$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: 3lnlErKwiZ6GMo70o/H/Au4/pqlvNx0S2ZF2PuyN/Rc= Subject key identifier: D1:C6:E2:AC:49:BF:F3:A9:2F:7D:53:95:D6:19:57:A7:93:B2:B1:94 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 0B13FFBE488BED858A1F7F7EF45E36F82F8F9F7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: AE Signing time: Fri 29 May 2026 07:12:42 +0000 Manifest this update: Fri 29 May 2026 07:07:42 +0000 Manifest next update: Sat 30 May 2026 08:40:42 +0000 Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 2: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 3: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: Ri27vVwKx0jBvf7IKgg5q3RMeLtRDDF4i4QHn1Tmixk=) 4: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:13:ff:be:48:8b:ed:85:8a:1f:7f:7e:f4:5e:36:f8:2f:8f:9f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: May 29 07:07:42 2026 GMT Not After : May 30 08:40:42 2026 GMT Subject: CN=D1C6E2AC49BFF3A92F7D5395D61957A793B2B194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0f:08:17:ae:8f:3f:c8:83:f0:71:f0:94:4b: 2b:ed:05:8b:80:82:c3:74:da:f1:57:a3:ae:61:e8: 9f:33:1e:8e:bd:e6:e2:00:5c:3e:e4:e0:92:70:16: 5f:25:7f:75:d4:2e:90:df:f4:8e:d0:1c:c3:0b:f7: 41:96:df:95:3c:de:86:90:57:fa:88:43:3c:54:40: ff:14:c9:34:53:8c:11:5f:ae:fb:2b:24:76:7a:38: 29:bb:bc:84:26:e7:d5:18:ca:3a:a7:70:cd:c4:a9: 67:70:07:85:b9:11:93:c5:26:08:62:76:56:e3:31: e0:72:43:64:57:2e:0b:ac:61:84:e1:77:80:39:00: aa:30:1a:8a:39:11:fa:01:06:9d:95:86:f9:a0:ee: e1:75:ed:31:2b:a6:80:b1:c4:ef:1b:38:73:70:7f: 44:33:75:1e:a9:6a:bb:28:ca:a1:94:4f:1c:b6:f4: a6:8e:e9:30:36:1a:0b:80:29:1b:57:65:53:e5:89: 48:b0:8e:05:15:88:8f:f8:d5:c3:b5:86:40:96:09: 19:82:fe:2b:30:95:09:b0:88:7b:60:f2:b8:a6:13: 32:62:7d:3c:60:ae:1a:3c:d8:9d:ca:2f:1f:fe:4b: 5f:81:b5:a8:9d:2e:b1:96:1a:e9:cb:a2:78:c5:72: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C6:E2:AC:49:BF:F3:A9:2F:7D:53:95:D6:19:57:A7:93:B2:B1:94 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:15:e1:35:9d:22:2d:0e:bb:52:00:35:07:3b:34:90:94:e9: 16:7a:08:45:47:97:97:d4:0b:a9:23:fd:7f:aa:b4:65:1b:35: b1:90:4e:46:62:f6:6f:9c:ed:36:bc:3e:fd:31:c8:a4:40:de: 77:dc:79:4f:0d:30:ca:f6:d0:a7:4b:e6:c6:73:94:86:d5:b3: 78:6c:af:68:f2:74:85:45:b8:20:25:68:c1:b3:39:c0:3e:b3: 21:ac:96:a2:66:b3:29:49:d9:d2:ce:68:52:a2:87:39:ed:8f: c8:58:5d:b0:bd:68:de:c3:84:92:f2:da:f6:ff:31:3e:b0:9d: 03:e7:c0:a6:d0:fe:fe:54:5f:09:50:99:25:0c:ab:2d:07:a6: 14:4b:32:f9:e4:df:b6:74:78:9d:5c:a6:e6:97:5b:33:3f:b8: 0c:6d:3b:f4:c3:24:d2:a7:9e:b4:90:25:38:99:fb:42:35:46: bd:ce:de:ad:37:bd:69:88:eb:47:62:03:5f:e0:af:76:6e:6c: 8f:b5:bb:ed:d4:56:8d:0c:5c:e8:ef:8c:be:27:0a:93:cb:a9: 0c:16:47:69:93:ed:e2:1e:7a:a8:33:0c:51:25:46:2a:e4:24: f3:80:28:a4:ea:40:e0:e5:69:91:fd:cd:93:8b:29:9e:8c:5d: 52:e3:7d:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCxP/vkiL7YWKH39+9F42+C+Pn38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjA1MjkwNzA3NDJaFw0yNjA1MzAwODQwNDJaMDMxMTAvBgNV BAMTKEQxQzZFMkFDNDlCRkYzQTkyRjdENTM5NUQ2MTk1N0E3OTNCMkIxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzDwgXro8/yIPwcfCUSyvtBYuA gsN02vFXo65h6J8zHo695uIAXD7k4JJwFl8lf3XULpDf9I7QHMML90GW35U83oaQ V/qIQzxUQP8UyTRTjBFfrvsrJHZ6OCm7vIQm59UYyjqncM3EqWdwB4W5EZPFJghi dlbjMeByQ2RXLgusYYThd4A5AKowGoo5EfoBBp2Vhvmg7uF17TErpoCxxO8bOHNw f0QzdR6parsoyqGUTxy29KaO6TA2GguAKRtXZVPliUiwjgUViI/41cO1hkCWCRmC /iswlQmwiHtg8rimEzJifTxgrho82J3KLx/+S1+BtaidLrGWGunLonjFcqsnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0cbirEm/86kvfVOV1hlXp5OysZQwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhXhNZ0iLQ67 UgA1Bzs0kJTpFnoIRUeXl9QLqSP9f6q0ZRs1sZBORmL2b5ztNrw+/THIpEDed9x5 Tw0wyvbQp0vmxnOUhtWzeGyvaPJ0hUW4ICVowbM5wD6zIayWomazKUnZ0s5oUqKH Oe2PyFhdsL1o3sOEkvLa9v8xPrCdA+fAptD+/lRfCVCZJQyrLQemFEsy+eTftnR4 nVym5pdbMz+4DG079MMk0qeetJAlOJn7QjVGvc7erTe9aYjrR2IDX+Cvdm5sj7W7 7dRWjQxc6O+MvicKk8upDBZHaZPt4h56qDMMUSVGKuQk84AopOpA4OVpkf3Nk4sp noxdUuN9jQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:20 2026 by rpki-client