$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft File: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft (raw, json) Hash identifier: w+6sV5wmeAoLLa3GtU3NbKSHQBdJvak1pSmLDJ9uYtw= Subject key identifier: 7B:33:62:9A:34:EF:39:66:E3:CF:68:31:AB:6F:D8:EE:DC:62:F5:FF Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 4120576DC11024E42DF3488A1C9058661778F5C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft Manifest number: 4D Signing time: Fri 29 May 2026 00:57:25 +0000 Manifest this update: Fri 29 May 2026 00:52:25 +0000 Manifest next update: Sat 30 May 2026 04:45:25 +0000 Files and hashes: 1: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl (hash: CItZoJyriJQHb5lq/82KRB72fvx+XV8G7A/uurpxb9w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 04:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:20:57:6d:c1:10:24:e4:2d:f3:48:8a:1c:90:58:66:17:78:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: May 29 00:52:25 2026 GMT Not After : May 30 04:45:25 2026 GMT Subject: CN=7B33629A34EF3966E3CF6831AB6FD8EEDC62F5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:df:a7:2e:7a:49:8a:c3:b8:43:7c:7c:46: f8:73:cf:89:06:6c:fd:29:c7:5f:11:59:40:aa:27: 9c:5c:c5:2c:4d:da:cb:fd:85:15:08:b1:81:0e:be: d9:fb:d7:40:3e:37:91:db:3b:c0:e1:be:23:56:82: 0c:a1:87:6c:91:2c:0c:e2:55:68:7d:eb:b2:7a:2e: 96:28:66:e7:f6:f7:cd:56:9d:4f:cf:ba:12:eb:95: 7f:75:86:26:ad:90:12:ae:33:78:23:70:6a:a5:d1: bc:ad:77:3e:fe:5f:17:24:8a:17:af:24:e3:c0:1b: 4a:10:8e:83:bf:98:27:19:a8:e6:26:88:63:18:d6: 9e:0c:2d:dd:13:a4:3d:78:64:01:8d:a0:f4:66:57: 2f:3c:64:fb:e2:0c:b9:7f:be:df:fa:96:6e:cf:6e: bb:8c:fe:64:53:96:ea:d2:8e:9a:73:3b:70:f9:72: 65:d4:80:ab:fc:18:20:6c:83:33:ed:d4:fd:ef:ec: fe:d5:12:9c:48:b8:c6:86:79:e6:1d:a1:a3:16:92: ae:02:5a:71:c3:79:fe:b8:b6:cc:60:8b:14:8a:7b: 81:8f:82:39:77:4c:75:2c:6b:39:32:ce:3a:77:77: 9d:e0:ef:12:de:c6:5e:5a:92:bd:8a:62:25:45:05: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:62:9A:34:EF:39:66:E3:CF:68:31:AB:6F:D8:EE:DC:62:F5:FF X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c9:bc:bd:b9:63:20:ff:63:2e:ee:f0:6c:50:03:12:59:4a: de:3d:cd:27:1c:d3:0e:5a:52:91:f4:f1:28:74:49:eb:d3:7a: 73:5a:00:ea:82:59:8f:26:bd:0e:a3:b3:d7:e1:3f:27:60:43: fa:89:ab:09:dc:f1:74:08:34:d0:47:c7:03:d1:9c:bc:17:c4: 40:86:b9:f2:53:c7:fd:fe:0e:6f:06:90:9f:9c:cc:98:e9:47: fe:24:99:f9:f0:b7:a0:33:1a:c5:02:05:3b:90:17:52:3d:2c: 1a:e5:6a:9b:d8:68:c4:ae:de:de:71:56:46:5b:f4:1c:f3:e3: cc:e1:7c:d9:6c:ac:9f:22:f6:9f:ed:bc:5d:a5:74:80:e0:27: 54:75:3a:c2:e9:b1:09:93:6b:cd:cb:e5:66:bd:41:e2:4a:7d: 1e:7f:a6:b9:21:cb:54:df:d8:b6:8d:ca:3b:a5:d9:b1:7b:9b: 20:8a:9b:8f:29:51:a3:df:98:24:bb:e6:2c:58:fd:67:bb:bf: 2b:69:b2:4b:84:eb:70:80:16:36:2d:f9:fd:30:9e:52:7a:14: 5e:bd:c4:07:2d:60:61:17:20:bb:fd:78:e0:cc:ed:0b:0a:81: 3d:05:c6:e2:24:5f:be:d4:61:fb:81:d0:b0:e8:ec:0c:ac:f0: ce:74:e4:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQSBXbcEQJOQt80iKHJBYZhd49cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA1MjkwMDUyMjVaFw0yNjA1MzAwNDQ1MjVaMDMxMTAvBgNV BAMTKDdCMzM2MjlBMzRFRjM5NjZFM0NGNjgzMUFCNkZEOEVFREM2MkY1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhid+nLnpJisO4Q3x8Rvhzz4kG bP0px18RWUCqJ5xcxSxN2sv9hRUIsYEOvtn710A+N5HbO8DhviNWggyhh2yRLAzi VWh967J6LpYoZuf2981WnU/PuhLrlX91hiatkBKuM3gjcGql0bytdz7+Xxckihev JOPAG0oQjoO/mCcZqOYmiGMY1p4MLd0TpD14ZAGNoPRmVy88ZPviDLl/vt/6lm7P bruM/mRTlurSjppzO3D5cmXUgKv8GCBsgzPt1P3v7P7VEpxIuMaGeeYdoaMWkq4C WnHDef64tsxgixSKe4GPgjl3THUsazkyzjp3d53g7xLexl5akr2KYiVFBRZzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUezNimjTvOWbjz2gxq2/Y7txi9f8wHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIyNDA1MTMvMC9GMUQ1OTM1MEI4MDU5 MDRBNURERkMzRkRFQTFBNDYwRTk1MzUzRUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8m8vbljIP9j Lu7wbFADEllK3j3NJxzTDlpSkfTxKHRJ69N6c1oA6oJZjya9DqOz1+E/J2BD+omr CdzxdAg00EfHA9GcvBfEQIa58lPH/f4ObwaQn5zMmOlH/iSZ+fC3oDMaxQIFO5AX Uj0sGuVqm9hoxK7e3nFWRlv0HPPjzOF82WysnyL2n+28XaV0gOAnVHU6wumxCZNr zcvlZr1B4kp9Hn+muSHLVN/Yto3KO6XZsXubIIqbjylRo9+YJLvmLFj9Z7u/K2my S4TrcIAWNi35/TCeUnoUXr3EBy1gYRcgu/144MztCwqBPQXG4iRfvtRh+4HQsOjs DKzwznTkBw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:29 2026 by rpki-client