$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: 7EKfCJ1Z/CtPF+al2aWj5VR4u+72cgWOo60dsL/8EPU= Subject key identifier: A2:66:84:E7:7B:AC:26:59:19:83:99:CD:B9:EE:2F:0B:D4:71:1C:E7 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 467B4CE292346280B9BC3BB20C3793268B45DC26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 43 Signing time: Fri 29 May 2026 10:12:46 +0000 Manifest this update: Fri 29 May 2026 10:07:46 +0000 Manifest next update: Sat 30 May 2026 10:24:46 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: bhkOiHYRhQF45zPTgA15h3srMKGutdJW54JXQazR9yk=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7b:4c:e2:92:34:62:80:b9:bc:3b:b2:0c:37:93:26:8b:45:dc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: May 29 10:07:46 2026 GMT Not After : May 30 10:24:46 2026 GMT Subject: CN=A26684E77BAC2659198399CDB9EE2F0BD4711CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:15:e6:22:33:0d:0b:be:29:6f:f0:3e:49: 36:b3:29:65:b0:5b:e6:92:1e:a6:d4:42:a7:70:db: 2b:e1:f1:55:92:4d:4e:38:bf:80:67:e3:c3:50:bb: 22:1e:52:67:09:da:48:3b:75:2b:a9:19:a6:52:ac: 41:4a:6d:4d:c9:df:71:54:ce:12:50:93:b5:ee:9b: 2d:52:a4:63:12:a5:34:eb:68:93:6c:ed:1c:cd:2b: 0e:9d:54:3e:2e:e3:01:0c:07:82:af:6f:b7:d7:cb: ba:42:37:85:66:ae:1e:3e:c1:4f:43:52:98:24:8e: 9f:90:ee:fd:de:82:82:61:2d:94:e0:87:87:02:7c: 3f:ec:67:95:46:00:a0:d8:b3:ca:ef:b4:87:ca:b3: ce:c4:d8:45:6a:24:44:6e:6c:a1:22:50:ae:6e:39: 15:87:20:68:8f:55:92:53:30:d4:dc:ba:35:98:c6: b2:0a:70:f7:be:43:77:78:b7:22:9e:74:e2:75:e0: a8:fd:f8:ab:e4:de:d2:b7:f6:33:c4:36:e5:30:bd: 35:45:8a:31:c6:0b:8b:a7:a2:96:07:d0:ec:12:dd: 85:fd:e2:b4:1d:b6:41:c5:1a:03:3c:de:d0:11:eb: 9f:22:f9:af:1f:fc:46:fc:8c:e9:06:e7:af:a6:8c: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:66:84:E7:7B:AC:26:59:19:83:99:CD:B9:EE:2F:0B:D4:71:1C:E7 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:45:ce:c9:51:af:76:c7:35:1c:03:7b:35:80:6e:db:a6:b5: 93:ff:06:c1:c8:9d:a9:ef:5c:3f:9c:c0:73:73:2e:7e:4b:00: 36:66:05:56:9d:a2:3c:8b:46:57:1e:da:1d:5e:6d:f8:b8:f1: 31:54:05:70:6d:66:6e:02:ff:84:41:82:5b:ac:c2:9f:4e:3b: 0a:b9:33:ee:d8:4d:70:64:58:62:0e:c8:68:88:08:d3:50:f0: ae:80:26:2a:40:02:a0:af:9d:4e:86:86:36:24:bf:4c:3c:04: 1e:8b:e4:80:d7:5a:74:86:fa:d7:c3:4e:23:3a:71:98:d1:f5: 00:8c:c0:b0:85:8e:88:80:69:77:c9:57:9f:c9:81:81:8b:5f: 25:2d:ce:aa:9b:00:9b:44:6a:9f:fb:fc:24:c0:d1:e2:54:6e: 1a:10:31:c5:15:7c:27:7f:47:5c:37:89:c5:c9:78:6c:2c:6d: 44:5b:61:69:15:c2:59:9d:34:a2:98:d9:03:b5:79:20:8e:7d: 43:b8:90:21:e2:84:c3:fe:f9:d3:75:b6:82:80:ac:1e:6a:b1: 41:bb:5d:50:e9:e8:b7:6d:37:1d:f8:81:6b:7d:e3:88:31:fb: 2f:6d:4f:a9:db:c9:70:0a:7a:85:84:fd:48:f2:65:67:97:4d: 7a:ec:df:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURntM4pI0YoC5vDuyDDeTJotF3CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA1MjkxMDA3NDZaFw0yNjA1MzAxMDI0NDZaMDMxMTAvBgNV BAMTKEEyNjY4NEU3N0JBQzI2NTkxOTgzOTlDREI5RUUyRjBCRDQ3MTFDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnxXmIjMNC74pb/A+STazKWWw W+aSHqbUQqdw2yvh8VWSTU44v4Bn48NQuyIeUmcJ2kg7dSupGaZSrEFKbU3J33FU zhJQk7Xumy1SpGMSpTTraJNs7RzNKw6dVD4u4wEMB4Kvb7fXy7pCN4Vmrh4+wU9D Upgkjp+Q7v3egoJhLZTgh4cCfD/sZ5VGAKDYs8rvtIfKs87E2EVqJERubKEiUK5u ORWHIGiPVZJTMNTcujWYxrIKcPe+Q3d4tyKedOJ14Kj9+Kvk3tK39jPENuUwvTVF ijHGC4unopYH0OwS3YX94rQdtkHFGgM83tAR658i+a8f/Eb8jOkG56+mjP/bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUomaE53usJlkZg5nNue4vC9RxHOcwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUXOyVGvdsc1 HAN7NYBu26a1k/8Gwcidqe9cP5zAc3MufksANmYFVp2iPItGVx7aHV5t+LjxMVQF cG1mbgL/hEGCW6zCn047Crkz7thNcGRYYg7IaIgI01DwroAmKkACoK+dToaGNiS/ TDwEHovkgNdadIb618NOIzpxmNH1AIzAsIWOiIBpd8lXn8mBgYtfJS3OqpsAm0Rq n/v8JMDR4lRuGhAxxRV8J39HXDeJxcl4bCxtRFthaRXCWZ00opjZA7V5II59Q7iQ IeKEw/7503W2goCsHmqxQbtdUOnot203HfiBa33jiDH7L21PqdvJcAp6hYT9SPJl Z5dNeuzfJQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:29 2026 by rpki-client