$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: 8Zyge+SB0tPbQZBHxstm5L60YfDTZCbQNPoZ5pgUDeY= Subject key identifier: 1A:B5:35:67:ED:1F:23:46:25:54:D8:26:FF:D7:AD:94:D6:D6:07:C2 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 592D6B0F6D157FE12273518CD0FE124CBE3A9B32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 2B Signing time: Fri 29 May 2026 06:07:41 +0000 Manifest this update: Fri 29 May 2026 06:02:41 +0000 Manifest next update: Sat 30 May 2026 06:44:41 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: trSJ0l2bSFEuBaHpmtDb+NiOyfGmrm+Dku88gqxP/70=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2d:6b:0f:6d:15:7f:e1:22:73:51:8c:d0:fe:12:4c:be:3a:9b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: May 29 06:02:41 2026 GMT Not After : May 30 06:44:41 2026 GMT Subject: CN=1AB53567ED1F23462554D826FFD7AD94D6D607C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:ae:87:15:1b:2f:9a:b0:41:8a:1f:6b:4e: e3:cc:af:89:92:e9:f5:1c:6f:67:34:9b:07:c3:44: 3d:e3:43:29:b5:b1:18:f6:e3:09:ff:dd:3b:ba:2c: 9d:5a:c4:c9:46:a5:12:b6:08:39:5d:cc:9b:fb:1b: c1:91:ca:4d:8f:b4:5e:40:96:71:50:6c:d7:7a:8d: e4:98:45:a1:af:93:8c:64:ce:4d:99:22:84:89:36: 7b:92:2a:e1:db:70:aa:d7:37:b2:84:d7:ff:5d:97: 0a:0c:d0:92:f5:16:c9:b6:c4:f8:2a:3d:51:b6:7a: 8c:cc:0b:a8:4d:8b:5d:67:9d:4a:e2:dc:2c:a9:30: dd:2d:81:97:af:d4:ab:61:ce:a8:21:9a:9d:03:a4: a1:62:58:28:d7:9c:0b:e0:37:4a:17:9c:e2:a5:66: f5:a7:ba:66:64:31:b9:3a:17:86:ff:14:bf:08:b1: 97:a7:91:53:c1:98:74:28:e5:9e:4f:40:6b:0f:01: 12:42:53:71:6d:fa:bd:b3:83:74:e1:58:b6:60:d9: 07:5c:35:ff:8b:3b:6f:46:b1:ad:f4:3c:25:e4:9e: 49:51:da:e2:96:c5:36:13:db:44:cb:d6:55:3e:a2: 02:3c:a0:69:cd:4c:1e:26:09:4b:b3:d3:9c:99:7d: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:35:67:ED:1F:23:46:25:54:D8:26:FF:D7:AD:94:D6:D6:07:C2 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:05:d7:71:e7:3b:10:4a:2f:ca:c5:70:6d:e4:b2:b9:7f: 11:de:c0:8a:73:bc:b2:57:b4:b2:b7:53:bd:c4:7b:c0:72:81: d3:79:5b:a0:46:cb:3b:25:9e:41:c5:93:75:7a:9c:69:32:68: 75:76:fa:a8:fb:0e:9d:09:90:9c:c0:c1:5b:bb:30:a6:2b:13: 05:d9:81:e4:71:6f:47:a4:b0:c1:b1:7a:a6:ce:0d:2a:9f:13: d9:22:77:9b:84:27:ac:e3:31:5e:08:e3:83:68:8f:9b:b1:d6: 53:35:2c:bd:4b:51:f7:ef:87:b7:8f:dd:69:72:46:d5:4c:2d: 3e:41:2d:34:e7:4d:a4:f3:90:6d:89:e6:fc:71:e7:ee:2c:69: 01:4e:eb:e5:4b:a7:f1:08:4a:d5:9e:4b:ad:0c:3a:a6:d9:24: 53:81:e6:1a:fd:8b:e5:10:3f:51:e1:27:0c:54:2f:5a:55:58: ad:10:13:71:f1:56:75:34:6b:8c:66:0b:33:e1:cf:b4:76:90: c0:17:f8:9d:8e:26:00:e7:08:3d:61:a9:79:83:89:0f:59:b1: 1e:fc:eb:7f:cb:cc:1d:46:df:4d:96:7a:ef:85:ac:f7:f4:2f: 4a:04:7b:57:61:55:47:93:61:a2:ad:6a:c5:04:c2:5f:2c:06: 5e:54:af:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWS1rD20Vf+Eic1GM0P4STL46mzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA1MjkwNjAyNDFaFw0yNjA1MzAwNjQ0NDFaMDMxMTAvBgNV BAMTKDFBQjUzNTY3RUQxRjIzNDYyNTU0RDgyNkZGRDdBRDk0RDZENjA3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChSK6HFRsvmrBBih9rTuPMr4mS 6fUcb2c0mwfDRD3jQym1sRj24wn/3Tu6LJ1axMlGpRK2CDldzJv7G8GRyk2PtF5A lnFQbNd6jeSYRaGvk4xkzk2ZIoSJNnuSKuHbcKrXN7KE1/9dlwoM0JL1Fsm2xPgq PVG2eozMC6hNi11nnUri3CypMN0tgZev1Kthzqghmp0DpKFiWCjXnAvgN0oXnOKl ZvWnumZkMbk6F4b/FL8IsZenkVPBmHQo5Z5PQGsPARJCU3Ft+r2zg3ThWLZg2Qdc Nf+LO29Gsa30PCXknklR2uKWxTYT20TL1lU+ogI8oGnNTB4mCUuz05yZfSQtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGrU1Z+0fI0YlVNgm/9etlNbWB8IwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsYF13HnOxBK L8rFcG3ksrl/Ed7AinO8sle0srdTvcR7wHKB03lboEbLOyWeQcWTdXqcaTJodXb6 qPsOnQmQnMDBW7swpisTBdmB5HFvR6SwwbF6ps4NKp8T2SJ3m4QnrOMxXgjjg2iP m7HWUzUsvUtR9++Ht4/daXJG1UwtPkEtNOdNpPOQbYnm/HHn7ixpAU7r5Uun8QhK 1Z5LrQw6ptkkU4HmGv2L5RA/UeEnDFQvWlVYrRATcfFWdTRrjGYLM+HPtHaQwBf4 nY4mAOcIPWGpeYOJD1mxHvzrf8vMHUbfTZZ674Ws9/QvSgR7V2FVR5Nhoq1qxQTC XywGXlSvdQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:30 2026 by rpki-client