$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: 7AwcpsGXvvzn5PxDGvb/ILuasREEDatku7Zb4xqhwIw= Subject key identifier: E7:03:25:7E:9D:57:DD:C9:CB:C9:8E:DB:48:76:FA:FC:6B:99:2D:71 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 245C995EF6B7BC38650E478E0ED3AA33AF7EB37F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: C2 Signing time: Fri 29 May 2026 11:07:48 +0000 Manifest this update: Fri 29 May 2026 11:02:48 +0000 Manifest next update: Sat 30 May 2026 12:40:48 +0000 Files and hashes: 1: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 36WeYg1O2uLsCzsoLw49j95XGFEAC6oyDCDrx1+o1NI=) 2: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) 3: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:99:5e:f6:b7:bc:38:65:0e:47:8e:0e:d3:aa:33:af:7e:b3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: May 29 11:02:48 2026 GMT Not After : May 30 12:40:48 2026 GMT Subject: CN=E703257E9D57DDC9CBC98EDB4876FAFC6B992D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:69:f3:b6:74:19:0b:97:0d:08:e7:6c:cf: a8:34:db:85:ce:3f:dd:33:20:2b:1b:c9:15:b5:74: de:1d:fc:44:0f:ea:9d:a5:50:ce:52:8a:19:19:27: ab:43:7e:cd:e9:71:0e:8b:1a:1e:62:67:70:2a:84: fc:c5:fe:82:0d:ce:b5:17:3d:4d:01:33:1a:09:ca: f5:28:c8:e6:39:a2:4d:db:78:67:2d:6b:d1:99:9a: c9:7f:59:f9:3e:ec:0a:41:aa:7c:13:9c:97:92:6d: d6:0f:79:6d:d1:ef:db:5b:d4:44:c8:69:cb:0f:f0: 07:9a:de:ce:1e:aa:08:be:95:4e:63:11:82:9c:35: c8:7e:b1:61:ba:95:c2:94:c3:39:e7:42:a8:d7:3f: 00:3d:4a:80:7e:02:a3:7d:9d:d5:5c:04:c6:39:9f: 34:eb:7f:a6:f2:02:f1:b1:41:11:89:6f:a5:61:f3: a7:dc:dd:0b:59:01:84:af:b6:dd:79:8f:7f:0a:8b: 33:32:d5:4b:e9:11:d8:46:60:27:e1:ec:ba:67:fe: 64:9c:04:30:8b:92:b2:a6:c7:f1:e9:ff:d7:7a:65: 13:af:53:16:58:37:84:e2:3c:4b:13:a2:45:89:96: 56:8f:29:da:27:98:e2:43:51:aa:39:9f:2e:88:65: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:25:7E:9D:57:DD:C9:CB:C9:8E:DB:48:76:FA:FC:6B:99:2D:71 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:75:aa:c3:1d:2b:77:99:4b:eb:b4:63:fc:fb:de:00:27:ee: a9:fc:21:82:86:b9:21:86:e9:9d:65:39:bb:a1:df:cc:38:5c: ad:71:98:a3:e5:eb:4f:cd:2a:41:a6:35:6c:bc:e4:28:03:64: cc:2e:2f:4a:af:12:a4:8a:25:18:d8:41:6e:63:a8:fd:ec:ad: b3:d6:0b:7f:9c:71:5a:2a:b5:26:1d:12:4c:8e:db:0e:8d:bd: 5f:a8:6d:27:e6:2b:c2:64:22:57:d7:c7:2e:6e:2e:31:4a:ef: b2:fa:af:84:b9:0a:dd:05:d9:e0:b3:2e:fc:ab:59:cb:8b:40: a1:a1:32:b7:9f:8c:14:42:28:72:59:72:82:c7:34:5b:d0:61: d3:32:18:bf:9f:b6:22:9a:85:5c:09:8f:de:d3:3e:79:e0:0c: 5b:16:3b:67:6f:b7:1a:f4:3b:d0:b9:03:5d:37:7f:fc:3b:0b: 5e:6c:a4:62:8e:17:8e:61:33:eb:4e:98:bb:0e:c8:eb:86:e1: 06:cd:1b:53:c2:68:88:cd:d9:d0:d8:7d:9a:cc:6d:5c:94:0c: 8e:5f:b8:66:72:d9:83:dc:bc:70:a8:0b:0b:2b:98:8b:2f:c5: 5e:2c:d5:91:1b:b8:a2:01:b9:98:82:49:3b:e5:7e:ef:9f:7e: ff:35:c5:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJFyZXva3vDhlDkeODtOqM69+s38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA1MjkxMTAyNDhaFw0yNjA1MzAxMjQwNDhaMDMxMTAvBgNV BAMTKEU3MDMyNTdFOUQ1N0REQzlDQkM5OEVEQjQ4NzZGQUZDNkI5OTJENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WmnztnQZC5cNCOdsz6g024XO P90zICsbyRW1dN4d/EQP6p2lUM5SihkZJ6tDfs3pcQ6LGh5iZ3AqhPzF/oINzrUX PU0BMxoJyvUoyOY5ok3beGcta9GZmsl/Wfk+7ApBqnwTnJeSbdYPeW3R79tb1ETI acsP8Aea3s4eqgi+lU5jEYKcNch+sWG6lcKUwznnQqjXPwA9SoB+AqN9ndVcBMY5 nzTrf6byAvGxQRGJb6Vh86fc3QtZAYSvtt15j38KizMy1UvpEdhGYCfh7Lpn/mSc BDCLkrKmx/Hp/9d6ZROvUxZYN4TiPEsTokWJllaPKdonmOJDUao5ny6IZRcfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5wMlfp1X3cnLyY7bSHb6/GuZLXEwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonWqwx0rd5lL 67Rj/PveACfuqfwhgoa5IYbpnWU5u6HfzDhcrXGYo+XrT80qQaY1bLzkKANkzC4v Sq8SpIolGNhBbmOo/eyts9YLf5xxWiq1Jh0STI7bDo29X6htJ+YrwmQiV9fHLm4u MUrvsvqvhLkK3QXZ4LMu/KtZy4tAoaEyt5+MFEIocllygsc0W9Bh0zIYv5+2IpqF XAmP3tM+eeAMWxY7Z2+3GvQ70LkDXTd//DsLXmykYo4XjmEz606Yuw7I64bhBs0b U8JoiM3Z0Nh9msxtXJQMjl+4ZnLZg9y8cKgLCyuYiy/FXizVkRu4ogG5mIJJO+V+ 759+/zXFOQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:31 2026 by rpki-client