$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: h6cpkWg9xCI7IaeF1EqoDy3MCsAqnPaKEL9ngFk4Q1k= Subject key identifier: 47:74:D1:B7:32:BD:2A:65:AB:7B:DA:2A:67:6A:88:7E:8E:15:2E:02 Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 1A553043A63EDD4890F21F2DCD36B504895AF21A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 45 Signing time: Fri 29 May 2026 20:43:18 +0000 Manifest this update: Fri 29 May 2026 20:38:18 +0000 Manifest next update: Sat 30 May 2026 21:04:18 +0000 Files and hashes: 1: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 2: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: YqljCF6idpFTFHi/+VzeJiei345ayTmOXTLHEoqBNuw=) 3: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:55:30:43:a6:3e:dd:48:90:f2:1f:2d:cd:36:b5:04:89:5a:f2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: May 29 20:38:18 2026 GMT Not After : May 30 21:04:18 2026 GMT Subject: CN=4774D1B732BD2A65AB7BDA2A676A887E8E152E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:7a:5d:a4:57:c9:d4:2c:ca:cd:19:31:04: 9d:64:70:a6:0f:e4:cc:d8:d0:df:23:73:d2:11:6c: f5:48:5c:2f:10:6e:2b:c1:3a:18:3e:be:3d:e6:96: 69:99:93:e8:9f:88:4a:9f:78:88:bc:57:e7:9c:78: 2d:08:da:c1:a7:3e:96:7a:d7:36:e2:b6:4b:b6:cb: 62:e5:f0:78:6a:6d:c2:bc:f4:01:1d:8a:37:b8:a8: 7b:fe:29:bd:03:72:6d:c9:30:3f:08:ca:e6:b9:c4: 3a:8b:3f:51:bf:b6:90:80:6f:a8:bf:e5:4f:c0:aa: cf:f0:eb:1b:21:45:a0:7e:55:f9:62:14:e4:b8:d6: fe:e1:94:de:2a:5f:a2:76:34:08:97:0a:83:10:7a: 8b:a0:de:3e:b3:b0:34:7f:5f:db:ef:41:cb:4d:2c: 9d:6c:55:b4:b6:64:a4:36:97:57:70:00:50:1e:c4: cb:13:c7:81:1e:09:9b:72:5b:71:b2:0f:4b:cd:80: be:bb:7a:c1:45:2d:ac:b7:14:b2:d3:78:e5:f4:a5: f1:d0:4f:b7:28:89:91:5e:2f:72:47:96:f2:2a:2f: 00:6b:34:37:4f:e0:1e:d7:43:da:54:a2:0d:0b:1c: a1:39:95:1b:f4:de:8a:a9:fd:3f:ac:be:4e:28:58: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:74:D1:B7:32:BD:2A:65:AB:7B:DA:2A:67:6A:88:7E:8E:15:2E:02 X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e7:1f:2a:bd:e4:38:45:62:5a:fe:ef:02:3f:c6:ad:8d:4c: f9:86:fb:68:2c:a4:e0:6f:b4:aa:3f:b2:42:0a:1c:86:05:6d: 0f:1d:91:33:98:ae:a6:5f:cc:8d:f7:f2:7d:a6:17:9f:a0:60: 6e:a4:31:0e:59:dc:1c:bc:b8:08:64:b6:dd:13:16:78:12:3e: dd:a7:4e:c8:2f:b7:f6:4b:fc:66:6e:be:f1:3c:b9:cd:a7:6e: 60:99:e4:fd:6a:08:b5:1c:03:05:b4:7a:40:c2:8c:5e:e0:16: 89:25:87:f4:2b:54:69:53:86:d8:f8:ff:a9:1d:62:c1:c3:f3: a1:e8:fb:12:7d:f7:40:d2:f7:c0:f8:28:c2:b5:21:03:3f:72: 92:79:09:cb:bd:80:f6:80:27:f3:15:b0:3b:28:a8:5e:b7:87: 8a:2f:5c:ba:f6:a9:66:26:59:86:25:d2:bc:7d:af:95:cf:cd: 45:46:02:ec:5f:c7:9f:7f:00:76:f3:ad:41:40:5e:d8:86:5a: 51:56:97:52:b9:3a:42:68:27:b5:c3:4c:a0:5d:5a:d1:af:b0: 18:d7:89:11:af:84:f6:f4:01:c8:2f:97:2c:03:9c:43:9b:23: b1:fc:c9:91:45:bd:88:58:00:f0:8f:0e:1e:c8:5b:dc:0e:9c: a3:9e:29:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGlUwQ6Y+3UiQ8h8tzTa1BIla8howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA1MjkyMDM4MThaFw0yNjA1MzAyMTA0MThaMDMxMTAvBgNV BAMTKDQ3NzREMUI3MzJCRDJBNjVBQjdCREEyQTY3NkE4ODdFOEUxNTJFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbdHpdpFfJ1CzKzRkxBJ1kcKYP 5MzY0N8jc9IRbPVIXC8QbivBOhg+vj3mlmmZk+ifiEqfeIi8V+eceC0I2sGnPpZ6 1zbitku2y2Ll8HhqbcK89AEdije4qHv+Kb0Dcm3JMD8Iyua5xDqLP1G/tpCAb6i/ 5U/Aqs/w6xshRaB+VfliFOS41v7hlN4qX6J2NAiXCoMQeoug3j6zsDR/X9vvQctN LJ1sVbS2ZKQ2l1dwAFAexMsTx4EeCZtyW3GyD0vNgL67esFFLay3FLLTeOX0pfHQ T7coiZFeL3JHlvIqLwBrNDdP4B7XQ9pUog0LHKE5lRv03oqp/T+svk4oWChJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR3TRtzK9KmWre9oqZ2qIfo4VLgIwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXecfKr3kOEVi Wv7vAj/GrY1M+Yb7aCyk4G+0qj+yQgochgVtDx2RM5iupl/MjffyfaYXn6BgbqQx DlncHLy4CGS23RMWeBI+3adOyC+39kv8Zm6+8Ty5zaduYJnk/WoItRwDBbR6QMKM XuAWiSWH9CtUaVOG2Pj/qR1iwcPzoej7En33QNL3wPgowrUhAz9yknkJy72A9oAn 8xWwOyioXreHii9cuvapZiZZhiXSvH2vlc/NRUYC7F/Hn38AdvOtQUBe2IZaUVaX Urk6QmgntcNMoF1a0a+wGNeJEa+E9vQByC+XLAOcQ5sjsfzJkUW9iFgA8I8OHshb 3A6co54p4g== -----END CERTIFICATE-----Generated at Fri May 29 22:05:28 2026 by rpki-client