$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: peuol1YEXJMNwuvwp6ub7ivBDQKUXPUU7Kd9wPGOS2s= Subject key identifier: 40:7C:DA:79:D8:C7:C8:84:90:B2:F1:48:54:24:1A:D4:7C:51:07:F0 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 30A3DBD70C2EC31F2130D344E2240DE566602833 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: AD Signing time: Fri 29 May 2026 12:47:49 +0000 Manifest this update: Fri 29 May 2026 12:42:49 +0000 Manifest next update: Sat 30 May 2026 13:02:49 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: YwjWNzYUScvWyy7RluXuzKJBa0QG3HXgZ7bkH/WJDiM=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a3:db:d7:0c:2e:c3:1f:21:30:d3:44:e2:24:0d:e5:66:60:28:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: May 29 12:42:49 2026 GMT Not After : May 30 13:02:49 2026 GMT Subject: CN=407CDA79D8C7C88490B2F14854241AD47C5107F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:0e:85:fa:b3:f1:2a:d3:7a:a1:e1:c0:49: c0:41:74:fd:b3:71:80:80:82:5e:12:d8:d9:9a:92: 7b:29:e3:a1:f6:81:76:d0:3c:6b:a3:b7:58:b0:34: 21:0a:74:82:81:3f:03:9f:d2:f6:c4:3b:19:97:5e: 86:ca:b1:42:02:90:d0:75:16:3e:96:f9:50:dc:10: 1d:49:d6:f8:c4:10:2a:2f:ae:ee:7b:be:16:2e:45: 1e:d7:fc:5f:a7:97:b2:b8:aa:bb:9a:8c:5b:f1:e1: ef:62:24:bc:de:dc:af:01:ea:7c:60:d7:bd:57:b4: 50:00:45:de:20:77:5c:29:ba:a7:8c:fa:f9:b3:12: f5:de:6a:96:2a:fa:22:0e:62:18:8c:4d:3c:51:9a: 76:bb:be:b9:d5:0c:b0:78:0f:32:a9:b0:28:3a:be: 19:4f:a4:db:37:af:8c:1d:32:77:8c:89:15:ee:68: c1:b2:c3:7a:4d:8f:f1:12:55:0d:36:e4:2c:5f:ce: c6:d0:3b:0c:82:08:0b:c2:1a:68:42:31:ef:1f:7d: 25:27:d5:05:5a:84:2e:e4:7b:ca:20:09:84:67:36: 68:1b:74:0c:74:9c:a6:94:c6:e5:eb:32:84:bd:05: cf:cc:6e:90:22:93:86:cb:8a:0e:3c:bc:12:f7:03: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:DA:79:D8:C7:C8:84:90:B2:F1:48:54:24:1A:D4:7C:51:07:F0 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c2:b4:18:18:b0:8b:05:32:84:ba:e7:1b:e6:c4:66:a8:13: 46:ef:d6:e0:76:74:f7:d0:bc:d8:c4:4d:80:d0:db:62:e9:00: be:ad:75:d0:8a:48:44:20:e4:5b:24:e9:ff:87:86:fc:01:ce: a2:43:5b:a6:9a:36:72:37:ad:2f:de:5f:7e:9a:98:e3:1d:6e: be:62:28:c8:04:e8:ba:dd:6d:c8:29:b7:da:f7:be:a0:2a:c3: 04:2b:ae:49:bc:81:e8:2b:f1:7c:9f:09:e0:97:bb:c4:07:53: a2:11:58:4b:ad:db:e8:f8:34:ef:de:a1:89:5e:0a:d5:76:54: d3:ef:5b:37:1f:62:6a:df:49:46:87:88:94:f9:8e:6e:6b:23: 35:1b:af:89:a6:15:d7:05:36:32:b1:56:5c:20:25:82:1e:20: a2:cf:68:87:81:9b:0c:28:e3:4b:9d:0a:30:bb:58:01:1f:e5: a8:d8:f7:e1:61:15:7c:d0:70:cf:e0:14:f0:be:68:fd:cb:9d: 3f:e2:6c:2d:76:27:2d:2d:10:61:40:c7:57:74:72:3c:3b:29: 23:86:43:b9:11:85:81:6e:93:d9:de:e0:61:b4:f8:be:47:6b: d7:92:95:93:ad:37:9f:d9:09:19:d7:95:ce:cc:cc:11:f5:9e: 15:83:11:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMKPb1wwuwx8hMNNE4iQN5WZgKDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA1MjkxMjQyNDlaFw0yNjA1MzAxMzAyNDlaMDMxMTAvBgNV BAMTKDQwN0NEQTc5RDhDN0M4ODQ5MEIyRjE0ODU0MjQxQUQ0N0M1MTA3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfw6F+rPxKtN6oeHAScBBdP2z cYCAgl4S2Nmaknsp46H2gXbQPGujt1iwNCEKdIKBPwOf0vbEOxmXXobKsUICkNB1 Fj6W+VDcEB1J1vjEECovru57vhYuRR7X/F+nl7K4qruajFvx4e9iJLze3K8B6nxg 171XtFAARd4gd1wpuqeM+vmzEvXeapYq+iIOYhiMTTxRmna7vrnVDLB4DzKpsCg6 vhlPpNs3r4wdMneMiRXuaMGyw3pNj/ESVQ025CxfzsbQOwyCCAvCGmhCMe8ffSUn 1QVahC7ke8ogCYRnNmgbdAx0nKaUxuXrMoS9Bc/MbpAik4bLig48vBL3A0ARAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQHzaedjHyISQsvFIVCQa1HxRB/AwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8K0GBiwiwUy hLrnG+bEZqgTRu/W4HZ099C82MRNgNDbYukAvq110IpIRCDkWyTp/4eG/AHOokNb ppo2cjetL95ffpqY4x1uvmIoyATout1tyCm32ve+oCrDBCuuSbyB6CvxfJ8J4Je7 xAdTohFYS63b6Pg0796hiV4K1XZU0+9bNx9iat9JRoeIlPmObmsjNRuviaYV1wU2 MrFWXCAlgh4gos9oh4GbDCjjS50KMLtYAR/lqNj34WEVfNBwz+AU8L5o/cudP+Js LXYnLS0QYUDHV3RyPDspI4ZDuRGFgW6T2d7gYbT4vkdr15KVk603n9kJGdeVzszM EfWeFYMRuA== -----END CERTIFICATE-----Generated at Sat May 30 01:38:21 2026 by rpki-client