$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: Gn5lqpkemJ9nqIcgFVvj1u4r7Me3lmOXH2mRIG0fwOE= Subject key identifier: 15:1E:84:21:71:CB:80:EE:1C:9F:97:9E:75:1B:17:CF:56:8F:3B:16 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 13F1931193690AF39BEA2C5B50D4B9FA93C794D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: 3F Signing time: Fri 29 May 2026 12:52:50 +0000 Manifest this update: Fri 29 May 2026 12:47:50 +0000 Manifest next update: Sat 30 May 2026 13:24:50 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: uZe8wwixfgHaWuXF29UbiPkB1PkfBp1R/XUvOIU6HeE=) 2: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f1:93:11:93:69:0a:f3:9b:ea:2c:5b:50:d4:b9:fa:93:c7:94:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: May 29 12:47:50 2026 GMT Not After : May 30 13:24:50 2026 GMT Subject: CN=151E842171CB80EE1C9F979E751B17CF568F3B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:f0:02:1c:e7:3f:77:8d:28:ad:52:93:71: f8:38:fc:8d:d1:05:a5:02:20:1f:d1:e1:1a:c0:48: ba:b0:1e:16:87:c6:54:b0:54:aa:88:db:04:e9:86: 94:a7:61:2b:2a:8c:9f:9d:16:75:fe:73:0d:28:18: f2:81:54:5c:16:51:c4:d9:d7:8c:74:c1:1d:1f:8c: 60:be:11:d3:6c:c1:95:55:c4:96:2f:b9:a3:19:b8: fa:6c:a1:e3:3f:b5:4a:59:59:ba:18:3c:e1:34:db: f9:31:a9:a6:f8:a2:03:27:80:f8:f4:ab:c9:a8:1b: f7:ab:6c:7c:0b:e4:41:20:2d:7d:53:43:91:2b:d7: 4d:4a:64:38:81:7d:22:6d:e4:20:87:0d:f5:62:c1: 31:84:20:50:78:63:a7:30:42:92:3f:d6:17:cf:ac: d7:ac:25:73:c5:41:9c:c7:a0:53:81:9c:58:ee:f7: 02:97:9d:bf:14:5f:64:50:9e:5c:19:09:f8:34:6c: fd:93:a8:45:cc:cc:22:56:5f:8b:8b:87:36:85:e8: 69:91:6a:64:1b:e0:fa:25:00:a4:81:9f:ba:5b:f5: 5e:2e:20:b2:8e:01:be:d1:09:c5:82:ed:4c:3e:1c: 6a:3e:2a:47:47:81:bc:e4:d4:fc:65:27:b8:c1:2a: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1E:84:21:71:CB:80:EE:1C:9F:97:9E:75:1B:17:CF:56:8F:3B:16 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8d:b8:1c:fe:32:70:6d:fe:3c:4e:fe:4d:67:62:86:a7:96: cc:fd:eb:81:63:dc:d2:ed:85:87:4e:94:92:80:fe:db:22:f4: f2:ad:ce:2a:dc:ad:27:c4:ec:ad:76:f8:7e:1e:be:15:06:45: 78:5f:c2:b8:7f:b7:b4:fa:fd:61:a5:87:36:08:d4:55:7d:53: 51:9d:03:3d:ea:73:16:84:3c:eb:d0:af:8f:85:0e:59:92:df: 51:c9:be:31:76:99:31:42:22:30:50:34:46:a9:2a:c4:fb:05: e6:28:b7:65:95:47:e4:41:3a:ce:34:f6:2f:f6:1f:e5:b0:10: 82:f1:33:d6:03:dc:ee:5d:5e:7c:ec:d9:7a:80:d0:01:b9:8c: da:c5:7e:8f:97:e0:f2:87:37:14:23:1d:89:76:b1:75:31:48: ae:54:2d:0a:7f:38:b4:05:67:7d:10:83:b3:c5:12:79:e0:3f: 73:b5:f9:dd:90:8b:bc:f9:49:0a:61:a4:98:82:12:d3:b2:0a: 9d:b1:e9:a9:1f:cd:72:3a:c4:e1:c6:e3:3c:46:95:8e:6b:5c: f7:35:25:1b:b7:ea:32:24:4d:1b:8d:c2:2d:83:73:fa:31:62: 02:32:80:ea:9f:c6:1a:6b:68:40:a6:f6:7e:57:95:2a:72:75: be:cd:b6:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE/GTEZNpCvOb6ixbUNS5+pPHlNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA1MjkxMjQ3NTBaFw0yNjA1MzAxMzI0NTBaMDMxMTAvBgNV BAMTKDE1MUU4NDIxNzFDQjgwRUUxQzlGOTc5RTc1MUIxN0NGNTY4RjNCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoN/ACHOc/d40orVKTcfg4/I3R BaUCIB/R4RrASLqwHhaHxlSwVKqI2wTphpSnYSsqjJ+dFnX+cw0oGPKBVFwWUcTZ 14x0wR0fjGC+EdNswZVVxJYvuaMZuPpsoeM/tUpZWboYPOE02/kxqab4ogMngPj0 q8moG/erbHwL5EEgLX1TQ5Er101KZDiBfSJt5CCHDfViwTGEIFB4Y6cwQpI/1hfP rNesJXPFQZzHoFOBnFju9wKXnb8UX2RQnlwZCfg0bP2TqEXMzCJWX4uLhzaF6GmR amQb4PolAKSBn7pb9V4uILKOAb7RCcWC7Uw+HGo+KkdHgbzk1PxlJ7jBKtw1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFR6EIXHLgO4cn5eedRsXz1aPOxYwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD424HP4ycG3+ PE7+TWdihqeWzP3rgWPc0u2Fh06UkoD+2yL08q3OKtytJ8TsrXb4fh6+FQZFeF/C uH+3tPr9YaWHNgjUVX1TUZ0DPepzFoQ869Cvj4UOWZLfUcm+MXaZMUIiMFA0Rqkq xPsF5ii3ZZVH5EE6zjT2L/Yf5bAQgvEz1gPc7l1efOzZeoDQAbmM2sV+j5fg8oc3 FCMdiXaxdTFIrlQtCn84tAVnfRCDs8USeeA/c7X53ZCLvPlJCmGkmIIS07IKnbHp qR/NcjrE4cbjPEaVjmtc9zUlG7fqMiRNG43CLYNz+jFiAjKA6p/GGmtoQKb2fleV KnJ1vs22oQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:58 2026 by rpki-client