$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: al21lvQ+jQLOmp8YO2GfTXIxeehdF5fFP4iCco+OhKE= Subject key identifier: 36:22:EC:0D:F2:15:15:47:97:3B:A1:9C:E2:23:C3:CA:0F:B0:E7:F2 Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 58099C3477395CB32104BB341162AC98D03C7D61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 99 Signing time: Fri 29 May 2026 08:37:46 +0000 Manifest this update: Fri 29 May 2026 08:32:46 +0000 Manifest next update: Sat 30 May 2026 11:58:46 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: zDcN00OsC+sJMvCCtV0wYxf1b1ZuywmWZJk8oXPsYpM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:09:9c:34:77:39:5c:b3:21:04:bb:34:11:62:ac:98:d0:3c:7d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: May 29 08:32:46 2026 GMT Not After : May 30 11:58:46 2026 GMT Subject: CN=3622EC0DF2151547973BA19CE223C3CA0FB0E7F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:81:76:85:8c:f6:28:4f:b5:54:34:9f:b4: 8f:f0:d7:a6:cc:06:41:91:89:d8:17:d5:4b:d0:b6: 44:33:db:d8:d7:43:ff:6d:c5:cc:b2:8e:ca:7f:78: 90:19:e1:9e:55:f8:d3:15:5d:26:a3:ba:ef:68:16: b4:27:2b:65:f9:f1:57:ae:56:9e:ca:fb:3c:46:5e: da:3f:3e:50:58:9b:d8:bf:e4:7e:9d:59:c0:73:49: 0c:06:7b:bb:dd:ea:17:11:1e:35:f1:02:57:e0:74: 72:04:7b:83:3c:3a:28:8d:08:71:a5:9e:67:8e:f5: b4:d4:10:b3:d8:54:ea:d5:cb:dd:cd:06:ca:79:e1: 81:15:23:59:04:4f:47:62:73:57:4b:95:0d:44:f9: 35:40:3f:a2:9c:5d:a1:f3:47:2c:2a:e0:29:9b:95: ed:31:b2:de:f2:4f:03:e7:9f:ed:30:0d:f6:06:1b: 5d:3b:58:9a:75:26:59:32:f2:97:c6:b1:1c:82:9b: 0d:8f:22:b6:b8:48:1f:1a:83:0f:a2:1b:68:e2:18: 63:c1:11:87:15:6f:ad:50:8e:cc:cd:6c:5a:dd:53: 7f:65:72:88:cd:7f:3a:03:7c:cd:53:1d:d3:11:d0: 2b:ab:4f:c0:3a:a8:6e:b7:03:13:88:8f:05:56:09: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:EC:0D:F2:15:15:47:97:3B:A1:9C:E2:23:C3:CA:0F:B0:E7:F2 X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:62:8d:df:9c:c8:7d:10:70:0e:cf:77:64:cd:88:c2:09:09: 7f:1e:c1:cc:a9:fb:c1:46:b7:1d:e7:59:fa:73:0a:b6:15:40: 81:b4:ca:4f:9c:f8:c5:ef:32:5e:21:36:9a:7b:b1:c6:f7:52: df:0c:a4:58:f1:80:79:92:2c:33:a9:66:9e:c4:ab:09:86:79: 51:a1:ea:e8:9b:c5:76:05:06:db:85:a3:cb:d3:f1:76:0d:ca: 82:48:ab:bd:fa:cb:4d:eb:b6:94:f7:0b:19:85:80:87:67:6c: 18:cc:10:d9:88:56:55:76:35:9d:c5:54:07:79:92:d5:3a:1e: d7:c6:c5:74:2e:c5:c1:80:c1:02:f7:dd:31:ab:47:76:ed:e6: ce:bd:5f:aa:b6:e2:a5:18:fa:e5:31:d2:fa:b3:52:05:b6:c0: 19:2c:84:fb:ea:b9:5e:b6:e1:72:84:af:5b:63:35:98:79:b8: f5:a4:10:1f:ba:93:65:19:d6:48:a2:17:be:9b:19:de:e0:ff: 26:08:0b:a1:b3:b8:01:4e:89:4e:ba:45:21:07:be:ba:4d:19: f2:fe:6a:9e:cb:42:1f:45:73:6a:00:71:cd:88:32:2f:a3:8f: 94:4a:61:05:48:e8:95:19:07:06:17:ac:88:e8:80:38:f1:c8: a8:db:78:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWAmcNHc5XLMhBLs0EWKsmNA8fWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjA1MjkwODMyNDZaFw0yNjA1MzAxMTU4NDZaMDMxMTAvBgNV BAMTKDM2MjJFQzBERjIxNTE1NDc5NzNCQTE5Q0UyMjNDM0NBMEZCMEU3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z4F2hYz2KE+1VDSftI/w16bM BkGRidgX1UvQtkQz29jXQ/9txcyyjsp/eJAZ4Z5V+NMVXSajuu9oFrQnK2X58Veu Vp7K+zxGXto/PlBYm9i/5H6dWcBzSQwGe7vd6hcRHjXxAlfgdHIEe4M8OiiNCHGl nmeO9bTUELPYVOrVy93NBsp54YEVI1kET0dic1dLlQ1E+TVAP6KcXaHzRywq4Cmb le0xst7yTwPnn+0wDfYGG107WJp1Jlky8pfGsRyCmw2PIra4SB8agw+iG2jiGGPB EYcVb61QjszNbFrdU39lcojNfzoDfM1THdMR0CurT8A6qG63AxOIjwVWCTp5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNiLsDfIVFUeXO6Gc4iPDyg+w5/IwHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmKN35zIfRBw Ds93ZM2IwgkJfx7BzKn7wUa3HedZ+nMKthVAgbTKT5z4xe8yXiE2mnuxxvdS3wyk WPGAeZIsM6lmnsSrCYZ5UaHq6JvFdgUG24Wjy9Pxdg3KgkirvfrLTeu2lPcLGYWA h2dsGMwQ2YhWVXY1ncVUB3mS1Toe18bFdC7FwYDBAvfdMatHdu3mzr1fqrbipRj6 5THS+rNSBbbAGSyE++q5XrbhcoSvW2M1mHm49aQQH7qTZRnWSKIXvpsZ3uD/JggL obO4AU6JTrpFIQe+uk0Z8v5qnstCH0VzagBxzYgyL6OPlEphBUjolRkHBhesiOiA OPHIqNt4sw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:31 2026 by rpki-client