$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json) Hash identifier: Ta0R6a674+gAIy4VAi2Cpn3133CeRb49vocoTOtvDrk= Subject key identifier: 23:07:6D:EF:5F:00:49:FD:B4:77:A6:7A:C5:E1:8F:4A:5A:60:A1:C5 Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Certificate serial: 2DEA05D9B3F2C4B40CA6DA820D058EDBB6B87D97 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft Manifest number: AA Signing time: Fri 29 May 2026 13:47:54 +0000 Manifest this update: Fri 29 May 2026 13:42:54 +0000 Manifest next update: Sat 30 May 2026 16:24:54 +0000 Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: EkxjzO1EnWqPYY2X20Df6SQ9oqS9rfDUzfYmNuoSPO0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ea:05:d9:b3:f2:c4:b4:0c:a6:da:82:0d:05:8e:db:b6:b8:7d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Validity Not Before: May 29 13:42:54 2026 GMT Not After : May 30 16:24:54 2026 GMT Subject: CN=23076DEF5F0049FDB477A67AC5E18F4A5A60A1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:3a:b2:96:9b:19:3d:c2:71:0d:90:b5:23: a9:21:04:af:7e:99:e2:03:5e:e9:bd:4b:da:a4:b0: e0:62:a6:86:d0:17:02:0d:d2:95:5e:7c:0d:bc:6f: 4a:8a:b0:b0:c0:42:a1:67:9d:60:35:1c:80:4e:32: 40:80:bb:d7:bf:38:00:fd:4b:77:4b:b1:01:8b:96: 2e:2a:ea:c6:eb:8a:c7:f3:12:6f:c1:63:81:cf:24: 66:93:21:a6:38:dc:86:31:19:06:61:6c:28:ad:22: 14:f9:b6:9f:dc:59:51:88:7f:74:33:aa:ef:af:b1: 45:36:f7:15:1e:16:e7:cb:36:78:cb:48:fb:3b:f8: da:43:35:2b:75:d6:e9:91:ed:ef:6e:f9:f1:ea:03: bd:e3:ee:ba:4c:63:e2:13:cc:c4:05:3b:2a:1c:01: c0:14:06:b6:c7:09:14:15:16:f2:40:fa:27:90:9c: 03:59:bd:f7:fc:ca:21:04:37:7e:f0:dd:27:00:79: df:b2:ba:73:1a:c3:0a:62:c3:90:40:50:f4:6d:9a: 7a:22:b6:f4:57:bb:0c:8e:92:67:e0:3a:54:a6:48: d7:7c:fb:da:f6:fe:9d:a6:eb:5f:5a:14:19:6b:f5: 36:04:43:fb:35:82:b8:6e:7e:33:ee:1a:1d:0d:70: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:6D:EF:5F:00:49:FD:B4:77:A6:7A:C5:E1:8F:4A:5A:60:A1:C5 X509v3 Authority Key Identifier: keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:79:15:19:9e:c5:a5:35:b6:0e:fd:3d:b1:ad:bd:f2:25: d0:1d:09:75:9f:c0:17:b1:9d:f5:2c:2b:f0:8e:7b:df:44:3d: 84:d0:8f:5f:ef:cb:28:16:fe:d5:46:47:1f:f4:4f:e9:59:1b: ac:94:0e:88:df:68:68:41:69:7f:a5:e3:06:b8:ec:06:15:e9: 24:32:78:ec:d1:11:73:0b:4f:ea:eb:9b:84:ad:be:aa:1b:01: 17:dc:08:64:77:c2:6b:21:2d:88:f8:01:80:d1:8e:6c:1c:17: 45:5c:6d:e0:ed:e7:25:7a:c2:9f:ec:2f:17:a2:5f:44:77:49: 01:33:c4:c8:47:f0:9e:d2:45:41:d8:76:91:a3:de:9d:d9:7d: 4e:83:80:f3:89:9c:f5:a9:bb:e0:f9:9e:bd:f9:d6:79:60:7f: 33:42:9a:cc:07:19:9b:36:ec:3a:14:4f:ef:9b:45:95:40:c2: 63:d1:7c:f5:74:a5:f6:51:ae:78:0e:39:4d:ad:81:66:38:99: 08:5a:36:ca:f4:1e:a9:5d:3b:df:5c:40:03:70:83:7f:4b:9f: f9:90:06:98:b1:97:05:f3:6f:d3:2d:fa:c3:ff:c4:9c:9e:8a: aa:79:f3:35:d7:27:df:66:d4:f5:75:4c:26:f6:97:55:5b:73: 5a:35:82:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULeoF2bPyxLQMptqCDQWO27a4fZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5 NjVFNTRBNTAeFw0yNjA1MjkxMzQyNTRaFw0yNjA1MzAxNjI0NTRaMDMxMTAvBgNV BAMTKDIzMDc2REVGNUYwMDQ5RkRCNDc3QTY3QUM1RTE4RjRBNUE2MEExQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDTqylpsZPcJxDZC1I6khBK9+ meIDXum9S9qksOBipobQFwIN0pVefA28b0qKsLDAQqFnnWA1HIBOMkCAu9e/OAD9 S3dLsQGLli4q6sbrisfzEm/BY4HPJGaTIaY43IYxGQZhbCitIhT5tp/cWVGIf3Qz qu+vsUU29xUeFufLNnjLSPs7+NpDNSt11umR7e9u+fHqA73j7rpMY+ITzMQFOyoc AcAUBrbHCRQVFvJA+ieQnANZvff8yiEEN37w3ScAed+yunMawwpiw5BAUPRtmnoi tvRXuwyOkmfgOlSmSNd8+9r2/p2m619aFBlr9TYEQ/s1grhufjPuGh0NcI5DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIwdt718ASf20d6Z6xeGPSlpgocUwHwYDVR0j BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAh5FRmexaU1 tg79PbGtvfIl0B0JdZ/AF7Gd9Swr8I5730Q9hNCPX+/LKBb+1UZHH/RP6VkbrJQO iN9oaEFpf6XjBrjsBhXpJDJ47NERcwtP6uubhK2+qhsBF9wIZHfCayEtiPgBgNGO bBwXRVxt4O3nJXrCn+wvF6JfRHdJATPEyEfwntJFQdh2kaPendl9ToOA84mc9am7 4PmevfnWeWB/M0KazAcZmzbsOhRP75tFlUDCY9F89XSl9lGueA45Ta2BZjiZCFo2 yvQeqV0731xAA3CDf0uf+ZAGmLGXBfNv0y36w//EnJ6KqnnzNdcn32bU9XVMJvaX VVtzWjWCHA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client