$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: YVUklBpbCZvsxPj1BQQNUGQ7MgMVcNQ+CVg92yoCkyw= Subject key identifier: 5F:1F:8D:E0:4F:10:B6:E4:75:E2:93:D1:D6:DC:BD:2E:A0:29:3A:26 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 4834C37819BB49DEBD7AD10B778F063FC6028B8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: C0 Signing time: Fri 29 May 2026 03:52:31 +0000 Manifest this update: Fri 29 May 2026 03:47:31 +0000 Manifest next update: Sat 30 May 2026 06:33:31 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: esIbvZMFHmgw9F+V/GROpsIECPPzGFp2DVMaqWxxypQ=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:34:c3:78:19:bb:49:de:bd:7a:d1:0b:77:8f:06:3f:c6:02:8b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: May 29 03:47:31 2026 GMT Not After : May 30 06:33:31 2026 GMT Subject: CN=5F1F8DE04F10B6E475E293D1D6DCBD2EA0293A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:5e:77:d8:34:be:89:a8:e1:c5:75:06:6a: 55:64:92:ab:47:50:81:19:09:0c:40:5c:59:01:9d: 5b:5c:2e:f5:02:c0:bb:f4:2b:5a:45:4a:02:70:96: 73:1f:27:b8:e7:8e:59:b0:1c:68:a7:fa:1a:20:af: b0:5e:7c:a8:1e:9b:24:3e:40:dc:27:9f:d8:7c:a3: 98:a0:f8:b0:ee:a0:ad:92:46:30:aa:2e:73:e1:94: e8:a3:07:3c:54:c4:b3:db:8e:9c:9b:e6:0e:8f:e8: c2:66:15:16:a7:9a:69:be:19:6e:a6:13:21:37:b8: d8:44:52:c1:71:a7:11:a4:bc:a7:32:e9:3a:1a:c1: 54:c4:cd:00:59:5a:73:a2:63:72:d4:6d:b1:a9:43: 16:47:23:ea:28:da:82:73:f8:e4:db:53:2a:7b:ca: 32:ae:93:45:f6:28:0e:00:2d:0e:c9:31:8f:44:85: a4:47:90:74:ef:e7:83:81:3c:c2:dc:d2:e7:dc:fd: 20:58:2d:55:cb:08:25:33:5e:36:2c:43:6b:e4:6a: 28:1e:aa:7d:3e:ce:d0:81:5d:d7:60:10:9d:9a:00: 55:d0:70:f0:83:15:3d:c9:6f:0d:78:8e:14:61:ff: eb:70:2f:42:15:65:21:86:18:7e:0b:07:e5:87:a2: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:8D:E0:4F:10:B6:E4:75:E2:93:D1:D6:DC:BD:2E:A0:29:3A:26 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:75:52:07:7a:cd:77:f8:a5:56:08:82:3a:d0:6a:dd:0e:bb: 6e:d3:86:cd:fa:78:4d:90:eb:53:fc:c1:8e:84:62:9f:5a:2f: 7c:c1:ac:3a:5b:1a:b7:68:b4:21:dc:e7:8c:45:f7:37:b9:a0: f7:f2:76:73:d1:e1:e3:b1:56:96:73:13:56:f5:06:3f:50:3c: 4b:e0:77:e3:45:b8:9a:5e:70:ce:5f:61:a8:5b:3f:b2:6f:96: f6:94:96:b8:4a:40:91:b7:65:bf:d4:66:7b:bc:58:0f:a5:92: 5c:3e:47:92:5a:d9:d8:be:0a:83:35:6a:f4:b5:1e:68:db:13: 3d:47:f0:9d:d7:86:de:41:45:fc:ab:80:c1:7b:25:22:9a:e4: d9:eb:fd:ad:a4:87:f7:6e:f5:d9:2b:c9:4d:ca:f7:18:0e:ac: 8e:8f:e7:d7:29:11:a6:35:cb:9e:ec:17:00:19:c4:b6:1f:e0: de:08:93:26:20:2b:9e:f6:3c:f3:68:17:2a:a7:d5:a4:94:79: 4f:25:ab:f6:8f:6d:32:ed:cf:ba:43:aa:29:20:0a:ae:67:b5: 83:4f:3d:46:59:ba:58:2f:ba:73:7f:6c:6d:4f:0b:1d:be:f1: f6:19:c9:b2:45:bc:46:d0:cb:38:24:e9:a4:fd:34:f0:61:7c: 8a:3c:ba:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSDTDeBm7Sd69etELd48GP8YCi44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA1MjkwMzQ3MzFaFw0yNjA1MzAwNjMzMzFaMDMxMTAvBgNV BAMTKDVGMUY4REUwNEYxMEI2RTQ3NUUyOTNEMUQ2RENCRDJFQTAyOTNBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOU1532DS+iajhxXUGalVkkqtH UIEZCQxAXFkBnVtcLvUCwLv0K1pFSgJwlnMfJ7jnjlmwHGin+hogr7BefKgemyQ+ QNwnn9h8o5ig+LDuoK2SRjCqLnPhlOijBzxUxLPbjpyb5g6P6MJmFRanmmm+GW6m EyE3uNhEUsFxpxGkvKcy6ToawVTEzQBZWnOiY3LUbbGpQxZHI+oo2oJz+OTbUyp7 yjKuk0X2KA4ALQ7JMY9EhaRHkHTv54OBPMLc0ufc/SBYLVXLCCUzXjYsQ2vkaige qn0+ztCBXddgEJ2aAFXQcPCDFT3Jbw14jhRh/+twL0IVZSGGGH4LB+WHovjZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXx+N4E8QtuR14pPR1ty9LqApOiYwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHVSB3rNd/il VgiCOtBq3Q67btOGzfp4TZDrU/zBjoRin1ovfMGsOlsat2i0IdznjEX3N7mg9/J2 c9Hh47FWlnMTVvUGP1A8S+B340W4ml5wzl9hqFs/sm+W9pSWuEpAkbdlv9Rme7xY D6WSXD5HklrZ2L4KgzVq9LUeaNsTPUfwndeG3kFF/KuAwXslIprk2ev9raSH9271 2SvJTcr3GA6sjo/n1ykRpjXLnuwXABnEth/g3giTJiArnvY882gXKqfVpJR5TyWr 9o9tMu3PukOqKSAKrme1g089Rlm6WC+6c39sbU8LHb7x9hnJskW8RtDLOCTppP00 8GF8ijy6VQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client