$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: OX5vI4d+HuEj6jM3x4Hzx06jeOg7EGQQSZHzRk1ztyM= Subject key identifier: 52:4E:EF:87:6D:F8:C4:6A:1A:8C:68:25:C8:DA:3B:10:59:9B:F0:56 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 1C2E78EA5AA304C227F564C06CB06779344CF67A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: 45 Signing time: Fri 29 May 2026 08:32:45 +0000 Manifest this update: Fri 29 May 2026 08:27:45 +0000 Manifest next update: Sat 30 May 2026 09:41:45 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: UomvxiBsgD1sXvht1dwyuOiKPsRwzCmCSWQNZPigGtM=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2e:78:ea:5a:a3:04:c2:27:f5:64:c0:6c:b0:67:79:34:4c:f6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: May 29 08:27:45 2026 GMT Not After : May 30 09:41:45 2026 GMT Subject: CN=524EEF876DF8C46A1A8C6825C8DA3B10599BF056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:a1:49:0d:20:52:51:43:1c:dc:a7:c6:fb: 21:c1:f8:c2:bd:08:67:d3:a2:39:48:0e:41:66:9c: f0:7d:71:b6:5c:12:ec:ae:23:ca:1a:7d:61:db:8e: bd:42:12:77:8a:03:a9:49:a7:ab:a5:df:e0:d3:6a: fe:3a:4b:e2:ba:84:f9:30:d9:00:07:cc:6e:dc:82: 14:fe:6e:dd:62:18:47:b3:fb:40:2c:fc:13:11:69: f4:6f:92:82:65:56:e3:a1:2d:42:3f:fc:ca:e1:3a: 16:44:c0:09:c3:17:aa:91:be:b3:e3:f1:e4:bc:0d: 47:1a:ba:8a:13:76:16:2e:33:63:5c:04:13:27:64: c5:ab:ba:0f:65:c7:db:c3:16:f4:32:53:3a:4e:10: b4:54:68:15:a1:5a:3d:7a:42:5e:44:34:20:8d:1a: d9:f5:29:95:3a:80:0b:6f:8f:7b:b2:ea:b2:65:83: df:63:f1:35:66:36:2e:07:6b:a2:f0:15:11:31:06: 7b:25:c5:61:ce:d0:d7:e5:f8:78:63:1e:75:9b:fa: 91:ad:40:60:f0:11:2a:16:b9:83:d6:44:3e:f6:3a: d5:17:1a:f8:4f:83:73:1f:58:a4:71:ee:a7:90:c8: 03:fc:2b:22:8e:06:4f:fc:4c:ae:95:13:fc:f1:cd: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4E:EF:87:6D:F8:C4:6A:1A:8C:68:25:C8:DA:3B:10:59:9B:F0:56 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8f:b4:a3:68:a2:f7:24:91:c6:90:48:c2:27:5b:92:39:f6: 6e:37:9e:8e:8c:ba:75:c9:ac:6a:54:cb:b5:fb:38:ff:cd:fa: 9b:9a:84:9e:98:1f:2e:85:de:a3:ef:bd:35:d4:f7:04:bb:a9: a0:8d:4f:08:0b:4d:97:a6:31:82:16:8f:fe:3a:78:23:02:15: ab:ba:01:d8:39:67:1c:91:5f:e0:87:02:8d:d6:bd:23:19:11: cd:c5:91:6d:75:ad:80:b9:ab:b5:d5:f2:77:c0:a0:bd:71:39: 50:0b:5f:3d:91:03:c8:e3:c2:fd:91:22:7f:81:45:a1:42:3e: 19:32:8d:68:a2:e6:fe:c9:97:b5:d5:9f:8a:29:6b:47:f0:8b: 47:4c:18:fc:09:e6:c1:07:92:48:5e:0d:4e:3d:58:48:d6:96: 4a:d1:1c:61:96:c7:b6:41:ab:2f:03:d3:fc:ad:54:e1:6a:cf: b4:6a:34:df:31:dd:78:a3:ce:e1:b5:29:ad:fe:fa:99:6f:9a: ac:30:9f:17:a8:d0:8c:e8:de:5a:3c:fe:4d:b8:36:76:eb:90: 86:37:1c:2f:7d:16:19:74:c5:5c:37:0b:98:02:27:40:c8:db: 22:91:9b:aa:7c:7d:90:78:d3:bf:d7:fa:22:34:4c:6c:1d:ad: de:26:2d:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHC546lqjBMIn9WTAbLBneTRM9nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjA1MjkwODI3NDVaFw0yNjA1MzAwOTQxNDVaMDMxMTAvBgNV BAMTKDUyNEVFRjg3NkRGOEM0NkExQThDNjgyNUM4REEzQjEwNTk5QkYwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/6FJDSBSUUMc3KfG+yHB+MK9 CGfTojlIDkFmnPB9cbZcEuyuI8oafWHbjr1CEneKA6lJp6ul3+DTav46S+K6hPkw 2QAHzG7cghT+bt1iGEez+0As/BMRafRvkoJlVuOhLUI//MrhOhZEwAnDF6qRvrPj 8eS8DUcauooTdhYuM2NcBBMnZMWrug9lx9vDFvQyUzpOELRUaBWhWj16Ql5ENCCN Gtn1KZU6gAtvj3uy6rJlg99j8TVmNi4Ha6LwFRExBnslxWHO0Nfl+HhjHnWb+pGt QGDwESoWuYPWRD72OtUXGvhPg3MfWKRx7qeQyAP8KyKOBk/8TK6VE/zxzT4PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUk7vh234xGoajGglyNo7EFmb8FYwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmY+0o2ii9ySR xpBIwidbkjn2bjeejoy6dcmsalTLtfs4/836m5qEnpgfLoXeo++9NdT3BLupoI1P CAtNl6YxghaP/jp4IwIVq7oB2DlnHJFf4IcCjda9IxkRzcWRbXWtgLmrtdXyd8Cg vXE5UAtfPZEDyOPC/ZEif4FFoUI+GTKNaKLm/smXtdWfiilrR/CLR0wY/AnmwQeS SF4NTj1YSNaWStEcYZbHtkGrLwPT/K1U4WrPtGo03zHdeKPO4bUprf76mW+arDCf F6jQjOjeWjz+Tbg2duuQhjccL30WGXTFXDcLmAInQMjbIpGbqnx9kHjTv9f6IjRM bB2t3iYtbA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client