$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: /iv1LLDtIM+PPGCL/zBrgwKbK1BxvWh6qCjkT0x938I= Subject key identifier: 4F:E2:2B:38:52:F5:A7:93:26:51:96:48:E9:CB:CC:E0:F9:E0:EF:DC Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 38C0203CE3537B8A17F97F5E0D3576DE8A37E12F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: AD Signing time: Fri 29 May 2026 08:32:46 +0000 Manifest this update: Fri 29 May 2026 08:27:46 +0000 Manifest next update: Sat 30 May 2026 11:24:46 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: 2BAvcNMxDYmIRLfmKMRqQVCeIlB9L7kCE+tat4aqVK8=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c0:20:3c:e3:53:7b:8a:17:f9:7f:5e:0d:35:76:de:8a:37:e1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: May 29 08:27:46 2026 GMT Not After : May 30 11:24:46 2026 GMT Subject: CN=4FE22B3852F5A79326519648E9CBCCE0F9E0EFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:ac:0c:e2:c4:67:15:ee:8d:ae:2b:a3:00: cb:44:5d:be:79:17:b5:f8:48:02:a8:65:5b:ac:49: fd:3f:f9:fb:3e:8f:27:21:c8:f7:3a:48:74:97:64: cb:8c:2b:c6:d9:7c:94:f1:db:f3:d7:a4:07:23:86: fc:b2:9c:93:e0:72:18:52:57:a6:f4:15:07:9c:53: 69:f5:f3:98:3c:8d:6b:9c:ae:13:56:fa:38:45:2a: f7:81:e4:cf:62:9a:0c:2c:27:9a:46:0a:26:41:72: e8:e4:3c:fe:38:66:b6:a0:17:a3:3a:4f:c3:cd:6c: d5:b4:92:3c:75:6c:b1:db:f9:c7:4e:ef:c8:b5:a8: b1:52:c1:3e:2b:69:27:1b:e0:a7:94:4c:cf:bd:4a: 6c:26:23:5e:65:a4:bc:19:08:4d:a3:a8:76:6e:b6: 43:1f:22:4d:d9:53:84:94:e9:18:ea:06:35:7b:0c: ea:27:c1:fd:63:de:d4:95:30:20:78:f6:bd:34:29: 74:4f:fd:52:2a:45:c0:eb:3f:57:2c:2f:e0:01:40: 72:b2:fb:3d:39:e8:60:b4:95:7a:0e:4d:92:7d:6f: 4f:65:ae:7d:09:05:47:51:b3:22:b1:95:0b:a0:3e: d7:51:58:06:60:2a:34:8f:77:7e:eb:92:bc:fa:d9: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E2:2B:38:52:F5:A7:93:26:51:96:48:E9:CB:CC:E0:F9:E0:EF:DC X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6f:71:39:10:a7:9b:36:f6:a0:e8:e4:67:fa:5e:01:a0:e2: 0c:0e:2a:da:3e:44:12:27:86:b1:d8:a7:fd:d4:e6:b6:4c:86: 85:d2:7a:fe:4a:9d:6f:1d:31:e7:4e:fe:3c:2f:87:2e:16:84: d7:c9:80:06:bb:4e:4b:55:66:a3:73:fd:37:8d:9a:d2:2c:40: 51:ef:6d:3c:05:2e:3a:9b:b2:7d:9d:bb:1b:5d:77:96:82:b3: af:8c:7b:44:97:54:94:a7:e5:b3:5c:b5:cb:30:c6:f0:c5:97: e6:12:cc:69:40:13:8c:3b:ca:42:5a:84:ad:63:0c:be:29:a6: 05:81:2f:d8:91:57:63:50:8d:a4:e6:50:7c:ab:ce:73:4c:bd: 9d:75:d9:ac:93:11:47:69:21:36:2f:39:71:d2:3f:d8:79:9d: 66:9b:02:a2:a4:15:94:25:a8:40:2e:aa:a4:e5:83:65:33:98: 15:33:57:5d:38:61:d2:78:c4:89:92:07:46:1a:12:86:12:83: a1:dd:fa:c1:e9:f1:21:68:ef:93:f6:47:55:80:51:e0:88:26: 34:87:f7:01:d2:15:cd:bd:5d:00:88:eb:77:2e:2e:c0:41:48: 1e:d5:b0:ac:08:fe:08:86:5b:dd:f1:d2:7d:3a:16:30:14:f1: 10:0f:ae:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOMAgPONTe4oX+X9eDTV23oo34S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA1MjkwODI3NDZaFw0yNjA1MzAxMTI0NDZaMDMxMTAvBgNV BAMTKDRGRTIyQjM4NTJGNUE3OTMyNjUxOTY0OEU5Q0JDQ0UwRjlFMEVGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjKwM4sRnFe6NriujAMtEXb55 F7X4SAKoZVusSf0/+fs+jychyPc6SHSXZMuMK8bZfJTx2/PXpAcjhvyynJPgchhS V6b0FQecU2n185g8jWucrhNW+jhFKveB5M9imgwsJ5pGCiZBcujkPP44ZragF6M6 T8PNbNW0kjx1bLHb+cdO78i1qLFSwT4raScb4KeUTM+9SmwmI15lpLwZCE2jqHZu tkMfIk3ZU4SU6RjqBjV7DOonwf1j3tSVMCB49r00KXRP/VIqRcDrP1csL+ABQHKy +z056GC0lXoOTZJ9b09lrn0JBUdRsyKxlQugPtdRWAZgKjSPd37rkrz62aqfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT+IrOFL1p5MmUZZI6cvM4Png79wwHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW9xORCnmzb2 oOjkZ/peAaDiDA4q2j5EEieGsdin/dTmtkyGhdJ6/kqdbx0x507+PC+HLhaE18mA BrtOS1Vmo3P9N42a0ixAUe9tPAUuOpuyfZ27G113loKzr4x7RJdUlKfls1y1yzDG 8MWX5hLMaUATjDvKQlqErWMMvimmBYEv2JFXY1CNpOZQfKvOc0y9nXXZrJMRR2kh Ni85cdI/2HmdZpsCoqQVlCWoQC6qpOWDZTOYFTNXXThh0njEiZIHRhoShhKDod36 wenxIWjvk/ZHVYBR4IgmNIf3AdIVzb1dAIjrdy4uwEFIHtWwrAj+CIZb3fHSfToW MBTxEA+ukg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client