$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: witMF50t9zT3TN6gZC76N9jqStemyyrI3BriIOWj/P4= Subject key identifier: 81:4E:3A:E5:B0:3F:F6:C4:4F:25:D7:53:39:A3:A2:B1:F4:8F:4A:97 Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 04C67C0473DAADD57939248788D2F8BD1FE4B51E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: 35 Signing time: Fri 29 May 2026 19:38:17 +0000 Manifest this update: Fri 29 May 2026 19:33:17 +0000 Manifest next update: Sat 30 May 2026 19:41:17 +0000 Files and hashes: 1: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: WhOo39ZNs3IZWhcXdHEBKVxoXyKUxJ/dg0bSqvyRI20=) 2: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) 3: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) 4: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 5: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c6:7c:04:73:da:ad:d5:79:39:24:87:88:d2:f8:bd:1f:e4:b5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: May 29 19:33:17 2026 GMT Not After : May 30 19:41:17 2026 GMT Subject: CN=814E3AE5B03FF6C44F25D75339A3A2B1F48F4A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:68:02:39:94:eb:bd:48:84:33:29:b7:12: 29:e6:71:93:f7:94:50:d4:84:57:48:01:52:53:a4: e7:cb:55:50:22:19:cf:2e:ef:2d:5c:8e:33:bc:0a: 18:d0:8f:ef:93:fc:6d:54:75:60:67:f8:a7:80:bc: 04:34:d5:ea:dc:7f:94:96:eb:a0:a1:65:12:29:ef: d3:4a:98:7d:fe:1f:04:d0:0f:47:cc:ad:a1:61:35: f3:4a:8a:5f:04:5a:b4:3f:c2:4a:11:37:13:f5:5a: 7a:bf:65:5a:c5:40:de:88:54:81:28:0b:57:2b:dc: 59:f9:b6:3e:f9:e3:bf:9a:7e:85:ae:97:51:e8:7e: 32:d6:34:58:49:dd:54:4a:c0:be:3c:7b:d8:54:db: 5c:56:3c:75:69:3b:0e:32:98:0c:7f:92:7c:3d:eb: e1:bb:b3:c1:0e:8b:97:9d:1c:f4:c6:72:0e:c2:8e: 91:3a:01:59:ba:32:b5:96:1b:e2:aa:8f:79:f2:a1: e7:27:db:83:66:b9:c5:f1:09:0e:f4:01:a5:21:90: 2e:61:3b:33:e5:19:f9:93:f4:6b:28:03:29:45:82: c5:c1:fd:e1:ef:cc:ae:33:08:db:77:68:42:e6:b9: 33:c1:08:d7:a2:cc:72:ce:1c:f9:a9:a3:95:10:02: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4E:3A:E5:B0:3F:F6:C4:4F:25:D7:53:39:A3:A2:B1:F4:8F:4A:97 X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:13:b0:1c:3f:31:41:6a:7f:2b:9e:a4:68:e7:80:58:a1:42: ea:bc:f1:0b:08:c5:a4:d3:c3:ff:87:fb:01:11:d3:f1:6b:6a: be:c1:7f:83:87:37:a5:72:91:40:66:62:5c:fe:6a:8b:2b:5b: d5:42:57:3a:21:08:5f:95:1f:cb:ee:aa:05:82:b4:65:69:dc: 31:6a:3b:21:0f:4a:e9:7b:b6:16:8a:24:20:71:8e:02:95:60: 06:32:88:b5:02:7e:1a:59:ac:70:3f:19:d4:31:90:bf:96:7a: 15:3a:e5:34:1d:56:47:e2:06:1d:12:b1:d0:8f:ea:f4:a1:f5: ff:7a:62:e8:90:e1:f2:48:2c:2a:77:e4:dd:ad:9b:28:e3:d3: ec:5a:28:18:7a:b7:1c:86:1e:62:b7:e0:e3:1b:d0:b3:d9:4c: c1:cf:33:b3:8c:8e:20:9a:17:bb:01:52:c4:ae:5b:fa:4f:0c: 73:bc:2e:0d:93:09:07:91:cb:cd:b8:8d:01:2c:b8:4e:19:ad: ed:f0:0c:49:40:21:44:ff:6e:ff:cb:d4:af:f6:1d:3e:c3:ef: 4c:07:f9:41:37:5f:02:21:6e:1c:0e:7c:d3:9c:d4:a4:73:50: fe:1c:5b:4f:70:2a:26:b6:f9:4b:a2:4d:e1:e4:c8:74:41:e7: 58:d0:7f:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBMZ8BHPardV5OSSHiNL4vR/ktR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA1MjkxOTMzMTdaFw0yNjA1MzAxOTQxMTdaMDMxMTAvBgNV BAMTKDgxNEUzQUU1QjAzRkY2QzQ0RjI1RDc1MzM5QTNBMkIxRjQ4RjRBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBWgCOZTrvUiEMym3EinmcZP3 lFDUhFdIAVJTpOfLVVAiGc8u7y1cjjO8ChjQj++T/G1UdWBn+KeAvAQ01ercf5SW 66ChZRIp79NKmH3+HwTQD0fMraFhNfNKil8EWrQ/wkoRNxP1Wnq/ZVrFQN6IVIEo C1cr3Fn5tj7547+afoWul1HofjLWNFhJ3VRKwL48e9hU21xWPHVpOw4ymAx/knw9 6+G7s8EOi5edHPTGcg7CjpE6AVm6MrWWG+Kqj3nyoecn24NmucXxCQ70AaUhkC5h OzPlGfmT9GsoAylFgsXB/eHvzK4zCNt3aELmuTPBCNeizHLOHPmpo5UQAqGVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgU465bA/9sRPJddTOaOisfSPSpcwHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBOwHD8xQWp/ K56kaOeAWKFC6rzxCwjFpNPD/4f7ARHT8WtqvsF/g4c3pXKRQGZiXP5qiytb1UJX OiEIX5Ufy+6qBYK0ZWncMWo7IQ9K6Xu2FookIHGOApVgBjKItQJ+GlmscD8Z1DGQ v5Z6FTrlNB1WR+IGHRKx0I/q9KH1/3pi6JDh8kgsKnfk3a2bKOPT7FooGHq3HIYe Yrfg4xvQs9lMwc8zs4yOIJoXuwFSxK5b+k8Mc7wuDZMJB5HLzbiNASy4Thmt7fAM SUAhRP9u/8vUr/YdPsPvTAf5QTdfAiFuHA5805zUpHNQ/hxbT3AqJrb5S6JN4eTI dEHnWNB/JQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:44 2026 by rpki-client