$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: TMoHKL8FsZFwDWrhTr3+agsXB3OyuzclRb0fAyWCRy8= Subject key identifier: EA:4F:87:02:60:0C:EB:3E:38:F2:E9:2D:51:28:7C:FF:A2:15:30:A4 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 65A0D1A97B2B11FC0EFA24A25E2B1AF1C200A4AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 44 Signing time: Fri 29 May 2026 20:23:18 +0000 Manifest this update: Fri 29 May 2026 20:18:18 +0000 Manifest next update: Sat 30 May 2026 20:25:18 +0000 Files and hashes: 1: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) 2: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: IomyBJCO7rQ9plH7Ur777VE5ylo+9uO4tyMydjq2H9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a0:d1:a9:7b:2b:11:fc:0e:fa:24:a2:5e:2b:1a:f1:c2:00:a4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: May 29 20:18:18 2026 GMT Not After : May 30 20:25:18 2026 GMT Subject: CN=EA4F8702600CEB3E38F2E92D51287CFFA21530A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b6:dd:44:19:16:75:1d:e6:f3:59:aa:22:1c: 84:37:e8:e5:dc:36:bf:e0:95:1c:ce:fc:56:92:7d: 79:42:f2:e4:09:4b:80:fb:8c:17:b9:40:50:4f:84: 64:91:88:25:fc:a6:38:5b:6a:a1:5e:fe:0d:05:d6: 0c:6d:01:09:af:b0:7f:e5:56:eb:fc:1c:aa:da:7e: ff:46:30:67:53:ac:6c:f5:2e:43:01:ba:5c:29:80: 1b:6a:9b:be:7b:fa:f3:8d:7d:65:61:97:d2:f2:14: be:35:de:f9:e0:4f:76:e3:63:ae:66:1b:93:a6:63: 86:9a:d1:21:23:69:20:4f:2b:63:2c:e9:8f:c3:b0: 59:81:20:1a:33:a0:64:4c:32:15:c5:1d:7c:2d:3e: 97:77:7e:18:14:07:c6:3f:82:89:1d:f4:21:5b:6d: 9a:50:8d:f9:d2:9a:a2:7e:22:66:59:9f:13:cd:26: b2:39:9a:55:78:c1:fd:54:25:3a:61:b9:47:bf:2c: af:83:58:59:58:25:e4:9f:6c:84:69:41:87:ad:0a: 4c:b5:86:76:d7:9a:ac:52:a4:d4:11:68:4b:71:d9: 8d:ac:6c:a8:f7:78:48:53:5d:67:f1:1f:43:4a:8f: d3:a9:74:6e:fe:f0:1f:d3:4b:fd:b3:8f:42:32:b8: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:87:02:60:0C:EB:3E:38:F2:E9:2D:51:28:7C:FF:A2:15:30:A4 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:46:55:26:07:1e:7f:73:af:e8:74:39:87:67:31:da:65:52: c8:2e:6c:44:e6:c8:75:2c:6e:d7:a1:e2:5d:54:64:09:7e:91: 17:ee:f1:cc:7b:84:b2:22:0e:eb:0b:fa:6b:b7:ac:b8:4f:7f: 65:94:93:b3:4d:71:91:20:36:6a:ad:af:aa:b1:84:5e:31:3f: 10:e3:08:3f:17:b9:7b:3b:58:e3:e9:e8:40:cb:d1:d6:6d:e2: 46:43:dd:c0:4d:d8:b7:16:78:9a:fc:b6:2e:e5:07:53:2d:80: 7d:0b:79:59:6e:29:e4:44:cd:43:86:69:e5:a7:f7:df:b4:54: b0:33:bd:c9:2d:e7:ed:7e:cd:5a:fb:a7:db:71:32:52:4e:35: c5:82:0b:9b:e7:fa:8f:ee:c1:0c:44:d7:ba:8b:35:69:f8:e8: 90:14:27:2f:4b:af:87:eb:ab:5b:9e:2c:a1:6b:f8:b1:d2:d7: 03:30:69:07:59:a4:0a:ab:c0:94:17:65:0a:87:af:88:d4:97: 2b:42:2e:71:5a:08:9d:d6:ad:33:06:e3:18:cb:b0:bb:e6:0a: cf:87:a3:97:b8:30:ce:ac:f4:47:f3:40:63:90:00:c9:07:9d: 8c:e3:06:dd:da:16:3d:d8:0a:41:e7:c1:9c:6e:40:91:64:ae: 4a:69:3f:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZaDRqXsrEfwO+iSiXisa8cIApKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA1MjkyMDE4MThaFw0yNjA1MzAyMDI1MThaMDMxMTAvBgNV BAMTKEVBNEY4NzAyNjAwQ0VCM0UzOEYyRTkyRDUxMjg3Q0ZGQTIxNTMwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxtt1EGRZ1HebzWaoiHIQ36OXc Nr/glRzO/FaSfXlC8uQJS4D7jBe5QFBPhGSRiCX8pjhbaqFe/g0F1gxtAQmvsH/l Vuv8HKrafv9GMGdTrGz1LkMBulwpgBtqm757+vONfWVhl9LyFL413vngT3bjY65m G5OmY4aa0SEjaSBPK2Ms6Y/DsFmBIBozoGRMMhXFHXwtPpd3fhgUB8Y/gokd9CFb bZpQjfnSmqJ+ImZZnxPNJrI5mlV4wf1UJTphuUe/LK+DWFlYJeSfbIRpQYetCky1 hnbXmqxSpNQRaEtx2Y2sbKj3eEhTXWfxH0NKj9OpdG7+8B/TS/2zj0IyuCghAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6k+HAmAM6z448uktUSh8/6IVMKQwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkZVJgcef3Ov 6HQ5h2cx2mVSyC5sRObIdSxu16HiXVRkCX6RF+7xzHuEsiIO6wv6a7esuE9/ZZST s01xkSA2aq2vqrGEXjE/EOMIPxe5eztY4+noQMvR1m3iRkPdwE3YtxZ4mvy2LuUH Uy2AfQt5WW4p5ETNQ4Zp5af337RUsDO9yS3n7X7NWvun23EyUk41xYILm+f6j+7B DETXuos1afjokBQnL0uvh+urW54soWv4sdLXAzBpB1mkCqvAlBdlCoeviNSXK0Iu cVoIndatMwbjGMuwu+YKz4ejl7gwzqz0R/NAY5AAyQedjOMG3doWPdgKQefBnG5A kWSuSmk/zA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client