$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: iOY3eKE6JDvfVSdTZs54AmG+vu+Y/8Y7Gu9iKmNwp7U= Subject key identifier: E2:BF:10:5E:28:AF:F8:DC:6B:39:43:A5:3F:4E:5B:79:CF:E3:6E:1E Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 7D0FF4ECCCBDBF9106B72353ACC20CFB93D4E6AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: A3 Signing time: Fri 29 May 2026 17:48:04 +0000 Manifest this update: Fri 29 May 2026 17:43:04 +0000 Manifest next update: Sat 30 May 2026 19:03:04 +0000 Files and hashes: 1: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) 2: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: 9Im9jkAtJHF7Mn/V3rnp3LnxIm/exumlSmZZYE0s3KI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0f:f4:ec:cc:bd:bf:91:06:b7:23:53:ac:c2:0c:fb:93:d4:e6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: May 29 17:43:04 2026 GMT Not After : May 30 19:03:04 2026 GMT Subject: CN=E2BF105E28AFF8DC6B3943A53F4E5B79CFE36E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:85:3e:56:88:b0:26:35:c6:b5:6e:9b:06: c2:6c:16:b6:2c:fa:5c:e4:e9:b7:88:3e:ef:f3:80: ac:d0:1a:1b:78:64:7e:37:0c:61:b6:8c:4f:57:e4: a5:5e:a9:b0:db:92:d1:c7:f1:b9:f5:7b:f4:72:d5: 61:31:0b:c8:88:ea:df:20:cc:ea:29:6d:dd:f0:d0: 65:ed:13:dc:5a:13:a7:42:39:43:48:fb:11:44:0f: 7d:9e:c0:6b:0c:b8:30:d9:d2:c1:b8:81:8d:f7:3d: 99:cf:b1:58:6a:9f:6f:bf:36:2a:55:81:8e:c4:02: 37:6f:c5:31:d8:49:53:d6:30:82:8a:3f:18:1f:c7: a4:eb:18:d4:47:9c:bb:68:45:03:8a:9a:0e:12:08: 71:37:a5:51:c7:eb:98:f1:74:59:7f:64:31:c1:67: 4b:aa:4b:c9:b0:5a:d3:e8:c0:0a:16:b3:1f:98:43: 9e:05:d7:c5:e3:fb:5b:20:c1:8e:41:6b:c0:72:2e: c8:7c:1e:e2:28:03:67:05:5f:9e:06:e7:1c:4c:ba: 04:21:28:2b:b9:13:02:91:08:8f:5d:8a:cc:4f:80: 23:30:27:3f:04:74:9c:8c:d3:4b:00:ae:af:4b:49: d8:0a:f3:48:77:1f:f8:b4:26:6f:fb:7b:53:0b:c0: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:10:5E:28:AF:F8:DC:6B:39:43:A5:3F:4E:5B:79:CF:E3:6E:1E X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:ba:67:e7:5a:2c:bf:a5:d9:5e:3b:45:69:e4:a3:89:53: e6:cb:af:a3:a8:47:f3:50:63:4f:3d:ab:eb:45:2f:fc:2c:a2: bf:a8:5f:e5:98:2a:ae:97:7b:4b:1c:6c:bd:65:28:8e:ba:85: d8:1c:8e:b3:99:ac:9a:7c:8d:89:84:08:97:63:71:bc:93:19: b0:aa:0e:0e:65:1a:d1:c7:50:5c:17:02:31:83:f5:b8:90:05: 9c:a9:2c:2b:09:83:71:5d:1e:fc:7b:d5:d5:ae:80:8b:24:f8: 15:a3:48:fe:4a:43:ac:7e:d1:35:f9:56:22:2a:d5:45:74:bc: c1:dd:2d:5d:0d:6b:64:70:bc:6d:bb:99:7a:ce:a5:25:80:59: a1:8c:9c:5d:56:77:d1:95:86:74:33:36:95:94:88:c0:bf:3a: 40:fd:3f:55:bb:b6:79:7b:46:5b:04:dc:b7:2c:dc:7d:95:56: b5:ea:39:5c:a5:f5:59:04:58:dc:66:a3:83:cb:68:13:5c:06: 9b:85:c5:31:f7:38:56:44:02:09:53:c7:c2:3b:8f:b8:3f:96: 49:d2:7c:cd:f2:ec:a0:bc:94:9a:4e:2d:af:82:e6:55:c1:53: 8e:e0:03:87:66:5b:72:4f:c2:cb:a1:51:10:31:92:9b:f6:d3: ea:7d:fe:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfQ/07My9v5EGtyNTrMIM+5PU5qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjA1MjkxNzQzMDRaFw0yNjA1MzAxOTAzMDRaMDMxMTAvBgNV BAMTKEUyQkYxMDVFMjhBRkY4REM2QjM5NDNBNTNGNEU1Qjc5Q0ZFMzZFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bIU+VoiwJjXGtW6bBsJsFrYs +lzk6beIPu/zgKzQGht4ZH43DGG2jE9X5KVeqbDbktHH8bn1e/Ry1WExC8iI6t8g zOopbd3w0GXtE9xaE6dCOUNI+xFED32ewGsMuDDZ0sG4gY33PZnPsVhqn2+/NipV gY7EAjdvxTHYSVPWMIKKPxgfx6TrGNRHnLtoRQOKmg4SCHE3pVHH65jxdFl/ZDHB Z0uqS8mwWtPowAoWsx+YQ54F18Xj+1sgwY5Ba8ByLsh8HuIoA2cFX54G5xxMugQh KCu5EwKRCI9disxPgCMwJz8EdJyM00sArq9LSdgK80h3H/i0Jm/7e1MLwDpbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4r8QXiiv+NxrOUOlP05bec/jbh4wHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6i6Z+daLL+l 2V47RWnko4lT5suvo6hH81BjTz2r60Uv/Cyiv6hf5Zgqrpd7SxxsvWUojrqF2ByO s5msmnyNiYQIl2NxvJMZsKoODmUa0cdQXBcCMYP1uJAFnKksKwmDcV0e/HvV1a6A iyT4FaNI/kpDrH7RNflWIirVRXS8wd0tXQ1rZHC8bbuZes6lJYBZoYycXVZ30ZWG dDM2lZSIwL86QP0/Vbu2eXtGWwTctyzcfZVWteo5XKX1WQRY3Gajg8toE1wGm4XF Mfc4VkQCCVPHwjuPuD+WSdJ8zfLsoLyUmk4tr4LmVcFTjuADh2Zbck/Cy6FREDGS m/bT6n3+qQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client