86:5a:0b:87:51:52:d8:5f:bf: be:6f:3e:63:06:22:96:7d:b1:01:18:cd:4d:ac:99: f8:72:95:0d:0a:93:3d:a2:8c:36:10:51:d1:8d:39: 5f:e3:68:a7:e0:f2:e4:8e:5b:60:59:9e:25:86:e9: a1:c4:02:98:d0:0a:fd:01:b3:88:b8:f4:f9:af:ee: 8a:83:d6:cb:c0:b3:65:fa:18:a3:72:73:45:df:0f: 8e:3c:4f:0f:f6:1a:bf:96:5b:2c:e8:51:e1:fa:9c: 04:3a:a5:bc:93:f0:55:2e:81:0e:cb:ec:22:83:3f: 25:1d:88:48:71:74:fc:64:12:66:26:cd:86:db:fb: 86:bb:5a:7b:c2:f9:cc:f6:6b:d1:f2:23:b3:25:d0: f8:27:96:0a:94:28:b5:96:26:07:86:fb:81:cc:78: 63:10:48:e6:96:1e:f6:4e:2e:ab:c2:28:b4:ac:6c: e0:70:4c:d7:fc:c7:6f:38:65:5b:a9:bc:06:29:9b: 83:61:7c:81:f3:60:27:c9:c0:a5:3a:88:d6:b1:87: 7b:d5:b4:dc:a2:cc:00:7e:0d:79:3f:d6:d7:26:e4: 4b:56:e4:50:5b:7a:76:d9:71:ed:33:2e:22:5e:78: 28:38:36:15:d2:28:bb:a2:3e:0d:7c:4c:6d:00:18: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:F2:44:23:AF:2A:D5:4B:66:6D:58:99:01:B9:67:39:E2:A3:63 X509v3 Authority Key Identifier: keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6a:8f:46:79:14:47:b9:63:c0:8c:8c:6d:c4:18:2c:83:c4: e3:a8:71:d2:8e:f6:60:9d:05:f8:1e:1b:04:57:0b:ba:d3:f9: 60:f0:4c:50:bd:76:74:b6:9c:e1:3b:3d:1d:bc:bb:f5:dd:28: 6a:09:32:a3:08:cf:9a:16:2a:0e:10:97:80:b8:84:f6:9c:b5: b0:cc:26:e3:cc:15:98:28:ad:ef:98:48:d4:e1:18:26:d2:b7: f4:dc:6d:b4:7e:1e:b8:f1:ce:5b:ae:a4:25:c3:bd:fa:43:d4: bd:95:59:02:57:e6:6a:ee:81:cc:5b:f6:10:d7:e4:31:ea:ed: b0:c4:07:9d:06:37:55:cb:c9:4b:6b:1a:0e:ac:da:04:cc:55: ef:f5:d5:3c:3f:c5:59:65:fd:ac:fe:fb:2a:e0:37:fa:66:86: 3a:71:0e:41:37:4a:45:e8:24:22:56:96:53:76:ca:32:c1:bd: e0:5a:55:29:d9:57:86:22:02:6a:73:e9:61:12:7b:d1:82:41: c5:95:5d:28:9c:87:6a:40:71:b5:fe:bb:38:69:74:27:19:ea: 39:2b:32:37:b5:de:9a:e4:bb:57:d1:1d:3c:8e:00:fb:25:40: e9:b0:27:e5:a4:ac:02:8e:58:bc:4f:54:b0:5c:88:b8:63:3c: f4:29:33:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYFxF0Lyapovn3S0j9FwceQxUihgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB MTlBODE4QzAeFw0yNjA2MjQwMTExMzFaFw0yNjA2MjUwNDE4MzFaMDMxMTAvBgNV BAMTKDIyMjJGMjQ0MjNBRjJBRDU0QjY2NkQ1ODk5MDFCOTY3MzlFMkEzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2huhZYZaC4dRUthfv75vPmMG IpZ9sQEYzU2smfhylQ0Kkz2ijDYQUdGNOV/jaKfg8uSOW2BZniWG6aHEApjQCv0B s4i49Pmv7oqD1svAs2X6GKNyc0XfD448Tw/2Gr+WWyzoUeH6nAQ6pbyT8FUugQ7L 7CKDPyUdiEhxdPxkEmYmzYbb+4a7WnvC+cz2a9HyI7Ml0PgnlgqUKLWWJgeG+4HM eGMQSOaWHvZOLqvCKLSsbOBwTNf8x284ZVupvAYpm4NhfIHzYCfJwKU6iNaxh3vV tNyizAB+DXk/1tcm5EtW5FBbenbZce0zLiJeeCg4NhXSKLuiPg18TG0AGDchAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIiLyRCOvKtVLZm1YmQG5Zznio2MwHwYDVR0j BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3 MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTkzMTA5MDg3NjgyODEvMC9BMEM5OThCRkNDQUU4 OTQ2MzUzRUE3MzkxMkNCNzE1NkExOUE4MThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWqPRnkUR7lj wIyMbcQYLIPE46hx0o72YJ0F+B4bBFcLutP5YPBMUL12dLac4Ts9Hby79d0oagky owjPmhYqDhCXgLiE9py1sMwm48wVmCit75hI1OEYJtK39NxttH4euPHOW66kJcO9 +kPUvZVZAlfmau6BzFv2ENfkMertsMQHnQY3VcvJS2saDqzaBMxV7/XVPD/FWWX9 rP77KuA3+maGOnEOQTdKRegkIlaWU3bKMsG94FpVKdlXhiICanPpYRJ70YJBxZVd KJyHakBxtf67OGl0JxnqOSsyN7XemuS7V9EdPI4A+yVA6bAn5aSsAo5YvE9UsFyI uGM89CkzIg== -----END CERTIFICATE-----Generated at Wed Jun 24 16:58:33 2026 by rpki-client