$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: E4nn+Wf7QlN3IvEBPFVmvsITc3BM9Zn3h3szxuVPQGg= Subject key identifier: CB:26:3F:83:7A:91:79:C4:BB:AF:8D:E6:F0:F4:28:4A:0F:87:6C:A9 Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 4FF5860E6CCA6FD56FEEC6CDDD33CCC25EC4AAA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: AE Signing time: Fri 29 May 2026 04:57:38 +0000 Manifest this update: Fri 29 May 2026 04:52:38 +0000 Manifest next update: Sat 30 May 2026 04:57:38 +0000 Files and hashes: 1: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) 2: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) 3: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: BKwdJZ5yMMfFJPUbnvZ0uh3tjqq3IgNWLZbJyLZdACM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 04:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f5:86:0e:6c:ca:6f:d5:6f:ee:c6:cd:dd:33:cc:c2:5e:c4:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: May 29 04:52:38 2026 GMT Not After : May 30 04:57:38 2026 GMT Subject: CN=CB263F837A9179C4BBAF8DE6F0F4284A0F876CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:99:fa:7c:ab:bf:c7:a2:23:30:93:19:5c: 24:69:36:e5:7f:16:3d:6e:fc:6c:31:94:9b:38:69: 5b:4f:b4:3f:7e:33:c6:04:02:fd:d6:28:4f:ce:07: 44:dc:91:84:16:12:a6:a2:3e:b8:e4:01:95:ee:f0: f2:a3:5c:05:3e:6c:15:62:9d:0b:ae:a4:9a:8b:d0: 3d:ea:46:65:38:55:78:e2:0e:57:f4:5b:65:23:7a: 00:0b:5a:8c:05:a1:60:fe:49:2d:b6:c0:04:f9:fd: cf:03:3c:df:ff:08:2d:62:14:c4:a6:c7:60:13:84: 84:32:42:05:32:6b:96:a9:bd:b6:91:d1:a2:de:9e: ff:1a:43:d1:63:22:6f:83:d0:55:a5:8b:6a:28:09: e9:bb:fb:fc:2a:4a:44:b5:d2:18:7c:33:6a:a3:e2: bb:f0:dd:06:7a:8d:d9:8a:be:8e:b1:1f:1b:88:d9: 7c:3e:df:14:fa:fd:12:5a:85:36:3f:43:9a:11:4c: 72:5f:ba:06:41:5b:d8:77:ff:44:e5:38:97:e1:3c: da:67:3d:5f:27:bf:7f:9c:33:8a:fc:a1:64:d2:c2: d3:6d:6a:74:bb:c1:8b:dd:9e:5f:ad:4b:2d:05:bd: 7e:93:54:87:37:5d:a4:61:dc:9e:b5:5d:89:bc:0a: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:26:3F:83:7A:91:79:C4:BB:AF:8D:E6:F0:F4:28:4A:0F:87:6C:A9 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:87:67:8a:47:7f:48:8f:e8:9a:58:5b:b5:82:04:e4:ae:d5: 3a:e2:40:aa:29:1b:ea:85:af:c1:94:5f:7d:62:9d:4f:f1:12: cf:97:3d:d3:77:c8:ec:5a:05:89:6c:3a:e4:67:7b:6b:98:d3: f9:ac:6d:1c:5d:d0:84:0b:4d:d9:d9:1b:b6:cf:46:4b:b0:d0: 62:eb:9a:a5:b4:a8:96:cb:6f:6b:f9:ea:4e:ac:5a:e5:ee:10: 78:b8:ef:fa:6b:c2:bb:65:dd:0f:d1:ac:d7:50:f3:a3:aa:21: 29:23:61:ad:74:be:f5:f6:03:98:a3:56:2f:da:37:96:01:93: 98:01:4d:5c:8a:77:68:40:e3:d9:0f:31:e5:c4:df:7c:21:88: cd:0a:e9:b9:42:a3:06:41:61:a4:72:9a:bb:88:e2:81:fc:3f: 70:ea:e4:bc:30:85:53:3a:55:ac:a1:df:9a:2b:46:ac:4f:3a: 03:f6:02:bd:8d:d6:ec:60:07:d7:18:12:3d:74:3a:25:5b:25: 6b:29:58:b5:7b:69:30:b4:0b:5c:ca:7d:8a:e8:c5:fb:b0:76: b9:c1:30:b9:b2:6f:57:6d:9d:54:06:52:eb:13:24:24:a8:2b: da:be:cd:94:dd:eb:24:c8:e3:f1:a4:7b:b5:5b:ce:f4:a9:e4: 23:de:e4:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT/WGDmzKb9Vv7sbN3TPMwl7EqqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjA1MjkwNDUyMzhaFw0yNjA1MzAwNDU3MzhaMDMxMTAvBgNV BAMTKENCMjYzRjgzN0E5MTc5QzRCQkFGOERFNkYwRjQyODRBMEY4NzZDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGZn6fKu/x6IjMJMZXCRpNuV/ Fj1u/GwxlJs4aVtPtD9+M8YEAv3WKE/OB0TckYQWEqaiPrjkAZXu8PKjXAU+bBVi nQuupJqL0D3qRmU4VXjiDlf0W2UjegALWowFoWD+SS22wAT5/c8DPN//CC1iFMSm x2AThIQyQgUya5apvbaR0aLenv8aQ9FjIm+D0FWli2ooCem7+/wqSkS10hh8M2qj 4rvw3QZ6jdmKvo6xHxuI2Xw+3xT6/RJahTY/Q5oRTHJfugZBW9h3/0TlOJfhPNpn PV8nv3+cM4r8oWTSwtNtanS7wYvdnl+tSy0FvX6TVIc3XaRh3J61XYm8Cm75AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyyY/g3qRecS7r43m8PQoSg+HbKkwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYdnikd/SI/o mlhbtYIE5K7VOuJAqikb6oWvwZRffWKdT/ESz5c903fI7FoFiWw65Gd7a5jT+axt HF3QhAtN2dkbts9GS7DQYuuapbSolstva/nqTqxa5e4QeLjv+mvCu2XdD9Gs11Dz o6ohKSNhrXS+9fYDmKNWL9o3lgGTmAFNXIp3aEDj2Q8x5cTffCGIzQrpuUKjBkFh pHKau4jigfw/cOrkvDCFUzpVrKHfmitGrE86A/YCvY3W7GAH1xgSPXQ6JVslaylY tXtpMLQLXMp9iujF+7B2ucEwubJvV22dVAZS6xMkJKgr2r7NlN3rJMjj8aR7tVvO 9KnkI97kfg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client