$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: O0QZel1k7wS3oXBzSaXksONbrmJrKNom8TSBj57nf3M= Subject key identifier: B9:9D:4E:A4:63:3E:76:2F:23:5A:A5:DC:C7:08:69:6D:F2:72:E9:D9 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 740DE9EA0ED162EF89D6CB751328021565E46B2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: AE Signing time: Fri 29 May 2026 18:28:04 +0000 Manifest this update: Fri 29 May 2026 18:23:04 +0000 Manifest next update: Sat 30 May 2026 22:09:04 +0000 Files and hashes: 1: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 2: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: ZLhdtgFqvRWohB0ZXc26aaw9AAXzK38WUAA2Noygdzo=) 3: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 4: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) 5: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 6: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 7: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:e9:ea:0e:d1:62:ef:89:d6:cb:75:13:28:02:15:65:e4:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: May 29 18:23:04 2026 GMT Not After : May 30 22:09:04 2026 GMT Subject: CN=B99D4EA4633E762F235AA5DCC708696DF272E9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:b7:ec:0a:f7:d7:30:b8:a2:ba:e2:76:0e: fb:e8:dd:b2:93:40:c1:42:50:d7:ea:ff:6f:0a:d3: f9:df:a6:fd:16:8b:42:14:b1:2d:b3:c9:f4:2e:da: 93:54:e5:06:b8:65:f1:3c:83:e7:33:6a:c0:76:ac: da:f7:80:13:f5:fb:80:6f:58:f9:d1:25:51:62:44: d9:87:b9:4f:16:b6:a9:42:24:f0:20:46:90:f3:dd: 09:36:11:74:8b:02:34:4e:1b:f2:74:da:50:39:13: f0:6c:46:86:ab:aa:f4:57:05:d0:1f:5f:5f:22:23: 4a:a8:cc:96:5d:a1:9d:25:55:2e:99:c7:6b:92:f0: 87:53:30:29:45:2d:ef:35:d8:da:81:3f:99:c1:37: 7d:b8:80:6d:9a:7c:9f:79:ec:1c:df:93:d7:8b:62: 67:10:a0:d7:65:ec:90:63:c7:63:60:21:01:20:4a: a8:64:3f:44:fb:a9:ef:d3:24:77:7c:e7:2b:80:5c: a2:c8:77:f3:b6:9d:b2:46:84:f2:ca:8d:54:1e:4b: f3:d2:62:a2:7b:e2:bd:c0:a5:10:45:a8:e0:8d:08: 0d:94:41:10:2b:90:7f:f6:85:bf:86:a4:7b:cb:b3: b9:41:41:04:2a:b8:d6:ed:c6:d8:47:e1:c9:7c:41: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:4E:A4:63:3E:76:2F:23:5A:A5:DC:C7:08:69:6D:F2:72:E9:D9 X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0e:c3:fb:e4:58:04:61:6c:04:58:4e:8e:1a:8d:da:8f:98: ee:db:9f:7d:b6:0a:3f:d4:16:ca:8d:97:71:95:99:cc:dd:d1: 93:81:45:ac:b9:e5:66:c5:fb:e0:f6:65:6d:45:98:af:d6:72: ce:19:08:f1:df:b2:9a:32:38:f3:1c:c5:3c:10:0a:fb:22:54: 80:a0:06:fe:1f:d5:0c:d8:b0:22:02:81:eb:cb:51:4f:c1:8d: 5c:28:93:0a:bf:a1:52:ad:4b:d2:43:85:34:02:05:0f:7e:36: 80:7d:6e:f8:a8:75:07:2d:b2:67:36:10:d0:8b:17:77:9a:56: 5e:57:05:00:1a:b8:cf:05:41:79:f3:c2:3b:fd:45:be:87:4c: 83:10:1f:1d:9e:f7:f0:32:7c:a8:1c:aa:47:e7:8e:e6:8f:6f: db:cd:75:6f:80:75:d5:35:20:fc:2d:dc:ed:75:1e:6f:e1:52: 8b:5e:08:ac:e8:bb:6d:ad:dd:09:ed:88:71:65:dd:72:56:cc: ac:b0:63:fc:b2:bc:bd:e4:72:9e:41:49:01:6e:b0:21:7b:a5: 92:53:a9:08:d4:89:0b:e9:d0:7e:27:e6:57:bc:38:1d:50:72: bc:11:26:c4:4e:26:97:f2:4c:22:b8:87:8e:35:b4:7a:a3:e3: 71:64:43:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdA3p6g7RYu+J1st1EygCFWXkayowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjA1MjkxODIzMDRaFw0yNjA1MzAyMjA5MDRaMDMxMTAvBgNV BAMTKEI5OUQ0RUE0NjMzRTc2MkYyMzVBQTVEQ0M3MDg2OTZERjI3MkU5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzLfsCvfXMLiiuuJ2Dvvo3bKT QMFCUNfq/28K0/nfpv0Wi0IUsS2zyfQu2pNU5Qa4ZfE8g+czasB2rNr3gBP1+4Bv WPnRJVFiRNmHuU8WtqlCJPAgRpDz3Qk2EXSLAjROG/J02lA5E/BsRoarqvRXBdAf X18iI0qozJZdoZ0lVS6Zx2uS8IdTMClFLe812NqBP5nBN324gG2afJ957Bzfk9eL YmcQoNdl7JBjx2NgIQEgSqhkP0T7qe/TJHd85yuAXKLId/O2nbJGhPLKjVQeS/PS YqJ74r3ApRBFqOCNCA2UQRArkH/2hb+GpHvLs7lBQQQquNbtxthH4cl8QY0pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuZ1OpGM+di8jWqXcxwhpbfJy6dkwHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg7D++RYBGFs BFhOjhqN2o+Y7tuffbYKP9QWyo2XcZWZzN3Rk4FFrLnlZsX74PZlbUWYr9ZyzhkI 8d+ymjI48xzFPBAK+yJUgKAG/h/VDNiwIgKB68tRT8GNXCiTCr+hUq1L0kOFNAIF D342gH1u+Kh1By2yZzYQ0IsXd5pWXlcFABq4zwVBefPCO/1FvodMgxAfHZ738DJ8 qByqR+eO5o9v2811b4B11TUg/C3c7XUeb+FSi14IrOi7ba3dCe2IcWXdclbMrLBj /LK8veRynkFJAW6wIXulklOpCNSJC+nQfifmV7w4HVByvBEmxE4ml/JMIriHjjW0 eqPjcWRDDg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client