$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft File: F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json) Hash identifier: qHWhqTD9VsHgVofa06tU496sZT89gUeTJHiP0zNVic4= Subject key identifier: B0:80:1D:DF:59:BB:B9:8E:86:AD:36:D5:62:10:2A:B0:A6:C2:9D:8F Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8 Certificate serial: 2317AE108B1702FC1DAC8A0CA4E6CA3DA3A51F6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft Manifest number: 31 Signing time: Fri 29 May 2026 03:42:31 +0000 Manifest this update: Fri 29 May 2026 03:37:31 +0000 Manifest next update: Sat 30 May 2026 07:07:31 +0000 Files and hashes: 1: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: dgdFLLGgWuW64oqg9vjgc/Q0andiaIX5vhd5Ps16rI4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:17:ae:10:8b:17:02:fc:1d:ac:8a:0c:a4:e6:ca:3d:a3:a5:1f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8 Validity Not Before: May 29 03:37:31 2026 GMT Not After : May 30 07:07:31 2026 GMT Subject: CN=B0801DDF59BBB98E86AD36D562102AB0A6C29D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:ab:0c:33:f1:f3:16:02:b9:ef:48:8b:58: 36:15:35:48:8b:73:f8:90:46:4c:9d:8e:44:37:5b: ea:ab:11:c1:e6:55:24:08:55:f3:6c:13:a8:0b:30: 0f:47:44:5f:95:73:ca:bf:70:4f:0b:68:0c:14:00: 3e:48:fe:bb:ad:e2:98:f8:74:0d:ee:18:70:4d:11: fb:f7:48:77:54:0c:4c:79:00:cf:c9:6c:c9:ce:48: 30:5a:c1:1f:16:e3:1d:32:96:54:dd:e5:4b:23:2d: 72:7f:cc:8f:25:07:56:55:10:ae:2a:3a:5c:b9:b1: 90:fe:e1:03:e8:39:91:2d:af:41:f9:b8:4c:1d:3d: c4:d7:2c:46:ca:ca:4a:9d:95:73:a2:e4:f6:0b:54: c4:44:00:22:da:21:51:ff:df:e7:ae:0b:19:4e:68: 73:27:6d:9b:9c:49:53:af:2a:e2:85:81:a0:be:c8: 15:d6:cd:cf:30:7a:9f:fb:39:ce:7b:f3:00:f0:1b: 53:ba:d1:46:8a:2f:a2:19:d7:7f:c5:bb:b1:f2:a3: 45:d2:27:8d:a5:27:9b:f3:48:45:01:38:88:27:3b: 6f:73:6d:7f:ad:29:83:28:fb:35:fe:35:d8:97:c6: 53:47:10:c0:4d:42:f6:a8:51:9b:91:3b:8d:60:0e: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:80:1D:DF:59:BB:B9:8E:86:AD:36:D5:62:10:2A:B0:A6:C2:9D:8F X509v3 Authority Key Identifier: keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:36:25:11:9c:78:a8:5e:a2:c4:9d:c3:a0:3a:6b:da:c2:11: e3:8b:10:0f:e8:c3:69:c3:1d:a5:8e:ec:f1:72:c5:fd:1f:da: 15:85:41:4f:4a:ea:62:b8:8c:b6:8a:fc:d8:42:85:d6:6d:ad: 4c:a8:64:e6:ba:97:04:4b:7f:37:bd:ae:86:24:60:1f:14:87: bc:1d:ff:78:36:3b:40:33:41:20:e1:09:bc:83:82:a3:df:b2: 76:4c:15:a6:46:83:7c:a7:fc:98:07:19:cb:1d:1d:e9:c7:0f: cd:26:67:e0:4e:26:70:e0:fc:ed:5a:80:6d:f3:79:4b:37:36: 89:b7:f8:cd:f7:45:d9:05:76:11:09:eb:b0:87:01:d3:e6:38: 5d:6e:3b:c8:28:7c:46:3b:1e:40:0e:47:c6:cf:74:2d:e1:dd: 21:78:6e:45:c2:cc:c9:b9:c2:8d:8d:eb:0e:11:17:5d:ec:98: c0:3d:3b:00:ee:50:9e:18:ed:cc:e6:82:f2:7e:ef:6a:de:06: 94:fb:7e:b1:b1:e6:74:a9:cc:7b:3d:d6:9f:9e:12:d9:df:1c: 08:f7:a8:27:a6:92:8c:36:51:07:0c:24:b8:81:50:e8:83:e6: 4a:81:b0:66:ea:e5:5a:59:c5:d1:21:c2:c4:73:d0:95:ff:43: 59:28:6a:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIxeuEIsXAvwdrIoMpObKPaOlH28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz QjEwNUNEODAeFw0yNjA1MjkwMzM3MzFaFw0yNjA1MzAwNzA3MzFaMDMxMTAvBgNV BAMTKEIwODAxRERGNTlCQkI5OEU4NkFEMzZENTYyMTAyQUIwQTZDMjlEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhqsMM/HzFgK570iLWDYVNUiL c/iQRkydjkQ3W+qrEcHmVSQIVfNsE6gLMA9HRF+Vc8q/cE8LaAwUAD5I/rut4pj4 dA3uGHBNEfv3SHdUDEx5AM/JbMnOSDBawR8W4x0yllTd5UsjLXJ/zI8lB1ZVEK4q Oly5sZD+4QPoOZEtr0H5uEwdPcTXLEbKykqdlXOi5PYLVMREACLaIVH/3+euCxlO aHMnbZucSVOvKuKFgaC+yBXWzc8wep/7Oc578wDwG1O60UaKL6IZ13/Fu7Hyo0XS J42lJ5vzSEUBOIgnO29zbX+tKYMo+zX+NdiXxlNHEMBNQvaoUZuRO41gDoCpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsIAd31m7uY6GrTbVYhAqsKbCnY8wHwYDVR0j BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5Nzg1MTUzMjQ4NjI0NjcvMC9GOTE2RDcxQ0YyOEE3 RkMzMEU3MDVGRTExNDc2RkY0NzNCMTA1Q0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDYlEZx4qF6i xJ3DoDpr2sIR44sQD+jDacMdpY7s8XLF/R/aFYVBT0rqYriMtor82EKF1m2tTKhk 5rqXBEt/N72uhiRgHxSHvB3/eDY7QDNBIOEJvIOCo9+ydkwVpkaDfKf8mAcZyx0d 6ccPzSZn4E4mcOD87VqAbfN5Szc2ibf4zfdF2QV2EQnrsIcB0+Y4XW47yCh8Rjse QA5Hxs90LeHdIXhuRcLMybnCjY3rDhEXXeyYwD07AO5QnhjtzOaC8n7vat4GlPt+ sbHmdKnMez3Wn54S2d8cCPeoJ6aSjDZRBwwkuIFQ6IPmSoGwZurlWlnF0SHCxHPQ lf9DWShqjA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:58 2026 by rpki-client