$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: 9qGEx3T+IQ0gxMjQWFneOX33PvcyOmFMhxPIZcNCeAY= Subject key identifier: B9:DE:BE:91:40:59:56:8C:D1:B1:C4:55:65:F1:E9:C5:DE:CA:88:EA Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 494E2F88923EC2E997EE32C4579B4EFC953894B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: 43 Signing time: Fri 29 May 2026 07:17:42 +0000 Manifest this update: Fri 29 May 2026 07:12:42 +0000 Manifest next update: Sat 30 May 2026 10:03:42 +0000 Files and hashes: 1: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: 0Tx+aJ1JNtXfcL1N3FrKN9aPxSZz3+9IftzrAziH5O0=) 2: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 3: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4e:2f:88:92:3e:c2:e9:97:ee:32:c4:57:9b:4e:fc:95:38:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: May 29 07:12:42 2026 GMT Not After : May 30 10:03:42 2026 GMT Subject: CN=B9DEBE914059568CD1B1C45565F1E9C5DECA88EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:0b:8a:a6:13:3d:b5:a9:8f:c2:99:b5:7c: 61:17:7d:6a:95:25:6b:41:e9:f0:5e:26:18:b4:b2: 35:e6:bc:e3:09:49:d9:19:da:15:23:cb:b7:1b:21: 4f:b7:af:96:db:e5:d5:37:78:c6:12:5d:40:59:e5: fe:88:76:cb:cd:3a:c5:92:0d:28:da:58:f4:3d:88: 6b:24:68:80:53:1c:f8:83:05:4d:7e:da:9b:9b:1e: a7:3e:5b:0c:e3:dc:fd:e4:55:9c:cb:92:72:74:b1: 97:7e:00:ee:7a:56:f7:7f:6f:ec:af:f7:90:eb:c9: 7c:af:7c:95:d6:28:98:c1:2d:13:d9:1d:03:6f:cf: f2:3c:e5:c8:d4:6f:6d:1b:a7:b8:01:b1:56:1c:25: 31:ad:e7:fb:b9:72:71:64:4d:34:3f:ae:d6:dc:0f: 94:ae:69:14:ff:b4:78:8b:5e:4f:1d:56:88:d7:e1: 90:92:93:b7:34:ed:64:76:c0:67:dc:20:f9:87:fa: d8:a4:85:f3:b6:0a:fa:e7:15:44:7c:8c:ec:12:a9: 0d:f7:e0:24:d0:9c:79:59:46:36:6b:d5:d4:1c:9e: e8:ba:2b:d8:8f:70:ce:d8:70:45:ba:f8:6f:0a:2c: 11:76:51:8a:a2:4f:c2:3e:52:a5:15:f7:1e:55:0b: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DE:BE:91:40:59:56:8C:D1:B1:C4:55:65:F1:E9:C5:DE:CA:88:EA X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8c:f7:a9:1f:29:17:58:60:f2:64:0c:4e:71:ac:69:18:b4: 8b:e3:85:95:ba:31:ca:9d:d1:04:8e:46:cf:92:a2:5e:0b:6e: f6:c5:01:c9:ee:bf:e2:b3:e1:6e:82:ec:b5:77:0d:99:6c:8c: 4d:46:3d:c2:9a:bd:3e:4a:30:f4:35:6a:a8:2a:5e:75:6b:5a: 07:90:c4:1b:dd:23:77:35:72:9a:88:b3:34:b2:60:38:76:fe: dc:2c:53:42:aa:e8:cb:b5:f3:07:11:ce:a1:ed:61:f2:5e:bf: 91:c2:43:56:6d:ed:f3:45:69:61:ac:3d:4d:d4:cb:31:d1:53: 34:d6:3a:f7:c4:d1:d3:2c:65:28:be:ff:ee:bf:7b:4c:ed:3c: b8:32:53:30:02:e6:1b:41:c8:fe:f9:b3:9b:6e:6a:e6:6f:0c: 11:6b:8e:62:3e:32:b6:b4:f8:fb:9f:f7:89:ce:46:a9:b1:e6: bb:b4:ad:a3:62:21:1b:1b:8a:f4:a9:34:af:61:22:3b:46:50: fe:54:13:ac:19:5d:7d:bf:91:28:36:08:74:b1:aa:03:fd:14: b7:46:13:9a:ad:45:74:c6:c8:d8:1f:74:53:63:51:b0:31:64: 4b:1c:f0:73:50:fd:5f:52:54:ad:d6:3d:cf:1b:5b:1c:e5:45: ec:37:bd:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSU4viJI+wumX7jLEV5tO/JU4lLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjA1MjkwNzEyNDJaFw0yNjA1MzAxMDAzNDJaMDMxMTAvBgNV BAMTKEI5REVCRTkxNDA1OTU2OENEMUIxQzQ1NTY1RjFFOUM1REVDQTg4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdwuKphM9tamPwpm1fGEXfWqV JWtB6fBeJhi0sjXmvOMJSdkZ2hUjy7cbIU+3r5bb5dU3eMYSXUBZ5f6IdsvNOsWS DSjaWPQ9iGskaIBTHPiDBU1+2pubHqc+Wwzj3P3kVZzLknJ0sZd+AO56Vvd/b+yv 95DryXyvfJXWKJjBLRPZHQNvz/I85cjUb20bp7gBsVYcJTGt5/u5cnFkTTQ/rtbc D5SuaRT/tHiLXk8dVojX4ZCSk7c07WR2wGfcIPmH+tikhfO2CvrnFUR8jOwSqQ33 4CTQnHlZRjZr1dQcnui6K9iPcM7YcEW6+G8KLBF2UYqiT8I+UqUV9x5VC3utAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUud6+kUBZVozRscRVZfHpxd7KiOowHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIz3qR8pF1hg 8mQMTnGsaRi0i+OFlboxyp3RBI5Gz5KiXgtu9sUBye6/4rPhboLstXcNmWyMTUY9 wpq9Pkow9DVqqCpedWtaB5DEG90jdzVymoizNLJgOHb+3CxTQqroy7XzBxHOoe1h 8l6/kcJDVm3t80VpYaw9TdTLMdFTNNY698TR0yxlKL7/7r97TO08uDJTMALmG0HI /vmzm25q5m8MEWuOYj4ytrT4+5/3ic5GqbHmu7Sto2IhGxuK9Kk0r2EiO0ZQ/lQT rBldfb+RKDYIdLGqA/0Ut0YTmq1FdMbI2B90U2NRsDFkSxzwc1D9X1JUrdY9zxtb HOVF7De9Vg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:30 2026 by rpki-client