$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: fBmNJOElEFwozDS5NismjXX9lEz6b3S+kjuatDASiJ0= Subject key identifier: 80:79:36:4D:54:4B:15:6E:B9:B3:60:50:B4:A2:B5:E7:D8:73:EB:BB Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 6A7B894125F1BDB8D5A8EC0075D4F588CF5ED305 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: AF Signing time: Fri 29 May 2026 15:12:59 +0000 Manifest this update: Fri 29 May 2026 15:07:59 +0000 Manifest next update: Sat 30 May 2026 19:00:59 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: 6bAysWLOOJ1Zu2dV6d9uhNsKfFMhzNkUeXsudUreKg0=) 2: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 3: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7b:89:41:25:f1:bd:b8:d5:a8:ec:00:75:d4:f5:88:cf:5e:d3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: May 29 15:07:59 2026 GMT Not After : May 30 19:00:59 2026 GMT Subject: CN=8079364D544B156EB9B36050B4A2B5E7D873EBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:aa:35:d2:18:dc:e8:97:bc:1a:f3:d0:4c: fa:0d:0e:15:91:28:a1:36:24:2d:71:20:e8:56:e6: 10:59:72:15:44:b4:04:25:bc:09:c7:85:bb:5d:5e: 56:f7:7b:ba:e2:27:19:51:4d:42:c3:73:5e:aa:70: df:d0:a7:56:9d:78:b6:57:c6:2c:e1:6d:0f:b9:32: bb:37:77:4e:49:f5:3a:73:16:bf:7f:8f:f2:b1:48: 3d:60:b7:b0:d2:6f:e9:61:d4:27:e3:92:62:00:57: e7:20:38:04:84:b0:ab:ff:2b:d1:3d:af:da:47:84: da:3c:49:35:ef:8e:e8:5b:45:a3:0a:7a:0f:8a:1d: af:cb:14:1a:dd:03:0b:07:f4:dd:bf:48:41:65:78: 59:81:53:ea:cb:b6:1e:33:14:f4:d0:4c:e1:f1:87: 28:64:6a:16:83:74:52:da:75:9b:e8:72:88:78:f2: 2c:97:bd:c2:3c:a4:27:13:30:e4:1a:29:d5:07:60: 5c:97:89:76:67:20:75:ae:2b:1c:47:4e:de:12:5a: 6e:cf:39:27:13:77:ed:d5:35:50:34:2a:ec:22:97: ee:9e:6e:f9:72:16:b3:2d:55:b8:af:91:40:d4:43: 5a:f7:88:7e:a5:9b:aa:03:df:6c:77:2b:da:b7:ab: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:36:4D:54:4B:15:6E:B9:B3:60:50:B4:A2:B5:E7:D8:73:EB:BB X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cf:88:47:d7:7e:30:30:0d:1c:b7:5e:a9:7c:93:5f:db:ef: ce:99:12:a0:6b:38:5e:61:41:b9:4c:81:ff:4c:f3:24:e6:34: 13:e2:f5:0f:7c:8e:6b:81:36:05:21:69:1c:5c:04:b0:ce:c7: b8:f0:cd:78:6d:9b:69:86:b2:10:42:a9:60:8e:9d:0c:3e:f1: a9:30:af:e7:f5:df:d7:34:ff:95:db:0b:87:e4:67:6a:5b:c6: 5b:00:1d:a6:f8:f7:ba:a0:5b:23:c0:96:5f:2c:29:0f:bc:ca: 60:c4:73:f9:69:43:d7:12:5d:b7:4f:fe:e7:ca:89:c6:b8:de: 5f:98:75:b4:68:eb:ed:5a:7c:69:6f:d8:2b:15:61:50:08:d4: 8c:b7:a0:fe:a1:d2:7e:46:e5:0a:08:8c:69:58:83:66:d7:98: ea:af:b9:d0:7a:86:ed:16:79:c6:fe:16:80:14:2e:66:fb:ac: 28:82:ab:8b:e9:95:c1:71:75:b0:7d:eb:9c:f4:4e:1b:3f:64: 36:0f:e3:eb:07:fc:c7:14:ef:89:4c:04:3c:65:fc:dd:9d:d1: 26:40:91:0d:23:cd:96:9b:e5:a3:4c:20:e6:35:35:69:6d:46: 53:c7:18:f6:45:38:e0:e4:cf:47:d0:34:24:73:ab:55:87:bc: 68:23:2f:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUanuJQSXxvbjVqOwAddT1iM9e0wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA1MjkxNTA3NTlaFw0yNjA1MzAxOTAwNTlaMDMxMTAvBgNV BAMTKDgwNzkzNjRENTQ0QjE1NkVCOUIzNjA1MEI0QTJCNUU3RDg3M0VCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJKo10hjc6Je8GvPQTPoNDhWR KKE2JC1xIOhW5hBZchVEtAQlvAnHhbtdXlb3e7riJxlRTULDc16qcN/Qp1adeLZX xizhbQ+5Mrs3d05J9TpzFr9/j/KxSD1gt7DSb+lh1CfjkmIAV+cgOASEsKv/K9E9 r9pHhNo8STXvjuhbRaMKeg+KHa/LFBrdAwsH9N2/SEFleFmBU+rLth4zFPTQTOHx hyhkahaDdFLadZvocoh48iyXvcI8pCcTMOQaKdUHYFyXiXZnIHWuKxxHTt4SWm7P OScTd+3VNVA0Kuwil+6ebvlyFrMtVbivkUDUQ1r3iH6lm6oD32x3K9q3q2fLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgHk2TVRLFW65s2BQtKK159hz67swHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjs+IR9d+MDAN HLdeqXyTX9vvzpkSoGs4XmFBuUyB/0zzJOY0E+L1D3yOa4E2BSFpHFwEsM7HuPDN eG2baYayEEKpYI6dDD7xqTCv5/Xf1zT/ldsLh+RnalvGWwAdpvj3uqBbI8CWXywp D7zKYMRz+WlD1xJdt0/+58qJxrjeX5h1tGjr7Vp8aW/YKxVhUAjUjLeg/qHSfkbl CgiMaViDZteY6q+50HqG7RZ5xv4WgBQuZvusKIKri+mVwXF1sH3rnPROGz9kNg/j 6wf8xxTviUwEPGX83Z3RJkCRDSPNlpvlo0wg5jU1aW1GU8cY9kU44OTPR9A0JHOr VYe8aCMv4A== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client