$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: LbJ/eKS0Mg/vYHcE3pL/x7wIuPS//qaIiQjSO+ZftX0= Subject key identifier: FA:08:E9:72:E7:10:B0:B5:CF:B0:A3:30:39:BF:9C:22:8E:8C:BF:4E Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 3438B64C68FCA861BAB1056FCA4BC47A1E914B00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 9C Signing time: Sat 16 May 2026 05:02:32 +0000 Manifest this update: Sat 16 May 2026 04:57:32 +0000 Manifest next update: Sun 17 May 2026 08:49:32 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 2: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 3: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: L0GSWGLzdQyU92QF5Z60GU6LEa1FNZubRBjbVzNxc3Y=) 5: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:38:b6:4c:68:fc:a8:61:ba:b1:05:6f:ca:4b:c4:7a:1e:91:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: May 16 04:57:32 2026 GMT Not After : May 17 08:49:32 2026 GMT Subject: CN=FA08E972E710B0B5CFB0A33039BF9C228E8CBF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:85:cb:53:14:3b:28:eb:90:78:8b:db:b1: 67:33:b6:0b:0e:1d:a2:ef:06:e1:d3:5a:03:23:9c: e3:3b:7e:80:3d:35:95:87:ab:34:a4:4e:62:23:6c: 16:a2:40:72:23:be:06:c3:b0:ea:6e:0b:04:c4:ec: 9d:b4:67:40:8c:bb:78:51:e6:e7:c9:2f:29:b8:cc: 58:42:90:5a:e1:a1:cd:79:b0:df:ed:9f:52:c3:2c: 97:d4:c5:e5:4c:3f:9d:1b:c2:fe:35:06:78:48:c4: 4a:09:ca:72:2d:ee:8e:86:ca:56:18:44:9e:80:5e: 2d:bc:68:19:4d:da:2f:61:86:7f:f0:8a:1d:df:7a: f0:1d:d7:ef:0a:2a:6b:65:e1:45:d6:58:77:08:e3: 9c:c3:27:c7:9e:eb:90:d7:35:5f:84:cd:5a:c5:06: 7e:43:2e:e7:60:e8:92:6c:29:6b:f8:12:51:ae:ac: 7f:a5:65:d5:d4:dd:fa:36:70:1f:64:f9:3d:70:ac: 26:63:c6:3c:fb:83:8f:26:d0:ec:67:d1:e0:92:b0: 3b:7f:bf:8f:4e:e6:f1:3d:ea:70:34:fc:09:ae:ba: cd:e4:09:b6:9b:05:e1:20:97:ad:ae:85:01:16:23: 96:18:c5:e3:82:31:19:94:57:8e:33:4c:ab:57:ee: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:08:E9:72:E7:10:B0:B5:CF:B0:A3:30:39:BF:9C:22:8E:8C:BF:4E X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:95:a6:53:09:c4:e1:99:ce:04:8f:c0:dd:1f:18:4f:27:0d: 1f:2e:87:7e:f5:c6:4f:d8:6d:e6:4d:76:85:4d:ff:9f:4c:95: ee:8a:af:03:6f:b4:4f:2b:f4:5b:6a:60:7d:08:56:93:1d:ed: 32:3f:27:aa:08:bf:d5:2c:8f:16:57:3d:69:ec:96:c8:71:6d: fb:2a:3e:a9:d5:bc:6e:c4:bb:91:f8:69:34:62:d7:69:84:4a: c5:79:4c:e0:ef:e9:85:e9:1d:6b:c2:44:9b:55:ea:18:d8:03: 56:e1:e7:9e:3e:c8:d2:e6:91:e1:c2:f0:30:f3:a5:b3:5b:d0: 5b:a5:df:b6:ec:65:93:ef:f4:62:e2:df:08:22:dc:21:fc:6e: cb:fe:02:42:92:42:08:36:c3:ce:f0:14:13:9b:05:64:de:e9: dd:28:c0:90:c7:51:7f:e0:4d:54:b7:98:73:cd:96:2f:7a:c3: 33:7e:d8:5e:ac:c2:ea:82:4f:94:fe:29:f9:21:b7:02:0e:a6: 5f:68:3c:d6:39:0d:39:f2:a0:e5:45:51:fd:f2:80:f1:5c:14: 27:84:e5:3f:da:95:5d:7b:66:d8:b5:1e:39:f8:6a:5a:76:fc: 87:9e:51:88:ba:19:f5:ae:59:21:2d:ab:8d:ef:29:27:bb:c1: 10:54:55:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNDi2TGj8qGG6sQVvykvEeh6RSwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA1MTYwNDU3MzJaFw0yNjA1MTcwODQ5MzJaMDMxMTAvBgNV BAMTKEZBMDhFOTcyRTcxMEIwQjVDRkIwQTMzMDM5QkY5QzIyOEU4Q0JGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVa4XLUxQ7KOuQeIvbsWcztgsO HaLvBuHTWgMjnOM7foA9NZWHqzSkTmIjbBaiQHIjvgbDsOpuCwTE7J20Z0CMu3hR 5ufJLym4zFhCkFrhoc15sN/tn1LDLJfUxeVMP50bwv41BnhIxEoJynIt7o6GylYY RJ6AXi28aBlN2i9hhn/wih3fevAd1+8KKmtl4UXWWHcI45zDJ8ee65DXNV+EzVrF Bn5DLudg6JJsKWv4ElGurH+lZdXU3fo2cB9k+T1wrCZjxjz7g48m0Oxn0eCSsDt/ v49O5vE96nA0/Amuus3kCbabBeEgl62uhQEWI5YYxeOCMRmUV44zTKtX7lHVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+gjpcucQsLXPsKMwOb+cIo6Mv04wHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJWmUwnE4ZnO BI/A3R8YTycNHy6HfvXGT9ht5k12hU3/n0yV7oqvA2+0Tyv0W2pgfQhWkx3tMj8n qgi/1SyPFlc9aeyWyHFt+yo+qdW8bsS7kfhpNGLXaYRKxXlM4O/phekda8JEm1Xq GNgDVuHnnj7I0uaR4cLwMPOls1vQW6Xftuxlk+/0YuLfCCLcIfxuy/4CQpJCCDbD zvAUE5sFZN7p3SjAkMdRf+BNVLeYc82WL3rDM37YXqzC6oJPlP4p+SG3Ag6mX2g8 1jkNOfKg5UVR/fKA8VwUJ4TlP9qVXXtm2LUeOfhqWnb8h55RiLoZ9a5ZIS2rje8p J7vBEFRVhQ== -----END CERTIFICATE-----Generated at Sat May 16 21:14:55 2026 by rpki-client