$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json) Hash identifier: jo/1DbeQvOQqMssolfh2Ir7ZPAwAaPjSqY31Rc9P8jA= Subject key identifier: 72:18:91:C4:8B:FE:F6:DB:34:25:33:00:D8:34:B6:C6:60:BE:64:97 Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Certificate serial: 35C9D3FFB394D06096594EC20E3A9325F052305F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft Manifest number: 3A Signing time: Fri 29 May 2026 11:12:48 +0000 Manifest this update: Fri 29 May 2026 11:07:48 +0000 Manifest next update: Sat 30 May 2026 14:33:48 +0000 Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: K98CZLv2ou2VwwZbxhINump/GH7KX9pTlK084qTz7Os=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:d3:ff:b3:94:d0:60:96:59:4e:c2:0e:3a:93:25:f0:52:30:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Validity Not Before: May 29 11:07:48 2026 GMT Not After : May 30 14:33:48 2026 GMT Subject: CN=721891C48BFEF6DB34253300D834B6C660BE6497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:40:22:c5:ca:ec:be:5a:46:0a:15:d9:48: 5d:61:25:c7:93:6e:59:28:40:ae:24:5e:51:ff:cc: fa:58:00:ba:99:e6:72:87:b2:24:22:62:7a:c1:2e: 66:20:6f:62:8a:28:b0:e8:76:5a:76:3b:f6:d8:2c: 7f:c8:41:20:35:02:45:9f:7c:81:c1:cd:de:d7:0a: f6:3f:c3:77:46:9f:22:f9:c0:19:1a:02:76:d1:8e: 1c:8a:3d:8c:f1:5e:b8:4d:bf:d2:89:55:14:79:57: 24:54:f1:cc:49:94:a9:26:ce:dd:4a:d8:45:3d:2a: c3:c9:4c:fe:f7:f6:27:6a:df:b3:29:85:a6:e5:9f: ae:f5:25:fa:cd:16:09:80:32:c0:52:fa:8a:df:e6: 44:a3:9e:e1:21:37:47:11:d9:e4:aa:41:c2:6a:51: b8:42:8d:db:c5:52:1c:51:99:6c:dc:45:08:be:d1: 80:ec:51:ae:86:bd:94:fe:6e:91:85:06:13:48:ed: 6b:fa:09:5a:73:8f:76:95:7f:a6:9b:81:20:1d:c4: 12:70:13:f0:0b:98:84:2a:cc:a5:35:67:99:b8:39: bc:30:f1:21:e6:eb:01:7f:27:e7:bb:33:7b:72:88: cb:e6:64:d6:49:6e:ae:c6:8d:bb:81:dd:22:f0:de: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:18:91:C4:8B:FE:F6:DB:34:25:33:00:D8:34:B6:C6:60:BE:64:97 X509v3 Authority Key Identifier: keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2e:15:a2:33:62:af:40:a8:0e:b3:a8:6c:04:55:95:c1:cf: a4:d2:9e:51:fc:20:6c:d1:ba:df:13:a1:c0:99:8e:20:f9:22: b7:fc:7d:af:80:82:44:91:ed:fb:7e:eb:0e:cc:4e:21:e0:44: f0:f5:88:7d:81:4c:d5:35:a9:f6:c2:a2:ac:42:cd:b6:62:13: 42:25:a7:1e:f4:33:ff:a0:e3:1d:7e:ba:34:85:25:c2:5b:30: ba:48:1f:08:a6:e5:c6:df:48:f9:c7:c0:3d:d1:8e:b6:24:2e: 57:aa:b9:cb:af:4c:ec:2e:79:2b:b8:a8:1c:e2:57:44:10:f1: 4a:8e:5a:f6:36:23:b7:b6:e3:a4:a2:67:86:8b:59:12:21:c4: d3:42:f9:60:a7:67:ee:da:24:eb:eb:04:6b:09:96:8a:ef:29: a4:0f:f8:3d:eb:3d:8f:2a:f4:fa:3b:81:5d:9c:0c:98:06:d9: 49:0c:8a:db:9c:16:d3:02:51:c2:7b:b8:53:40:fb:e4:46:79: f0:88:e1:0f:fb:d7:8f:ec:d2:ff:00:6a:07:9c:dc:0d:7a:53: 71:19:b0:dd:55:83:7b:15:7f:30:d4:13:ed:b6:9c:24:e4:e0: fc:68:59:6b:5b:95:79:78:ac:2a:6f:31:6e:c8:7c:e6:0f:91: a8:a1:7d:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNcnT/7OU0GCWWU7CDjqTJfBSMF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVC QkNGM0RDNDAeFw0yNjA1MjkxMTA3NDhaFw0yNjA1MzAxNDMzNDhaMDMxMTAvBgNV BAMTKDcyMTg5MUM0OEJGRUY2REIzNDI1MzMwMEQ4MzRCNkM2NjBCRTY0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8UAixcrsvlpGChXZSF1hJceT blkoQK4kXlH/zPpYALqZ5nKHsiQiYnrBLmYgb2KKKLDodlp2O/bYLH/IQSA1AkWf fIHBzd7XCvY/w3dGnyL5wBkaAnbRjhyKPYzxXrhNv9KJVRR5VyRU8cxJlKkmzt1K 2EU9KsPJTP739idq37Mphabln671JfrNFgmAMsBS+orf5kSjnuEhN0cR2eSqQcJq UbhCjdvFUhxRmWzcRQi+0YDsUa6GvZT+bpGFBhNI7Wv6CVpzj3aVf6abgSAdxBJw E/ALmIQqzKU1Z5m4Obww8SHm6wF/J+e7M3tyiMvmZNZJbq7GjbuB3SLw3rF/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUchiRxIv+9ts0JTMA2DS2xmC+ZJcwHwYDVR0j BBgwFoAUlRgw+utT+Al8E18WKS4plbvPPcQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2NjA4MjEyNzEzNDcyMy8wLzk1MTgzMEZBRUI1M0Y4MDk3QzEzNUYxNjI5MkUy OTk1QkJDRjNEQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjYwODIxMjcxMzQ3MjMvMC85NTE4MzBGQUVCNTNG ODA5N0MxMzVGMTYyOTJFMjk5NUJCQ0YzREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS4VojNir0Co DrOobARVlcHPpNKeUfwgbNG63xOhwJmOIPkit/x9r4CCRJHt+37rDsxOIeBE8PWI fYFM1TWp9sKirELNtmITQiWnHvQz/6DjHX66NIUlwlswukgfCKblxt9I+cfAPdGO tiQuV6q5y69M7C55K7ioHOJXRBDxSo5a9jYjt7bjpKJnhotZEiHE00L5YKdn7tok 6+sEawmWiu8ppA/4Pes9jyr0+juBXZwMmAbZSQyK25wW0wJRwnu4U0D75EZ58Ijh D/vXj+zS/wBqB5zcDXpTcRmw3VWDexV/MNQT7bacJOTg/GhZa1uVeXisKm8xbsh8 5g+RqKF9NQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client