$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: +K1KU3zKvrt4NGFmIvQq0AGbrkrVPzOz4upqtjRXz3A= Subject key identifier: A1:10:64:DD:0E:57:B6:24:1B:3A:27:CB:79:97:51:16:CB:E5:81:A6 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 681CE587BA4EC530DCCCE40367FC52D8933D3B73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: AF Signing time: Fri 29 May 2026 16:18:01 +0000 Manifest this update: Fri 29 May 2026 16:13:01 +0000 Manifest next update: Sat 30 May 2026 16:27:01 +0000 Files and hashes: 1: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=) 2: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=) 3: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=) 4: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=) 5: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=) 6: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=) 7: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=) 8: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=) 9: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=) 10: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: jovJ+pxISAX2sNgimep845f54njppJiraj1k5mr4QsA=) 11: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=) 12: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=) 13: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=) 14: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=) 15: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=) 16: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=) 17: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) 18: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=) 19: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=) 20: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=) 21: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1c:e5:87:ba:4e:c5:30:dc:cc:e4:03:67:fc:52:d8:93:3d:3b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: May 29 16:13:01 2026 GMT Not After : May 30 16:27:01 2026 GMT Subject: CN=A11064DD0E57B6241B3A27CB79975116CBE581A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:5c:bd:26:32:fc:7a:b8:72:52:d2:20:bb: 74:11:3d:92:8d:1c:9e:b3:f8:1b:de:ff:c1:16:76: a3:6a:fb:01:d5:2b:da:b8:e3:b5:29:e4:f4:38:60: 25:de:9d:12:8c:ce:75:38:c0:48:8f:2a:01:67:3e: 9b:50:5c:4c:23:4c:b9:8c:77:04:5d:c1:cd:8d:d7: da:a4:7d:a9:ce:34:c4:ec:3e:c1:cf:08:7e:61:73: f0:cd:29:43:88:a0:d2:63:b3:41:d7:a8:ae:8e:c7: b3:98:d7:b3:12:57:92:63:0b:52:d9:94:ff:7a:61: 5e:65:a1:e8:7d:23:5d:6f:f3:96:68:7c:b7:b0:87: 9a:90:bb:5d:00:68:19:0d:31:29:b5:18:6c:18:c7: 43:68:ab:03:eb:d8:0f:e1:83:12:94:46:e7:2c:e4: 2f:76:d7:f9:10:98:a6:bd:bf:da:b7:6b:5f:84:14: 93:9e:79:5b:f7:0e:f9:76:52:58:12:0d:cd:47:b1: 3a:da:56:3b:48:33:13:22:c0:92:f0:e7:e0:83:5e: d6:98:31:f6:ad:b7:89:1f:4d:4a:6e:6a:f7:fb:03: e3:fe:a7:74:4f:69:bd:75:80:e0:19:43:32:73:96: bd:e1:96:dc:63:0b:b1:f1:7b:ee:dd:38:54:84:59: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:64:DD:0E:57:B6:24:1B:3A:27:CB:79:97:51:16:CB:E5:81:A6 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:43:de:6c:93:ea:71:92:78:da:dc:80:aa:7f:bc:60:59:3e: b1:37:51:e8:99:1c:ee:f9:dd:57:2d:98:76:6a:05:fd:f8:cc: 39:95:fb:ec:11:71:4d:b8:cb:b9:9e:0a:47:c3:48:05:ba:da: 2d:fb:7a:c5:b2:21:97:47:5c:84:7b:e4:4f:e7:ed:45:c9:56: b4:98:9c:68:c9:80:a3:aa:ba:40:66:5b:a2:7e:85:73:e0:a5: b7:8a:0c:86:55:41:85:fb:25:97:56:88:22:a7:90:19:c4:68: 12:62:c8:fc:4c:8d:81:e5:bf:d0:bd:38:46:98:f3:b1:9a:06: cb:55:df:28:2a:fc:59:f7:b5:bb:51:ab:33:ad:a1:f8:61:b0: d5:d9:24:d5:b3:04:16:f2:81:6c:b0:14:5a:5b:40:62:e3:24: ea:b8:1f:a6:2a:b0:5b:9b:6c:4e:0e:b6:0f:8b:91:c6:f0:ec: c5:83:c8:46:fa:bb:cf:60:81:1d:24:fd:02:ed:be:65:1b:76: 66:c7:39:6e:96:9c:11:5f:9e:b1:30:0d:8a:c2:bb:0b:b8:85: 53:ab:3e:5f:dd:92:4b:cc:d6:6c:72:3a:11:04:c3:e0:aa:4c: b1:e1:67:21:10:61:c5:ab:6c:95:74:4b:7a:2f:1b:c7:6f:4b: 26:ec:8e:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaBzlh7pOxTDczOQDZ/xS2JM9O3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA1MjkxNjEzMDFaFw0yNjA1MzAxNjI3MDFaMDMxMTAvBgNV BAMTKEExMTA2NEREMEU1N0I2MjQxQjNBMjdDQjc5OTc1MTE2Q0JFNTgxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMly9JjL8erhyUtIgu3QRPZKN HJ6z+Bve/8EWdqNq+wHVK9q447Up5PQ4YCXenRKMznU4wEiPKgFnPptQXEwjTLmM dwRdwc2N19qkfanONMTsPsHPCH5hc/DNKUOIoNJjs0HXqK6Ox7OY17MSV5JjC1LZ lP96YV5loeh9I11v85ZofLewh5qQu10AaBkNMSm1GGwYx0NoqwPr2A/hgxKURucs 5C921/kQmKa9v9q3a1+EFJOeeVv3Dvl2UlgSDc1HsTraVjtIMxMiwJLw5+CDXtaY Mfatt4kfTUpuavf7A+P+p3RPab11gOAZQzJzlr3hltxjC7Hxe+7dOFSEWUv5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoRBk3Q5XtiQbOifLeZdRFsvlgaYwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUPebJPqcZJ4 2tyAqn+8YFk+sTdR6Jkc7vndVy2YdmoF/fjMOZX77BFxTbjLuZ4KR8NIBbraLft6 xbIhl0dchHvkT+ftRclWtJicaMmAo6q6QGZbon6Fc+Clt4oMhlVBhfsll1aIIqeQ GcRoEmLI/EyNgeW/0L04RpjzsZoGy1XfKCr8Wfe1u1GrM62h+GGw1dkk1bMEFvKB bLAUWltAYuMk6rgfpiqwW5tsTg62D4uRxvDsxYPIRvq7z2CBHST9Au2+ZRt2Zsc5 bpacEV+esTANisK7C7iFU6s+X92SS8zWbHI6EQTD4KpMseFnIRBhxatslXRLei8b x29LJuyOHg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client