$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json) Hash identifier: YMBRI+L11a65Ii4TNFv2/UI6ssqP0ZSmdZ3s35Nty0U= Subject key identifier: B5:09:9D:3D:A4:64:4F:95:BE:5B:61:51:D1:22:F3:30:39:55:C8:4D Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Certificate serial: 4A07D2EF8BE54E4E98E5AD7F88B4E98B50F3B459 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft Manifest number: 43 Signing time: Fri 29 May 2026 19:28:16 +0000 Manifest this update: Fri 29 May 2026 19:23:16 +0000 Manifest next update: Sat 30 May 2026 23:16:16 +0000 Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: iftk0EUjVq5zh1dxq6r3w1dKcEUpxKtmm3j6YP7P+qs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:07:d2:ef:8b:e5:4e:4e:98:e5:ad:7f:88:b4:e9:8b:50:f3:b4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Validity Not Before: May 29 19:23:16 2026 GMT Not After : May 30 23:16:16 2026 GMT Subject: CN=B5099D3DA4644F95BE5B6151D122F3303955C84D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:ea:82:72:49:96:71:f4:ea:10:9a:d2:e8: db:31:f2:81:d7:18:f8:b1:1a:8c:7d:db:29:e6:c5: 27:42:e3:0e:a8:4d:5f:d2:57:8c:42:0b:c5:1d:2c: ca:60:90:c7:ff:c0:cb:bc:6f:62:99:50:4d:4b:61: 78:e0:66:21:b3:16:88:0d:63:d4:4d:20:c4:38:de: f5:98:57:0b:7d:5d:7e:65:c2:2f:a2:a8:49:96:ed: 74:a7:53:6a:b3:a6:86:e3:78:3e:a8:75:16:8d:72: 39:b1:12:65:bf:62:2b:70:60:d8:7c:37:4c:b4:33: 61:77:1b:0e:8a:ba:79:6a:71:1c:51:f1:8a:40:9f: 12:62:d8:c2:48:e0:63:a3:ee:03:a2:bb:28:cd:1d: 8c:d0:68:65:62:d8:5c:22:d0:4a:ac:46:80:07:49: c9:e8:60:50:5e:e7:62:72:63:ed:ed:67:30:b7:81: 87:2d:76:e7:dc:53:ee:ae:39:de:a9:f6:86:20:e4: 23:17:ad:55:c3:08:e0:98:55:28:f0:fb:37:a7:a2: fb:a3:91:30:fe:76:ad:ea:ea:db:38:14:4f:49:40: 9c:d9:cc:88:a8:e6:a1:00:f4:cf:c3:ea:46:77:b0: 7a:9d:00:e3:52:94:52:07:1c:14:96:af:f5:70:88: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:9D:3D:A4:64:4F:95:BE:5B:61:51:D1:22:F3:30:39:55:C8:4D X509v3 Authority Key Identifier: keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e2:df:32:d5:bb:83:cf:09:0c:04:ea:1b:6a:27:cc:63:ea: f6:de:49:19:f3:53:22:41:46:5a:75:b5:4c:d9:a5:59:c0:a7: f9:ca:0c:c1:64:27:f1:3c:a1:33:1d:1b:68:08:76:02:e1:67: 8f:ad:28:d9:53:b6:1a:13:4e:f9:7d:b8:99:6b:bd:63:c8:19: f2:64:fe:c0:03:03:8b:32:a2:18:6c:13:84:ae:b3:8b:c5:b0: 98:34:2f:b5:e8:53:4c:e3:01:30:45:79:66:89:5c:0c:2b:e0: 0c:41:62:03:ac:de:8b:e7:a1:7a:38:8d:a0:cd:6e:63:a9:22: e5:36:3c:6f:c2:01:d1:0e:eb:1c:ca:28:64:97:2d:16:e5:03: d2:da:3a:4b:1c:63:1d:de:e8:35:1f:a2:c5:c6:2f:39:43:0c: f1:c3:2d:9a:63:b4:f5:99:e6:81:cb:41:64:77:90:91:9f:11: fc:84:96:4b:ca:dc:71:4d:20:82:3e:74:cc:1f:3e:0f:e5:3d: ef:9a:3d:36:36:7f:ce:4d:05:c7:df:79:ea:ce:62:26:89:27: d3:d1:b5:6c:07:bb:8d:80:e3:a5:16:67:2a:98:c1:e5:01:6a: a6:29:56:c4:f0:13:7a:1c:b7:69:cd:f3:c8:3a:19:8e:68:89: 15:68:08:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSgfS74vlTk6Y5a1/iLTpi1DztFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4 MDI1QTVCMzAeFw0yNjA1MjkxOTIzMTZaFw0yNjA1MzAyMzE2MTZaMDMxMTAvBgNV BAMTKEI1MDk5RDNEQTQ2NDRGOTVCRTVCNjE1MUQxMjJGMzMwMzk1NUM4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMeqCckmWcfTqEJrS6Nsx8oHX GPixGox92ynmxSdC4w6oTV/SV4xCC8UdLMpgkMf/wMu8b2KZUE1LYXjgZiGzFogN Y9RNIMQ43vWYVwt9XX5lwi+iqEmW7XSnU2qzpobjeD6odRaNcjmxEmW/YitwYNh8 N0y0M2F3Gw6KunlqcRxR8YpAnxJi2MJI4GOj7gOiuyjNHYzQaGVi2Fwi0EqsRoAH ScnoYFBe52JyY+3tZzC3gYctdufcU+6uOd6p9oYg5CMXrVXDCOCYVSjw+zenovuj kTD+dq3q6ts4FE9JQJzZzIio5qEA9M/D6kZ3sHqdAONSlFIHHBSWr/VwiNjjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtQmdPaRkT5W+W2FR0SLzMDlVyE0wHwYDVR0j BBgwFoAUwHToD/25uIa0KDjqiAMtxoAlpbMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTcwOTE4Ny8wL0MwNzRFODBGRkRCOUI4ODZCNDI4MzhFQTg4MDMy REM2ODAyNUE1QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4MDI1QTVCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU3MDkxODcvMC9DMDc0RTgwRkZEQjlC ODg2QjQyODM4RUE4ODAzMkRDNjgwMjVBNUIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOLfMtW7g88J DATqG2onzGPq9t5JGfNTIkFGWnW1TNmlWcCn+coMwWQn8TyhMx0baAh2AuFnj60o 2VO2GhNO+X24mWu9Y8gZ8mT+wAMDizKiGGwThK6zi8WwmDQvtehTTOMBMEV5Zolc DCvgDEFiA6zei+ehejiNoM1uY6ki5TY8b8IB0Q7rHMooZJctFuUD0to6SxxjHd7o NR+ixcYvOUMM8cMtmmO09ZnmgctBZHeQkZ8R/ISWS8rccU0ggj50zB8+D+U975o9 NjZ/zk0Fx9956s5iJokn09G1bAe7jYDjpRZnKpjB5QFqpilWxPATehy3ac3zyDoZ jmiJFWgICg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:08 2026 by rpki-client