$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: jd/KcpV9O5S4d1SWoxbKyCRsmZ2ZaCVwMKOmpuS3qNQ= Subject key identifier: 4F:62:16:16:91:4D:64:88:A0:C9:A0:64:0C:85:55:15:C0:83:A2:E3 Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 546FBC2944A91BC09BE3825D1A835068185DA281 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: AE Signing time: Fri 29 May 2026 12:27:49 +0000 Manifest this update: Fri 29 May 2026 12:22:49 +0000 Manifest next update: Sat 30 May 2026 12:56:49 +0000 Files and hashes: 1: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: i4GJR20GhrsDA3GIkitpjwXNk2a46gav8WlATeggQW4=) 2: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) 3: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 4: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) 5: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 6: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 7: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6f:bc:29:44:a9:1b:c0:9b:e3:82:5d:1a:83:50:68:18:5d:a2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: May 29 12:22:49 2026 GMT Not After : May 30 12:56:49 2026 GMT Subject: CN=4F621616914D6488A0C9A0640C855515C083A2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:29:57:6a:c2:d5:a2:2e:70:6a:a4:ac:9c: ee:ad:0f:f2:f3:2d:00:0b:e9:c5:5b:c1:36:e0:72: d1:d0:2f:9a:27:a3:7c:37:18:03:c5:51:b3:83:44: a9:9e:52:8c:61:4f:1b:54:2c:7e:0e:e0:92:6e:31: db:a0:dc:cf:c3:55:6d:4b:44:48:13:0c:0e:41:7f: b4:60:ca:ce:25:c4:c4:07:98:43:52:17:25:c7:55: 0c:a9:51:d3:8a:06:c6:46:1a:e9:a9:ea:39:1a:6d: c3:40:92:d6:da:51:56:00:ca:e3:2b:f3:0f:b6:87: b2:e6:bd:12:49:4e:6c:b2:dc:0f:0e:d1:71:08:e3: ee:d5:f2:3d:26:6b:a6:c1:96:83:fa:7a:47:8b:58: b6:ab:9f:e3:86:66:60:55:5f:37:94:4f:41:8f:cd: 82:80:c2:7b:fd:af:33:2e:c3:39:5e:30:e1:bd:6d: 83:38:cf:bc:53:4a:ae:f5:69:6f:c8:c6:aa:f3:5c: 6a:c4:e7:6d:73:3a:ac:7b:c9:da:b3:a7:6a:8f:6e: e5:7a:90:8d:96:6a:d0:32:61:1b:a2:33:9f:dd:4b: 0e:8c:bd:81:4b:58:e1:92:db:7e:0f:ce:eb:72:96: fb:61:75:89:76:df:e6:9a:4b:15:29:3c:dd:89:68: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:62:16:16:91:4D:64:88:A0:C9:A0:64:0C:85:55:15:C0:83:A2:E3 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:8a:54:56:f3:45:68:95:64:56:48:1c:50:3b:1b:48:64: da:1c:7c:07:20:b5:41:23:20:41:b2:10:24:db:70:8d:67:73: 07:a2:df:32:88:75:13:2a:c1:db:c3:6c:94:95:03:b0:6a:c6: fe:94:dc:69:98:79:dd:34:d0:eb:08:fa:02:48:f5:c5:d6:39: 89:fc:23:00:35:c1:2b:21:5f:f6:84:3e:59:9d:e9:f0:05:6c: fc:ce:6e:4e:fb:80:1f:87:fc:8d:1f:85:04:e2:37:bf:5f:94: 53:00:e4:8c:85:21:c5:87:5d:0c:92:23:44:5c:ea:50:9b:63: 24:10:58:5d:52:34:d1:23:d7:4e:ff:e7:f8:20:68:bb:b1:ae: 95:44:d8:be:02:66:0b:ba:08:9e:57:56:40:02:b1:30:7c:5b: 38:4a:72:58:4b:34:ee:07:72:90:3c:a8:a6:5c:14:67:97:ba: 99:7a:e7:2c:80:bb:74:b7:e2:bb:98:3e:25:f3:cc:5f:f1:bf: 82:44:97:75:f8:04:1d:94:b0:ab:54:7e:2e:bc:c7:4a:0b:89: 7e:17:eb:6b:c3:28:fb:9b:2c:2f:c2:68:ea:49:e3:76:d9:eb: 35:02:0d:33:ea:cf:b2:48:44:d3:9d:10:6a:dc:89:16:2d:6f: 19:7d:85:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVG+8KUSpG8Cb44JdGoNQaBhdooEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjA1MjkxMjIyNDlaFw0yNjA1MzAxMjU2NDlaMDMxMTAvBgNV BAMTKDRGNjIxNjE2OTE0RDY0ODhBMEM5QTA2NDBDODU1NTE1QzA4M0EyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tClXasLVoi5waqSsnO6tD/Lz LQAL6cVbwTbgctHQL5ono3w3GAPFUbODRKmeUoxhTxtULH4O4JJuMdug3M/DVW1L REgTDA5Bf7Rgys4lxMQHmENSFyXHVQypUdOKBsZGGump6jkabcNAktbaUVYAyuMr 8w+2h7LmvRJJTmyy3A8O0XEI4+7V8j0ma6bBloP6ekeLWLarn+OGZmBVXzeUT0GP zYKAwnv9rzMuwzleMOG9bYM4z7xTSq71aW/IxqrzXGrE521zOqx7ydqzp2qPbuV6 kI2WatAyYRuiM5/dSw6MvYFLWOGS234PzutylvthdYl23+aaSxUpPN2JaHGJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT2IWFpFNZIigyaBkDIVVFcCDouMwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfCKVFbzRWiV ZFZIHFA7G0hk2hx8ByC1QSMgQbIQJNtwjWdzB6LfMoh1EyrB28NslJUDsGrG/pTc aZh53TTQ6wj6Akj1xdY5ifwjADXBKyFf9oQ+WZ3p8AVs/M5uTvuAH4f8jR+FBOI3 v1+UUwDkjIUhxYddDJIjRFzqUJtjJBBYXVI00SPXTv/n+CBou7GulUTYvgJmC7oI nldWQAKxMHxbOEpyWEs07gdykDyoplwUZ5e6mXrnLIC7dLfiu5g+JfPMX/G/gkSX dfgEHZSwq1R+LrzHSguJfhfra8Mo+5ssL8Jo6knjdtnrNQINM+rPskhE050QatyJ Fi1vGX2FJQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client