$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: EzdZo+B/ozDWU96o7k4ZjXKOSNkECtAqfGI3SYzAuF0= Subject key identifier: 05:3C:A0:87:61:9E:DE:5E:33:C6:2A:82:84:0E:D7:65:E3:F7:4B:01 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 5EB9EE63B357FB864D2BBEA230669F3E25C15443 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: AF Signing time: Fri 29 May 2026 12:27:49 +0000 Manifest this update: Fri 29 May 2026 12:22:49 +0000 Manifest next update: Sat 30 May 2026 13:17:49 +0000 Files and hashes: 1: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) 3: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 4: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: 0IVK+VxdSS+k21xa+p00rCRehfemTH9YxdmBOML1C3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b9:ee:63:b3:57:fb:86:4d:2b:be:a2:30:66:9f:3e:25:c1:54:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: May 29 12:22:49 2026 GMT Not After : May 30 13:17:49 2026 GMT Subject: CN=053CA087619EDE5E33C62A82840ED765E3F74B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:74:e1:e4:c9:5d:24:e5:58:be:30:4a:96: 36:8c:a8:25:ff:9e:0e:b6:1a:90:02:5c:21:29:fc: f1:d7:c7:a4:27:cf:9e:5a:47:07:8d:97:ad:0b:f9: a8:a0:a6:06:34:ed:a8:62:f0:94:b4:01:51:86:3a: ad:8d:00:e8:98:a4:90:ef:fc:9e:a2:03:ec:3a:4f: 38:48:d2:87:9e:0b:44:ab:13:80:bf:e1:c1:70:45: 22:b5:08:73:d0:93:87:6e:cc:59:a0:12:ea:d8:5b: 0a:d5:15:fd:bc:4f:24:36:bf:7b:c2:ae:2d:81:20: c9:18:64:f3:65:e0:7a:4c:b4:b6:76:10:d3:4e:4a: 1b:85:10:e7:3d:84:83:3e:69:1c:c8:09:aa:80:f9: 57:6e:b0:51:97:81:0e:04:f9:9d:da:26:f1:d5:40: 1d:fc:d6:fe:91:45:a8:e0:b3:db:fe:6f:bb:1d:b3: 13:9b:1d:52:f4:cc:66:b2:c2:b8:2e:d2:73:ea:49: 29:ec:aa:29:da:eb:7e:18:b6:a7:7a:8e:b3:00:7f: 8a:8f:a5:d7:4c:cc:ad:4c:a3:86:ef:b1:4f:24:61: 75:db:f2:a2:bd:ea:2a:dc:f5:24:b4:e3:36:56:f9: f7:c8:44:ea:64:f4:e5:13:af:4f:2e:27:87:ba:cb: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:A0:87:61:9E:DE:5E:33:C6:2A:82:84:0E:D7:65:E3:F7:4B:01 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c9:a3:5e:c6:f7:f0:24:9b:71:69:98:ec:dd:5e:f8:78:4a: de:ba:84:e0:3d:70:11:e0:02:ec:5f:b1:7c:1b:ad:82:4d:3f: f9:d2:e1:7c:7a:26:ae:9e:f2:06:6d:ca:d1:06:16:5d:09:2e: ed:a5:cc:08:39:95:a2:1e:1e:ef:35:07:2f:6c:b0:88:2d:06: 14:4f:3b:0c:a5:98:f0:49:95:d8:a8:42:dc:67:6d:be:b5:0d: 4c:a5:1f:4d:71:4b:60:27:06:00:5f:08:e0:5b:f7:b2:b6:c2: b7:58:30:b3:5d:d2:19:d3:c6:62:ac:e4:5b:28:18:ce:f4:ba: 7b:6e:0f:09:ce:d8:e2:d3:3e:fd:7c:f6:93:e6:59:cb:b7:aa: 8d:be:b5:a9:ed:37:37:43:69:59:72:ba:b3:31:43:7e:c0:eb: 57:99:be:39:f6:a6:f1:1b:aa:c5:6d:af:34:a2:fa:29:35:91: e1:47:5d:a6:c0:6d:94:32:33:fd:4f:f8:8c:84:5b:8c:c5:2c: e6:bf:c4:50:e6:2f:05:ee:f8:19:af:ef:d0:d8:e2:a9:e8:47: 28:27:eb:fd:df:05:0b:15:5a:ab:8c:25:ca:3d:f3:50:54:78: 43:39:5c:56:f1:b4:50:a4:36:fe:cd:79:64:1c:6c:d5:88:50: 07:46:9b:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXrnuY7NX+4ZNK76iMGafPiXBVEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA1MjkxMjIyNDlaFw0yNjA1MzAxMzE3NDlaMDMxMTAvBgNV BAMTKDA1M0NBMDg3NjE5RURFNUUzM0M2MkE4Mjg0MEVENzY1RTNGNzRCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC293Th5MldJOVYvjBKljaMqCX/ ng62GpACXCEp/PHXx6Qnz55aRweNl60L+aigpgY07ahi8JS0AVGGOq2NAOiYpJDv /J6iA+w6TzhI0oeeC0SrE4C/4cFwRSK1CHPQk4duzFmgEurYWwrVFf28TyQ2v3vC ri2BIMkYZPNl4HpMtLZ2ENNOShuFEOc9hIM+aRzICaqA+VdusFGXgQ4E+Z3aJvHV QB381v6RRajgs9v+b7sdsxObHVL0zGaywrgu0nPqSSnsqina634Ytqd6jrMAf4qP pddMzK1Mo4bvsU8kYXXb8qK96irc9SS04zZW+ffIROpk9OUTr08uJ4e6yyn1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBTygh2Ge3l4zxiqChA7XZeP3SwEwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcmjXsb38CSb cWmY7N1e+HhK3rqE4D1wEeAC7F+xfButgk0/+dLhfHomrp7yBm3K0QYWXQku7aXM CDmVoh4e7zUHL2ywiC0GFE87DKWY8EmV2KhC3GdtvrUNTKUfTXFLYCcGAF8I4Fv3 srbCt1gws13SGdPGYqzkWygYzvS6e24PCc7Y4tM+/Xz2k+ZZy7eqjb61qe03N0Np WXK6szFDfsDrV5m+Ofam8RuqxW2vNKL6KTWR4UddpsBtlDIz/U/4jIRbjMUs5r/E UOYvBe74Ga/v0NjiqehHKCfr/d8FCxVaq4wlyj3zUFR4QzlcVvG0UKQ2/s15ZBxs 1YhQB0abFQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client