$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: DuTghUqgUtX842C28RcT1iJaQVypsLZJ57ccEEdnbI4= Subject key identifier: 9E:E5:64:9E:36:4D:A2:78:EC:17:AA:4C:4C:22:B2:08:8E:52:25:87 Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 7E76A7C051481052F733E48D1783B5DF8731906E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: 38 Signing time: Fri 29 May 2026 13:57:55 +0000 Manifest this update: Fri 29 May 2026 13:52:55 +0000 Manifest next update: Sat 30 May 2026 16:24:55 +0000 Files and hashes: 1: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) 2: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) 3: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: kgrpJ3f2OTAlOxkDKy3/xXQf3UdlnEhLIskcS2SBsQ4=) 4: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:76:a7:c0:51:48:10:52:f7:33:e4:8d:17:83:b5:df:87:31:90:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: May 29 13:52:55 2026 GMT Not After : May 30 16:24:55 2026 GMT Subject: CN=9EE5649E364DA278EC17AA4C4C22B2088E522587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:7f:43:8c:4d:58:48:d6:d1:99:46:e7:ff: c4:cc:a7:cf:9a:2d:dc:4b:c9:05:e2:44:9e:35:81: 41:f1:66:24:e6:c2:54:52:46:1e:d1:dc:60:54:b6: 27:3b:a4:84:e6:54:38:c6:d0:df:22:ef:a6:4e:d7: 96:88:83:79:d7:06:16:00:0f:93:ff:78:24:86:1a: 26:a7:fb:13:7a:4f:a6:08:38:ed:51:88:d0:b5:5b: d9:d0:77:69:64:99:7a:3e:bb:d9:39:aa:3d:ff:1b: e3:fe:e6:99:54:e0:6f:82:4d:f7:6e:c8:0a:5d:fa: 5e:07:24:3c:a2:8e:b0:9c:d7:ff:7e:aa:98:10:27: 6b:c9:72:56:9c:65:a5:f1:4b:a8:ae:fb:fd:6b:76: c5:a4:fa:91:39:2e:d4:a0:4d:ed:4c:65:74:8d:29: 04:ef:e2:18:a5:14:78:f2:f8:39:89:54:c6:63:89: af:6d:45:57:c7:12:13:22:06:b4:5e:12:3a:8e:2e: 89:57:a4:f8:03:27:c2:ab:dc:81:35:ad:f1:7f:a7: 8a:2c:42:6d:0c:89:3c:62:70:da:0b:f1:ca:f8:02: 13:64:de:70:e0:da:b0:21:53:8b:66:0f:af:ab:0a: 44:d0:49:54:28:84:1e:03:3c:88:27:7e:90:28:af: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E5:64:9E:36:4D:A2:78:EC:17:AA:4C:4C:22:B2:08:8E:52:25:87 X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:6e:6c:05:2b:d2:65:0c:20:34:58:13:2a:f3:3b:0b:c4:10: 3b:e3:a5:01:48:9e:84:f4:a0:97:61:f2:f6:a6:cd:c9:f6:9f: f6:40:e0:21:9d:6b:c9:5e:42:3e:99:f7:c5:bd:79:37:e3:05: 37:45:58:00:6a:a1:47:c3:31:79:01:f8:94:fc:d4:c2:cc:77: a6:95:f5:41:ff:49:9c:aa:12:8e:41:3d:84:b8:eb:aa:9b:43: 14:70:66:02:b9:e2:38:9c:ed:54:b4:dd:52:80:88:23:69:c7: 3f:01:63:a4:47:0f:ae:ad:dc:f4:e4:aa:d1:7d:af:6c:b7:71: 66:01:de:fd:c6:53:7f:fb:4d:e0:f3:7b:a6:0b:db:39:a1:6b: 09:68:6c:5b:65:8c:ce:01:17:e5:2b:d6:b1:ad:cf:fb:35:d8: bd:e4:f5:bc:b8:73:ac:08:62:8e:4b:9d:e8:16:cf:cc:b8:8e: 91:e7:b5:de:6d:fa:bc:e8:73:87:b2:fb:f2:bc:76:9e:86:86: c8:ab:39:55:0a:fa:f6:34:69:09:ae:ef:a8:41:ff:77:60:86: d0:b3:26:76:39:19:3c:36:66:55:13:ea:c8:95:70:b7:b6:e1: 84:69:3a:19:ab:2d:3f:ad:24:b3:5d:34:06:4f:d3:b9:61:4e: aa:08:87:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfnanwFFIEFL3M+SNF4O134cxkG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjA1MjkxMzUyNTVaFw0yNjA1MzAxNjI0NTVaMDMxMTAvBgNV BAMTKDlFRTU2NDlFMzY0REEyNzhFQzE3QUE0QzRDMjJCMjA4OEU1MjI1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgn9DjE1YSNbRmUbn/8TMp8+a LdxLyQXiRJ41gUHxZiTmwlRSRh7R3GBUtic7pITmVDjG0N8i76ZO15aIg3nXBhYA D5P/eCSGGian+xN6T6YIOO1RiNC1W9nQd2lkmXo+u9k5qj3/G+P+5plU4G+CTfdu yApd+l4HJDyijrCc1/9+qpgQJ2vJclacZaXxS6iu+/1rdsWk+pE5LtSgTe1MZXSN KQTv4hilFHjy+DmJVMZjia9tRVfHEhMiBrReEjqOLolXpPgDJ8Kr3IE1rfF/p4os Qm0MiTxicNoL8cr4AhNk3nDg2rAhU4tmD6+rCkTQSVQohB4DPIgnfpAor6F7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnuVknjZNonjsF6pMTCKyCI5SJYcwHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzW5sBSvSZQwg NFgTKvM7C8QQO+OlAUiehPSgl2Hy9qbNyfaf9kDgIZ1ryV5CPpn3xb15N+MFN0VY AGqhR8MxeQH4lPzUwsx3ppX1Qf9JnKoSjkE9hLjrqptDFHBmArniOJztVLTdUoCI I2nHPwFjpEcPrq3c9OSq0X2vbLdxZgHe/cZTf/tN4PN7pgvbOaFrCWhsW2WMzgEX 5SvWsa3P+zXYveT1vLhzrAhijkud6BbPzLiOkee13m36vOhzh7L78rx2noaGyKs5 VQr69jRpCa7vqEH/d2CG0LMmdjkZPDZmVRPqyJVwt7bhhGk6GastP60ks100Bk/T uWFOqgiHPA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client