$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: yP7IdniLLdR10Td8AjanMP8IYge/Jqb4+ggrNB6l/90= Subject key identifier: 2D:CF:C9:28:DD:B1:F6:C3:D6:A9:61:F3:74:4F:9D:4F:F1:B4:73:D7 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 25BD09DE7F1F450E78E7D215E778585E39750E70 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: B1 Signing time: Fri 29 May 2026 10:47:47 +0000 Manifest this update: Fri 29 May 2026 10:42:47 +0000 Manifest next update: Sat 30 May 2026 11:56:47 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: vgex/4X2yXf9CbUbXJ0u/FsJs8XcM1mtoV4EIgzUwWk=) 2: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 3: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bd:09:de:7f:1f:45:0e:78:e7:d2:15:e7:78:58:5e:39:75:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: May 29 10:42:47 2026 GMT Not After : May 30 11:56:47 2026 GMT Subject: CN=2DCFC928DDB1F6C3D6A961F3744F9D4FF1B473D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:40:0c:35:c7:05:39:04:25:26:69:14:41: 21:68:44:df:96:7c:70:59:92:f2:a5:c8:ac:19:90: 9b:59:d4:e5:c7:61:9f:45:a4:75:82:09:e7:e3:76: 65:d3:18:3c:2a:a0:d4:8a:a0:9c:8a:f0:eb:91:37: 0f:a4:cd:13:02:d2:3a:c9:cf:6e:cc:d1:a8:1f:8a: ef:34:1c:48:53:08:f4:38:a2:4b:25:b7:09:2e:fa: b4:12:40:33:6f:df:c8:e8:66:40:59:65:40:68:b5: a2:39:33:68:3f:71:d5:62:73:a6:ba:c4:51:91:74: fa:52:dd:9e:f1:d6:93:a4:fc:fb:66:03:8c:8a:66: 67:19:f6:6d:99:e3:c2:9e:ee:e4:91:f0:26:0b:49: c6:b4:61:5b:0f:39:54:34:24:a9:ad:c7:35:73:c0: 7d:86:30:a2:f5:c5:1e:aa:0b:e1:06:62:0f:73:16: 4e:ff:34:ca:b8:43:bf:5b:d0:64:8c:de:e5:ff:94: 1c:4e:1d:04:37:50:8e:50:83:e2:b4:46:6b:63:d1: 9f:a1:4e:28:10:09:e1:7d:fc:1f:9d:dd:59:5b:90: bb:cf:14:e1:08:62:84:b0:58:0e:c7:91:8f:69:69: ba:a0:63:a5:c9:a3:20:ec:1b:1f:06:4c:06:6e:76: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CF:C9:28:DD:B1:F6:C3:D6:A9:61:F3:74:4F:9D:4F:F1:B4:73:D7 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:a5:3e:98:f8:c6:11:9c:3e:e8:33:39:04:a7:69:6e:2e: ee:12:d0:67:41:4d:e5:dd:27:16:d9:0a:1b:bd:a8:50:ed:8b: f9:59:35:ff:ff:dc:81:12:64:26:a2:35:da:35:d8:a1:cb:91: 04:72:01:32:86:c9:8e:55:43:c8:96:99:cb:f0:87:08:42:90: 4b:6f:e1:19:8f:3c:3d:60:df:0c:55:0f:7d:4d:ab:ca:cd:0c: 37:d5:ac:18:ba:8e:95:30:27:9c:9c:e3:ff:b1:23:94:00:9e: 55:06:87:48:15:51:cb:6a:56:36:a0:f0:4e:36:21:59:63:c1: d8:88:fd:70:ca:3d:a0:fb:d5:f2:91:6a:4c:c4:45:03:af:2a: 11:7f:fc:22:64:36:a7:f5:d4:59:cf:74:64:9b:7c:fe:ef:a6: 53:80:6e:4d:89:74:3e:d8:1d:85:c7:c9:86:f5:79:96:5e:4d: 03:a7:52:62:a2:99:49:82:40:ce:73:c2:1f:0e:26:26:5a:62: cd:ee:83:b3:84:77:c9:70:fa:3e:6c:8f:fe:7f:00:ba:94:f5: d5:b7:58:69:95:b9:49:ff:b8:3f:a0:fe:6a:f0:a0:e4:29:65: d2:25:d7:a8:36:66:ed:8d:57:fe:cb:6a:0a:6f:a1:20:e9:74: ab:22:56:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJb0J3n8fRQ5459IV53hYXjl1DnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA1MjkxMDQyNDdaFw0yNjA1MzAxMTU2NDdaMDMxMTAvBgNV BAMTKDJEQ0ZDOTI4RERCMUY2QzNENkE5NjFGMzc0NEY5RDRGRjFCNDczRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLUAMNccFOQQlJmkUQSFoRN+W fHBZkvKlyKwZkJtZ1OXHYZ9FpHWCCefjdmXTGDwqoNSKoJyK8OuRNw+kzRMC0jrJ z27M0agfiu80HEhTCPQ4oksltwku+rQSQDNv38joZkBZZUBotaI5M2g/cdVic6a6 xFGRdPpS3Z7x1pOk/PtmA4yKZmcZ9m2Z48Ke7uSR8CYLSca0YVsPOVQ0JKmtxzVz wH2GMKL1xR6qC+EGYg9zFk7/NMq4Q79b0GSM3uX/lBxOHQQ3UI5Qg+K0Rmtj0Z+h TigQCeF9/B+d3VlbkLvPFOEIYoSwWA7HkY9pabqgY6XJoyDsGx8GTAZudkbPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULc/JKN2x9sPWqWHzdE+dT/G0c9cwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLmlPpj4xhGc PugzOQSnaW4u7hLQZ0FN5d0nFtkKG72oUO2L+Vk1///cgRJkJqI12jXYocuRBHIB MobJjlVDyJaZy/CHCEKQS2/hGY88PWDfDFUPfU2rys0MN9WsGLqOlTAnnJzj/7Ej lACeVQaHSBVRy2pWNqDwTjYhWWPB2Ij9cMo9oPvV8pFqTMRFA68qEX/8ImQ2p/XU Wc90ZJt8/u+mU4BuTYl0PtgdhcfJhvV5ll5NA6dSYqKZSYJAznPCHw4mJlpize6D s4R3yXD6PmyP/n8AupT11bdYaZW5Sf+4P6D+avCg5Cll0iXXqDZm7Y1X/stqCm+h IOl0qyJWCw== -----END CERTIFICATE-----Generated at Sat May 30 01:38:21 2026 by rpki-client