$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: XLUBl9Dl/Lt5vb0Z7VoPmR8eytBw/Ef5yCQ2P6MLJ+w= Subject key identifier: E5:FF:3C:5B:B7:05:DB:EC:9A:12:CA:DB:70:53:50:17:05:50:18:B7 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 034245BE01379BBDE15DDE492FC5383BD90D55C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: B0 Signing time: Fri 29 May 2026 16:03:01 +0000 Manifest this update: Fri 29 May 2026 15:58:01 +0000 Manifest next update: Sat 30 May 2026 18:31:01 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: ZsqZQcH06sP0vlvSGt1HK7OoPB5jUBA1Q1XBBZewsxc=) 2: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:42:45:be:01:37:9b:bd:e1:5d:de:49:2f:c5:38:3b:d9:0d:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: May 29 15:58:01 2026 GMT Not After : May 30 18:31:01 2026 GMT Subject: CN=E5FF3C5BB705DBEC9A12CADB70535017055018B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:75:82:52:bd:6d:b4:47:50:9e:7a:39:03: 3c:68:63:67:eb:ca:f5:d3:62:6e:eb:31:c8:d1:5f: 3c:53:d8:ae:bd:c4:74:17:24:5e:92:36:75:ab:01: 92:0f:67:88:3c:84:9e:71:1b:fa:b8:a0:95:05:56: ff:98:7e:0f:9a:8d:b8:a9:3d:12:02:c6:b4:23:e1: c0:79:61:1a:1f:8d:ce:bc:58:39:a6:d6:8e:c5:45: 4c:f8:82:58:a4:c0:32:99:d9:b1:4c:22:f3:40:f4: a3:c4:00:20:04:bd:be:44:51:18:73:fb:f9:48:79: 9c:53:3a:9c:35:26:31:47:d5:4b:c4:23:0f:09:38: 71:63:2b:76:d1:37:c3:65:bb:48:37:aa:0e:bc:02: a4:c5:00:18:ee:81:f2:df:e6:6d:4f:f2:ef:33:30: 80:cd:cd:61:fc:a8:b7:f7:c2:48:cf:06:27:28:4d: 99:6c:f6:c7:59:89:f0:28:f8:d4:29:3b:84:7b:91: 90:20:ce:60:17:bd:35:4e:26:a5:e2:5c:94:81:e1: ba:6b:88:72:d2:be:03:89:82:ca:7f:df:b5:48:07: 13:e6:95:f2:ef:1f:8f:fb:0b:b7:28:00:97:13:a1: e7:71:a2:58:2b:c1:de:1b:8c:5d:ca:91:cc:c7:31: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FF:3C:5B:B7:05:DB:EC:9A:12:CA:DB:70:53:50:17:05:50:18:B7 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:93:18:b1:d3:37:0d:bf:25:02:75:b0:39:4d:71:3f:54:b0: 60:09:86:c4:56:70:14:26:02:52:62:79:20:aa:79:15:57:40: 34:80:b5:67:81:16:b3:02:ec:3f:04:66:57:53:d3:ea:c4:7d: a0:e4:04:53:62:9d:93:a4:fe:36:0f:a2:23:a2:6f:80:23:f7: 32:67:b5:eb:d6:cb:d5:f7:49:7b:16:89:53:94:57:4d:30:88: 42:bd:1e:b8:fe:79:fe:8b:4f:d3:62:32:f8:4a:59:5f:57:96: 5e:08:ad:70:29:a2:1c:90:07:9a:56:9b:b4:7b:01:d4:5d:56: 3c:9b:a6:87:b3:60:e1:c3:c3:97:79:96:58:29:7f:cf:7f:88: bc:68:06:92:80:58:3a:23:c2:9d:46:b0:b5:d9:e9:b4:21:0f: 1a:d1:8a:c9:af:40:b4:c0:06:3c:2c:8f:bb:fa:a3:aa:8f:e3: 94:ff:b2:08:a0:cb:39:6b:82:6f:5a:07:74:b1:7c:0b:47:84: 17:8f:b0:88:0e:14:e1:cf:c1:cc:fa:d4:5a:fe:a5:3b:1e:07: ab:c4:98:8d:49:df:36:ef:33:b7:8d:46:a7:58:ec:7c:20:d2: bb:2b:c4:ef:3f:7f:d9:95:c7:5c:62:1e:36:e2:35:de:3e:17: 07:f4:f2:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA0JFvgE3m73hXd5JL8U4O9kNVcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA1MjkxNTU4MDFaFw0yNjA1MzAxODMxMDFaMDMxMTAvBgNV BAMTKEU1RkYzQzVCQjcwNURCRUM5QTEyQ0FEQjcwNTM1MDE3MDU1MDE4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8snWCUr1ttEdQnno5AzxoY2fr yvXTYm7rMcjRXzxT2K69xHQXJF6SNnWrAZIPZ4g8hJ5xG/q4oJUFVv+Yfg+ajbip PRICxrQj4cB5YRofjc68WDmm1o7FRUz4glikwDKZ2bFMIvNA9KPEACAEvb5EURhz +/lIeZxTOpw1JjFH1UvEIw8JOHFjK3bRN8Nlu0g3qg68AqTFABjugfLf5m1P8u8z MIDNzWH8qLf3wkjPBicoTZls9sdZifAo+NQpO4R7kZAgzmAXvTVOJqXiXJSB4bpr iHLSvgOJgsp/37VIBxPmlfLvH4/7C7coAJcToedxolgrwd4bjF3KkczHMcktAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5f88W7cF2+yaEsrbcFNQFwVQGLcwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ZMYsdM3Db8l AnWwOU1xP1SwYAmGxFZwFCYCUmJ5IKp5FVdANIC1Z4EWswLsPwRmV1PT6sR9oOQE U2Kdk6T+Ng+iI6JvgCP3Mme169bL1fdJexaJU5RXTTCIQr0euP55/otP02Iy+EpZ X1eWXgitcCmiHJAHmlabtHsB1F1WPJumh7Ng4cPDl3mWWCl/z3+IvGgGkoBYOiPC nUawtdnptCEPGtGKya9AtMAGPCyPu/qjqo/jlP+yCKDLOWuCb1oHdLF8C0eEF4+w iA4U4c/BzPrUWv6lOx4Hq8SYjUnfNu8zt41Gp1jsfCDSuyvE7z9/2ZXHXGIeNuI1 3j4XB/TyuQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:10 2026 by rpki-client