$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: Mnn/axMzJ2OCPCucrA/RjlZwugpjwNMhSWAgzMMhPGI= Subject key identifier: DD:DF:C2:F2:F4:57:CA:AB:2F:AD:90:27:6A:1A:0E:24:21:FC:58:BA Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 781F964308C88DB02B5F9AA0895CECCE39795D6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: AD Signing time: Fri 29 May 2026 05:22:39 +0000 Manifest this update: Fri 29 May 2026 05:17:39 +0000 Manifest next update: Sat 30 May 2026 06:47:39 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: VOVeupxmCCJdNJthMgic9zrLdDNbUGEJgfwIydaWduo=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1f:96:43:08:c8:8d:b0:2b:5f:9a:a0:89:5c:ec:ce:39:79:5d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: May 29 05:17:39 2026 GMT Not After : May 30 06:47:39 2026 GMT Subject: CN=DDDFC2F2F457CAAB2FAD90276A1A0E2421FC58BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:a4:ab:6a:e2:c8:1a:dd:9c:32:fe:1b:29: 38:45:c2:ac:80:18:16:cc:33:71:a5:99:55:f8:00: e8:42:45:fb:b9:a9:06:95:e4:af:73:ff:92:ef:65: a2:ae:57:27:b0:cf:8f:65:d1:b6:3e:1d:c7:cd:62: bc:3f:6c:c0:29:6d:28:bc:b5:59:d6:18:56:f7:c7: fd:e5:b2:ab:0d:3a:90:d5:fb:dd:eb:a1:25:74:0c: a5:21:8f:76:65:55:29:05:3b:73:44:ed:1d:b7:77: 04:c6:31:2e:d0:07:8c:77:fb:6f:31:fc:c3:27:b9: d7:65:81:94:46:a4:51:f2:90:db:36:4f:f3:74:dd: 66:29:7c:5b:02:07:81:13:14:01:04:e7:41:66:d6: ba:8d:5e:02:bb:83:f1:0b:b8:72:60:23:2f:97:c9: cd:96:5f:dd:bf:1d:b8:cb:07:d8:e3:d4:91:bf:ac: ad:ce:a4:ed:73:5c:54:2f:64:1b:5a:8f:fb:6f:e5: 1b:56:fa:3e:1e:26:e2:37:54:61:64:cf:6a:75:c8: 5b:1c:74:0f:78:f3:6f:54:36:5a:25:2a:e3:d7:2c: e0:ab:7f:78:3c:b0:83:ef:f2:28:51:b4:63:41:8f: 3b:fb:5d:1f:e3:ef:fc:b9:75:b5:4d:fe:df:3c:71: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DF:C2:F2:F4:57:CA:AB:2F:AD:90:27:6A:1A:0E:24:21:FC:58:BA X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:10:6c:93:60:2c:18:48:b2:68:a9:ca:c3:1c:8f:16:c9:78: ab:5a:cf:36:34:4f:75:f4:f8:ce:df:6a:f9:5d:ca:8e:73:13: 63:3a:15:50:ae:20:d8:e4:6d:fe:8b:f5:a8:1d:95:40:8a:13: 35:f1:6c:60:7f:4e:c4:f1:20:27:b7:ed:4c:54:33:dc:c2:a8: 35:80:50:8c:60:53:75:00:15:85:50:61:ca:ab:eb:4e:9e:bf: 3e:b8:9d:6f:2c:a2:d1:37:69:99:d8:98:4c:86:9e:80:a6:e8: 71:64:6e:54:ea:6d:5b:ae:e7:84:4b:cb:b5:62:89:85:a7:c9: a9:c2:6c:b1:81:4b:6d:17:67:83:72:0a:0f:71:50:19:d0:ef: 3b:60:40:83:a5:e6:36:fe:e6:1f:12:16:fb:ab:f6:6e:68:d3: d4:44:04:12:ce:6b:10:db:7c:d5:a7:0e:92:9a:c3:3a:d6:ed: 37:d9:4f:49:ac:85:38:78:34:d2:9b:be:ee:d3:15:84:38:e4: 77:d8:88:f3:64:66:86:f2:34:61:f5:2e:45:df:29:19:c4:03: 7e:b8:fa:f9:df:ab:c0:a6:ca:d8:e6:8c:eb:68:dc:c4:7b:6c: bd:e0:97:b2:55:0f:4a:e5:a6:cb:a2:6d:d7:d6:1c:8b:38:0c: 40:26:33:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeB+WQwjIjbArX5qgiVzszjl5XW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA1MjkwNTE3MzlaFw0yNjA1MzAwNjQ3MzlaMDMxMTAvBgNV BAMTKEREREZDMkYyRjQ1N0NBQUIyRkFEOTAyNzZBMUEwRTI0MjFGQzU4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSc6SrauLIGt2cMv4bKThFwqyA GBbMM3GlmVX4AOhCRfu5qQaV5K9z/5LvZaKuVyewz49l0bY+HcfNYrw/bMApbSi8 tVnWGFb3x/3lsqsNOpDV+93roSV0DKUhj3ZlVSkFO3NE7R23dwTGMS7QB4x3+28x /MMnuddlgZRGpFHykNs2T/N03WYpfFsCB4ETFAEE50Fm1rqNXgK7g/ELuHJgIy+X yc2WX92/HbjLB9jj1JG/rK3OpO1zXFQvZBtaj/tv5RtW+j4eJuI3VGFkz2p1yFsc dA94829UNlolKuPXLOCrf3g8sIPv8ihRtGNBjzv7XR/j7/y5dbVN/t88cXmbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3d/C8vRXyqsvrZAnahoOJCH8WLowHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBBsk2AsGEiy aKnKwxyPFsl4q1rPNjRPdfT4zt9q+V3KjnMTYzoVUK4g2ORt/ov1qB2VQIoTNfFs YH9OxPEgJ7ftTFQz3MKoNYBQjGBTdQAVhVBhyqvrTp6/Pridbyyi0TdpmdiYTIae gKbocWRuVOptW67nhEvLtWKJhafJqcJssYFLbRdng3IKD3FQGdDvO2BAg6XmNv7m HxIW+6v2bmjT1EQEEs5rENt81acOkprDOtbtN9lPSayFOHg00pu+7tMVhDjkd9iI 82RmhvI0YfUuRd8pGcQDfrj6+d+rwKbK2OaM62jcxHtsveCXslUPSuWmy6Jt19Yc izgMQCYzfw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:21 2026 by rpki-client