$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: rAxPoVodXztWiypJ8WAmVfTzsvxbdlw5y9nfnpMzmIg= Subject key identifier: EB:EF:F3:D9:83:6F:53:CA:4F:C1:11:4D:27:13:5B:0F:73:26:8B:37 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 6B691B911E2CBDBB2BA75E804DAA9AE3497E47F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: B1 Signing time: Fri 29 May 2026 11:17:49 +0000 Manifest this update: Fri 29 May 2026 11:12:49 +0000 Manifest next update: Sat 30 May 2026 14:52:49 +0000 Files and hashes: 1: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) 2: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) 3: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 4: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: syw4zaRf613RUaztcFox3Ym5QpVVqV45dfqdBNcQ//w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:69:1b:91:1e:2c:bd:bb:2b:a7:5e:80:4d:aa:9a:e3:49:7e:47:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: May 29 11:12:49 2026 GMT Not After : May 30 14:52:49 2026 GMT Subject: CN=EBEFF3D9836F53CA4FC1114D27135B0F73268B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:61:b6:8a:ac:39:4e:44:8c:4e:35:ad:bd: 40:0e:0b:f4:8e:2d:37:71:51:1f:fa:5b:ff:4f:ff: da:83:91:a2:1a:b4:eb:2c:3f:5d:99:e9:55:7f:3d: 4a:c4:87:a7:f5:2a:57:5d:2e:11:e6:3c:2c:99:b4: 31:82:0a:24:6b:31:0f:93:d0:f6:5f:f4:61:31:67: 75:04:e8:ff:dd:2f:fa:06:0b:a2:9c:92:ed:ba:3c: 3c:e6:1a:83:39:21:00:c1:db:15:f7:f2:ff:f6:50: dd:1d:52:f6:9b:df:82:72:f6:3c:57:f7:c6:e4:5c: b7:30:81:eb:5d:96:d9:d7:d5:53:b5:70:b9:ce:dd: 35:df:ae:6a:12:2a:2a:1c:dc:51:bc:7d:4b:a3:20: b1:da:81:e4:9d:22:1a:ac:61:08:50:4a:1d:48:dc: 0a:ea:3b:8b:82:bf:de:6c:04:64:f4:2f:dc:f1:b9: 89:08:5d:22:ca:c2:f6:3d:cc:0b:92:95:a8:ec:83: c1:e5:77:b4:fc:f7:7f:55:d1:61:a9:49:dd:ff:5a: 5c:92:23:e1:8e:86:8f:4b:ae:4b:6a:3a:5f:1b:56: 32:fc:a0:69:32:18:0b:d7:ef:24:e6:a4:83:eb:12: 81:56:17:ab:59:61:6b:c9:1a:a2:7b:87:ba:62:6e: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EF:F3:D9:83:6F:53:CA:4F:C1:11:4D:27:13:5B:0F:73:26:8B:37 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b4:f4:e4:9d:a3:5e:9c:5c:e3:87:aa:78:fa:d9:39:b8:c8: 54:36:5d:1e:f0:c7:52:76:5a:77:83:c5:27:0c:46:f7:20:8f: 74:b6:c7:bb:9e:31:f4:d2:ed:6b:19:7e:e6:0f:e6:ee:a3:db: 91:f3:17:86:83:3c:5f:56:42:e6:ae:9b:54:c7:44:ac:4b:4d: 0c:94:e8:27:d4:d4:77:1d:3c:29:ff:f2:36:7f:f6:f4:11:09: f4:48:0d:c5:1d:b1:11:f6:42:1f:43:2b:33:0d:7e:fc:07:58: a8:34:0f:7d:45:a7:a3:1d:b3:31:98:0a:db:89:35:36:09:ec: 9a:56:3d:3d:1f:8f:94:66:bb:9d:30:ac:5b:97:9d:ae:bc:ab: d8:a6:2c:a4:2f:f9:35:c9:0b:97:68:d5:f9:32:8e:58:45:08: 19:58:1d:b8:39:01:26:2c:11:67:74:b7:3f:4a:8e:57:ac:d9: f7:bb:db:21:98:1c:97:e5:2f:c3:a9:24:31:9a:e5:ba:ca:69: 66:28:ce:f3:29:2a:81:3d:79:6a:a3:77:06:d3:46:6d:1c:ea: 6e:c0:10:e9:4c:99:93:79:8c:21:a5:d5:93:72:99:49:67:22: 72:bf:1c:08:3e:20:d4:5b:63:cb:47:f3:95:14:82:88:70:95: 13:01:f3:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa2kbkR4svbsrp16ATaqa40l+R/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA1MjkxMTEyNDlaFw0yNjA1MzAxNDUyNDlaMDMxMTAvBgNV BAMTKEVCRUZGM0Q5ODM2RjUzQ0E0RkMxMTE0RDI3MTM1QjBGNzMyNjhCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Y2G2iqw5TkSMTjWtvUAOC/SO LTdxUR/6W/9P/9qDkaIatOssP12Z6VV/PUrEh6f1KlddLhHmPCyZtDGCCiRrMQ+T 0PZf9GExZ3UE6P/dL/oGC6Kcku26PDzmGoM5IQDB2xX38v/2UN0dUvab34Jy9jxX 98bkXLcwgetdltnX1VO1cLnO3TXfrmoSKioc3FG8fUujILHageSdIhqsYQhQSh1I 3ArqO4uCv95sBGT0L9zxuYkIXSLKwvY9zAuSlajsg8Hld7T8939V0WGpSd3/WlyS I+GOho9LrktqOl8bVjL8oGkyGAvX7yTmpIPrEoFWF6tZYWvJGqJ7h7pibrGRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6+/z2YNvU8pPwRFNJxNbD3MmizcwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLT05J2jXpxc 44eqePrZObjIVDZdHvDHUnZad4PFJwxG9yCPdLbHu54x9NLtaxl+5g/m7qPbkfMX hoM8X1ZC5q6bVMdErEtNDJToJ9TUdx08Kf/yNn/29BEJ9EgNxR2xEfZCH0MrMw1+ /AdYqDQPfUWnox2zMZgK24k1NgnsmlY9PR+PlGa7nTCsW5edrryr2KYspC/5NckL l2jV+TKOWEUIGVgduDkBJiwRZ3S3P0qOV6zZ97vbIZgcl+Uvw6kkMZrlusppZijO 8ykqgT15aqN3BtNGbRzqbsAQ6UyZk3mMIaXVk3KZSWcicr8cCD4g1Ftjy0fzlRSC iHCVEwHzNg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client