$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: ohQ3MgJw6Fh5I5thcVUMCOxBgFjYIyWwwzU+iFMpYS0= Subject key identifier: 91:77:B7:F7:DF:F2:3F:65:9D:E2:E0:04:71:E0:3C:D4:9F:E8:FA:04 Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 6300A69876C25B4509419D3556B0BBE82AF2B1DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: B0 Signing time: Fri 29 May 2026 13:17:51 +0000 Manifest this update: Fri 29 May 2026 13:12:51 +0000 Manifest next update: Sat 30 May 2026 13:31:51 +0000 Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: 5TM4M6mUJbEo3ArDpoHBuby+HskqD5aiCFgnvG9ZoTs=) 2: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=) 3: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:00:a6:98:76:c2:5b:45:09:41:9d:35:56:b0:bb:e8:2a:f2:b1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: May 29 13:12:51 2026 GMT Not After : May 30 13:31:51 2026 GMT Subject: CN=9177B7F7DFF23F659DE2E00471E03CD49FE8FA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:d2:88:ff:a0:5a:64:06:39:fc:11:16:b0: 92:1c:be:fc:7e:64:0b:af:9d:8b:36:0b:fc:e9:25: 0a:66:f4:fc:21:fb:d5:d9:10:db:50:54:24:35:3a: 71:38:da:38:c3:39:70:58:05:aa:34:d1:94:7a:76: ee:65:38:60:6d:21:0c:d4:c2:15:62:c8:a2:55:47: 9e:62:ef:a5:db:b3:a1:4e:ae:65:20:57:1b:67:a4: 69:4b:b7:93:e4:44:d2:87:a8:98:a6:8c:00:3a:9c: 24:40:28:43:7b:b2:fe:ba:fe:2c:9c:8c:60:c8:76: 3e:d1:01:d4:66:1d:f1:93:49:50:d1:4a:6e:4c:1b: da:7e:3a:1f:c1:c1:d2:5b:d2:25:02:27:04:2e:b7: 5b:5e:1a:e6:8c:84:0b:a8:3d:06:d3:47:df:71:75: 07:1b:9f:dd:8a:20:dc:2c:fa:3a:36:ca:61:b1:6e: c5:d3:40:02:e9:57:98:52:f0:16:f7:b8:47:95:32: 21:7a:35:49:36:1b:5e:73:e4:85:d3:cd:2b:f4:c4: a6:6f:47:63:98:da:fc:1b:de:f5:65:d4:43:51:c6: a2:70:8a:f5:f1:ba:c8:6b:8e:de:33:5b:4a:2e:bb: b9:b1:61:c7:43:38:bf:d4:10:8b:e4:83:34:3b:f3: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:B7:F7:DF:F2:3F:65:9D:E2:E0:04:71:E0:3C:D4:9F:E8:FA:04 X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:87:77:dd:9e:af:79:ea:03:7b:46:08:a8:ee:28:88:51:7f: 08:fc:a9:88:91:ef:73:ab:f8:24:c3:1d:91:d1:40:1d:fb:e8: 42:0e:10:5e:fb:c9:e7:4b:6f:61:c5:22:d6:f5:d3:c6:cd:ea: a3:88:97:28:8f:ae:7e:d4:c6:c6:ee:db:de:ab:30:1b:39:5b: 25:81:65:6f:07:06:f4:7d:1e:c1:e9:4a:ad:c4:24:f4:6b:8f: 04:69:c7:25:7c:61:1e:8e:0c:32:ff:f1:66:54:40:1e:f1:d4: 85:77:2c:6d:7d:b9:ab:5e:83:25:b8:af:20:b1:fd:5d:4e:79: 4d:81:7e:95:3e:4d:ed:a5:1a:aa:c5:3a:e9:29:66:00:2a:5e: 5a:ae:43:be:e1:73:2f:de:53:73:a2:e1:46:b8:2b:ff:ad:fb: d6:f9:bd:1b:43:2d:ba:de:89:b8:89:99:a2:48:07:b3:79:86: 43:b6:c5:91:e8:93:ff:e1:10:cf:0f:e5:e8:3c:60:5b:e1:61: c3:ec:90:61:aa:ab:f8:2f:16:d5:b4:33:a2:cc:88:fb:40:02: 8f:2f:c7:d2:31:57:9e:af:b6:8f:91:3a:90:9a:75:b1:ec:5d: 4d:91:8e:83:3b:26:60:91:2c:75:bc:0c:8a:10:88:55:1c:6e: d1:0e:6a:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYwCmmHbCW0UJQZ01VrC76Crysd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjA1MjkxMzEyNTFaFw0yNjA1MzAxMzMxNTFaMDMxMTAvBgNV BAMTKDkxNzdCN0Y3REZGMjNGNjU5REUyRTAwNDcxRTAzQ0Q0OUZFOEZBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTtKI/6BaZAY5/BEWsJIcvvx+ ZAuvnYs2C/zpJQpm9Pwh+9XZENtQVCQ1OnE42jjDOXBYBao00ZR6du5lOGBtIQzU whViyKJVR55i76Xbs6FOrmUgVxtnpGlLt5PkRNKHqJimjAA6nCRAKEN7sv66/iyc jGDIdj7RAdRmHfGTSVDRSm5MG9p+Oh/BwdJb0iUCJwQut1teGuaMhAuoPQbTR99x dQcbn92KINws+jo2ymGxbsXTQALpV5hS8Bb3uEeVMiF6NUk2G15z5IXTzSv0xKZv R2OY2vwb3vVl1ENRxqJwivXxushrjt4zW0ouu7mxYcdDOL/UEIvkgzQ78z0NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkXe399/yP2Wd4uAEceA81J/o+gQwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOod33Z6veeoD e0YIqO4oiFF/CPypiJHvc6v4JMMdkdFAHfvoQg4QXvvJ50tvYcUi1vXTxs3qo4iX KI+uftTGxu7b3qswGzlbJYFlbwcG9H0ewelKrcQk9GuPBGnHJXxhHo4MMv/xZlRA HvHUhXcsbX25q16DJbivILH9XU55TYF+lT5N7aUaqsU66SlmACpeWq5DvuFzL95T c6LhRrgr/6371vm9G0Mtut6JuImZokgHs3mGQ7bFkeiT/+EQzw/l6DxgW+Fhw+yQ Yaqr+C8W1bQzosyI+0ACjy/H0jFXnq+2j5E6kJp1sexdTZGOgzsmYJEsdbwMihCI VRxu0Q5qug== -----END CERTIFICATE-----Generated at Sat May 30 02:24:17 2026 by rpki-client