$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json) Hash identifier: l5tj5B6nP/5gzz/kRZlCo+7E6RhT8cuSCBL7sBQJvOc= Subject key identifier: EF:60:64:3E:5A:D6:1C:C7:D0:17:A1:18:D7:80:61:DA:07:BC:EB:6D Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 054625DC9CF6EDE04A2E5BE948C841054D12F6E0 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft Manifest number: 01 Signing time: Mon 29 Jun 2026 06:09:21 +0000 Manifest this update: Mon 29 Jun 2026 06:04:21 +0000 Manifest next update: Tue 30 Jun 2026 09:14:21 +0000 Files and hashes: 1: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: dw70FuvOnjmD7rXRlkWySkj0UYF7Q9Rfx++m/SLEOTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:46:25:dc:9c:f6:ed:e0:4a:2e:5b:e9:48:c8:41:05:4d:12:f6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 29 06:04:21 2026 GMT Not After : Jun 30 09:14:21 2026 GMT Subject: CN=EF60643E5AD61CC7D017A118D78061DA07BCEB6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:97:57:5a:e8:a9:bb:b6:e1:20:bc:69:27: 5b:64:96:c0:4e:e3:93:24:e1:0f:b8:e3:18:d2:fa: 48:7c:df:7d:1e:52:8f:af:e9:c7:a6:8a:38:b4:d4: dc:45:fd:da:25:0b:17:4b:90:ae:5f:89:97:e8:93: c4:0b:27:95:ab:ab:ca:b8:11:e2:69:56:51:fe:b0: f5:b5:90:28:10:b1:d1:8c:84:ca:48:0e:51:aa:85: 00:23:36:43:fd:38:79:47:d8:bf:e6:57:1d:06:0e: b8:db:ec:1d:b1:11:6c:47:67:f5:3b:f5:83:90:d7: 0f:78:fa:42:08:58:6a:21:42:fd:0e:78:21:3b:98: 01:60:35:49:99:04:8a:07:db:f3:0a:50:c8:5f:c3: fe:d9:f5:99:89:66:8a:7e:3d:bd:6c:58:d0:bc:cf: e2:f1:ce:fb:0d:32:6f:8e:63:15:d0:9a:da:4a:97: fb:02:e6:87:3f:3c:7e:b7:f1:f9:df:66:4e:3d:94: 95:7f:e1:47:98:ec:0c:2e:c8:4c:be:f5:8c:27:0e: cb:3b:ad:cc:10:a3:6c:e9:ea:3e:f6:e5:c2:68:05: 05:e1:38:85:ed:88:3f:49:fd:68:95:98:11:3e:b4: ae:0d:bd:16:a8:33:79:d2:21:cf:1d:7f:ee:a2:69: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:60:64:3E:5A:D6:1C:C7:D0:17:A1:18:D7:80:61:DA:07:BC:EB:6D X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e1:3b:1c:58:43:58:b7:41:94:51:65:59:c5:c3:3e:8b:ad: b9:b4:e7:d9:c6:1c:40:ad:86:2a:00:3d:91:ca:ed:d0:71:e5: a4:da:9f:09:42:9f:e1:67:86:fd:af:14:04:98:9a:e4:5a:4f: 29:45:4b:c3:76:0d:3c:b2:d0:1e:99:bc:56:64:87:02:f2:dd: b8:86:c4:7e:de:3c:ec:c0:16:38:f0:91:f7:c3:b5:f8:15:c2: ac:d4:6d:c9:c8:89:7f:73:f4:09:8e:35:9a:cf:4c:6d:46:57: ba:8a:bc:19:56:6b:ba:0a:8a:49:0b:04:30:bb:71:b5:27:95: a2:b4:cf:fa:19:02:e2:47:d6:f5:69:a7:32:3b:20:0c:26:3f: c4:84:15:25:5a:42:e6:c6:04:a8:6f:d8:6a:b4:76:05:d3:9d: 72:d0:5a:20:a7:e1:42:4b:3a:af:b8:ba:f0:10:2b:de:fc:32: 9c:56:a3:bf:65:16:4b:a3:fd:c9:78:e3:7e:0b:55:63:b0:50: 0f:ee:58:cb:6b:cd:9c:c0:54:80:ed:c2:94:cc:c4:68:9e:12: bc:df:60:db:82:1a:b0:ea:92:a5:82:4d:29:8a:86:a9:9c:4e: b3:92:c2:f4:7c:5b:df:6d:cc:86:ba:19:fa:87:fd:7b:6f:3e: 77:93:1f:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBUYl3Jz27eBKLlvpSMhBBU0S9uAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYyOTA2MDQyMVoX DTI2MDYzMDA5MTQyMVowMzExMC8GA1UEAxMoRUY2MDY0M0U1QUQ2MUNDN0QwMTdB MTE4RDc4MDYxREEwN0JDRUI2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsWl1da6Km7tuEgvGknW2SWwE7jkyThD7jjGNL6SHzffR5Sj6/px6aKOLTU 3EX92iULF0uQrl+Jl+iTxAsnlauryrgR4mlWUf6w9bWQKBCx0YyEykgOUaqFACM2 Q/04eUfYv+ZXHQYOuNvsHbERbEdn9Tv1g5DXD3j6QghYaiFC/Q54ITuYAWA1SZkE igfb8wpQyF/D/tn1mYlmin49vWxY0LzP4vHO+w0yb45jFdCa2kqX+wLmhz88frfx +d9mTj2UlX/hR5jsDC7ITL71jCcOyzutzBCjbOnqPvblwmgFBeE4he2IP0n9aJWY ET60rg29FqgzedIhzx1/7qJpgmcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTvYGQ+ WtYcx9AXoRjXgGHaB7zrbTAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8wLzM5MDlDQ0Y2OUQ3RjFBMTdEQ0EwMTg3OEZBRTA2RUMzOUIzOEUz QkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA44TscWENYt0GUUWVZxcM+i625tOfZxhxArYYqAD2Ryu3Q ceWk2p8JQp/hZ4b9rxQEmJrkWk8pRUvDdg08stAembxWZIcC8t24hsR+3jzswBY4 8JH3w7X4FcKs1G3JyIl/c/QJjjWaz0xtRle6irwZVmu6CopJCwQwu3G1J5WitM/6 GQLiR9b1aacyOyAMJj/EhBUlWkLmxgSob9hqtHYF051y0Fogp+FCSzqvuLrwECve /DKcVqO/ZRZLo/3JeON+C1VjsFAP7ljLa82cwFSA7cKUzMRonhK832Dbghqw6pKl gk0pioapnE6zksL0fFvfbcyGuhn6h/17bz53kx8S -----END CERTIFICATE-----Generated at Mon Jun 29 22:48:04 2026 by rpki-client