$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: uI5DHzJSGP94CLH+2Mkn2yONXuOJesiuGSiLdJcLcCE= Subject key identifier: 85:6F:47:D1:1A:F8:36:82:1B:E4:C7:A5:D4:B4:6E:F0:9B:07:AF:60 Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 172C1CED8BA49DFBC4D3623C1C83008930ECF4C3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: 43 Signing time: Fri 29 May 2026 18:33:04 +0000 Manifest this update: Fri 29 May 2026 18:28:04 +0000 Manifest next update: Sat 30 May 2026 21:28:04 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: 9yjItoAWC2NmTEH4X4VcFBORE1OhWDf2QA4CBIeHCnk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2c:1c:ed:8b:a4:9d:fb:c4:d3:62:3c:1c:83:00:89:30:ec:f4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: May 29 18:28:04 2026 GMT Not After : May 30 21:28:04 2026 GMT Subject: CN=856F47D11AF836821BE4C7A5D4B46EF09B07AF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:0b:cd:67:32:46:af:ac:c5:4e:52:bd:35: d2:e0:69:b5:6b:eb:c0:e1:22:22:2c:82:8f:ac:74: f4:25:81:79:45:14:23:85:ad:8e:11:92:d3:99:cc: 34:d2:38:88:b5:2c:95:ef:d8:6d:cb:f5:67:6e:27: e3:69:e9:3d:45:b9:49:23:fd:ea:1f:ce:0f:69:f4: fc:c3:09:f4:3f:07:f3:2a:e2:fd:b8:ab:7f:f5:6d: 74:dc:0a:ad:48:8f:fa:d9:17:a8:cf:b9:02:11:bc: b1:33:4a:53:43:5c:1e:eb:d2:a0:93:35:4e:87:24: 4f:97:40:8e:9d:f1:0e:93:ae:71:0c:4d:7e:7f:1e: ac:75:ed:34:69:f0:b0:76:57:64:0e:e7:54:f4:f2: 83:c4:9a:50:26:46:ac:9b:c0:ff:aa:bd:9b:eb:57: 93:ca:58:15:e0:d5:29:18:48:22:dc:0e:84:0a:32: ba:d6:ef:06:5c:51:58:0d:f6:2f:61:2c:04:f0:78: 5f:31:b3:8a:14:82:dd:f2:1d:f6:ad:63:4d:d9:57: 9e:70:f3:9b:69:d4:b7:e3:9f:cb:3f:c2:66:49:4b: 20:69:65:61:c8:64:00:9c:50:6a:92:9d:68:37:b8: 63:f4:11:1d:02:10:58:e3:27:e0:f2:96:31:24:67: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:47:D1:1A:F8:36:82:1B:E4:C7:A5:D4:B4:6E:F0:9B:07:AF:60 X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7a:e5:d9:96:7a:87:fa:00:3b:d1:be:69:80:c4:b2:de:40: 9e:98:c3:eb:d0:59:71:6e:53:c2:ed:f1:6c:79:fe:31:b6:94: ca:9b:5b:88:99:4e:37:81:e2:af:eb:07:ae:0b:43:bb:91:86: 06:09:12:6f:72:82:2f:7c:70:40:07:1b:ca:75:ea:a8:ba:e1: 2a:30:d8:ad:5c:c7:0b:df:1f:f2:9d:8e:b0:48:df:8b:bc:d6: 52:48:e2:7e:95:93:e7:66:89:2c:79:ac:81:52:ed:4e:6b:f1: b6:dd:55:14:de:68:70:23:ec:8f:5d:8d:c7:40:65:1a:2b:15: 0f:d7:a3:d9:23:96:f9:aa:cb:45:4b:f0:97:f9:70:49:d6:e7: 0b:23:c3:0a:e0:44:55:51:01:08:df:2a:a5:26:7d:b3:00:f4: b0:53:1a:23:b4:e6:0f:fd:6d:08:78:c1:15:83:0e:27:ea:30: 2f:d5:51:7e:c2:e2:76:f3:40:48:11:a4:f0:63:7a:4a:3e:6c: 1f:f2:12:94:f7:f3:ac:ef:0c:2d:8e:e8:90:d1:cd:ce:59:d4: 43:a7:96:b0:a5:55:bf:49:f8:d7:ac:ad:b5:60:e8:9d:7e:46: 33:f2:a9:e2:06:c3:92:aa:a2:e1:71:c0:8b:1f:07:ac:0d:a5: 4a:d7:33:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFywc7YuknfvE02I8HIMAiTDs9MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA1MjkxODI4MDRaFw0yNjA1MzAyMTI4MDRaMDMxMTAvBgNV BAMTKDg1NkY0N0QxMUFGODM2ODIxQkU0QzdBNUQ0QjQ2RUYwOUIwN0FGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueAvNZzJGr6zFTlK9NdLgabVr 68DhIiIsgo+sdPQlgXlFFCOFrY4RktOZzDTSOIi1LJXv2G3L9WduJ+Np6T1FuUkj /eofzg9p9PzDCfQ/B/Mq4v24q3/1bXTcCq1Ij/rZF6jPuQIRvLEzSlNDXB7r0qCT NU6HJE+XQI6d8Q6TrnEMTX5/Hqx17TRp8LB2V2QO51T08oPEmlAmRqybwP+qvZvr V5PKWBXg1SkYSCLcDoQKMrrW7wZcUVgN9i9hLATweF8xs4oUgt3yHfatY03ZV55w 85tp1Lfjn8s/wmZJSyBpZWHIZACcUGqSnWg3uGP0ER0CEFjjJ+DyljEkZ+yZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhW9H0Rr4NoIb5Mel1LRu8JsHr2AwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHrl2ZZ6h/oA O9G+aYDEst5AnpjD69BZcW5Twu3xbHn+MbaUyptbiJlON4Hir+sHrgtDu5GGBgkS b3KCL3xwQAcbynXqqLrhKjDYrVzHC98f8p2OsEjfi7zWUkjifpWT52aJLHmsgVLt Tmvxtt1VFN5ocCPsj12Nx0BlGisVD9ej2SOW+arLRUvwl/lwSdbnCyPDCuBEVVEB CN8qpSZ9swD0sFMaI7TmD/1tCHjBFYMOJ+owL9VRfsLidvNASBGk8GN6Sj5sH/IS lPfzrO8MLY7okNHNzlnUQ6eWsKVVv0n416yttWDonX5GM/Kp4gbDkqqi4XHAix8H rA2lStczmA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:24 2026 by rpki-client