$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: CM3eWqr5eGi7YLClZNBUAPD0pNmECK39OoZqA+urtXA= Subject key identifier: 19:48:F9:8C:0C:98:2A:7F:73:0C:57:6F:0F:84:55:C1:E2:32:99:80 Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 29ED7ACB3D1DE2DEA6940AD92B26A013344A7B6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: AF Signing time: Fri 29 May 2026 12:42:49 +0000 Manifest this update: Fri 29 May 2026 12:37:49 +0000 Manifest next update: Sat 30 May 2026 15:45:49 +0000 Files and hashes: 1: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) 2: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) 3: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: uOcXZPw/iGYvWP14Q3xCCVIAR5PUFZ6Q3oveaKuABOo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ed:7a:cb:3d:1d:e2:de:a6:94:0a:d9:2b:26:a0:13:34:4a:7b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: May 29 12:37:49 2026 GMT Not After : May 30 15:45:49 2026 GMT Subject: CN=1948F98C0C982A7F730C576F0F8455C1E2329980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4e:2e:65:23:ca:2f:63:14:50:cd:8e:43:33: 71:34:ce:2f:b6:05:67:75:32:e0:79:7b:0d:4f:8d: 3b:33:97:1a:3b:57:8f:a7:75:b9:b2:12:c0:91:b6: e3:79:f5:92:5b:37:81:9e:d8:86:35:76:91:31:20: 7c:14:cd:5a:f3:9d:d8:21:b4:19:92:6a:fe:c1:52: d3:34:49:ce:39:d1:2f:ef:e3:97:bd:5a:c8:8d:58: b5:f7:0b:46:e4:6d:7d:3e:04:d1:a5:33:e4:4c:cd: e3:ab:92:51:c1:50:d4:e9:2d:c1:70:09:3d:cc:14: b7:5c:68:79:81:f8:17:e3:e6:39:b6:a7:a3:ad:7a: 76:ec:79:f3:8b:e6:bd:da:7c:f8:91:bf:82:50:66: 70:c0:fc:09:0e:e8:80:e2:1c:a4:ea:dc:38:99:39: f1:5f:41:01:1c:3e:28:3b:c9:c5:52:97:4d:60:a4: 17:a9:35:b5:81:2f:9d:87:3c:5c:77:c3:ba:f4:fb: b4:76:fd:71:ec:b3:70:b8:4a:a6:26:ba:eb:62:85: c6:36:96:9f:e1:81:ef:29:61:c5:83:4f:75:d5:86: 10:f2:c0:50:5c:68:f3:5c:30:be:81:8b:2c:bf:4c: e1:7f:49:24:a6:67:ff:13:22:11:0c:46:22:f6:4c: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:48:F9:8C:0C:98:2A:7F:73:0C:57:6F:0F:84:55:C1:E2:32:99:80 X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:53:36:f8:4b:a1:48:9f:7e:13:44:64:74:6e:cd:53:16:df: 5a:e9:48:b5:86:86:73:56:67:45:9f:a8:ee:83:fd:81:b0:75: 14:bd:a3:44:c2:ee:52:cd:f0:ef:ae:cd:6d:bf:e3:59:76:60: 47:56:1c:c8:5b:65:91:29:d6:80:a4:84:83:5b:84:be:60:88: aa:6d:89:6c:15:2c:dc:90:05:4a:af:ff:df:f5:97:75:6a:74: 79:cb:c8:e6:b3:ab:19:db:04:c2:86:67:23:15:aa:46:ca:1b: 65:d9:69:1d:1b:40:ef:f9:29:e1:e0:84:3e:5d:d3:5e:52:f8: 71:b6:6f:90:cf:0c:52:05:33:4c:28:0c:d1:bc:f9:63:cb:f7: 2b:94:52:46:21:91:f6:f4:ce:29:b5:9c:29:05:a4:1e:39:f4: 15:66:7c:ca:09:74:32:06:62:6b:92:98:e8:3e:90:e3:eb:4e: c0:46:4a:87:bb:8d:eb:92:72:9b:86:0b:03:07:04:10:17:76: 4e:2d:5c:be:0d:d7:02:36:03:d1:c4:03:b2:4f:34:20:be:8f: 39:a7:92:17:cf:a2:29:b0:90:fd:e0:43:c3:b8:50:65:ea:90: c6:c2:c6:6b:d2:b1:45:df:48:af:4a:e3:35:da:79:0c:d6:e2: de:b9:cb:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKe16yz0d4t6mlArZKyagEzRKe2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA1MjkxMjM3NDlaFw0yNjA1MzAxNTQ1NDlaMDMxMTAvBgNV BAMTKDE5NDhGOThDMEM5ODJBN0Y3MzBDNTc2RjBGODQ1NUMxRTIzMjk5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTi5lI8ovYxRQzY5DM3E0zi+2 BWd1MuB5ew1PjTszlxo7V4+ndbmyEsCRtuN59ZJbN4Ge2IY1dpExIHwUzVrzndgh tBmSav7BUtM0Sc450S/v45e9WsiNWLX3C0bkbX0+BNGlM+RMzeOrklHBUNTpLcFw CT3MFLdcaHmB+Bfj5jm2p6OtenbsefOL5r3afPiRv4JQZnDA/AkO6IDiHKTq3DiZ OfFfQQEcPig7ycVSl01gpBepNbWBL52HPFx3w7r0+7R2/XHss3C4SqYmuutihcY2 lp/hge8pYcWDT3XVhhDywFBcaPNcML6Biyy/TOF/SSSmZ/8TIhEMRiL2TNRJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGUj5jAyYKn9zDFdvD4RVweIymYAwHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVM2+EuhSJ9+ E0RkdG7NUxbfWulItYaGc1ZnRZ+o7oP9gbB1FL2jRMLuUs3w767Nbb/jWXZgR1Yc yFtlkSnWgKSEg1uEvmCIqm2JbBUs3JAFSq//3/WXdWp0ecvI5rOrGdsEwoZnIxWq RsobZdlpHRtA7/kp4eCEPl3TXlL4cbZvkM8MUgUzTCgM0bz5Y8v3K5RSRiGR9vTO KbWcKQWkHjn0FWZ8ygl0MgZia5KY6D6Q4+tOwEZKh7uN65Jym4YLAwcEEBd2Ti1c vg3XAjYD0cQDsk80IL6POaeSF8+iKbCQ/eBDw7hQZeqQxsLGa9KxRd9Ir0rjNdp5 DNbi3rnLnA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client