$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: hhAIlP0gQTX95DtPK/fiXMIMGIDav5WjVTYqmaoWXtI= Subject key identifier: 1A:D4:1E:D0:1D:3D:F3:28:97:41:1A:B9:9A:F1:91:AE:B4:53:BA:89 Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 1FB36B9763F0F1C1BCCBE9FB5FCF1EABCC76D87A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: AF Signing time: Fri 29 May 2026 15:33:01 +0000 Manifest this update: Fri 29 May 2026 15:28:01 +0000 Manifest next update: Sat 30 May 2026 19:10:01 +0000 Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: k2OU8xzrxoa8jtc9KNyts2yHMJTWoJDqpdybqIBXQ4M=) 2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b3:6b:97:63:f0:f1:c1:bc:cb:e9:fb:5f:cf:1e:ab:cc:76:d8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: May 29 15:28:01 2026 GMT Not After : May 30 19:10:01 2026 GMT Subject: CN=1AD41ED01D3DF32897411AB99AF191AEB453BA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:70:d3:92:0f:3f:0d:92:e3:43:d3:9a:b8:5f: 5a:63:02:dd:51:4d:45:da:18:6c:53:4c:20:0b:ae: 80:30:8c:0f:70:e9:11:2b:e3:2b:d7:93:9a:42:a3: f4:8a:fe:98:66:96:3e:bd:c3:bb:7a:4a:3f:bb:b9: 04:b3:de:98:46:df:ff:94:e5:98:07:a3:93:5c:fd: 8a:4b:6c:2e:6b:ac:43:82:ae:c1:a3:03:85:1a:c6: ed:49:31:44:4e:5d:5b:39:fb:2a:67:90:25:05:2b: d3:7e:8c:d4:ff:13:df:7f:13:23:eb:87:e7:5c:93: 4d:f1:f9:3b:96:88:47:aa:c7:ad:4f:7e:2f:63:e0: b6:44:46:93:4b:12:a8:2d:4a:d7:e5:e7:8a:2c:f1: 5a:8b:91:f0:16:4e:a0:5a:87:79:c0:f9:26:e0:c6: 44:93:f7:28:5d:b7:08:52:f9:db:b5:ca:64:58:09: 25:13:d1:c5:41:2e:87:fc:e2:0d:23:7c:13:61:e1: 43:98:8b:68:8f:88:47:3f:22:6a:a5:94:bc:e1:00: cd:9f:bd:d2:ff:c4:84:cd:2b:ab:39:fc:f8:f8:4f: 00:af:8b:fe:5f:3e:8b:0d:d3:2a:a0:2b:3b:c0:6a: 72:f7:f4:bc:e8:86:66:83:a3:84:fd:0e:3f:cb:f5: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D4:1E:D0:1D:3D:F3:28:97:41:1A:B9:9A:F1:91:AE:B4:53:BA:89 X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:f8:7d:2d:ac:85:92:f2:80:35:df:d7:28:ae:93:15:d2: e3:7c:67:f4:11:a0:77:fd:be:0b:35:7f:c2:80:62:03:4a:f6: 2e:76:ed:fe:6e:32:dc:bb:63:3b:6b:50:f5:fa:4e:2c:43:e7: 1a:cf:f1:c4:99:5a:53:a8:84:b3:25:1e:3d:9d:8b:73:ff:ac: 28:6f:6e:2f:a8:91:53:ba:ab:46:5a:0e:51:3e:46:3c:cf:ba: 6f:17:eb:78:83:93:77:f7:dd:36:ea:69:1a:00:42:a9:7e:50: 35:52:5a:7f:d7:89:7f:b7:6b:0a:54:66:74:ff:8a:39:57:3c: 2c:07:a2:4c:af:6e:4a:6f:ad:28:b7:87:a4:91:2c:5f:0f:60: c7:26:88:b8:c9:d2:37:86:d4:43:36:e4:21:e6:62:81:c5:44: 3f:ce:18:4a:ee:39:45:0b:2f:be:6b:07:4d:a4:80:48:0c:0f: 90:5f:c5:13:8a:d5:20:0b:6d:7b:54:bf:f2:94:1b:fd:9f:d5: 42:26:5d:c2:0f:ca:ee:6e:74:8d:56:d3:69:a4:1b:21:f7:98: e9:d2:6c:2c:77:83:bf:54:68:21:e6:82:19:40:d2:63:ba:e4: c1:68:7f:0c:52:bf:5e:39:58:44:55:c5:5b:62:0a:28:75:b1: fa:05:4d:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH7Nrl2Pw8cG8y+n7X88eq8x22HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjA1MjkxNTI4MDFaFw0yNjA1MzAxOTEwMDFaMDMxMTAvBgNV BAMTKDFBRDQxRUQwMUQzREYzMjg5NzQxMUFCOTlBRjE5MUFFQjQ1M0JBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDncNOSDz8NkuND05q4X1pjAt1R TUXaGGxTTCALroAwjA9w6REr4yvXk5pCo/SK/phmlj69w7t6Sj+7uQSz3phG3/+U 5ZgHo5Nc/YpLbC5rrEOCrsGjA4Uaxu1JMUROXVs5+ypnkCUFK9N+jNT/E99/EyPr h+dck03x+TuWiEeqx61Pfi9j4LZERpNLEqgtStfl54os8VqLkfAWTqBah3nA+Sbg xkST9yhdtwhS+du1ymRYCSUT0cVBLof84g0jfBNh4UOYi2iPiEc/ImqllLzhAM2f vdL/xITNK6s5/Pj4TwCvi/5fPosN0yqgKzvAanL39LzohmaDo4T9Dj/L9XXRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGtQe0B098yiXQRq5mvGRrrRTuokwHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOP4fS2shZLy gDXf1yiukxXS43xn9BGgd/2+CzV/woBiA0r2Lnbt/m4y3LtjO2tQ9fpOLEPnGs/x xJlaU6iEsyUePZ2Lc/+sKG9uL6iRU7qrRloOUT5GPM+6bxfreIOTd/fdNuppGgBC qX5QNVJaf9eJf7drClRmdP+KOVc8LAeiTK9uSm+tKLeHpJEsXw9gxyaIuMnSN4bU QzbkIeZigcVEP84YSu45RQsvvmsHTaSASAwPkF/FE4rVIAtte1S/8pQb/Z/VQiZd wg/K7m50jVbTaaQbIfeY6dJsLHeDv1RoIeaCGUDSY7rkwWh/DFK/XjlYRFXFW2IK KHWx+gVNog== -----END CERTIFICATE-----Generated at Fri May 29 22:05:48 2026 by rpki-client