$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: GPpfycGAz2H8DLTJ3QGJq6R8orxAZrhjGMsLJONnTIw= Subject key identifier: EC:8A:B9:BD:2D:A2:97:40:E5:38:DA:7A:74:8A:1C:85:CB:BC:6D:CE Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 2BEBF27D6BC6C9EE804A42AB02B34683D4286067 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: AE Signing time: Fri 29 May 2026 04:07:32 +0000 Manifest this update: Fri 29 May 2026 04:02:32 +0000 Manifest next update: Sat 30 May 2026 08:03:32 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 3: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: L5OUSdajmpfZnDJv2paAIrumcDnYD2xnSICopWzdf1s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:eb:f2:7d:6b:c6:c9:ee:80:4a:42:ab:02:b3:46:83:d4:28:60:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: May 29 04:02:32 2026 GMT Not After : May 30 08:03:32 2026 GMT Subject: CN=EC8AB9BD2DA29740E538DA7A748A1C85CBBC6DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:ed:30:fb:19:8f:e4:1b:9f:89:fa:43:f3: 4e:54:ce:44:52:15:7e:69:87:03:9b:47:1a:8b:70: 7d:9e:13:71:d9:b1:6a:3f:c9:09:88:2d:3b:fb:63: 2c:d9:34:86:90:0e:8e:87:ea:0e:ad:62:2d:59:17: 61:00:7f:dc:fc:7c:a1:f7:4d:cd:95:5c:12:c7:9c: 8c:e4:0c:3d:6f:57:bb:e2:ca:c8:11:a7:2b:27:4f: 72:0f:3d:25:83:11:95:ce:9b:24:a1:b3:0e:54:9d: 0e:bb:d9:aa:1d:be:24:06:21:cb:5a:08:c9:75:de: 7e:de:c2:16:57:fc:23:3a:df:9c:43:2a:a5:4b:fe: e8:bf:9e:b9:ca:95:55:35:bf:13:d6:26:ec:43:bf: 16:2c:ac:8a:30:4c:fd:33:36:ff:94:5b:ce:52:0d: 68:22:29:cb:58:c9:33:f8:2c:a9:8a:3d:9b:81:66: bb:5f:cb:e5:8c:42:af:dc:39:48:00:0f:fe:c3:ff: 20:d2:0f:39:70:7e:93:da:15:be:0e:f7:15:17:22: 38:5f:28:67:cf:66:0c:c5:10:d7:12:2f:7b:82:a7: 5d:02:26:de:e1:4b:1f:52:a2:b9:f5:1c:f9:de:01: bc:c3:92:a7:46:6b:1d:11:75:7f:08:02:4b:0e:95: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8A:B9:BD:2D:A2:97:40:E5:38:DA:7A:74:8A:1C:85:CB:BC:6D:CE X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:fe:8c:b7:2a:36:7e:7d:30:c8:8b:65:77:e7:c4:aa:39: 38:d2:ff:ce:99:ff:de:31:a3:80:cb:06:46:8c:6a:4f:02:1d: b8:b4:4c:aa:bf:c8:cb:a1:47:61:af:17:fd:8f:38:60:f9:6d: 69:5c:c6:aa:96:9e:00:47:f2:bd:9e:45:88:21:c9:c4:c6:ec: 73:4b:e1:d1:37:d9:79:dc:b7:1f:19:c5:45:82:0e:c2:41:12: f4:fb:f1:ea:e4:78:43:3f:0d:8e:d0:e3:7f:ff:f6:08:26:99: d4:6c:17:7f:36:0f:f1:28:fd:a1:09:84:e8:56:d6:26:02:cb: 29:5a:ff:3f:15:0b:75:82:ef:3c:80:a6:58:06:91:fe:69:6e: 12:e1:61:0d:6c:7f:7b:de:9d:67:a4:2f:d3:b2:cf:66:1a:b2: 55:fc:6f:ab:ca:1f:8b:00:3b:01:fa:c1:06:5d:e7:a3:39:87: 06:32:cf:9b:5e:2f:f9:df:ff:49:70:66:3e:ba:c3:b2:47:e1: 92:35:c2:86:80:74:41:b1:71:c8:ac:63:78:c5:b1:2a:90:93: 5b:63:18:ac:4b:93:48:e3:1c:37:70:81:a5:eb:c4:7d:34:47: b2:95:c9:1e:ee:2a:94:2e:0d:ed:27:5d:c7:43:36:30:e4:e6: ea:e0:d8:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK+vyfWvGye6ASkKrArNGg9QoYGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA1MjkwNDAyMzJaFw0yNjA1MzAwODAzMzJaMDMxMTAvBgNV BAMTKEVDOEFCOUJEMkRBMjk3NDBFNTM4REE3QTc0OEExQzg1Q0JCQzZEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwO0w+xmP5BufifpD805UzkRS FX5phwObRxqLcH2eE3HZsWo/yQmILTv7YyzZNIaQDo6H6g6tYi1ZF2EAf9z8fKH3 Tc2VXBLHnIzkDD1vV7viysgRpysnT3IPPSWDEZXOmyShsw5UnQ672aodviQGIcta CMl13n7ewhZX/CM635xDKqVL/ui/nrnKlVU1vxPWJuxDvxYsrIowTP0zNv+UW85S DWgiKctYyTP4LKmKPZuBZrtfy+WMQq/cOUgAD/7D/yDSDzlwfpPaFb4O9xUXIjhf KGfPZgzFENcSL3uCp10CJt7hSx9Sorn1HPneAbzDkqdGax0RdX8IAksOlcVjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7Iq5vS2il0DlONp6dIochcu8bc4wHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1X+jLcqNn59 MMiLZXfnxKo5ONL/zpn/3jGjgMsGRoxqTwIduLRMqr/Iy6FHYa8X/Y84YPltaVzG qpaeAEfyvZ5FiCHJxMbsc0vh0TfZedy3HxnFRYIOwkES9Pvx6uR4Qz8NjtDjf//2 CCaZ1GwXfzYP8Sj9oQmE6FbWJgLLKVr/PxULdYLvPICmWAaR/mluEuFhDWx/e96d Z6Qv07LPZhqyVfxvq8ofiwA7AfrBBl3nozmHBjLPm14v+d//SXBmPrrDskfhkjXC hoB0QbFxyKxjeMWxKpCTW2MYrEuTSOMcN3CBpevEfTRHspXJHu4qlC4N7Sddx0M2 MOTm6uDYWw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client