$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: 3d2tzu81T4JEAz3Kburwbfye8UtRd7sTLELc3m9zRac= Subject key identifier: 54:8F:01:C7:5C:94:F9:BA:EA:C5:3C:D3:2D:FC:CD:90:DF:64:63:23 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 7660593149AE4221F13D270BA915A54FF4D69CBA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: AF Signing time: Fri 29 May 2026 18:53:04 +0000 Manifest this update: Fri 29 May 2026 18:48:04 +0000 Manifest next update: Sat 30 May 2026 20:31:04 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: bzuUZom9jyInlBElVOXIEja2CG1wbsKQudp3jlxo48w=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:60:59:31:49:ae:42:21:f1:3d:27:0b:a9:15:a5:4f:f4:d6:9c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: May 29 18:48:04 2026 GMT Not After : May 30 20:31:04 2026 GMT Subject: CN=548F01C75C94F9BAEAC53CD32DFCCD90DF646323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:04:b9:f0:e7:6c:33:32:5c:b5:a8:e6:1e: 3d:8d:f9:65:1c:5d:27:e2:cc:bb:52:aa:32:d9:79: 9c:b5:ab:b6:21:3b:85:a2:79:80:a4:3c:3f:a7:cf: 6e:23:e8:1c:b8:92:ba:6c:57:5b:d3:56:45:ef:7c: 2f:6a:59:a9:ea:04:3a:a7:73:43:02:3d:0a:ec:c3: 9a:1e:e9:15:0f:b1:a3:c6:d5:89:4a:4d:35:9c:ea: 98:01:63:3d:18:63:ba:79:da:f4:9b:9e:11:57:e6: 88:55:9d:b9:24:d2:46:72:f4:1a:01:b6:a2:c3:82: 2f:b1:b9:80:8f:31:2e:b5:e8:5f:ba:2c:87:f5:4b: 7d:31:d7:69:a7:1d:9b:4a:1a:d3:d9:2a:fa:ff:71: 90:07:de:42:c7:8d:33:4f:93:ce:38:29:aa:33:64: fb:09:e2:52:31:ff:49:e7:4c:d1:4b:ec:08:70:57: a9:97:5d:d6:ba:f3:07:04:6d:19:e7:f7:31:d4:b9: 57:d4:c2:6c:2c:c3:0e:2e:8c:af:72:93:19:18:b4: 29:89:74:02:30:d3:56:31:6d:51:89:e6:72:a3:b9: 27:a2:82:e7:4a:48:54:f6:6f:04:54:5a:bf:5d:18: f6:95:de:86:7c:a7:12:34:5e:cb:5b:b2:0a:cc:9f: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8F:01:C7:5C:94:F9:BA:EA:C5:3C:D3:2D:FC:CD:90:DF:64:63:23 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:52:12:a1:e5:08:a2:ab:f5:9f:ea:63:1f:1f:0f:b9:93:2c: 48:79:b6:d3:fc:84:ae:68:94:ff:da:76:0c:6a:28:b4:63:aa: 89:94:c1:7a:36:ea:a1:44:b7:bd:74:30:f5:54:b8:86:ca:66: fc:5e:53:e7:3d:8f:3f:30:17:0b:5d:20:c8:0b:95:c8:bc:a7: da:3e:e5:b6:43:d4:03:84:b5:b9:74:b8:95:1a:4e:12:c6:03: 16:25:5f:af:3f:ba:95:03:b5:2f:34:ef:4a:a1:c3:c0:ce:e9: 45:28:bd:71:9a:e0:62:89:5c:0c:0a:6e:a7:c7:fc:00:7b:72: b6:87:98:08:df:d1:66:65:ec:46:91:83:04:ea:79:d5:d1:52: 72:b9:f0:82:81:18:f1:2f:a8:6c:bb:23:d0:ce:84:f7:78:b4: 52:24:c3:c5:56:09:f7:13:2d:87:17:89:48:72:22:1a:7f:1e: cd:ae:38:9d:8e:5a:65:93:26:22:6a:38:6a:60:a0:87:76:bd: f4:0c:6a:57:6f:d9:c1:f4:67:37:00:a4:40:17:a9:77:a3:9d: 5c:fc:33:c1:63:c7:81:1f:1b:8e:a0:41:ec:2e:74:d8:ba:fe: fa:26:cf:7e:cc:f2:1d:4d:10:67:2a:a5:df:5a:1d:4e:ed:0f: fd:b5:9d:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdmBZMUmuQiHxPScLqRWlT/TWnLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA1MjkxODQ4MDRaFw0yNjA1MzAyMDMxMDRaMDMxMTAvBgNV BAMTKDU0OEYwMUM3NUM5NEY5QkFFQUM1M0NEMzJERkNDRDkwREY2NDYzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifwS58OdsMzJctajmHj2N+WUc XSfizLtSqjLZeZy1q7YhO4WieYCkPD+nz24j6By4krpsV1vTVkXvfC9qWanqBDqn c0MCPQrsw5oe6RUPsaPG1YlKTTWc6pgBYz0YY7p52vSbnhFX5ohVnbkk0kZy9BoB tqLDgi+xuYCPMS616F+6LIf1S30x12mnHZtKGtPZKvr/cZAH3kLHjTNPk844Kaoz ZPsJ4lIx/0nnTNFL7AhwV6mXXda68wcEbRnn9zHUuVfUwmwsww4ujK9ykxkYtCmJ dAIw01YxbVGJ5nKjuSeigudKSFT2bwRUWr9dGPaV3oZ8pxI0XstbsgrMnyp5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVI8Bx1yU+brqxTzTLfzNkN9kYyMwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVISoeUIoqv1 n+pjHx8PuZMsSHm20/yErmiU/9p2DGootGOqiZTBejbqoUS3vXQw9VS4hspm/F5T 5z2PPzAXC10gyAuVyLyn2j7ltkPUA4S1uXS4lRpOEsYDFiVfrz+6lQO1LzTvSqHD wM7pRSi9cZrgYolcDApup8f8AHtytoeYCN/RZmXsRpGDBOp51dFScrnwgoEY8S+o bLsj0M6E93i0UiTDxVYJ9xMthxeJSHIiGn8eza44nY5aZZMmImo4amCgh3a99Axq V2/ZwfRnNwCkQBepd6OdXPwzwWPHgR8bjqBB7C502Lr++ibPfszyHU0QZyql31od Tu0P/bWdhQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client