$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: SP7ajowDa3a2WmvFsNGudma6etmRC0X5AmU9KOfKUOQ= Subject key identifier: B4:05:2A:69:71:DD:B5:66:D8:54:4A:00:B3:F5:73:02:8D:CB:6B:86 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 109240A6199DB3BF4DA7C359751C16FCFB905013 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 0D Signing time: Fri 12 Jun 2026 03:59:46 +0000 Manifest this update: Fri 12 Jun 2026 03:54:46 +0000 Manifest next update: Sat 13 Jun 2026 04:03:46 +0000 Files and hashes: 1: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 2: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 3: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 4: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 5: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 6: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: ERoU/WN7QeFK/Hu4E6LBx3k6e4xMy+HuKECyqU29MwE=) 7: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 8: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 9: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:92:40:a6:19:9d:b3:bf:4d:a7:c3:59:75:1c:16:fc:fb:90:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jun 12 03:54:46 2026 GMT Not After : Jun 13 04:03:46 2026 GMT Subject: CN=B4052A6971DDB566D8544A00B3F573028DCB6B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:13:4d:89:ae:ef:6e:86:1b:1c:f4:f6:cf:8b: a8:25:ab:d4:d2:8c:fb:21:39:19:07:d0:58:48:f2: a9:8d:52:e9:26:21:e6:86:7d:1a:c0:f2:08:2f:ed: cc:c1:16:b3:8d:52:94:0a:68:6e:cb:31:66:c0:64: e0:ca:c3:7d:3b:77:1e:21:05:98:08:27:2b:74:c3: 0b:1d:50:0a:e7:b5:9c:53:47:a0:dd:20:9d:0c:81: 51:90:ee:84:a5:4f:83:6f:fa:7c:e4:7b:9c:7d:75: 31:dd:0d:82:08:f7:c7:9a:8c:d1:f7:e9:a7:45:6b: f9:32:d8:30:51:b1:05:94:3b:cd:bf:4f:35:a2:26: 6d:ca:52:ee:19:a9:08:9e:9f:29:55:e8:cd:d3:66: ca:c4:63:7f:9b:64:78:b6:9e:fe:5a:ca:f9:ca:13: cc:6e:98:e1:1b:26:87:33:8a:db:b3:65:b1:e2:d3: 1f:4d:c5:17:e0:e6:63:02:68:39:f7:25:69:e4:ca: 33:e7:9b:15:b9:a9:b4:e9:d4:b8:6a:13:15:06:85: 4f:33:72:64:51:95:9a:08:d1:d5:c7:22:48:d4:6f: cb:66:d8:ae:05:f9:f0:33:0d:f7:34:fe:6d:96:89: fe:81:32:74:36:03:0f:e1:24:e6:3d:4f:8e:f6:0f: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:05:2A:69:71:DD:B5:66:D8:54:4A:00:B3:F5:73:02:8D:CB:6B:86 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:70:57:e4:de:ff:e6:58:2a:6c:59:15:a2:f5:a1:7e:16:c4: 99:ee:4c:f5:6b:2f:00:13:0b:ee:4f:5d:c1:4e:81:84:ed:6e: 11:48:c6:92:ac:34:fe:ed:27:63:77:12:7a:b1:2a:43:48:c9: ab:81:3b:67:bb:2b:42:13:d6:18:3f:0d:07:4d:9d:48:ed:64: 4f:75:cb:68:6a:7b:ba:bc:ca:9d:f9:5a:3a:26:67:bf:a3:4b: cf:4c:70:d0:4f:36:94:87:d5:9d:3c:77:0a:19:9d:85:02:bf: 4b:53:5f:8b:23:bc:0a:61:88:59:45:6c:f7:2f:70:45:3f:b4: cb:7f:6e:8e:a0:d0:84:56:02:98:88:cf:12:16:3b:d3:fe:c8: df:68:9a:fe:b7:77:2b:2d:72:78:ff:50:fc:ed:0a:95:b0:79: 37:30:64:01:14:41:09:fc:18:21:65:8b:e9:d7:2d:c6:35:55: a5:96:87:52:90:31:40:15:69:a0:8c:31:93:b4:db:dd:31:90: e5:18:72:ae:b2:73:9e:b6:9a:43:09:49:a9:7e:0b:71:5f:e6: e6:71:03:ad:86:f5:1e:5c:8e:80:c6:0f:66:33:25:e5:3f:03: 29:31:2c:d9:0b:d1:6f:05:b4:39:c3:5d:00:45:64:5d:14:37: 47:cd:5f:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEJJAphmds79Np8NZdRwW/PuQUBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA2MTIwMzU0NDZaFw0yNjA2MTMwNDAzNDZaMDMxMTAvBgNV BAMTKEI0MDUyQTY5NzFEREI1NjZEODU0NEEwMEIzRjU3MzAyOERDQjZCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzE02Jru9uhhsc9PbPi6glq9TS jPshORkH0FhI8qmNUukmIeaGfRrA8ggv7czBFrONUpQKaG7LMWbAZODKw307dx4h BZgIJyt0wwsdUArntZxTR6DdIJ0MgVGQ7oSlT4Nv+nzke5x9dTHdDYII98eajNH3 6adFa/ky2DBRsQWUO82/TzWiJm3KUu4ZqQienylV6M3TZsrEY3+bZHi2nv5ayvnK E8xumOEbJoczituzZbHi0x9NxRfg5mMCaDn3JWnkyjPnmxW5qbTp1LhqExUGhU8z cmRRlZoI0dXHIkjUb8tm2K4F+fAzDfc0/m2Wif6BMnQ2Aw/hJOY9T472DyWZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtAUqaXHdtWbYVEoAs/VzAo3La4YwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3BX5N7/5lgq bFkVovWhfhbEme5M9WsvABML7k9dwU6BhO1uEUjGkqw0/u0nY3cSerEqQ0jJq4E7 Z7srQhPWGD8NB02dSO1kT3XLaGp7urzKnflaOiZnv6NLz0xw0E82lIfVnTx3Chmd hQK/S1NfiyO8CmGIWUVs9y9wRT+0y39ujqDQhFYCmIjPEhY70/7I32ia/rd3Ky1y eP9Q/O0KlbB5NzBkARRBCfwYIWWL6dctxjVVpZaHUpAxQBVpoIwxk7Tb3TGQ5Rhy rrJznraaQwlJqX4LcV/m5nEDrYb1HlyOgMYPZjMl5T8DKTEs2QvRbwW0OcNdAEVk XRQ3R81f8A== -----END CERTIFICATE-----Generated at Fri Jun 12 07:48:26 2026 by rpki-client