$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: FDfhyMk5Gh4vLGcryjfcz4aqUXwid1+yt5Kf/C9xvGY= Subject key identifier: D8:0D:53:22:9C:D8:E1:CF:4F:3D:67:4F:01:FB:91:C6:56:F6:6F:E1 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 1F52E7757FBD540AF196D98AD25AEBEAD78D480D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: B3 Signing time: Fri 29 May 2026 08:47:46 +0000 Manifest this update: Fri 29 May 2026 08:42:46 +0000 Manifest next update: Sat 30 May 2026 12:39:46 +0000 Files and hashes: 1: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 2: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) 3: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: DJpCHjtCZ6VUuH1I2GyJmHhrBdDRzXOIqEpL1JDIxaw=) 4: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:52:e7:75:7f:bd:54:0a:f1:96:d9:8a:d2:5a:eb:ea:d7:8d:48:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: May 29 08:42:46 2026 GMT Not After : May 30 12:39:46 2026 GMT Subject: CN=D80D53229CD8E1CF4F3D674F01FB91C656F66FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:9e:9a:60:8f:05:8c:77:9d:50:05:79:22: a2:ab:b6:7d:6d:0f:7c:c2:e3:5e:81:a3:3d:89:ce: aa:a4:28:ff:9f:f7:f8:30:7d:70:ed:19:6f:8a:8c: 9e:29:06:3b:71:bb:f2:33:f8:77:bd:06:d3:38:f5: 9a:83:07:9c:b2:1c:5c:ad:58:0a:86:2a:dc:67:2b: 45:38:3e:48:7c:69:fa:a3:b6:5d:cd:2b:67:29:7f: 5e:b3:54:e4:f9:06:d9:f4:a0:ea:9f:bd:23:8f:83: bd:30:22:6e:d3:27:ad:a1:fc:62:06:a9:8f:03:2a: b4:5a:33:30:70:cf:01:0b:6c:da:d7:9b:df:be:e1: 61:c6:06:e1:ec:90:19:43:c9:76:b5:37:2f:94:28: 07:c8:34:4b:f9:de:dc:e5:04:a3:ec:e3:e3:23:d9: ec:aa:b3:62:f6:c9:28:fa:e5:ee:e5:14:b7:89:d4: 00:aa:0d:3f:af:27:28:47:c8:44:ee:f0:1d:4e:67: ad:fd:5b:06:f6:9d:f3:f3:b8:30:a4:1e:08:59:5d: 9c:c3:f5:01:77:51:04:0e:1e:92:af:7f:ca:36:66: aa:bf:0b:88:03:7e:7b:22:24:8c:2f:dd:d5:af:c6: 0f:c8:25:02:8d:2d:a2:60:91:8b:f5:da:0d:f8:81: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:53:22:9C:D8:E1:CF:4F:3D:67:4F:01:FB:91:C6:56:F6:6F:E1 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:33:e1:30:29:24:1c:e2:bd:51:02:92:a7:d4:3d:0d:53:68: 5a:64:75:95:85:d5:4e:7f:ff:14:5d:eb:6c:17:69:56:cd:3e: 31:4f:79:39:11:db:75:6d:22:34:1f:59:3e:25:0a:aa:c7:61: 02:3d:09:78:60:f4:92:12:61:7d:1e:44:15:13:49:c6:6a:01: e1:bf:d3:ec:ca:7f:5c:dd:70:f4:54:94:3f:5f:d8:91:67:1a: 1b:4a:6a:f2:fd:b2:9c:35:fa:ed:14:01:62:35:f7:b9:38:1a: 41:b1:87:54:66:54:5e:45:29:c6:16:ce:0b:be:53:72:f0:95: 14:18:c4:80:51:95:2b:14:e6:34:37:75:d1:5b:2d:4f:96:f8: 37:d5:49:2c:bf:6b:66:49:93:60:ce:2e:f9:91:11:c0:b1:1d: 83:1c:eb:9f:f1:9e:ef:6b:41:91:09:77:c7:99:5e:b1:a4:cf: cf:7a:fd:18:0e:1b:2d:39:26:bf:4b:e6:b3:e5:4b:e8:3f:fb: e7:c5:e8:27:51:85:de:06:74:a8:16:dc:74:d5:60:91:3c:b3: c9:d4:03:15:bf:8d:18:84:27:3d:0d:4e:df:4c:6e:72:cf:08: 36:3f:ea:25:b1:b1:95:08:31:66:1d:71:ad:83:05:be:99:9c: 32:6b:3f:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH1LndX+9VArxltmK0lrr6teNSA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA1MjkwODQyNDZaFw0yNjA1MzAxMjM5NDZaMDMxMTAvBgNV BAMTKEQ4MEQ1MzIyOUNEOEUxQ0Y0RjNENjc0RjAxRkI5MUM2NTZGNjZGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXp6aYI8FjHedUAV5IqKrtn1t D3zC416Boz2JzqqkKP+f9/gwfXDtGW+KjJ4pBjtxu/Iz+He9BtM49ZqDB5yyHFyt WAqGKtxnK0U4Pkh8afqjtl3NK2cpf16zVOT5Btn0oOqfvSOPg70wIm7TJ62h/GIG qY8DKrRaMzBwzwELbNrXm9++4WHGBuHskBlDyXa1Ny+UKAfINEv53tzlBKPs4+Mj 2eyqs2L2ySj65e7lFLeJ1ACqDT+vJyhHyETu8B1OZ639Wwb2nfPzuDCkHghZXZzD 9QF3UQQOHpKvf8o2Zqq/C4gDfnsiJIwv3dWvxg/IJQKNLaJgkYv12g34gbibAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2A1TIpzY4c9PPWdPAfuRxlb2b+EwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzPhMCkkHOK9 UQKSp9Q9DVNoWmR1lYXVTn//FF3rbBdpVs0+MU95ORHbdW0iNB9ZPiUKqsdhAj0J eGD0khJhfR5EFRNJxmoB4b/T7Mp/XN1w9FSUP1/YkWcaG0pq8v2ynDX67RQBYjX3 uTgaQbGHVGZUXkUpxhbOC75TcvCVFBjEgFGVKxTmNDd10VstT5b4N9VJLL9rZkmT YM4u+ZERwLEdgxzrn/Ge72tBkQl3x5lesaTPz3r9GA4bLTkmv0vms+VL6D/758Xo J1GF3gZ0qBbcdNVgkTyzydQDFb+NGIQnPQ1O30xucs8INj/qJbGxlQgxZh1xrYMF vpmcMms/GA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client