$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: eWQRY77rEwCPPUaIqbR4G2Rb0Kli/FXJ/00R0w938As= Subject key identifier: 1B:62:7F:D8:65:6B:83:BF:B2:58:A4:EB:B2:B2:2C:6E:18:FF:5B:CC Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 58F8523847125D57557028E2E85C0D1FA32D3E71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 49 Signing time: Fri 29 May 2026 02:47:28 +0000 Manifest this update: Fri 29 May 2026 02:42:28 +0000 Manifest next update: Sat 30 May 2026 05:23:28 +0000 Files and hashes: 1: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 2: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 3: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 4: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 5: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 6: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 7: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: +M+txnlml875ev3UVL3hriXWqmAmdKf3emtr0i6VS4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f8:52:38:47:12:5d:57:55:70:28:e2:e8:5c:0d:1f:a3:2d:3e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: May 29 02:42:28 2026 GMT Not After : May 30 05:23:28 2026 GMT Subject: CN=1B627FD8656B83BFB258A4EBB2B22C6E18FF5BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:10:32:80:d2:1e:d9:96:c8:f9:16:f1:73: a0:9f:d0:c7:de:e7:91:aa:b7:22:4e:c7:ee:15:23: 6a:35:8a:27:92:8b:8b:f7:37:fb:fe:c5:2e:57:ea: 67:d8:a1:53:9f:2d:b5:a7:c6:59:c8:07:2b:98:4f: 6a:36:3e:ab:d7:ab:ba:8d:79:2f:5a:01:91:f8:73: ee:bc:85:5e:2a:07:77:11:8d:21:8f:1b:e8:5a:e1: db:1b:c4:b0:75:5e:f7:81:21:d3:0e:79:f6:c5:b5: e0:c9:80:e1:86:8e:3d:c5:c5:db:a4:cc:59:86:99: 1e:ad:6a:c2:63:2c:64:3c:3f:dd:9a:81:5a:bc:2d: ca:94:d4:38:d3:01:b7:53:bb:bc:ac:1f:06:86:24: 3e:b7:55:aa:22:1a:2f:65:ce:9f:4c:a5:fd:34:a6: 8e:30:cc:35:30:ea:76:80:31:9d:dd:c9:d7:f2:52: 8a:02:21:14:73:2c:80:79:a4:d6:ee:ad:06:c5:15: d6:25:7b:31:c1:32:59:be:91:8f:b1:cf:b9:2e:64: 77:ee:4d:37:fe:84:ed:92:e4:f2:fe:db:5b:dd:87: 40:b2:ba:ed:ea:aa:9c:8a:83:84:57:8a:81:a2:9b: af:e4:9b:3f:51:49:e2:14:a7:b4:99:90:a8:5c:da: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:62:7F:D8:65:6B:83:BF:B2:58:A4:EB:B2:B2:2C:6E:18:FF:5B:CC X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bc:b8:82:2f:f1:46:69:14:ae:3b:7e:04:e0:6d:d3:57:73: a6:50:4e:70:55:be:c2:cb:25:db:bd:d6:a4:1d:90:11:9a:62: 08:12:bc:dc:c1:7d:56:ed:ec:d8:de:d9:af:9b:08:dd:1f:5b: 70:35:86:61:9f:4a:95:ab:22:1e:ad:9f:97:0e:b1:7d:16:51: 27:c9:b8:f0:bb:80:2f:78:03:67:c3:cb:fd:83:07:85:2a:84: 28:f9:d7:8b:d5:92:8e:96:e7:1d:46:8a:98:23:e0:f9:9f:17: 10:66:29:46:71:bc:44:13:7f:df:fc:73:8d:c3:c0:0d:46:6a: fd:d6:b6:75:19:ca:68:05:ac:c2:ff:5c:97:81:ed:86:77:5e: 01:c7:29:e6:e4:dc:92:e6:8e:d7:6c:55:e8:d0:cd:64:de:79: 09:5c:ea:7d:84:65:f7:09:5c:bf:d7:78:7a:68:3c:43:10:98: 0c:2b:af:8f:1b:7d:7d:0a:da:d0:52:cc:8c:72:32:a0:6c:92: 8a:6a:b2:a6:1e:c6:f3:33:2e:cd:a5:41:84:87:a2:a7:5a:e0: cf:05:38:a9:24:55:8b:09:89:3b:7b:55:51:34:b2:cc:b7:74: 7e:38:21:b8:f7:ed:dc:1c:90:ce:c8:a6:6c:bf:9a:82:57:a8: 5c:b0:40:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWPhSOEcSXVdVcCji6FwNH6MtPnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA1MjkwMjQyMjhaFw0yNjA1MzAwNTIzMjhaMDMxMTAvBgNV BAMTKDFCNjI3RkQ4NjU2QjgzQkZCMjU4QTRFQkIyQjIyQzZFMThGRjVCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dRAygNIe2ZbI+Rbxc6Cf0Mfe 55GqtyJOx+4VI2o1iieSi4v3N/v+xS5X6mfYoVOfLbWnxlnIByuYT2o2PqvXq7qN eS9aAZH4c+68hV4qB3cRjSGPG+ha4dsbxLB1XveBIdMOefbFteDJgOGGjj3Fxduk zFmGmR6tasJjLGQ8P92agVq8LcqU1DjTAbdTu7ysHwaGJD63VaoiGi9lzp9Mpf00 po4wzDUw6naAMZ3dydfyUooCIRRzLIB5pNburQbFFdYlezHBMlm+kY+xz7kuZHfu TTf+hO2S5PL+21vdh0Cyuu3qqpyKg4RXioGim6/kmz9RSeIUp7SZkKhc2nO7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG2J/2GVrg7+yWKTrsrIsbhj/W8wwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7y4gi/xRmkU rjt+BOBt01dzplBOcFW+wssl273WpB2QEZpiCBK83MF9Vu3s2N7Zr5sI3R9bcDWG YZ9KlasiHq2flw6xfRZRJ8m48LuAL3gDZ8PL/YMHhSqEKPnXi9WSjpbnHUaKmCPg +Z8XEGYpRnG8RBN/3/xzjcPADUZq/da2dRnKaAWswv9cl4HthndeAccp5uTckuaO 12xV6NDNZN55CVzqfYRl9wlcv9d4emg8QxCYDCuvjxt9fQra0FLMjHIyoGySimqy ph7G8zMuzaVBhIeip1rgzwU4qSRViwmJO3tVUTSyzLd0fjghuPft3ByQzsimbL+a gleoXLBA5w== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client