$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft File: 5253565A27C06C800009631402F5A6EE85C46456.mft (raw, json) Hash identifier: 1EOpySZ3F+fdjR3g2PqYLG2FhqdYwp3hDmz+DhJGaUw= Subject key identifier: 2C:85:02:BD:2E:2F:06:99:F9:26:20:44:D1:69:41:8F:EF:B2:09:BA Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456 Certificate serial: 7FEB523608CF2269E63A0CC8FEA910D5B732963D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft Manifest number: 42 Signing time: Fri 29 May 2026 04:52:37 +0000 Manifest this update: Fri 29 May 2026 04:47:37 +0000 Manifest next update: Sat 30 May 2026 06:20:37 +0000 Files and hashes: 1: 36312e32382e34392e302f32342d3234203d3e203137343930.roa (hash: 1qAL1pYEAu0DoDcmCnnrMvVFEKrQOKExgEB4+TQvGO4=) 2: 36312e32382e3130382e302f32342d3234203d3e203137343930.roa (hash: fncXqOd2R+5Fk1BqsrlCFUki0Yj3TQ3y2SYjcEIQInU=) 3: 36312e32382e32302e302f32342d3234203d3e203137343930.roa (hash: gcRJWMv4hzquoRvAdEge38qqL47KkxPgYFvdxOJg3H0=) 4: 36312e32382e3131322e302f32302d3230203d3e203137363232.roa (hash: X4nDtq1yPQl3eS5Rz6w0DvCrEIe8LHuYUCYvWu2V2ZQ=) 5: 36312e32382e32322e302f32342d3234203d3e203137343930.roa (hash: c8dY+eezDL5du11b5N5DH68Kfu9k1THfO3vCNk1QYJU=) 6: 5253565A27C06C800009631402F5A6EE85C46456.crl (hash: Al/lyDQn0PlBhmHdu2ERoNuu4HFEthv9VUTMg4e8KNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:eb:52:36:08:cf:22:69:e6:3a:0c:c8:fe:a9:10:d5:b7:32:96:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456 Validity Not Before: May 29 04:47:37 2026 GMT Not After : May 30 06:20:37 2026 GMT Subject: CN=2C8502BD2E2F0699F9262044D169418FEFB209BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:fe:37:1d:ec:06:a6:ce:14:4b:ea:c3:67: 6b:c2:eb:76:f8:5f:95:fa:96:44:b5:7b:10:f5:c0: eb:b0:88:02:4f:9c:0c:c5:3d:26:53:5f:5d:e0:cc: 6a:23:02:e4:77:58:8b:f9:2e:0a:e9:00:07:56:b6: 74:8d:c1:36:b5:b7:42:e8:5e:42:0f:fa:21:c1:6d: 49:c7:43:7d:80:38:f6:41:ee:72:ec:e0:e1:bd:f6: 67:54:09:cd:d6:83:55:c0:3b:79:7d:8b:65:6e:a0: ca:f4:7d:1b:67:ef:a8:1d:b1:65:be:19:d2:94:5d: 67:2e:54:6b:6e:b5:dd:fa:ee:c2:6e:38:4f:ef:9c: ab:e6:f7:5f:2f:d4:1a:45:c0:a3:f7:df:6c:7a:77: f0:b0:fc:92:6b:ff:be:40:81:0a:0b:9c:16:ba:47: b9:7e:ad:33:26:ae:81:2d:c6:38:96:36:c5:cd:1f: 2a:c3:c7:47:64:3f:c7:f9:67:c4:22:f6:b5:d3:a6: 62:d1:8e:5b:04:06:ec:99:8e:73:ff:92:b6:7d:13: df:08:eb:20:e4:2e:0f:62:f3:d6:b1:00:c9:ea:43: 30:88:b5:6e:2c:9e:ed:d1:65:c3:ed:31:fe:92:ff: 70:75:9b:d1:51:71:18:f8:a5:68:05:a7:40:d5:39: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:85:02:BD:2E:2F:06:99:F9:26:20:44:D1:69:41:8F:EF:B2:09:BA X509v3 Authority Key Identifier: keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:21:b6:67:42:d0:0c:8d:26:34:65:54:30:0d:05:9b:c6: d7:c4:2a:d3:c0:ee:06:d0:ae:d9:e7:83:13:05:31:90:94:ad: cf:a3:1a:49:d5:2c:bf:00:72:4a:cc:62:73:b1:55:3f:da:ff: 4f:16:98:df:a4:72:7c:4c:b2:2f:3d:0e:b6:a2:49:47:94:71: 38:3e:46:8c:7f:c2:03:3b:47:c6:1e:db:0f:49:ca:94:51:45: f9:dc:08:31:29:46:a0:74:0c:b4:66:cc:04:15:9e:af:3a:bc: b8:be:6d:b9:d6:8e:ec:55:50:dc:af:8c:29:25:de:cd:c5:5c: 3f:24:10:39:28:69:ab:40:83:eb:9d:ac:4c:5b:47:ec:dc:ae: a1:ca:96:72:7c:38:80:79:9d:76:80:ec:01:dd:ea:03:ea:b0: d6:bb:87:8e:fe:49:2f:49:b8:15:af:c1:66:72:53:d6:01:04: be:b6:2b:df:cb:f7:ce:2d:21:28:a1:a4:e9:2b:99:c0:60:c5: bf:e0:72:29:07:3f:23:3f:77:10:90:c8:61:e4:66:27:b0:3f: 59:aa:84:83:8c:a1:cf:71:6b:15:e2:cd:12:b3:f0:92:3b:8a: 5d:d8:c5:ac:d4:1f:b5:6b:22:c3:90:39:b2:af:bc:75:0e:f2: 39:f2:38:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf+tSNgjPImnmOgzI/qkQ1bcylj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4 NUM0NjQ1NjAeFw0yNjA1MjkwNDQ3MzdaFw0yNjA1MzAwNjIwMzdaMDMxMTAvBgNV BAMTKDJDODUwMkJEMkUyRjA2OTlGOTI2MjA0NEQxNjk0MThGRUZCMjA5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3f43HewGps4US+rDZ2vC63b4 X5X6lkS1exD1wOuwiAJPnAzFPSZTX13gzGojAuR3WIv5LgrpAAdWtnSNwTa1t0Lo XkIP+iHBbUnHQ32AOPZB7nLs4OG99mdUCc3Wg1XAO3l9i2VuoMr0fRtn76gdsWW+ GdKUXWcuVGtutd367sJuOE/vnKvm918v1BpFwKP332x6d/Cw/JJr/75AgQoLnBa6 R7l+rTMmroEtxjiWNsXNHyrDx0dkP8f5Z8Qi9rXTpmLRjlsEBuyZjnP/krZ9E98I 6yDkLg9i89axAMnqQzCItW4snu3RZcPtMf6S/3B1m9FRcRj4pWgFp0DVOeo/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULIUCvS4vBpn5JiBE0WlBj++yCbowHwYDVR0j BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU2NDM2NTEvMC81MjUzNTY1QTI3QzA2 QzgwMDAwOTYzMTQwMkY1QTZFRTg1QzQ2NDU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTIhtmdC0AyN JjRlVDANBZvG18Qq08DuBtCu2eeDEwUxkJStz6MaSdUsvwBySsxic7FVP9r/TxaY 36RyfEyyLz0OtqJJR5RxOD5GjH/CAztHxh7bD0nKlFFF+dwIMSlGoHQMtGbMBBWe rzq8uL5tudaO7FVQ3K+MKSXezcVcPyQQOShpq0CD652sTFtH7NyuocqWcnw4gHmd doDsAd3qA+qw1ruHjv5JL0m4Fa/BZnJT1gEEvrYr38v3zi0hKKGk6SuZwGDFv+By KQc/Iz93EJDIYeRmJ7A/WaqEg4yhz3FrFeLNErPwkjuKXdjFrNQftWsiw5A5sq+8 dQ7yOfI4Nw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client