$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: McgVnsAwOD6D0fgeXMNY0T6iIBy8ZvPPmXiejckRz1o= Subject key identifier: 1A:58:78:E1:C3:79:2A:B2:27:D2:D0:EA:57:10:4B:22:BC:01:FD:90 Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 0137E90232EFE8FCAB8456743FECA32532C6E5E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: 3F Signing time: Fri 29 May 2026 04:52:37 +0000 Manifest this update: Fri 29 May 2026 04:47:37 +0000 Manifest next update: Sat 30 May 2026 07:42:37 +0000 Files and hashes: 1: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: zHxfQ8LkkbWUTJjgxJ3MOAMG7LB69/jPgbuASPnEkdE=) 2: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=) 3: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=) 4: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=) 5: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:37:e9:02:32:ef:e8:fc:ab:84:56:74:3f:ec:a3:25:32:c6:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: May 29 04:47:37 2026 GMT Not After : May 30 07:42:37 2026 GMT Subject: CN=1A5878E1C3792AB227D2D0EA57104B22BC01FD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:08:c8:4f:06:69:5a:f4:dc:f9:89:6b:8c: 63:9c:6b:77:c1:44:6b:7d:98:24:06:70:6e:08:4d: d4:2a:23:79:36:10:8a:d6:32:b4:6a:71:f4:93:79: 96:c9:5d:32:aa:ad:ac:86:13:6e:49:26:26:a2:68: 12:f8:74:71:5e:7f:31:a3:43:58:d7:48:55:4a:bd: 21:a0:68:82:a3:86:37:02:3a:80:d4:bb:d9:7e:37: 12:82:65:33:7f:a3:d1:6e:07:10:f7:ee:d6:9e:4c: 0b:bf:03:c7:71:30:4a:ac:be:f3:d8:1c:a6:c2:03: 00:2b:fa:f6:43:3f:bc:4c:9e:7f:ce:b9:b0:30:d1: e1:1b:ba:1f:69:ca:d1:ea:53:00:4a:bf:1d:ce:e9: 80:1f:44:a3:e1:34:b5:5b:2f:50:ee:8f:9f:9f:1d: 4f:ad:04:85:ec:d8:3f:25:b6:c9:8a:be:45:19:f8: d6:be:e2:12:c6:f7:99:6f:7f:eb:f1:33:6d:12:f2: fb:06:1e:a8:3e:27:c2:26:d3:6a:c9:25:dd:7b:56: 63:17:35:81:38:14:d0:f2:0b:a9:de:9b:0d:36:3e: 09:bf:f4:30:e2:bb:bd:4a:10:a5:a4:5c:ba:e9:46: b5:6d:f7:1b:d4:a9:19:a4:8d:32:62:e5:c4:f7:9c: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:78:E1:C3:79:2A:B2:27:D2:D0:EA:57:10:4B:22:BC:01:FD:90 X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d4:8d:f7:05:66:34:78:01:60:98:19:a1:dc:d6:49:d8:66: 62:bb:08:a3:01:dc:64:27:77:0e:30:0e:57:4d:d3:fc:e1:21: 1e:39:5e:c2:73:9d:f3:4c:ac:22:32:12:eb:a4:bc:e8:9d:94: 38:f1:ef:4a:36:71:aa:ce:2b:fe:ed:81:1e:76:bd:c7:17:19: f7:da:95:ee:5b:7e:ff:ec:af:c6:5d:29:f0:9f:a2:87:27:53: ba:2f:c3:fc:96:96:ba:ad:6a:fc:51:df:b7:b7:d4:43:dd:60: 0b:ba:97:6c:80:16:2f:33:7a:53:f8:3b:a0:c4:32:a9:c3:f0: fb:a3:88:17:c7:ce:87:5b:22:36:9c:c3:c6:12:0f:0f:3b:ce: 5b:f6:e5:b2:92:54:7e:8e:f4:8e:d5:74:55:6d:e5:17:55:2a: 58:93:ed:e9:47:e2:33:54:02:e8:fc:4f:71:c7:bf:b8:83:fc: 5f:8b:a0:5b:05:71:8a:60:48:e3:52:6e:ff:85:d8:4e:04:f5: 1d:5c:bf:3f:d8:95:17:de:08:8d:92:38:cb:70:6c:e1:f8:c7: 4a:bf:46:97:2c:d1:5e:92:d4:22:1b:2c:4d:6c:5c:8a:b9:f0: 64:82:c0:fa:ae:c9:d3:96:f2:d0:d5:ce:0c:07:c0:4f:56:f0: 33:0e:e6:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUATfpAjLv6PyrhFZ0P+yjJTLG5eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjA1MjkwNDQ3MzdaFw0yNjA1MzAwNzQyMzdaMDMxMTAvBgNV BAMTKDFBNTg3OEUxQzM3OTJBQjIyN0QyRDBFQTU3MTA0QjIyQkMwMUZEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofAjITwZpWvTc+YlrjGOca3fB RGt9mCQGcG4ITdQqI3k2EIrWMrRqcfSTeZbJXTKqrayGE25JJiaiaBL4dHFefzGj Q1jXSFVKvSGgaIKjhjcCOoDUu9l+NxKCZTN/o9FuBxD37taeTAu/A8dxMEqsvvPY HKbCAwAr+vZDP7xMnn/OubAw0eEbuh9pytHqUwBKvx3O6YAfRKPhNLVbL1Duj5+f HU+tBIXs2D8ltsmKvkUZ+Na+4hLG95lvf+vxM20S8vsGHqg+J8Im02rJJd17VmMX NYE4FNDyC6nemw02Pgm/9DDiu71KEKWkXLrpRrVt9xvUqRmkjTJi5cT3nDe5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGlh44cN5KrIn0tDqVxBLIrwB/ZAwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNSN9wVmNHgB YJgZodzWSdhmYrsIowHcZCd3DjAOV03T/OEhHjlewnOd80ysIjIS66S86J2UOPHv SjZxqs4r/u2BHna9xxcZ99qV7lt+/+yvxl0p8J+ihydTui/D/JaWuq1q/FHft7fU Q91gC7qXbIAWLzN6U/g7oMQyqcPw+6OIF8fOh1siNpzDxhIPDzvOW/blspJUfo70 jtV0VW3lF1UqWJPt6UfiM1QC6PxPcce/uIP8X4ugWwVximBI41Ju/4XYTgT1HVy/ P9iVF94IjZI4y3Bs4fjHSr9GlyzRXpLUIhssTWxcirnwZILA+q7J05by0NXODAfA T1bwMw7m8w== -----END CERTIFICATE-----Generated at Fri May 29 22:03:33 2026 by rpki-client