$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json) Hash identifier: F90hbtsISiSAPJZ0/3fw193ONK3Wemntwjky02M84hY= Subject key identifier: 45:34:43:FC:09:DF:22:51:E6:2E:17:00:EC:2B:2A:E9:E3:8E:BC:AA Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 22DD0C8604FB56676A29B7982AC12721B278EBB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft Manifest number: B3 Signing time: Fri 29 May 2026 17:08:03 +0000 Manifest this update: Fri 29 May 2026 17:03:03 +0000 Manifest next update: Sat 30 May 2026 20:59:03 +0000 Files and hashes: 1: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: JXq+sgJnBWjeh81bGW3Dn5QwTdhSp8rrhTrA931rK1k=) 2: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=) 3: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=) 4: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=) 5: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=) 6: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=) 7: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=) 8: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=) 9: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=) 10: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=) 11: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=) 12: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=) 13: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=) 14: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=) 15: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=) 16: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=) 17: 3130332e3133392e322e302f32332d3233203d3e20313339303231.roa (hash: cmNU4CxgdYWOHffUZLqvma1/Uw6drOsIy7inBDALEaI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:dd:0c:86:04:fb:56:67:6a:29:b7:98:2a:c1:27:21:b2:78:eb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: May 29 17:03:03 2026 GMT Not After : May 30 20:59:03 2026 GMT Subject: CN=453443FC09DF2251E62E1700EC2B2AE9E38EBCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:6e:9b:a1:f1:06:cb:a2:d4:1c:ef:26:b3: 36:1b:59:2e:b9:b1:cc:9b:8d:a3:4b:61:69:be:a0: 33:a9:37:6b:33:dc:45:3a:22:dc:4f:ec:62:07:8d: 4f:e7:29:99:12:30:ef:ca:79:cc:3a:d9:e4:e4:1d: cd:89:bb:54:83:d8:db:a6:aa:65:b4:7e:ba:fe:2f: 5d:39:09:b1:e8:f9:41:40:ad:f8:71:ba:71:ae:ea: 4e:04:fe:a0:bc:d1:80:75:2d:d7:fd:65:34:31:dd: 8c:36:be:6a:98:67:80:8c:05:a3:be:b6:22:f9:80: e5:82:12:63:7d:05:88:5b:68:57:0e:9b:84:b1:a9: d7:2f:00:d1:dd:87:ed:bc:f7:6e:a2:a1:9a:85:03: 54:88:73:f2:60:64:a0:a6:7e:98:49:1b:ed:13:6a: 2c:a1:46:54:6d:1e:3e:d4:35:a2:8b:16:68:9f:82: 43:41:62:16:88:bb:fc:a4:ac:66:ba:6c:da:62:19: f6:aa:1a:f6:a8:d9:0b:e5:7b:00:2c:dd:39:83:34: 45:71:2d:2b:a9:04:4a:8f:3c:4b:04:f3:a1:e7:59: c8:29:be:00:4d:94:38:88:06:a1:62:91:ed:37:6c: 55:87:ea:a7:7a:f3:5a:86:36:0c:8a:6f:38:58:e7: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:43:FC:09:DF:22:51:E6:2E:17:00:EC:2B:2A:E9:E3:8E:BC:AA X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cf:7f:39:ba:0f:5c:0d:85:f2:d2:74:1f:ad:78:ea:8c:cc: fb:4a:72:a2:ca:d4:e5:63:93:37:1b:c5:53:18:bd:5e:35:85: 22:c4:e0:2a:dc:33:d2:17:06:bf:c3:78:bc:28:bb:e5:c9:22: 9f:c6:78:b5:72:e2:5b:6f:98:9a:b1:c9:5d:88:07:35:24:bd: 84:f9:ac:f9:9f:03:d4:fd:cf:df:16:e5:9a:78:f2:4c:e6:a4: 8f:17:4f:0e:6b:c0:81:f0:91:9a:be:1b:e8:e5:e5:51:d3:57: b9:cc:4e:14:ad:da:d1:32:26:b8:a8:a1:9d:ee:1d:76:8b:fd: 78:90:3a:7b:ac:95:6a:46:1c:dd:bc:27:3a:d0:39:4e:23:0e: 9e:ec:db:bb:ea:ff:c7:9d:16:21:23:f8:e5:0c:de:9f:03:ae: 87:ce:19:ad:0b:07:19:6c:9f:98:71:d6:a3:06:82:f5:1c:b6: 05:5a:0d:72:02:d3:1f:7d:b3:2b:27:a2:7f:da:11:65:07:b4: d2:61:59:c6:89:eb:2f:31:5d:62:90:c5:af:a6:fc:83:8a:c9: a8:00:ef:1f:11:1e:34:cd:e2:10:3f:97:7a:cc:f7:ab:7e:3f: fb:aa:5c:c1:24:c1:2e:4f:e1:f1:4d:9e:7f:34:d3:6d:6a:9c: 96:5d:09:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIt0MhgT7VmdqKbeYKsEnIbJ467AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjA1MjkxNzAzMDNaFw0yNjA1MzAyMDU5MDNaMDMxMTAvBgNV BAMTKDQ1MzQ0M0ZDMDlERjIyNTFFNjJFMTcwMEVDMkIyQUU5RTM4RUJDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbam6bofEGy6LUHO8mszYbWS65 scybjaNLYWm+oDOpN2sz3EU6ItxP7GIHjU/nKZkSMO/Kecw62eTkHc2Ju1SD2Num qmW0frr+L105CbHo+UFArfhxunGu6k4E/qC80YB1Ldf9ZTQx3Yw2vmqYZ4CMBaO+ tiL5gOWCEmN9BYhbaFcOm4SxqdcvANHdh+28926ioZqFA1SIc/JgZKCmfphJG+0T aiyhRlRtHj7UNaKLFmifgkNBYhaIu/ykrGa6bNpiGfaqGvao2QvlewAs3TmDNEVx LSupBEqPPEsE86HnWcgpvgBNlDiIBqFike03bFWH6qd681qGNgyKbzhY52IzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURTRD/AnfIlHmLhcA7Csq6eOOvKowHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC83MTk1MkIwRkY5QkNB N0NFNTQzNkIwREI1MDA5Q0EwOUY2MTBGM0MwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAts9/OboPXA2F 8tJ0H6146ozM+0pyosrU5WOTNxvFUxi9XjWFIsTgKtwz0hcGv8N4vCi75ckin8Z4 tXLiW2+YmrHJXYgHNSS9hPms+Z8D1P3P3xblmnjyTOakjxdPDmvAgfCRmr4b6OXl UdNXucxOFK3a0TImuKihne4ddov9eJA6e6yVakYc3bwnOtA5TiMOnuzbu+r/x50W ISP45QzenwOuh84ZrQsHGWyfmHHWowaC9Ry2BVoNcgLTH32zKyeif9oRZQe00mFZ xonrLzFdYpDFr6b8g4rJqADvHxEeNM3iED+Xesz3q34/+6pcwSTBLk/h8U2efzTT bWqcll0JsQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client