$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: jZDSJz++/IZEGukCuhA6eoRjCgpz8nOkP5u7DbsfHDk= Subject key identifier: FB:E5:4E:5C:91:66:05:FD:AB:CD:37:55:78:73:7C:EF:BD:BD:C7:9F Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 0DB6C2AD136EA57A1A81BC7633FDEDCEA8466B6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 4D Signing time: Fri 29 May 2026 10:17:46 +0000 Manifest this update: Fri 29 May 2026 10:12:46 +0000 Manifest next update: Sat 30 May 2026 10:45:46 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: bYgu41siJ71ttnIS3hSqS8MTHuslIyYKTjGWN+A9OS8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b6:c2:ad:13:6e:a5:7a:1a:81:bc:76:33:fd:ed:ce:a8:46:6b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: May 29 10:12:46 2026 GMT Not After : May 30 10:45:46 2026 GMT Subject: CN=FBE54E5C916605FDABCD375578737CEFBDBDC79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:93:9f:cc:b5:f9:a7:14:74:c3:7a:ce:a7: 95:f7:cf:e4:75:9f:26:bf:7e:82:d7:20:6f:93:47: 8b:07:54:a6:98:8a:6a:f7:6d:3a:eb:99:41:8a:25: e2:7e:10:22:bb:aa:f5:61:db:2c:3d:87:b7:fc:d5: dc:d0:0a:c3:57:b3:81:9b:92:2d:5f:dd:0d:30:1a: 86:aa:af:2e:66:a3:0f:98:7d:7a:4e:bd:6b:cc:f1: 21:9b:23:3c:25:80:3b:d4:f1:45:4d:ea:43:56:12: 98:e3:03:60:0b:8c:9b:27:8d:e3:3b:be:1d:1f:5a: 4a:a9:0c:91:e4:07:71:0b:a1:90:46:ff:7d:6a:5c: 7d:12:12:6a:8b:68:b0:ca:8d:e2:67:56:63:40:78: 1a:80:69:66:9f:55:d9:56:73:ac:8a:d2:12:77:eb: 21:92:70:dc:95:12:89:c2:ad:cc:c7:8e:43:46:8e: 5a:54:ab:21:17:bf:25:cc:3a:aa:3b:71:02:9e:d6: 3e:fe:d2:18:e6:4b:cf:57:b3:34:c4:f9:5a:95:7d: c9:e3:ff:5f:16:77:f2:f6:33:c0:23:d3:d4:20:2e: 95:27:71:27:3a:db:65:11:44:9d:51:92:0d:1b:35: 70:5e:8d:b5:77:ee:ab:54:7d:e8:35:f6:f8:2e:3c: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:4E:5C:91:66:05:FD:AB:CD:37:55:78:73:7C:EF:BD:BD:C7:9F X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:25:97:64:b5:57:dc:91:f8:9e:66:07:72:4e:5d:ba:58:96: 1d:26:ae:61:93:94:62:02:63:33:5c:b0:3d:aa:55:06:1e:34: 56:84:38:34:a6:0e:b1:de:c2:fb:90:de:23:bd:fa:31:c0:52: 50:94:de:d4:ab:8c:77:40:01:54:b6:b3:f9:91:2a:f3:7c:4f: 6b:da:a4:e8:4d:01:5b:99:0b:16:d2:1b:89:75:65:62:0d:12: 36:68:03:ee:e7:a3:a8:8b:91:49:62:8e:72:17:e7:ee:25:d6: e9:81:8f:a5:cb:a3:c5:b8:73:85:e8:0a:48:59:9a:f0:72:ce: e1:99:01:dc:71:6a:29:2a:59:e0:eb:4f:5e:ca:b1:78:40:f7: 88:cf:72:8b:33:6d:fb:68:4f:93:5d:8c:0a:96:7c:af:25:0b: 04:eb:ff:c2:6b:02:0a:d4:2f:95:c6:b1:49:14:38:f8:aa:8f: 9f:1c:f0:46:f1:06:68:fb:12:0a:3a:6e:28:55:cc:47:0a:c2: 72:f8:59:cb:ef:c1:8f:dd:36:e2:6d:a4:ad:c6:58:ec:d1:8d: 16:9e:b3:52:39:16:56:1c:91:d6:4f:60:fb:00:fb:dd:ab:37: c3:4e:dd:3c:87:70:d7:1f:4c:06:83:6f:a5:d4:28:53:64:85: 14:e4:59:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDbbCrRNupXoagbx2M/3tzqhGa28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA1MjkxMDEyNDZaFw0yNjA1MzAxMDQ1NDZaMDMxMTAvBgNV BAMTKEZCRTU0RTVDOTE2NjA1RkRBQkNEMzc1NTc4NzM3Q0VGQkRCREM3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YZOfzLX5pxR0w3rOp5X3z+R1 nya/foLXIG+TR4sHVKaYimr3bTrrmUGKJeJ+ECK7qvVh2yw9h7f81dzQCsNXs4Gb ki1f3Q0wGoaqry5mow+YfXpOvWvM8SGbIzwlgDvU8UVN6kNWEpjjA2ALjJsnjeM7 vh0fWkqpDJHkB3ELoZBG/31qXH0SEmqLaLDKjeJnVmNAeBqAaWafVdlWc6yK0hJ3 6yGScNyVEonCrczHjkNGjlpUqyEXvyXMOqo7cQKe1j7+0hjmS89XszTE+VqVfcnj /18Wd/L2M8Aj09QgLpUncSc622URRJ1Rkg0bNXBejbV37qtUfeg19vguPHFdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU++VOXJFmBf2rzTdVeHN87729x58wHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyWXZLVX3JH4 nmYHck5duliWHSauYZOUYgJjM1ywPapVBh40VoQ4NKYOsd7C+5DeI736McBSUJTe 1KuMd0ABVLaz+ZEq83xPa9qk6E0BW5kLFtIbiXVlYg0SNmgD7uejqIuRSWKOchfn 7iXW6YGPpcujxbhzhegKSFma8HLO4ZkB3HFqKSpZ4OtPXsqxeED3iM9yizNt+2hP k12MCpZ8ryULBOv/wmsCCtQvlcaxSRQ4+KqPnxzwRvEGaPsSCjpuKFXMRwrCcvhZ y+/Bj9024m2krcZY7NGNFp6zUjkWVhyR1k9g+wD73as3w07dPIdw1x9MBoNvpdQo U2SFFORZaQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:30 2026 by rpki-client