$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: OUWcw1qYBS1sLknJrK/iKaL7q5VwEKNCGTJHgRgtS5U= Subject key identifier: 1F:26:55:AF:71:A2:78:C6:DD:42:91:30:82:3F:E2:70:3F:3A:E7:76 Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 20402D3C8C6A87ABF4A8AC324E1F84F25D5BF061 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: 35 Signing time: Fri 29 May 2026 12:42:49 +0000 Manifest this update: Fri 29 May 2026 12:37:49 +0000 Manifest next update: Sat 30 May 2026 15:12:49 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: oruQpDG1hTO/6T2FW9Olfi9Bk0Niev9M/EpgBvrM0qw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:40:2d:3c:8c:6a:87:ab:f4:a8:ac:32:4e:1f:84:f2:5d:5b:f0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: May 29 12:37:49 2026 GMT Not After : May 30 15:12:49 2026 GMT Subject: CN=1F2655AF71A278C6DD429130823FE2703F3AE776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:b8:90:1f:a0:71:9e:f2:21:f2:88:f4:11: 26:d8:9c:e2:08:44:e3:91:28:fd:fa:dd:50:81:5c: 70:75:c0:08:5c:b4:a4:43:16:a7:f4:e6:09:fc:7a: de:35:f5:18:df:30:99:c4:59:b3:a1:03:59:a4:58: 31:13:d7:93:55:55:60:33:c6:8e:b0:9d:52:65:47: 97:51:97:1b:8b:3e:b2:c0:f6:c7:5f:33:d9:81:3b: 19:ee:ec:68:59:90:cd:ba:e6:06:fd:22:91:93:a3: a6:06:cc:aa:4d:8e:b4:81:29:d0:f9:16:c3:2e:05: a8:af:f8:e2:99:7a:e2:fa:00:a4:43:47:d4:79:45: e0:6e:75:dc:ef:01:bf:2e:17:e1:74:d9:23:35:d7: ef:0a:2e:ac:e8:4a:27:a4:8d:f7:ce:8c:e6:05:db: 8f:69:b8:75:05:c1:bd:14:6e:de:59:23:63:96:8a: 24:c0:47:08:e2:4a:5e:09:b3:13:08:38:e3:9b:d9: e8:4f:3a:54:b5:f3:1b:66:16:c8:08:17:9e:16:f5: cd:f8:c8:53:4c:fb:95:43:b4:60:09:c2:29:b9:9f: 03:e6:3c:60:9c:29:90:95:be:a4:6d:6a:ec:cb:d2: 91:b4:c0:3c:81:c5:b6:a3:84:2f:d6:88:d0:20:ff: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:55:AF:71:A2:78:C6:DD:42:91:30:82:3F:E2:70:3F:3A:E7:76 X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:12:b5:26:7a:72:e1:01:55:aa:8b:80:11:cb:c6:c4:f1:98: b1:58:f0:f1:c7:0a:6a:de:cb:df:da:f1:66:90:d1:87:d4:85: 0c:12:75:5e:33:ca:92:f5:10:ff:f1:1e:58:de:d4:8b:ee:37: 03:d3:cd:eb:de:84:10:53:bf:6f:4f:61:28:84:0f:54:5a:4e: 64:ae:e2:46:9e:5b:5c:1b:66:71:16:0c:27:1b:17:29:83:c0: 14:74:1f:70:3f:29:75:11:f6:13:f7:2e:9b:07:92:83:ab:e6: 89:07:31:fa:87:5c:59:58:38:51:1c:ac:6f:f9:1f:76:a4:25: 5a:76:3b:5d:6b:34:21:a6:49:fe:aa:cf:1b:ff:94:f1:6c:44: 14:f7:a9:02:2d:f2:2a:f5:a6:64:f9:48:b5:14:91:1f:0b:68: dc:af:50:92:dd:0b:70:fd:22:75:f2:f2:64:60:21:86:c9:94: c8:eb:9f:b7:49:c7:f8:94:92:b3:40:66:68:a7:6a:56:d3:40: dd:ef:9b:ca:f4:0d:18:d4:5b:08:43:d4:ce:f3:93:3f:6f:56: 25:6e:24:97:53:73:88:fd:c9:b0:1e:e0:0c:32:71:b1:33:46: 9b:91:11:8e:2d:2f:45:26:08:29:f8:d7:25:94:8d:f9:e1:eb: 72:cb:8c:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIEAtPIxqh6v0qKwyTh+E8l1b8GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjA1MjkxMjM3NDlaFw0yNjA1MzAxNTEyNDlaMDMxMTAvBgNV BAMTKDFGMjY1NUFGNzFBMjc4QzZERDQyOTEzMDgyM0ZFMjcwM0YzQUU3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNriQH6BxnvIh8oj0ESbYnOII ROORKP363VCBXHB1wAhctKRDFqf05gn8et419RjfMJnEWbOhA1mkWDET15NVVWAz xo6wnVJlR5dRlxuLPrLA9sdfM9mBOxnu7GhZkM265gb9IpGTo6YGzKpNjrSBKdD5 FsMuBaiv+OKZeuL6AKRDR9R5ReBuddzvAb8uF+F02SM11+8KLqzoSiekjffOjOYF 249puHUFwb0Ubt5ZI2OWiiTARwjiSl4JsxMIOOOb2ehPOlS18xtmFsgIF54W9c34 yFNM+5VDtGAJwim5nwPmPGCcKZCVvqRtauzL0pG0wDyBxbajhC/WiNAg/wbFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHyZVr3GieMbdQpEwgj/icD8653YwHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2xK1Jnpy4QFV qouAEcvGxPGYsVjw8ccKat7L39rxZpDRh9SFDBJ1XjPKkvUQ//EeWN7Ui+43A9PN 696EEFO/b09hKIQPVFpOZK7iRp5bXBtmcRYMJxsXKYPAFHQfcD8pdRH2E/cumweS g6vmiQcx+odcWVg4URysb/kfdqQlWnY7XWs0IaZJ/qrPG/+U8WxEFPepAi3yKvWm ZPlItRSRHwto3K9Qkt0LcP0idfLyZGAhhsmUyOuft0nH+JSSs0BmaKdqVtNA3e+b yvQNGNRbCEPUzvOTP29WJW4kl1NziP3JsB7gDDJxsTNGm5ERji0vRSYIKfjXJZSN +eHrcsuMQg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:32 2026 by rpki-client