$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: mklurwkMaZM/zhv4AywC+kY6T3L9gsC9zwgQMBm3JXg= Subject key identifier: B3:E7:27:29:CA:88:3B:5D:52:64:63:D4:35:6A:D7:C9:FA:17:C3:F0 Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 2213E904F96F4149D496FAFF6427C6356334C062 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: A2 Signing time: Fri 29 May 2026 03:07:30 +0000 Manifest this update: Fri 29 May 2026 03:02:30 +0000 Manifest next update: Sat 30 May 2026 06:19:30 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: lnwMrcY1ctcec/I+4d6RnXtlmuDptew4eWZ2oZ+Beiw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:13:e9:04:f9:6f:41:49:d4:96:fa:ff:64:27:c6:35:63:34:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: May 29 03:02:30 2026 GMT Not After : May 30 06:19:30 2026 GMT Subject: CN=B3E72729CA883B5D526463D4356AD7C9FA17C3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:bc:68:35:5d:6a:91:42:7e:ed:ab:87:d1: f4:66:ed:8b:c9:df:2c:72:0f:19:6b:f0:8a:2b:ee: 89:97:b1:ef:18:73:6c:48:2a:03:e3:2c:48:56:4e: 7b:80:86:0f:a7:11:79:9f:4e:f3:b1:79:5d:a3:5d: be:c3:98:87:85:38:07:87:d4:89:6b:ae:c1:d8:0a: cf:3a:4c:d9:f5:1f:37:24:1c:11:59:fd:b5:09:8b: 4e:90:91:e9:16:32:92:eb:cd:81:41:e8:4a:7e:e5: f9:fa:e8:a3:d6:08:19:60:31:56:ab:05:eb:5a:f7: 08:ce:c1:1e:d5:f3:b8:3f:ff:0d:b1:18:82:91:df: ce:69:d6:ed:5f:69:1e:33:40:4d:8e:9f:05:8e:bd: 5e:c1:64:68:df:f8:31:ac:b3:ba:01:c9:4d:01:27: 63:78:a4:7b:10:5d:29:32:24:4a:42:be:e1:95:bc: 47:ff:b0:27:ba:47:69:0e:b6:9a:12:e4:94:1e:e2: e0:59:88:4e:46:72:1d:47:16:87:3a:5c:25:a6:63: 26:48:b9:5e:7d:2f:d2:71:2f:33:54:64:93:7d:9a: f6:a1:ec:50:01:2f:14:63:e7:6e:71:54:55:70:dc: d4:9f:13:0f:39:c3:9e:62:e9:7c:00:df:81:03:d1: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:27:29:CA:88:3B:5D:52:64:63:D4:35:6A:D7:C9:FA:17:C3:F0 X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:c0:56:3e:3d:3b:ff:4b:87:f5:d4:11:98:1a:45:0f:37: c1:d6:99:96:a3:ad:10:e9:84:37:8c:20:db:1c:eb:73:ec:0c: b2:77:4e:02:a9:5e:fd:57:50:b2:ea:76:86:86:f7:58:d7:5a: a8:5f:45:7a:c7:62:ff:b1:55:18:4f:48:38:ad:c9:4f:f5:aa: 56:47:ec:34:12:e2:f9:fd:0e:5e:09:58:43:e8:b3:d0:72:a6: a0:83:39:15:0c:79:da:bb:f5:cc:db:91:be:a3:d3:92:96:14: a3:c1:94:ca:3b:4f:d2:81:f4:03:45:24:ff:92:fc:45:0e:56: da:f3:ba:cb:c7:91:2d:79:eb:00:f1:11:bc:63:99:f2:c8:ce: 9a:bb:ca:e3:3b:c9:83:fe:7b:93:ad:e0:3d:39:79:be:12:23: 2f:0d:1d:a8:b2:09:93:28:8e:bf:4d:6c:a2:e4:f9:d5:f9:19: 02:9b:bb:d0:98:68:c1:ac:f2:e1:e3:76:f3:d1:a0:13:09:ca: 23:6b:1b:ee:47:f6:6a:15:d1:e2:40:a8:f6:aa:03:ca:6e:6e: d3:00:09:5f:c5:4e:c7:5f:67:c4:93:72:b3:97:7a:e1:80:52: a7:8f:5a:a8:d4:0f:74:55:94:ec:55:ab:f3:ce:d8:9c:06:50: a6:ab:06:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIhPpBPlvQUnUlvr/ZCfGNWM0wGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjA1MjkwMzAyMzBaFw0yNjA1MzAwNjE5MzBaMDMxMTAvBgNV BAMTKEIzRTcyNzI5Q0E4ODNCNUQ1MjY0NjNENDM1NkFEN0M5RkExN0MzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofLxoNV1qkUJ+7auH0fRm7YvJ 3yxyDxlr8Ior7omXse8Yc2xIKgPjLEhWTnuAhg+nEXmfTvOxeV2jXb7DmIeFOAeH 1IlrrsHYCs86TNn1HzckHBFZ/bUJi06QkekWMpLrzYFB6Ep+5fn66KPWCBlgMVar Beta9wjOwR7V87g//w2xGIKR385p1u1faR4zQE2OnwWOvV7BZGjf+DGss7oByU0B J2N4pHsQXSkyJEpCvuGVvEf/sCe6R2kOtpoS5JQe4uBZiE5Gch1HFoc6XCWmYyZI uV59L9JxLzNUZJN9mvah7FABLxRj525xVFVw3NSfEw85w55i6XwA34ED0T7RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs+cnKcqIO11SZGPUNWrXyfoXw/AwHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghjAVj49O/9L h/XUEZgaRQ83wdaZlqOtEOmEN4wg2xzrc+wMsndOAqle/VdQsup2hob3WNdaqF9F esdi/7FVGE9IOK3JT/WqVkfsNBLi+f0OXglYQ+iz0HKmoIM5FQx52rv1zNuRvqPT kpYUo8GUyjtP0oH0A0Uk/5L8RQ5W2vO6y8eRLXnrAPERvGOZ8sjOmrvK4zvJg/57 k63gPTl5vhIjLw0dqLIJkyiOv01souT51fkZApu70Jhowazy4eN289GgEwnKI2sb 7kf2ahXR4kCo9qoDym5u0wAJX8VOx19nxJNys5d64YBSp49aqNQPdFWU7FWr887Y nAZQpqsG+g== -----END CERTIFICATE-----Generated at Fri May 29 22:05:22 2026 by rpki-client