$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: RjtwpyPnthKAvXIM8VMdWATzKVf0Q+NQBG6m0jajoPU= Subject key identifier: 7E:F1:7E:03:5F:B3:7B:D4:9E:50:83:D8:91:9E:D3:57:92:CC:50:1D Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 76479D3C08D053A7D86476D2B66A171AE813D430 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: 37 Signing time: Fri 29 May 2026 09:07:46 +0000 Manifest this update: Fri 29 May 2026 09:02:46 +0000 Manifest next update: Sat 30 May 2026 10:28:46 +0000 Files and hashes: 1: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: xFGF13ack9MxYiRQiWD/QKYAxnSWlv+Jm9Y59CH6zX0=) 2: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:47:9d:3c:08:d0:53:a7:d8:64:76:d2:b6:6a:17:1a:e8:13:d4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: May 29 09:02:46 2026 GMT Not After : May 30 10:28:46 2026 GMT Subject: CN=7EF17E035FB37BD49E5083D8919ED35792CC501D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:f6:4c:dd:d4:5d:1c:1e:5a:0a:fa:fa:72: 5e:f6:c8:37:07:87:04:b1:95:51:bb:9c:5f:3b:42: 0f:2a:20:bf:e9:dc:b9:08:42:e5:36:19:fc:26:22: f0:e0:af:33:df:cd:1f:d5:95:34:18:e2:81:5f:84: de:4e:a0:94:9e:1d:12:26:a9:ba:cd:ff:ea:92:37: 6d:81:a0:ca:6f:fc:ab:07:ea:26:90:01:ba:1c:52: f6:22:94:37:1c:d1:3b:90:1b:b6:ad:f4:b7:aa:47: eb:28:42:be:50:38:8c:89:c7:78:01:06:9a:c8:56: a5:95:98:b3:d1:1f:b1:7a:a2:c0:eb:d1:1a:76:10: fb:b7:95:05:2a:6b:70:12:2a:b8:a4:1a:a7:31:69: 11:9b:7b:53:26:d5:85:1b:92:58:f7:9a:47:82:35: 8b:36:5e:78:38:6c:5e:23:fd:35:c2:25:1b:b6:70: 08:f8:1e:34:d6:54:b7:4b:96:06:02:08:22:02:0e: 25:1b:f6:3a:b0:fe:df:a3:a6:91:f7:af:09:40:4c: 4d:81:d2:5a:42:9d:44:ed:44:71:83:fc:b6:9f:96: f1:00:04:c8:02:fd:37:29:c7:7f:72:fd:01:84:1f: 3b:88:e5:75:c6:c4:c0:f9:fd:4f:9d:6e:d8:12:50: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:7E:03:5F:B3:7B:D4:9E:50:83:D8:91:9E:D3:57:92:CC:50:1D X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9b:77:fa:36:d8:17:b3:97:3d:9b:f7:ab:d5:22:c8:27:d5: 98:5f:d8:a7:d4:08:6c:7a:92:8a:ac:96:1c:37:e3:ff:f1:84: 07:89:7e:d0:01:d0:83:b4:8c:80:11:e1:65:cc:7e:1d:09:be: eb:88:95:aa:37:92:40:61:ba:a2:73:ac:71:a3:76:27:4a:97: a0:7b:a6:56:ae:b1:b6:46:50:e8:7a:a1:84:05:56:31:d3:42: 51:73:14:76:9a:0b:8c:c6:56:75:48:63:79:dc:92:43:43:ff: 84:eb:84:e0:29:9a:99:a2:b7:a1:33:57:4e:e7:f5:cb:f2:51: ab:6b:af:59:92:e0:56:bb:53:c9:73:12:6b:29:ad:b5:97:ee: 68:19:c9:57:c5:06:63:b3:a0:41:41:d5:28:a4:f2:83:5a:a3: a7:c0:24:a7:55:4c:95:94:8b:7f:e1:af:fa:5e:8d:86:37:68: 40:a1:12:ee:7a:f7:be:bb:24:18:a8:f1:c0:8e:c2:a6:44:0b: 9f:1a:b7:e9:fd:16:75:18:03:0e:db:76:80:e5:07:b7:52:7f: 1f:c5:34:66:13:0f:19:f4:0f:c6:a8:0f:8a:19:4e:c2:07:4d: 92:33:ef:02:69:e8:5c:66:7f:b0:ab:cc:3d:21:9f:f5:da:c3: 9a:4e:17:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdkedPAjQU6fYZHbStmoXGugT1DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA1MjkwOTAyNDZaFw0yNjA1MzAxMDI4NDZaMDMxMTAvBgNV BAMTKDdFRjE3RTAzNUZCMzdCRDQ5RTUwODNEODkxOUVEMzU3OTJDQzUwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusvZM3dRdHB5aCvr6cl72yDcH hwSxlVG7nF87Qg8qIL/p3LkIQuU2GfwmIvDgrzPfzR/VlTQY4oFfhN5OoJSeHRIm qbrN/+qSN22BoMpv/KsH6iaQAbocUvYilDcc0TuQG7at9LeqR+soQr5QOIyJx3gB BprIVqWVmLPRH7F6osDr0Rp2EPu3lQUqa3ASKrikGqcxaRGbe1Mm1YUbklj3mkeC NYs2Xng4bF4j/TXCJRu2cAj4HjTWVLdLlgYCCCICDiUb9jqw/t+jppH3rwlATE2B 0lpCnUTtRHGD/LaflvEABMgC/Tcpx39y/QGEHzuI5XXGxMD5/U+dbtgSUChTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfvF+A1+ze9SeUIPYkZ7TV5LMUB0wHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpt3+jbYF7OX PZv3q9UiyCfVmF/Yp9QIbHqSiqyWHDfj//GEB4l+0AHQg7SMgBHhZcx+HQm+64iV qjeSQGG6onOscaN2J0qXoHumVq6xtkZQ6HqhhAVWMdNCUXMUdpoLjMZWdUhjedyS Q0P/hOuE4CmamaK3oTNXTuf1y/JRq2uvWZLgVrtTyXMSaymttZfuaBnJV8UGY7Og QUHVKKTyg1qjp8Akp1VMlZSLf+Gv+l6NhjdoQKES7nr3vrskGKjxwI7CpkQLnxq3 6f0WdRgDDtt2gOUHt1J/H8U0ZhMPGfQPxqgPihlOwgdNkjPvAmnoXGZ/sKvMPSGf 9drDmk4XhA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:48 2026 by rpki-client