$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: TM8IoZr40lu3QM86BSn2mgt0NsnUtCjjpA85QSRAhQw= Subject key identifier: 45:51:52:21:98:04:F2:4A:EC:2A:5C:82:46:C5:12:75:82:2C:FF:EB Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 6262567FF4770D8B32F13F73D2FB16EB93BCDDCF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: 3F Signing time: Fri 29 May 2026 07:57:44 +0000 Manifest this update: Fri 29 May 2026 07:52:44 +0000 Manifest next update: Sat 30 May 2026 11:21:44 +0000 Files and hashes: 1: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) 2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: ttpE5wgeRY7Ri2CdGm2HdPrP+7UCc5b0hfVlEL8weJI=) 3: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:62:56:7f:f4:77:0d:8b:32:f1:3f:73:d2:fb:16:eb:93:bc:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: May 29 07:52:44 2026 GMT Not After : May 30 11:21:44 2026 GMT Subject: CN=455152219804F24AEC2A5C8246C51275822CFFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:18:d2:90:a8:78:56:30:b7:2a:8b:25:8d: 7c:b2:32:ef:99:2c:d6:15:7a:20:0a:a7:a2:9a:3e: 0f:c1:2c:c7:5c:2b:56:e2:96:2a:d4:4b:e7:df:d6: f0:3f:9f:60:be:43:cf:3a:ad:cb:a2:05:4d:c6:04: c4:dc:83:05:18:a1:f7:68:bb:3c:6e:39:5f:92:b4: 75:a7:1f:26:fd:94:85:f5:27:e8:1d:d4:75:88:96: 23:26:a0:72:79:e5:f2:79:be:fc:b1:86:80:5d:e2: f7:b0:bb:57:2d:b0:bb:8c:01:b4:3e:14:98:b7:ff: 92:af:ee:3a:78:c8:0e:80:d3:4a:15:9f:33:74:3b: f4:b9:d7:74:9c:be:36:ff:82:02:ce:38:6f:96:8f: 0d:97:b3:1c:af:90:ce:70:7d:d5:bf:f1:fa:c5:ee: 67:70:c2:84:57:09:cd:8b:e2:0f:f2:87:f9:3a:91: bc:ed:41:e3:63:b1:15:ee:39:7e:44:8a:b3:4a:e9: 29:bf:cb:90:58:8e:8f:8b:82:63:61:16:3a:61:b9: bd:81:74:6f:1c:46:e5:ed:cb:a5:a1:1b:e4:f5:db: d6:4d:ff:05:03:db:af:f8:0a:17:e7:c4:a2:b5:a9: d2:fe:5f:fb:40:c1:5f:e3:54:82:0a:80:de:fe:52: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:52:21:98:04:F2:4A:EC:2A:5C:82:46:C5:12:75:82:2C:FF:EB X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:36:74:32:f6:68:cc:ad:7d:25:ca:b2:79:fb:fe:91:40:9d: c4:4e:03:a2:fb:63:c5:41:f1:ef:93:26:61:24:b5:3d:fc:57: 07:dd:01:75:1e:18:0a:0f:11:6a:47:fa:bb:07:a7:2e:f4:90: 15:03:f2:44:71:c3:a0:6e:5c:4a:67:e3:c0:24:5c:11:3a:f6: 72:c0:66:50:25:c2:85:fc:b2:93:8d:15:e7:55:a1:19:b1:31: bc:03:11:ac:2e:57:7f:6a:d6:ac:c4:50:1e:0c:5d:c9:1a:c5: ed:de:a2:25:f4:3f:74:e0:ab:6a:86:15:a9:26:24:b0:9f:07: d8:98:92:e7:a5:bf:c9:8d:60:e1:1e:05:ba:fc:b2:09:87:2f: 95:76:38:c3:47:92:ed:af:66:c5:a8:52:6a:e2:6c:8a:a6:eb: 41:aa:c8:7d:29:8b:61:7d:63:4c:84:59:3d:16:f8:7d:7d:45: a7:41:f8:5e:7f:c3:7f:74:52:64:5d:e8:4a:41:f6:69:6d:07: ab:22:5a:c0:13:36:13:51:e4:44:b2:eb:02:3b:ca:9e:9a:e0: b9:2d:8d:c0:73:e3:9a:74:c0:5f:1c:dc:ad:39:f5:ef:bf:43: 8f:f4:20:23:53:83:16:ee:54:9c:98:60:12:74:13:f5:dd:3f: 2d:8b:58:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYmJWf/R3DYsy8T9z0vsW65O83c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjA1MjkwNzUyNDRaFw0yNjA1MzAxMTIxNDRaMDMxMTAvBgNV BAMTKDQ1NTE1MjIxOTgwNEYyNEFFQzJBNUM4MjQ2QzUxMjc1ODIyQ0ZGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LhjSkKh4VjC3KosljXyyMu+Z LNYVeiAKp6KaPg/BLMdcK1bilirUS+ff1vA/n2C+Q886rcuiBU3GBMTcgwUYofdo uzxuOV+StHWnHyb9lIX1J+gd1HWIliMmoHJ55fJ5vvyxhoBd4vewu1ctsLuMAbQ+ FJi3/5Kv7jp4yA6A00oVnzN0O/S513Scvjb/ggLOOG+Wjw2XsxyvkM5wfdW/8frF 7mdwwoRXCc2L4g/yh/k6kbztQeNjsRXuOX5EirNK6Sm/y5BYjo+LgmNhFjphub2B dG8cRuXty6WhG+T129ZN/wUD26/4ChfnxKK1qdL+X/tAwV/jVIIKgN7+UnpfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURVFSIZgE8krsKlyCRsUSdYIs/+swHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8TZ0MvZozK19 Jcqyefv+kUCdxE4DovtjxUHx75MmYSS1PfxXB90BdR4YCg8Rakf6uwenLvSQFQPy RHHDoG5cSmfjwCRcETr2csBmUCXChfyyk40V51WhGbExvAMRrC5Xf2rWrMRQHgxd yRrF7d6iJfQ/dOCraoYVqSYksJ8H2JiS56W/yY1g4R4FuvyyCYcvlXY4w0eS7a9m xahSauJsiqbrQarIfSmLYX1jTIRZPRb4fX1Fp0H4Xn/Df3RSZF3oSkH2aW0HqyJa wBM2E1HkRLLrAjvKnprguS2NwHPjmnTAXxzcrTn1779Dj/QgI1ODFu5UnJhgEnQT 9d0/LYtYEg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:46 2026 by rpki-client