$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: qDcqMx9s5eyqf/iJHHmAz4a/hQboSaW+P1k/kmBh8rk= Subject key identifier: E7:17:8F:37:10:E7:8F:3C:9E:F8:D6:79:7B:91:04:5E:7C:88:F1:5B Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 2AFB3A9AD7C1F7F59912D691CED3750910B7A992 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: AF Signing time: Fri 29 May 2026 10:32:46 +0000 Manifest this update: Fri 29 May 2026 10:27:46 +0000 Manifest next update: Sat 30 May 2026 12:23:46 +0000 Files and hashes: 1: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: cg8rFypGFHeVjvP9a4ZrzePoZLlLxyiVNBWB4eqVAuY=) 2: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 3: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) 4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fb:3a:9a:d7:c1:f7:f5:99:12:d6:91:ce:d3:75:09:10:b7:a9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: May 29 10:27:46 2026 GMT Not After : May 30 12:23:46 2026 GMT Subject: CN=E7178F3710E78F3C9EF8D6797B91045E7C88F15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:a5:68:2e:69:e2:e4:10:d5:f1:a3:a6:78: b2:ea:f9:24:65:21:a7:10:72:86:66:7d:97:82:69: d6:24:f5:06:33:66:7e:f1:4a:33:f6:21:ff:78:e0: 43:12:54:33:d3:e4:ef:f9:b2:e5:93:dd:8a:b7:23: 2e:78:67:9a:6c:57:65:7d:b0:15:71:16:82:9f:cd: f8:ed:9e:3a:c8:cc:5e:ee:c5:a7:3a:69:ad:af:72: 11:7f:c2:a7:d5:8b:2a:d6:28:05:6c:42:d7:4d:ce: 95:66:66:d3:10:57:83:41:d0:eb:28:8d:a1:f6:e6: e3:48:1a:1d:89:e8:ed:22:dd:51:97:c8:0e:1c:ba: 62:c2:87:f8:7e:54:3c:6e:b2:2d:e1:7b:c7:ca:56: 8a:ee:2e:bc:44:b8:e5:d3:1b:cd:db:24:f2:a2:88: 08:cd:f0:c5:be:c9:bf:53:40:26:0f:2e:62:49:71: e0:b5:8c:17:1f:c9:1f:e4:c8:b6:d6:13:1c:55:30: 41:cd:cc:c9:70:09:6e:8c:25:6b:2a:3f:17:90:38: d0:2e:7a:4f:60:4b:fe:b4:ce:8d:da:9c:6a:fb:53: 50:37:26:d4:e3:17:91:ec:42:a9:4b:0f:fd:c6:9d: 0a:dc:8e:b5:31:31:12:de:92:64:e9:49:dd:67:77: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:17:8F:37:10:E7:8F:3C:9E:F8:D6:79:7B:91:04:5E:7C:88:F1:5B X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e7:95:07:bd:b1:ea:03:64:a3:ad:60:51:30:1e:ea:8d:7f: 11:9d:6c:b3:49:94:7a:c4:f1:82:32:bc:7c:c3:4c:19:e1:d9: ea:c9:84:29:a9:45:90:91:b0:bf:10:08:db:fb:22:78:b4:0d: 28:c2:04:6a:b9:d6:2a:20:f0:50:1e:bf:3f:0c:4b:20:ab:fa: 39:8e:02:84:ed:3a:ad:b1:2a:ea:fa:10:ef:8d:3c:9a:a4:cd: de:e3:3c:70:b2:61:53:23:d1:75:2f:d1:f3:c7:ed:1d:4f:44: 84:19:e0:73:e6:ce:07:80:5d:e3:44:60:7d:90:ad:ba:3f:74: eb:5e:77:c5:57:ab:c9:74:46:f7:1c:89:3d:bd:2d:ad:4f:84: c3:56:ab:f8:04:4f:7c:a0:51:18:41:13:a5:a4:ad:53:65:1d: 37:3e:23:6d:90:43:61:27:a7:fb:87:92:e8:aa:25:ea:db:3f: f6:60:d2:91:d1:44:a0:66:a8:b0:6f:1b:40:8f:43:d3:11:23: 20:91:41:d8:68:b8:e6:8a:4b:98:f2:7b:5c:f6:2f:05:71:97: 28:b0:34:0b:95:7a:97:bf:b7:30:a3:b8:9c:84:a4:58:82:39: 58:0c:b5:7f:3d:1e:20:b2:d2:e7:5c:d7:56:d9:81:db:7d:e6: 6a:8b:aa:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKvs6mtfB9/WZEtaRztN1CRC3qZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjA1MjkxMDI3NDZaFw0yNjA1MzAxMjIzNDZaMDMxMTAvBgNV BAMTKEU3MTc4RjM3MTBFNzhGM0M5RUY4RDY3OTdCOTEwNDVFN0M4OEYxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsqVoLmni5BDV8aOmeLLq+SRl IacQcoZmfZeCadYk9QYzZn7xSjP2If944EMSVDPT5O/5suWT3Yq3Iy54Z5psV2V9 sBVxFoKfzfjtnjrIzF7uxac6aa2vchF/wqfViyrWKAVsQtdNzpVmZtMQV4NB0Oso jaH25uNIGh2J6O0i3VGXyA4cumLCh/h+VDxusi3he8fKVoruLrxEuOXTG83bJPKi iAjN8MW+yb9TQCYPLmJJceC1jBcfyR/kyLbWExxVMEHNzMlwCW6MJWsqPxeQONAu ek9gS/60zo3anGr7U1A3JtTjF5HsQqlLD/3GnQrcjrUxMRLekmTpSd1nd+11AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5xePNxDnjzye+NZ5e5EEXnyI8VswHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgueVB72x6gNk o61gUTAe6o1/EZ1ss0mUesTxgjK8fMNMGeHZ6smEKalFkJGwvxAI2/sieLQNKMIE arnWKiDwUB6/PwxLIKv6OY4ChO06rbEq6voQ7408mqTN3uM8cLJhUyPRdS/R88ft HU9EhBngc+bOB4Bd40RgfZCtuj906153xVeryXRG9xyJPb0trU+Ew1ar+ARPfKBR GEETpaStU2UdNz4jbZBDYSen+4eS6Kol6ts/9mDSkdFEoGaosG8bQI9D0xEjIJFB 2Gi45opLmPJ7XPYvBXGXKLA0C5V6l7+3MKO4nISkWII5WAy1fz0eILLS51zXVtmB 233maouqEw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:24 2026 by rpki-client