$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: SooLGVQiG2blNadZtpbt5LoxMyc5Qj01dustGn/xppU= Subject key identifier: A5:49:75:75:71:34:DB:83:75:DA:71:03:6A:F1:A3:6E:12:FC:36:EA Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 7CA4EA5B8EE230EF46ACF8B119A1FA9DD4BD4BE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: B0 Signing time: Fri 29 May 2026 14:22:56 +0000 Manifest this update: Fri 29 May 2026 14:17:56 +0000 Manifest next update: Sat 30 May 2026 16:25:56 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: WmxW3l80ZVlaONbVWsecR4FxB5wMJmVMemaBm8WUdh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a4:ea:5b:8e:e2:30:ef:46:ac:f8:b1:19:a1:fa:9d:d4:bd:4b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: May 29 14:17:56 2026 GMT Not After : May 30 16:25:56 2026 GMT Subject: CN=A54975757134DB8375DA71036AF1A36E12FC36EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:36:d2:4a:26:ec:cb:5b:28:0f:c2:d7:6e:fe: f2:fc:8f:6f:36:e7:04:74:f7:05:2e:6e:98:1f:6e: 55:9d:f4:86:6a:2d:44:98:17:74:7e:1f:01:3f:4d: 4e:4b:b8:c6:58:d2:e2:4e:d9:e4:6f:9a:15:9f:af: 7d:59:09:b6:5f:fd:12:80:ea:70:af:d4:73:e3:0e: be:80:d7:78:4b:7b:ff:d6:7f:27:d5:d4:fb:2e:17: 28:8a:6e:c7:e1:a8:c3:36:7e:60:2a:ca:ba:34:fc: 2c:41:1c:f6:75:8b:8f:98:83:ca:f8:0a:6a:d2:e5: 45:44:b3:a4:33:7a:bd:e5:0e:42:61:ea:4f:d6:d2: 20:87:50:1c:c0:df:06:92:0b:bd:b8:4c:e1:4d:0d: 03:f6:af:bc:10:40:87:1f:3f:c7:09:41:12:ea:4a: 64:af:0c:b6:35:1d:b7:fd:37:be:e8:e1:8d:53:63: fa:62:62:03:b3:4f:93:38:8c:7b:24:e0:e5:be:52: 36:a4:f8:57:31:d9:75:da:e0:e0:3b:29:a9:21:6c: 23:2a:50:db:38:62:e5:01:da:f8:f2:15:ea:4f:88: 2a:9b:12:88:82:2e:4c:3c:13:0e:59:f7:a9:09:38: 64:44:23:18:a5:7f:4a:d1:28:02:cc:7d:e6:ca:9f: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:75:75:71:34:DB:83:75:DA:71:03:6A:F1:A3:6E:12:FC:36:EA X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8d:83:6a:4e:f1:b7:d3:10:2c:fc:55:bb:e4:d7:78:e7:1d: ce:b7:61:76:f1:6e:18:1f:8b:32:6c:79:c9:a2:94:07:57:4b: 55:68:de:b4:86:5d:b4:a6:a9:0e:45:af:78:e3:97:15:2e:e0: 50:56:af:62:d7:f6:58:83:64:bb:be:36:1f:76:65:aa:b8:59: 74:39:54:eb:74:46:f4:dd:10:99:54:e5:8a:ec:7c:8e:c6:6a: b3:7d:00:ed:e9:bb:f0:c9:10:b9:e9:4c:f7:9d:e0:52:44:2c: 4e:d3:3e:ad:6c:d0:c5:78:a1:51:95:15:3b:27:2c:fa:fc:7b: a9:cd:f4:70:2d:dc:16:e5:eb:08:5e:da:20:94:14:17:cd:22: 54:6c:8a:c8:05:e3:c4:fd:42:f1:b9:ec:05:d7:83:92:c4:22: 44:40:ac:e5:68:89:4b:43:8a:44:46:b5:75:2e:6c:07:fa:c6: b3:a8:50:30:61:45:d7:46:b5:22:33:63:22:5d:98:05:54:1e: 24:86:e6:72:e4:c9:67:45:11:09:47:c8:ad:fd:83:27:31:d4: 5f:fe:70:85:36:c2:59:69:d3:bc:d2:72:f7:2a:e2:17:22:d9: e4:f8:3a:f3:b7:88:a2:e7:af:9e:0e:3c:9f:06:80:b5:14:51: cb:e0:35:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfKTqW47iMO9GrPixGaH6ndS9S+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA1MjkxNDE3NTZaFw0yNjA1MzAxNjI1NTZaMDMxMTAvBgNV BAMTKEE1NDk3NTc1NzEzNERCODM3NURBNzEwMzZBRjFBMzZFMTJGQzM2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNtJKJuzLWygPwtdu/vL8j282 5wR09wUubpgfblWd9IZqLUSYF3R+HwE/TU5LuMZY0uJO2eRvmhWfr31ZCbZf/RKA 6nCv1HPjDr6A13hLe//WfyfV1PsuFyiKbsfhqMM2fmAqyro0/CxBHPZ1i4+Yg8r4 CmrS5UVEs6Qzer3lDkJh6k/W0iCHUBzA3waSC724TOFNDQP2r7wQQIcfP8cJQRLq SmSvDLY1Hbf9N77o4Y1TY/piYgOzT5M4jHsk4OW+Ujak+Fcx2XXa4OA7KakhbCMq UNs4YuUB2vjyFepPiCqbEoiCLkw8Ew5Z96kJOGREIxilf0rRKALMfebKn9RRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpUl1dXE024N12nEDavGjbhL8NuowHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro2Dak7xt9MQ LPxVu+TXeOcdzrdhdvFuGB+LMmx5yaKUB1dLVWjetIZdtKapDkWveOOXFS7gUFav Ytf2WINku742H3ZlqrhZdDlU63RG9N0QmVTliux8jsZqs30A7em78MkQuelM953g UkQsTtM+rWzQxXihUZUVOycs+vx7qc30cC3cFuXrCF7aIJQUF80iVGyKyAXjxP1C 8bnsBdeDksQiRECs5WiJS0OKREa1dS5sB/rGs6hQMGFF10a1IjNjIl2YBVQeJIbm cuTJZ0URCUfIrf2DJzHUX/5whTbCWWnTvNJy9yriFyLZ5Pg687eIouevng48nwaA tRRRy+A1ww== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client