$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: T/BbM71N8SILsaGRgbQ7lflr9m4EKsR8Hn6ly8wzE3o= Subject key identifier: D2:D1:91:5B:40:6E:B2:63:DE:E9:D6:A1:5D:B0:A5:54:B3:0C:21:A5 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 15BB4B7BC6B7EC0E8AF3B001E5EED5B119B69A88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: AE Signing time: Fri 29 May 2026 18:58:04 +0000 Manifest this update: Fri 29 May 2026 18:53:04 +0000 Manifest next update: Sat 30 May 2026 19:41:04 +0000 Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: eG9OyIP+bcllMnXERS+BgasjX/09F7P5N/NQEQe9ark=) 2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bb:4b:7b:c6:b7:ec:0e:8a:f3:b0:01:e5:ee:d5:b1:19:b6:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: May 29 18:53:04 2026 GMT Not After : May 30 19:41:04 2026 GMT Subject: CN=D2D1915B406EB263DEE9D6A15DB0A554B30C21A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:11:e1:33:1b:95:26:b0:a6:b9:4c:4d:98: ef:79:0c:27:ff:84:d5:e1:be:ce:f8:6c:8c:d7:08: c7:9f:61:77:7d:46:3d:cc:2b:13:ed:84:04:2d:96: e1:14:b5:da:3c:7e:e5:82:41:e8:3d:98:1a:5a:2a: 5c:cb:ae:b9:f7:26:42:f4:64:be:f6:6d:21:33:d5: 6c:25:2e:9b:10:4d:19:5b:d7:7c:db:60:cd:67:b3: fc:71:fa:15:eb:89:f7:e6:49:f6:65:4f:16:aa:b0: 4a:43:0d:b1:5a:0d:a3:8b:15:5f:71:16:6c:9c:c9: 51:a4:09:6a:28:7c:c8:88:92:79:1c:74:c3:98:15: c8:b1:42:fc:82:f6:6f:5f:99:5c:9d:40:c9:46:9b: eb:50:44:b3:c1:55:02:1a:34:63:62:59:8e:ec:b2: 00:12:c9:64:19:27:3a:49:51:34:05:54:61:24:04: 1e:df:3c:7f:93:dc:16:50:38:99:18:71:8a:29:17: ac:c9:0f:bc:09:c0:91:8b:8e:28:09:63:3a:d2:b2: c6:14:96:35:7a:b5:7d:9d:5f:e2:11:b4:69:2d:cf: 70:86:9c:bb:4d:48:78:df:be:82:df:66:1b:49:88: fb:f6:e6:31:ba:4c:6a:c6:27:fb:14:c2:49:72:53: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:91:5B:40:6E:B2:63:DE:E9:D6:A1:5D:B0:A5:54:B3:0C:21:A5 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bb:9e:38:5a:00:fa:aa:cf:47:6b:fa:84:1f:0a:00:55:3d: fe:0b:04:49:94:d2:79:13:5d:9f:1f:c7:cf:7e:24:11:2b:46: 22:75:5a:71:19:cf:6c:7b:30:01:42:39:4a:ea:69:b0:ef:1f: 12:2f:62:c1:c8:a9:6a:57:1a:5d:f0:6f:90:dd:b2:4a:4e:0f: 7f:26:9f:e8:18:fb:28:cc:13:40:75:0e:c6:09:f2:cc:6a:88: 90:55:10:c2:7d:f6:3f:8a:da:50:03:8c:94:9a:01:28:b1:d5: d1:8c:fb:64:6a:00:6f:89:0a:b2:6a:72:66:d9:67:e5:bc:54: 21:44:cd:f6:18:18:f9:36:87:a5:c8:b5:3f:3c:8b:8c:14:8e: 8d:86:51:9c:8e:58:57:a0:ee:f8:79:cb:58:37:43:bf:2e:80: 5d:d2:ac:e1:d4:6b:2a:f9:95:cb:16:05:1f:1e:e6:96:eb:ee: 94:fe:d4:7a:2a:d4:b4:04:64:c9:e2:53:9f:e9:1a:0d:70:e0: ba:e1:91:7e:e6:36:34:2f:b9:1e:84:53:b0:de:17:06:d1:75: 54:c1:cc:3d:9f:c2:f7:f1:bf:93:9f:1c:49:ba:e4:19:3f:41: 12:2e:7a:2b:a9:dd:3d:55:c7:7e:66:3c:d9:d2:f7:71:de:68: ba:d8:09:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFbtLe8a37A6K87AB5e7VsRm2mogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA1MjkxODUzMDRaFw0yNjA1MzAxOTQxMDRaMDMxMTAvBgNV BAMTKEQyRDE5MTVCNDA2RUIyNjNERUU5RDZBMTVEQjBBNTU0QjMwQzIxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysxHhMxuVJrCmuUxNmO95DCf/ hNXhvs74bIzXCMefYXd9Rj3MKxPthAQtluEUtdo8fuWCQeg9mBpaKlzLrrn3JkL0 ZL72bSEz1WwlLpsQTRlb13zbYM1ns/xx+hXriffmSfZlTxaqsEpDDbFaDaOLFV9x FmycyVGkCWoofMiIknkcdMOYFcixQvyC9m9fmVydQMlGm+tQRLPBVQIaNGNiWY7s sgASyWQZJzpJUTQFVGEkBB7fPH+T3BZQOJkYcYopF6zJD7wJwJGLjigJYzrSssYU ljV6tX2dX+IRtGktz3CGnLtNSHjfvoLfZhtJiPv25jG6TGrGJ/sUwklyU3lXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0tGRW0BusmPe6dahXbClVLMMIaUwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarueOFoA+qrP R2v6hB8KAFU9/gsESZTSeRNdnx/Hz34kEStGInVacRnPbHswAUI5SuppsO8fEi9i wcipalcaXfBvkN2ySk4Pfyaf6Bj7KMwTQHUOxgnyzGqIkFUQwn32P4raUAOMlJoB KLHV0Yz7ZGoAb4kKsmpyZtln5bxUIUTN9hgY+TaHpci1PzyLjBSOjYZRnI5YV6Du +HnLWDdDvy6AXdKs4dRrKvmVyxYFHx7mluvulP7UeirUtARkyeJTn+kaDXDguuGR fuY2NC+5HoRTsN4XBtF1VMHMPZ/C9/G/k58cSbrkGT9BEi56K6ndPVXHfmY82dL3 cd5outgJTw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:29 2026 by rpki-client