$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: h6lcn0r4yz854uMAdH3lviTnqHh4GL8eWKF9qsr30MY= Subject key identifier: 69:34:D0:7F:68:29:1B:17:54:98:B9:26:28:7C:37:93:22:AA:D6:B8 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 38F2C2AF80C15F3CEF521B645226BF9CD8BCF0BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: 57 Signing time: Fri 29 May 2026 09:42:46 +0000 Manifest this update: Fri 29 May 2026 09:37:46 +0000 Manifest next update: Sat 30 May 2026 10:44:46 +0000 Files and hashes: 1: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) 2: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 4: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: TD1KHB10pAaoBv6gW0RAaAxUIoatQTMI3N1uJmKsqJY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f2:c2:af:80:c1:5f:3c:ef:52:1b:64:52:26:bf:9c:d8:bc:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: May 29 09:37:46 2026 GMT Not After : May 30 10:44:46 2026 GMT Subject: CN=6934D07F68291B175498B926287C379322AAD6B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e9:46:1d:39:3c:e7:37:e4:96:46:ec:8a:1a: 4a:84:82:c4:cc:62:a6:ae:5f:83:ee:41:71:49:3d: 9c:29:e4:da:bf:8b:c7:10:ca:c8:93:62:1f:3b:c4: 3d:4f:2b:2c:0d:55:f4:41:ab:0f:5a:67:00:a3:dd: 49:f4:36:b1:05:8c:2f:9f:98:c2:68:f0:78:44:52: cb:79:97:30:87:7a:95:d7:7f:3a:0c:dd:77:a3:06: 00:3e:8f:db:0b:87:7c:77:3d:2c:84:d3:ad:9d:8b: 29:e0:12:6a:c9:de:48:d5:d9:6a:7f:1b:e4:04:af: 5d:5e:5d:d6:4c:ea:76:ac:4b:b0:71:78:fd:6d:4d: 1d:53:66:e1:3e:d6:15:c0:ff:e5:6e:73:86:16:7f: 25:d9:8f:e3:49:16:8a:c4:cc:d7:f7:94:92:9d:70: 4f:45:31:6b:24:90:8e:a9:41:2d:6e:65:be:ac:61: 0f:28:22:2a:00:fe:03:27:7a:96:f9:2c:06:fc:fa: ba:83:d8:b7:fc:38:1a:4b:5d:f5:85:87:9e:d8:0f: 7f:9c:06:4d:f1:4b:db:7c:d3:6c:db:cc:6a:be:05: 10:4e:c2:44:03:53:e1:ef:17:f4:fe:3a:bf:7a:bc: 71:c0:b9:72:1c:c7:bd:0f:1a:41:67:ee:a6:39:98: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:D0:7F:68:29:1B:17:54:98:B9:26:28:7C:37:93:22:AA:D6:B8 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:04:3c:9d:98:52:26:03:25:9f:07:99:65:db:a2:f9:a4:36: 02:65:1f:15:5a:55:85:46:fe:88:56:3d:7b:e9:22:eb:04:88: ea:8b:64:d7:c9:df:9d:ba:10:92:6a:97:b8:34:b1:10:8c:7a: 7f:38:30:22:d6:5e:a2:4e:20:a4:34:2b:d3:2a:a9:2b:8e:19: 48:43:05:55:55:2e:b6:fd:c6:46:9d:3d:e9:3a:ac:00:86:29: fa:c7:65:44:b1:bb:8e:61:3a:7b:d6:80:d8:8b:28:8c:05:c1: bc:f5:54:cc:38:03:b7:5b:aa:1f:b5:b9:3e:bf:7d:98:e5:c8: a2:61:4b:33:51:48:3a:ce:c9:4e:ce:d2:32:2a:b0:32:27:44: 91:51:be:63:e7:bb:6a:76:a7:7d:01:d2:d0:5c:e4:1d:7f:45: 8c:ec:1a:10:a1:19:69:b2:db:f9:81:4f:c5:fd:21:6a:18:8a: 2b:70:eb:f7:07:62:69:df:47:36:04:97:2e:09:08:ba:62:29: 77:9e:ef:95:05:09:d9:bc:a5:26:40:d8:9a:60:20:95:a7:18: 21:66:73:4a:24:9f:0e:f2:0e:db:eb:17:9e:53:19:03:7a:d1: ae:e8:46:5f:22:6d:ac:02:6b:89:5f:88:d4:36:ac:c9:74:35: 9f:ac:1e:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOPLCr4DBXzzvUhtkUia/nNi88L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA1MjkwOTM3NDZaFw0yNjA1MzAxMDQ0NDZaMDMxMTAvBgNV BAMTKDY5MzREMDdGNjgyOTFCMTc1NDk4QjkyNjI4N0MzNzkzMjJBQUQ2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6UYdOTznN+SWRuyKGkqEgsTM YqauX4PuQXFJPZwp5Nq/i8cQysiTYh87xD1PKywNVfRBqw9aZwCj3Un0NrEFjC+f mMJo8HhEUst5lzCHepXXfzoM3XejBgA+j9sLh3x3PSyE062diyngEmrJ3kjV2Wp/ G+QEr11eXdZM6nasS7BxeP1tTR1TZuE+1hXA/+Vuc4YWfyXZj+NJForEzNf3lJKd cE9FMWskkI6pQS1uZb6sYQ8oIioA/gMnepb5LAb8+rqD2Lf8OBpLXfWFh57YD3+c Bk3xS9t802zbzGq+BRBOwkQDU+HvF/T+Or96vHHAuXIcx70PGkFn7qY5mEZ5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaTTQf2gpGxdUmLkmKHw3kyKq1rgwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAQ8nZhSJgMl nweZZdui+aQ2AmUfFVpVhUb+iFY9e+ki6wSI6otk18nfnboQkmqXuDSxEIx6fzgw ItZeok4gpDQr0yqpK44ZSEMFVVUutv3GRp096TqsAIYp+sdlRLG7jmE6e9aA2Iso jAXBvPVUzDgDt1uqH7W5Pr99mOXIomFLM1FIOs7JTs7SMiqwMidEkVG+Y+e7anan fQHS0FzkHX9FjOwaEKEZabLb+YFPxf0hahiKK3Dr9wdiad9HNgSXLgkIumIpd57v lQUJ2bylJkDYmmAglacYIWZzSiSfDvIO2+sXnlMZA3rRruhGXyJtrAJriV+I1Das yXQ1n6wezg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client