$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: 77GQdiNCzqIRi3UjpjruW0UJcm/A3jbv+8siMnzYSN8= Subject key identifier: 65:CD:E4:E6:2C:25:50:03:CA:BF:25:9A:76:C0:75:F5:8D:87:5D:04 Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 020EBD92D8C4A3DFE331D2562EA250A24A48265D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: AF Signing time: Fri 29 May 2026 05:02:39 +0000 Manifest this update: Fri 29 May 2026 04:57:39 +0000 Manifest next update: Sat 30 May 2026 08:59:39 +0000 Files and hashes: 1: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) 2: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 3: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 4: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: LtLJ9nZyLbWpMWIn+tee88G7GxY62FlAmGedQN3SpKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0e:bd:92:d8:c4:a3:df:e3:31:d2:56:2e:a2:50:a2:4a:48:26:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: May 29 04:57:39 2026 GMT Not After : May 30 08:59:39 2026 GMT Subject: CN=65CDE4E62C255003CABF259A76C075F58D875D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:90:e0:12:57:39:a0:29:3e:d6:74:63:cc: b3:9d:73:57:db:2a:5f:1e:9a:1e:9f:7f:62:8b:b9: 18:df:25:5e:f6:bf:f7:d6:0b:45:f7:d2:f5:71:2a: 96:3a:97:b7:23:46:ae:a9:55:92:2c:8b:49:a2:36: c2:08:a2:c7:d8:fb:f2:7f:1c:9e:3c:06:03:2f:63: a6:10:17:f6:e5:83:4e:10:82:1f:b6:36:b6:88:57: e4:a4:f7:35:f6:82:11:53:c8:ac:45:89:e3:b3:2b: 4c:66:b1:3f:ba:69:86:2e:32:3b:2e:9c:61:dd:bf: eb:88:ec:df:ec:35:f4:18:9a:79:53:ff:db:c1:b1: 4b:ac:9a:39:ba:8c:f8:57:08:e5:d4:8d:d8:8b:77: 98:7a:18:f0:d2:65:8c:71:0a:13:b3:6b:1b:0c:c4: 9d:4d:03:cc:3d:79:42:c8:2b:56:fe:bc:03:4c:4a: 46:1f:35:96:36:6c:c9:de:35:0d:09:88:9e:9c:dd: b3:10:50:96:a5:12:91:69:cd:27:8d:10:87:61:e6: f3:23:ed:e7:44:70:0e:7c:a6:f3:3a:61:ae:f0:97: f5:75:cf:bc:1c:28:26:54:ef:f4:7c:c3:79:a3:df: 58:ca:32:83:0f:c5:81:c7:cd:17:2d:49:fa:98:9b: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:E4:E6:2C:25:50:03:CA:BF:25:9A:76:C0:75:F5:8D:87:5D:04 X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ed:d1:53:c9:30:7d:cf:cd:04:e9:5b:fa:3a:ae:36:bb:be: a9:62:b5:74:34:50:88:76:ef:3c:8f:e4:92:86:32:99:90:7e: fe:f7:02:26:72:d5:59:a8:e0:c1:01:da:15:79:65:aa:1a:38: ee:4c:70:92:b8:d9:41:44:92:85:3a:b6:47:c3:0c:a4:1d:9a: f9:7a:dd:87:29:72:32:9d:84:cd:d1:20:5e:cf:00:ec:a2:dd: 6d:f4:1f:3e:d3:72:bd:08:ac:5a:32:2d:e9:da:45:68:b1:62: f9:f9:f6:4d:af:5f:22:0f:9c:80:0d:21:3a:42:f5:db:10:49: 0b:53:f6:03:c0:2e:86:cf:8e:9a:9f:97:bb:a5:71:9e:2e:60: fe:5c:d9:ee:36:47:e8:10:39:b2:d8:64:f1:4f:3b:d0:9d:46: 78:ad:c8:c3:28:5e:fa:16:a7:ed:85:c8:57:f2:6e:e1:14:d7: 30:e5:b8:98:8b:87:8a:73:ec:8e:02:76:6c:90:ed:e4:1a:66: ae:2e:cd:51:49:10:ee:95:f0:ac:84:de:29:28:7d:e4:39:20: e4:bc:d8:e4:c3:3e:1b:0b:b9:97:0b:2c:93:58:31:9c:c4:5b: ba:4b:c6:4c:ac:4b:f2:7d:03:21:bf:52:46:d0:64:4e:aa:a0: 73:bc:a5:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAg69ktjEo9/jMdJWLqJQokpIJl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjA1MjkwNDU3MzlaFw0yNjA1MzAwODU5MzlaMDMxMTAvBgNV BAMTKDY1Q0RFNEU2MkMyNTUwMDNDQUJGMjU5QTc2QzA3NUY1OEQ4NzVEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaZDgElc5oCk+1nRjzLOdc1fb Kl8emh6ff2KLuRjfJV72v/fWC0X30vVxKpY6l7cjRq6pVZIsi0miNsIIosfY+/J/ HJ48BgMvY6YQF/blg04Qgh+2NraIV+Sk9zX2ghFTyKxFieOzK0xmsT+6aYYuMjsu nGHdv+uI7N/sNfQYmnlT/9vBsUusmjm6jPhXCOXUjdiLd5h6GPDSZYxxChOzaxsM xJ1NA8w9eULIK1b+vANMSkYfNZY2bMneNQ0JiJ6c3bMQUJalEpFpzSeNEIdh5vMj 7edEcA58pvM6Ya7wl/V1z7wcKCZU7/R8w3mj31jKMoMPxYHHzRctSfqYmyuNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZc3k5iwlUAPKvyWadsB19Y2HXQQwHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu3RU8kwfc/N BOlb+jquNru+qWK1dDRQiHbvPI/kkoYymZB+/vcCJnLVWajgwQHaFXllqho47kxw krjZQUSShTq2R8MMpB2a+XrdhylyMp2EzdEgXs8A7KLdbfQfPtNyvQisWjIt6dpF aLFi+fn2Ta9fIg+cgA0hOkL12xBJC1P2A8Auhs+Omp+Xu6Vxni5g/lzZ7jZH6BA5 sthk8U870J1GeK3Iwyhe+han7YXIV/Ju4RTXMOW4mIuHinPsjgJ2bJDt5Bpmri7N UUkQ7pXwrITeKSh95Dkg5LzY5MM+Gwu5lwssk1gxnMRbukvGTKxL8n0DIb9SRtBk Tqqgc7ylPg== -----END CERTIFICATE-----Generated at Fri May 29 22:04:39 2026 by rpki-client