$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: BU+s1wMCBSTaSPTmiLBa9uMobnm7Xpt2yVGpp8TZySA= Subject key identifier: F2:24:8F:6C:3D:BD:C5:A0:34:8F:18:C7:7C:F5:EF:F9:89:81:14:72 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 76C2B23D0781C3C818883E510CBBEFAD5C9543C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 46 Signing time: Fri 29 May 2026 10:57:47 +0000 Manifest this update: Fri 29 May 2026 10:52:47 +0000 Manifest next update: Sat 30 May 2026 11:18:47 +0000 Files and hashes: 1: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: WTsBGHoemWxxdXEeRsXgpwSLmjiWKhpx8SQ/Qz5ruyw=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c2:b2:3d:07:81:c3:c8:18:88:3e:51:0c:bb:ef:ad:5c:95:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: May 29 10:52:47 2026 GMT Not After : May 30 11:18:47 2026 GMT Subject: CN=F2248F6C3DBDC5A0348F18C77CF5EFF989811472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:fe:50:b2:39:5d:b2:e9:ed:ff:65:e1:f4: b5:6f:da:49:68:52:d6:fb:fa:af:ea:f9:5c:7e:a5: ac:ee:c6:ab:3a:03:cf:24:eb:46:24:cd:68:83:2f: 44:8f:4d:ba:6b:69:da:ed:10:5c:59:d3:97:bb:40: 6a:f6:a5:4e:a6:ea:11:28:0f:f0:e2:86:20:e2:f0: 82:72:4a:59:fd:bb:43:2d:ea:e2:fa:11:4e:08:fd: 1a:9f:2a:7c:b6:ee:82:08:43:a6:91:1b:7d:8e:b8: ce:b1:06:17:a7:c7:7c:82:7d:d0:52:f3:11:36:12: 62:fb:6c:4c:d4:51:b4:33:df:20:5c:d9:30:ba:b1: 52:b9:70:83:cb:39:12:01:c0:c0:eb:ee:b9:ba:31: 4c:7c:fc:65:2b:e4:a7:78:34:71:f1:93:39:45:25: 45:44:a5:0d:d6:da:32:57:47:f9:ae:c1:bf:4d:f5: cf:5d:a5:86:4b:9f:d2:49:78:07:76:e1:27:a0:ac: c9:d6:96:65:0d:1e:6d:76:ff:07:a0:80:b2:7f:45: b5:1c:26:74:2a:f0:77:34:29:87:9f:c8:3f:74:76: ea:a3:2a:2a:a3:1f:d7:5f:4a:da:df:fe:bb:fb:1b: 3e:a9:f8:d6:71:87:9a:3f:09:10:73:b3:fe:fb:a0: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:8F:6C:3D:BD:C5:A0:34:8F:18:C7:7C:F5:EF:F9:89:81:14:72 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ed:aa:06:cd:0c:e2:e4:04:ee:bb:ff:84:b0:77:2e:87:f2: b7:38:97:aa:50:60:e4:04:14:3c:c6:20:82:24:a7:ca:30:c0: 26:1a:95:4f:e8:93:59:f0:4e:c9:6e:01:97:7a:c8:71:23:c3: db:8b:73:d6:66:f7:a1:ca:1d:61:22:4a:5d:e6:49:59:41:26: b3:8d:2e:96:a6:60:1e:47:0b:42:37:d2:c0:98:6e:06:73:3c: 45:6d:33:f4:dc:78:02:b3:ed:88:2f:b4:92:8e:51:8c:75:94: 8b:e3:f4:4f:ae:3c:f7:39:10:aa:37:05:38:be:c5:84:17:02: 5f:74:8a:e9:78:92:9c:a2:c1:64:05:2e:85:73:a6:4e:fa:a1: ec:b2:69:cf:a5:fc:4f:f7:87:83:d1:c5:4d:0d:e0:6d:6d:46: 57:e5:74:57:ea:3f:38:e4:13:66:ab:6c:d8:bb:d7:6f:1f:67: 82:70:00:80:57:45:42:cc:a6:83:6d:8e:0d:34:71:1c:12:9f: 93:cb:6a:95:98:f6:e2:91:7a:71:5a:fd:bf:dc:e8:de:b0:58: 58:00:40:95:7e:64:0a:aa:51:53:6a:3a:91:5a:35:a6:48:ea: 1f:b4:dd:44:f8:09:60:af:6b:7e:f3:3f:eb:85:cb:f8:71:a9: 1f:96:4f:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdsKyPQeBw8gYiD5RDLvvrVyVQ8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA1MjkxMDUyNDdaFw0yNjA1MzAxMTE4NDdaMDMxMTAvBgNV BAMTKEYyMjQ4RjZDM0RCREM1QTAzNDhGMThDNzdDRjVFRkY5ODk4MTE0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLP5Qsjldsunt/2Xh9LVv2klo Utb7+q/q+Vx+pazuxqs6A88k60YkzWiDL0SPTbpradrtEFxZ05e7QGr2pU6m6hEo D/DihiDi8IJySln9u0Mt6uL6EU4I/RqfKny27oIIQ6aRG32OuM6xBhenx3yCfdBS 8xE2EmL7bEzUUbQz3yBc2TC6sVK5cIPLORIBwMDr7rm6MUx8/GUr5Kd4NHHxkzlF JUVEpQ3W2jJXR/muwb9N9c9dpYZLn9JJeAd24SegrMnWlmUNHm12/weggLJ/RbUc JnQq8Hc0KYefyD90duqjKiqjH9dfStrf/rv7Gz6p+NZxh5o/CRBzs/77oNoxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8iSPbD29xaA0jxjHfPXv+YmBFHIwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzO2qBs0M4uQE 7rv/hLB3LofytziXqlBg5AQUPMYggiSnyjDAJhqVT+iTWfBOyW4Bl3rIcSPD24tz 1mb3ocodYSJKXeZJWUEms40ulqZgHkcLQjfSwJhuBnM8RW0z9Nx4ArPtiC+0ko5R jHWUi+P0T6489zkQqjcFOL7FhBcCX3SK6XiSnKLBZAUuhXOmTvqh7LJpz6X8T/eH g9HFTQ3gbW1GV+V0V+o/OOQTZqts2LvXbx9ngnAAgFdFQsymg22ODTRxHBKfk8tq lZj24pF6cVr9v9zo3rBYWABAlX5kCqpRU2o6kVo1pkjqH7TdRPgJYK9rfvM/64XL +HGpH5ZPGQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:28 2026 by rpki-client