$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft File: 9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json) Hash identifier: QSHjpbYiXK9RkocORW8Clv3l72itJh7yH+usoPtI1fE= Subject key identifier: 1A:E4:5E:B7:62:71:F9:7E:BB:34:4F:83:CC:71:BE:49:36:F4:E5:C9 Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 Certificate issuer: /CN=9FEF44F113313B4929575EF55ED937D41AA80334 Certificate serial: 0B6FD83B2B7B6BF69CE00B367BAD7CF4781577B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft Manifest number: 3F Signing time: Fri 29 May 2026 16:18:01 +0000 Manifest this update: Fri 29 May 2026 16:13:01 +0000 Manifest next update: Sat 30 May 2026 17:51:01 +0000 Files and hashes: 1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: W0W21QC60+X5tbJ0mKRUg/foAvNLAu0zv4QJsKTvtv4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6f:d8:3b:2b:7b:6b:f6:9c:e0:0b:36:7b:ad:7c:f4:78:15:77:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334 Validity Not Before: May 29 16:13:01 2026 GMT Not After : May 30 17:51:01 2026 GMT Subject: CN=1AE45EB76271F97EBB344F83CC71BE4936F4E5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:5f:47:be:ab:82:5c:0d:26:1c:83:1e:68: 42:81:24:88:2a:b1:61:6c:8c:6d:1c:bc:53:5b:08: 8d:37:ff:10:57:0d:b6:70:1f:bb:22:57:42:56:a0: 53:80:f8:94:72:f0:0c:03:a7:d2:a4:22:69:6a:9b: 0f:8e:f3:a7:c7:bb:64:1c:42:68:bb:d7:48:d3:a8: 70:da:a1:01:09:f4:d4:20:22:19:3c:e7:a9:ad:96: 93:49:2d:3e:e3:4d:9e:6d:8d:21:d1:b3:2a:0b:9b: 92:98:00:c2:28:c2:ab:0f:11:90:90:c7:33:b4:72: 72:22:11:5a:b4:c8:ca:1b:f8:5d:80:0c:d6:5f:e5: 8b:43:38:32:7f:b9:50:b0:be:a2:65:29:26:fc:8e: 4a:cb:0d:52:06:65:a6:7b:5c:47:f6:71:ad:9b:24: de:42:45:0f:86:43:00:4f:ac:53:dc:56:d1:8c:d0: e2:42:ca:a6:d4:68:6f:03:94:b5:84:db:17:cc:27: 14:74:40:c4:ae:14:1e:88:59:9e:1b:fc:c1:2b:ec: 9a:9b:26:0b:7f:c2:3c:14:26:40:9b:92:9b:24:7c: 36:1f:f2:0e:0b:94:e4:76:fb:3a:34:7c:dd:93:5c: bb:a1:5c:22:81:01:1d:f1:84:5f:1c:3f:11:22:b2: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:5E:B7:62:71:F9:7E:BB:34:4F:83:CC:71:BE:49:36:F4:E5:C9 X509v3 Authority Key Identifier: keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:46:80:c0:b3:88:22:d6:49:e8:09:0e:bc:ef:92:b0:77: 2a:e8:9c:69:95:a2:e2:d8:a9:2d:09:65:c3:58:b1:17:16:0a: 9d:c3:93:70:19:fa:89:67:43:6e:5e:26:28:47:b2:1e:f6:4b: 3b:2b:ac:f6:db:b5:35:11:d8:8f:67:28:ae:ae:c8:64:67:16: c8:67:f1:4d:49:06:80:6f:1a:fe:79:0a:70:38:3c:84:34:35: e3:0b:f5:08:a2:47:8e:ec:fb:40:bf:16:3b:f2:27:43:af:fb: fd:94:57:70:6a:6b:0f:4e:1a:3e:03:a3:41:c3:0f:59:34:f7: 5b:c9:c6:4e:cd:4e:87:98:ed:2e:6d:e0:6a:a6:a1:1c:77:be: b6:d1:da:df:58:55:58:bb:52:ef:f7:72:78:8e:a5:2d:0d:0b: 83:86:3f:3a:16:81:52:4c:f3:51:f6:da:72:77:8a:23:09:35: 65:f6:e7:ff:3d:86:6e:43:3e:0d:c0:8b:8d:34:8e:cb:89:1f: 32:cf:cd:21:cf:56:a2:9e:db:9b:86:e3:90:06:fd:f8:0b:7f: c5:4e:e5:83:aa:70:fc:c7:1a:31:58:96:b2:e4:76:22:1a:0b: f4:eb:2b:24:cd:e4:2e:58:e9:ff:4c:4e:af:a9:27:21:f5:1e: 0d:09:7a:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC2/YOyt7a/ac4As2e6189HgVd7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQx QUE4MDMzNDAeFw0yNjA1MjkxNjEzMDFaFw0yNjA1MzAxNzUxMDFaMDMxMTAvBgNV BAMTKDFBRTQ1RUI3NjI3MUY5N0VCQjM0NEY4M0NDNzFCRTQ5MzZGNEU1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DV9HvquCXA0mHIMeaEKBJIgq sWFsjG0cvFNbCI03/xBXDbZwH7siV0JWoFOA+JRy8AwDp9KkImlqmw+O86fHu2Qc Qmi710jTqHDaoQEJ9NQgIhk856mtlpNJLT7jTZ5tjSHRsyoLm5KYAMIowqsPEZCQ xzO0cnIiEVq0yMob+F2ADNZf5YtDODJ/uVCwvqJlKSb8jkrLDVIGZaZ7XEf2ca2b JN5CRQ+GQwBPrFPcVtGM0OJCyqbUaG8DlLWE2xfMJxR0QMSuFB6IWZ4b/MEr7Jqb Jgt/wjwUJkCbkpskfDYf8g4LlOR2+zo0fN2TXLuhXCKBAR3xhF8cPxEisq3PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGuRet2Jx+X67NE+DzHG+STb05ckwHwYDVR0j BBgwFoAUn+9E8RMxO0kpV171Xtk31BqoAzQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk5Nzg0Nzg3NjE0MTA1Ny8wLzlGRUY0NEYxMTMzMTNCNDkyOTU3NUVGNTVFRDkz N0Q0MUFBODAzMzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5OTc4NDc4NzYxNDEwNTcvMC85RkVGNDRGMTEzMzEz QjQ5Mjk1NzVFRjU1RUQ5MzdENDFBQTgwMzM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHdGgMCziCLW SegJDrzvkrB3KuicaZWi4tipLQllw1ixFxYKncOTcBn6iWdDbl4mKEeyHvZLOyus 9tu1NRHYj2corq7IZGcWyGfxTUkGgG8a/nkKcDg8hDQ14wv1CKJHjuz7QL8WO/In Q6/7/ZRXcGprD04aPgOjQcMPWTT3W8nGTs1Oh5jtLm3gaqahHHe+ttHa31hVWLtS 7/dyeI6lLQ0Lg4Y/OhaBUkzzUfbacneKIwk1Zfbn/z2GbkM+DcCLjTSOy4kfMs/N Ic9Wop7bm4bjkAb9+At/xU7lg6pw/McaMViWsuR2IhoL9OsrJM3kLljp/0xOr6kn IfUeDQl6eg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:46 2026 by rpki-client