$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: pvQ9J84x0t/Iuam3dma5dXWwaM6fRosMVuFOM/OLirM= Subject key identifier: 66:19:EB:84:AC:EA:A1:10:E0:FB:84:1E:11:84:D6:FE:A5:EA:E3:81 Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 52B5FB1F039DD71E79D1267C86B2C89AB4F80FD3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: 43 Signing time: Fri 29 May 2026 04:52:37 +0000 Manifest this update: Fri 29 May 2026 04:47:37 +0000 Manifest next update: Sat 30 May 2026 08:19:37 +0000 Files and hashes: 1: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: /bobRe+WzI0xP0NUv8CEURWDYRFfP0FeuQJAss1Mr8I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b5:fb:1f:03:9d:d7:1e:79:d1:26:7c:86:b2:c8:9a:b4:f8:0f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: May 29 04:47:37 2026 GMT Not After : May 30 08:19:37 2026 GMT Subject: CN=6619EB84ACEAA110E0FB841E1184D6FEA5EAE381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:b1:5f:70:40:4b:44:63:eb:81:f7:9d:1a: 0d:d2:06:9c:20:cb:63:25:f4:6f:7e:55:c2:d9:b6: 63:35:50:7c:ed:d6:56:20:2c:99:ca:7b:3e:91:ae: c5:9e:bc:1d:d7:b7:b0:35:48:6f:a9:0d:12:b0:df: 4e:85:79:88:4d:51:ee:65:ec:63:7e:2b:84:1d:11: 26:2b:df:57:a1:b8:82:20:67:75:75:1e:e0:7d:ee: 7f:88:1f:7a:31:ab:0c:33:29:85:6f:8b:4d:99:83: 94:ec:8a:43:2c:af:6f:e2:c1:7f:df:59:9f:d0:a9: 89:d8:db:db:e8:bb:5a:31:5e:10:6a:a0:75:90:58: 12:7c:0c:3f:95:01:e0:71:32:c3:90:ef:de:7a:48: 87:ad:fa:0c:1b:d6:2d:35:73:c4:b0:28:32:71:f6: ac:d6:96:b2:89:0d:24:17:53:f1:9e:8b:2f:9f:b6: 81:0b:7d:e1:68:d5:ce:43:9b:d1:38:e7:c4:0e:6f: cd:84:2e:ed:1d:fd:44:71:64:76:3a:0e:7b:a9:33: 6a:61:e2:b2:57:53:43:4f:9c:9c:7f:aa:58:17:08: bd:ba:e6:84:4c:6b:33:fd:b7:da:62:e6:42:99:d1: 0c:e9:20:76:07:02:50:08:3f:15:3b:e3:07:9b:e9: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:EB:84:AC:EA:A1:10:E0:FB:84:1E:11:84:D6:FE:A5:EA:E3:81 X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:10:a0:c4:23:44:b7:9f:b8:82:c6:60:a3:9a:3b:a8:cf:f3: 6f:af:78:1e:de:c7:7b:f7:28:c1:2c:5f:ef:00:0b:24:a7:65: 1f:27:69:36:79:19:23:13:ca:a7:e5:91:1a:bb:c6:bb:e6:b3: d2:24:e3:a0:c1:63:20:63:b6:24:03:85:c9:8b:ca:e2:0f:20: 6c:8d:cf:82:a2:fe:3b:90:9f:82:e7:cc:0d:74:8f:c8:3b:b8: 3d:23:10:4d:b5:c9:76:e9:ec:38:19:54:94:49:de:e2:56:f5: a4:43:2c:39:71:d0:ab:f0:5f:01:63:03:6e:ae:51:bd:80:a2: db:2d:6f:e5:e5:63:03:ed:9c:c8:e8:43:89:fc:e6:c6:99:8a: c3:c1:29:4c:e9:02:3d:c4:71:9e:d7:81:e7:2e:bf:c4:80:a3: 97:c4:a2:39:82:c2:f9:bd:0d:9c:64:38:eb:d0:b6:42:f7:83: 12:b0:ff:8c:05:f5:b7:37:1f:72:03:81:3e:70:c5:90:1f:8f: 53:2c:b4:ab:91:cb:69:b1:b8:6f:07:d4:02:c5:b2:45:1b:d5: 5f:a8:61:9d:7b:8e:74:98:e9:f4:e3:b1:ec:2b:66:b2:2b:74: 22:06:79:d6:c0:93:63:fd:dd:25:53:0a:f7:82:ec:48:6f:33: d5:db:49:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUrX7HwOd1x550SZ8hrLImrT4D9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjA1MjkwNDQ3MzdaFw0yNjA1MzAwODE5MzdaMDMxMTAvBgNV BAMTKDY2MTlFQjg0QUNFQUExMTBFMEZCODQxRTExODRENkZFQTVFQUUzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWLFfcEBLRGPrgfedGg3SBpwg y2Ml9G9+VcLZtmM1UHzt1lYgLJnKez6RrsWevB3Xt7A1SG+pDRKw306FeYhNUe5l 7GN+K4QdESYr31ehuIIgZ3V1HuB97n+IH3oxqwwzKYVvi02Zg5TsikMsr2/iwX/f WZ/QqYnY29vou1oxXhBqoHWQWBJ8DD+VAeBxMsOQ7956SIet+gwb1i01c8SwKDJx 9qzWlrKJDSQXU/Geiy+ftoELfeFo1c5Dm9E458QOb82ELu0d/URxZHY6DnupM2ph 4rJXU0NPnJx/qlgXCL265oRMazP9t9pi5kKZ0QzpIHYHAlAIPxU74web6WoXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZhnrhKzqoRDg+4QeEYTW/qXq44EwHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihCgxCNEt5+4 gsZgo5o7qM/zb694Ht7He/cowSxf7wALJKdlHydpNnkZIxPKp+WRGrvGu+az0iTj oMFjIGO2JAOFyYvK4g8gbI3PgqL+O5CfgufMDXSPyDu4PSMQTbXJdunsOBlUlEne 4lb1pEMsOXHQq/BfAWMDbq5RvYCi2y1v5eVjA+2cyOhDifzmxpmKw8EpTOkCPcRx nteB5y6/xICjl8SiOYLC+b0NnGQ469C2QveDErD/jAX1tzcfcgOBPnDFkB+PUyy0 q5HLabG4bwfUAsWyRRvVX6hhnXuOdJjp9OOx7Ctmsit0IgZ51sCTY/3dJVMK94Ls SG8z1dtJcg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:21 2026 by rpki-client