$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json) Hash identifier: nN4yoKL9b30SOxhEMpfrkTeuiqsEp3Ev+rlkCTb2kUU= Subject key identifier: 89:0D:A9:D0:C2:BA:1C:A0:76:C9:C6:87:6D:5E:AC:D8:52:1D:B0:DA Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Certificate serial: 577DCF0BC075243229B584C9FC02FF60087913D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft Manifest number: 2D Signing time: Fri 29 May 2026 20:23:18 +0000 Manifest this update: Fri 29 May 2026 20:18:18 +0000 Manifest next update: Sun 31 May 2026 00:08:18 +0000 Files and hashes: 1: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=) 2: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: mIekbtcYBSXmha7kV1CBHRaNfV+Y+SEOYakKqXrLwGQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7d:cf:0b:c0:75:24:32:29:b5:84:c9:fc:02:ff:60:08:79:13:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Validity Not Before: May 29 20:18:18 2026 GMT Not After : May 31 00:08:18 2026 GMT Subject: CN=890DA9D0C2BA1CA076C9C6876D5EACD8521DB0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:8a:55:a0:a8:57:64:0a:15:49:46:43:ce: fb:b1:a7:df:d4:be:56:92:e6:2d:ec:1d:7d:0a:01: 5e:5f:ff:0d:30:fc:07:8a:48:ce:5f:86:d1:8c:48: d8:57:41:ed:51:79:13:4b:ca:25:7a:0b:6d:57:30: 26:ca:e2:d2:1b:67:aa:79:02:c3:81:e0:11:d1:53: 09:f5:52:1e:64:49:e0:a0:ce:17:5e:fa:14:14:93: 02:3b:45:d3:c1:92:1a:37:7b:c4:29:b8:68:59:b0: cf:f7:9c:76:ba:85:e3:17:fe:de:98:26:4e:b0:8b: 5d:24:96:6b:ea:70:dd:94:ec:02:00:96:88:34:11: 66:9b:0e:47:10:0f:33:64:9b:65:2d:e5:b5:9a:7a: a0:77:b1:11:5e:2a:4e:40:70:f2:37:4d:cc:ec:f0: de:75:18:ca:dd:63:e0:6c:af:e5:28:84:09:d5:1f: 43:35:bf:5b:da:50:5b:b2:ce:ab:4b:17:3a:a0:fd: a3:a9:3e:5e:c2:74:84:48:69:17:cf:96:b3:3d:42: 63:97:a0:63:88:8b:bc:4c:7e:c8:55:30:bf:95:ba: 8c:8f:3c:a6:e0:6d:59:73:6e:72:86:1f:3d:d4:30: 18:8d:48:6f:80:34:47:68:8a:e5:4a:c6:40:a1:c0: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0D:A9:D0:C2:BA:1C:A0:76:C9:C6:87:6D:5E:AC:D8:52:1D:B0:DA X509v3 Authority Key Identifier: keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:4f:e0:91:00:dd:5d:1c:24:b8:bd:55:13:ce:fb:30:7a: 91:5b:ff:cb:fa:63:bd:f3:b7:83:1c:f5:8f:9b:6c:8f:4f:00: 65:f5:6c:15:f8:a7:d8:eb:1b:5b:28:94:d2:87:6a:d3:ae:cd: a7:fa:7c:fd:cc:60:e1:04:d6:d2:c5:6f:05:53:dc:7f:11:59: 98:e4:fa:6a:6f:f8:10:8e:6a:02:89:40:72:14:51:d6:c1:85: e0:ad:ef:85:c6:63:cc:7b:74:7c:ce:fc:51:f6:44:35:ca:83: d6:40:8a:5c:77:d6:59:e2:51:24:12:69:c0:25:09:be:7b:48: c1:be:29:4e:72:dc:aa:e4:c5:e6:c3:4a:28:1e:1b:b1:80:f0: 9f:18:a3:f2:08:f4:9a:56:57:25:b3:7d:09:d8:6a:2d:db:07: 30:30:29:cb:51:12:90:e6:4c:a3:12:9b:54:0f:b8:fd:ed:3c: e2:e7:59:16:b7:6e:8d:d5:79:34:a6:3d:d5:da:a1:61:83:ae: 47:6c:a1:d2:e0:fe:51:4a:34:7b:1e:e4:53:f5:bb:7a:9c:15: de:39:67:f8:c5:23:66:8e:50:36:30:4b:3c:63:f0:1f:fc:01: 35:6e:2a:eb:5e:c4:14:27:17:34:ec:c1:c8:d0:07:8b:64:39: e4:4b:8a:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV33PC8B1JDIptYTJ/AL/YAh5E9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNF MEQ1MDg4RDAeFw0yNjA1MjkyMDE4MThaFw0yNjA1MzEwMDA4MThaMDMxMTAvBgNV BAMTKDg5MERBOUQwQzJCQTFDQTA3NkM5QzY4NzZENUVBQ0Q4NTIxREIwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8IpVoKhXZAoVSUZDzvuxp9/U vlaS5i3sHX0KAV5f/w0w/AeKSM5fhtGMSNhXQe1ReRNLyiV6C21XMCbK4tIbZ6p5 AsOB4BHRUwn1Uh5kSeCgzhde+hQUkwI7RdPBkho3e8QpuGhZsM/3nHa6heMX/t6Y Jk6wi10klmvqcN2U7AIAlog0EWabDkcQDzNkm2Ut5bWaeqB3sRFeKk5AcPI3Tczs 8N51GMrdY+Bsr+UohAnVH0M1v1vaUFuyzqtLFzqg/aOpPl7CdIRIaRfPlrM9QmOX oGOIi7xMfshVML+VuoyPPKbgbVlzbnKGHz3UMBiNSG+ANEdoiuVKxkChwNHnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiQ2p0MK6HKB2ycaHbV6s2FIdsNowHwYDVR0j BBgwFoAUlGGS22tjFk1/trV+6cRCnODVCI0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk4MTQ3MzM2MTUyNjc4NS8wLzk0NjE5MkRCNkI2MzE2NEQ3RkI2QjU3RUU5QzQ0 MjlDRTBENTA4OEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5ODE0NzMzNjE1MjY3ODUvMC85NDYxOTJEQjZCNjMx NjREN0ZCNkI1N0VFOUM0NDI5Q0UwRDUwODhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0BP4JEA3V0c JLi9VRPO+zB6kVv/y/pjvfO3gxz1j5tsj08AZfVsFfin2OsbWyiU0odq067Np/p8 /cxg4QTW0sVvBVPcfxFZmOT6am/4EI5qAolAchRR1sGF4K3vhcZjzHt0fM78UfZE NcqD1kCKXHfWWeJRJBJpwCUJvntIwb4pTnLcquTF5sNKKB4bsYDwnxij8gj0mlZX JbN9CdhqLdsHMDApy1ESkOZMoxKbVA+4/e084udZFrdujdV5NKY91dqhYYOuR2yh 0uD+UUo0ex7kU/W7epwV3jln+MUjZo5QNjBLPGPwH/wBNW4q617EFCcXNOzByNAH i2Q55EuKTQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:28 2026 by rpki-client