$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: iBpsa+g5INStkOqCjgl9kW3WzMDfCt8xio/ir9+/F0Y= Subject key identifier: 5F:31:A9:CA:BD:08:64:F0:2E:68:44:CC:9F:2C:6E:0F:4D:AC:AA:C5 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 5D885CD64C48F3C61008FF7D60EB29BB249B7965 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 3B Signing time: Fri 29 May 2026 07:32:43 +0000 Manifest this update: Fri 29 May 2026 07:27:43 +0000 Manifest next update: Sat 30 May 2026 10:02:43 +0000 Files and hashes: 1: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 2: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: IVzpthZWMbkJtLm17P4bCebY/eoSTk00Ugp+3D9MwBc=) 3: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:88:5c:d6:4c:48:f3:c6:10:08:ff:7d:60:eb:29:bb:24:9b:79:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: May 29 07:27:43 2026 GMT Not After : May 30 10:02:43 2026 GMT Subject: CN=5F31A9CABD0864F02E6844CC9F2C6E0F4DACAAC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:1c:25:13:38:bc:cc:66:12:6e:c0:80:27: 6a:6f:1c:e0:74:64:95:af:49:b7:ec:0f:13:aa:7a: e8:ed:38:06:7d:05:f7:62:b4:1b:0b:14:e5:8a:5a: 61:05:dd:4c:d5:e1:14:5c:ab:05:84:2d:61:b7:ea: f5:d4:7a:44:45:b3:e4:50:57:95:40:ae:3e:25:7b: ed:de:32:d4:62:43:84:c7:c1:f6:f9:fa:ee:45:91: 77:b8:7c:34:32:c3:17:b2:63:0f:86:79:2b:b9:c0: df:45:57:88:b0:33:85:3c:60:54:92:7e:41:85:51: 20:49:9f:a9:bb:d5:ab:bd:cd:59:2f:74:e8:70:8f: 5d:95:68:2a:cd:c5:89:ca:6c:30:fe:ef:a6:c8:f5: 91:1a:e7:32:18:89:d7:26:10:e7:53:3f:8a:ea:e0: ee:42:d4:ec:40:b9:d8:e7:f4:b9:20:61:c6:f9:a1: 45:27:00:c8:f1:b7:97:22:56:a7:7f:48:0f:41:fe: 2c:5d:a0:c5:10:24:16:a8:92:83:f7:f8:c3:e8:b2: 79:b2:43:8b:90:e4:a4:12:49:41:54:07:d6:03:7b: f8:f7:2b:20:8e:de:62:e9:94:9c:7c:9e:ae:7c:a5: a7:7b:1b:ce:9a:71:02:dc:cf:ed:9d:c8:30:bc:bb: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:31:A9:CA:BD:08:64:F0:2E:68:44:CC:9F:2C:6E:0F:4D:AC:AA:C5 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cf:4d:64:88:bd:c7:9c:91:9a:ee:73:71:7c:bc:5d:c4:47: 94:0c:ef:63:95:2a:60:88:de:ca:d1:14:a6:bd:05:c6:17:bc: 14:64:28:93:ee:98:b5:e1:9f:4d:91:3f:e0:b5:06:51:dd:d5: 2f:24:19:c4:7a:ee:58:c6:99:58:17:44:03:59:41:3a:4a:68: 09:50:35:31:a4:58:8b:7a:47:a3:15:3a:5d:48:a7:4e:85:a5: 9c:3f:d9:b6:e4:94:38:d9:be:83:31:34:a2:7b:ea:a4:72:92: 88:8f:69:65:3c:ad:02:f7:06:94:db:d4:34:b0:ec:96:09:e4: e0:95:a3:5b:c2:12:16:1f:c5:67:22:6a:4a:ac:74:27:c8:4e: 5f:2f:22:95:1e:32:f2:61:c3:7d:2e:92:ae:62:a8:f6:bc:8e: 2f:4d:06:1b:94:ba:8c:9e:8e:81:dd:7d:03:dc:82:a5:ba:d5: 01:35:39:69:23:32:7b:d6:fa:ac:ab:03:fa:b8:f8:90:81:2b: a5:0f:ff:8b:24:21:bd:db:6d:80:0c:58:9a:68:f6:5b:46:32: f3:8d:51:a2:6a:db:19:58:4f:9a:1a:0a:1a:a4:08:a0:1d:3f: d1:0f:35:28:a4:d6:b7:24:e2:38:fc:3e:62:86:25:e6:01:4c: 6a:f7:ca:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXYhc1kxI88YQCP99YOspuySbeWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA1MjkwNzI3NDNaFw0yNjA1MzAxMDAyNDNaMDMxMTAvBgNV BAMTKDVGMzFBOUNBQkQwODY0RjAyRTY4NDRDQzlGMkM2RTBGNERBQ0FBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AxwlEzi8zGYSbsCAJ2pvHOB0 ZJWvSbfsDxOqeujtOAZ9BfditBsLFOWKWmEF3UzV4RRcqwWELWG36vXUekRFs+RQ V5VArj4le+3eMtRiQ4THwfb5+u5FkXe4fDQywxeyYw+GeSu5wN9FV4iwM4U8YFSS fkGFUSBJn6m71au9zVkvdOhwj12VaCrNxYnKbDD+76bI9ZEa5zIYidcmEOdTP4rq 4O5C1OxAudjn9LkgYcb5oUUnAMjxt5ciVqd/SA9B/ixdoMUQJBaokoP3+MPosnmy Q4uQ5KQSSUFUB9YDe/j3KyCO3mLplJx8nq58pad7G86acQLcz+2dyDC8u1bRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXzGpyr0IZPAuaETMnyxuD02sqsUwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb89NZIi9x5yR mu5zcXy8XcRHlAzvY5UqYIjeytEUpr0Fxhe8FGQok+6YteGfTZE/4LUGUd3VLyQZ xHruWMaZWBdEA1lBOkpoCVA1MaRYi3pHoxU6XUinToWlnD/ZtuSUONm+gzE0onvq pHKSiI9pZTytAvcGlNvUNLDslgnk4JWjW8ISFh/FZyJqSqx0J8hOXy8ilR4y8mHD fS6SrmKo9ryOL00GG5S6jJ6Ogd19A9yCpbrVATU5aSMye9b6rKsD+rj4kIErpQ// iyQhvdttgAxYmmj2W0Yy841RomrbGVhPmhoKGqQIoB0/0Q81KKTWtyTiOPw+YoYl 5gFMavfKCA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client