$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json) Hash identifier: /cKLg4eNVl4Uod9G4Z6Sm+iA9Zmw3zemlyh1pp55OvE= Subject key identifier: 2B:AB:2C:DB:4B:00:60:CB:20:C7:8C:4D:AF:45:A3:0B:7E:C4:72:17 Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 582E639C8F581E0C8FF5A21206E8CE89A4A9350D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft Manifest number: 29 Signing time: Fri 29 May 2026 10:07:46 +0000 Manifest this update: Fri 29 May 2026 10:02:46 +0000 Manifest next update: Sat 30 May 2026 12:20:46 +0000 Files and hashes: 1: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=) 2: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: BgK/Lj6drhnhTELdavUW/u7gVqn1O8kEqjRdSV+QdFo=) 3: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=) 4: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2e:63:9c:8f:58:1e:0c:8f:f5:a2:12:06:e8:ce:89:a4:a9:35:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: May 29 10:02:46 2026 GMT Not After : May 30 12:20:46 2026 GMT Subject: CN=2BAB2CDB4B0060CB20C78C4DAF45A30B7EC47217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:79:fb:7c:b3:09:e2:a7:37:ff:28:14:22: eb:41:1f:cc:0f:6c:50:66:de:cd:f7:99:df:15:78: 75:17:17:3e:da:54:0c:bd:1c:7c:fc:15:2e:12:7b: 66:b4:de:1d:d7:48:1f:c4:af:d4:0e:3f:0d:e0:a0: 29:ca:f7:ea:14:89:1c:5a:c8:ba:76:45:58:1b:4d: 93:07:d7:4f:be:9b:b7:19:dd:78:fc:e6:4a:f7:a1: 70:1b:a8:1d:66:13:ba:47:e1:bd:3c:e5:da:cf:e7: 0e:8f:8a:9f:b6:cc:d7:6f:ef:ae:d5:7d:82:09:73: 03:e2:0a:22:37:48:7f:d4:c0:b1:0c:69:85:df:d1: b3:1e:b4:33:80:49:86:7d:aa:18:26:09:0b:dd:f9: e0:26:d0:6f:94:f5:46:2e:df:f2:93:e9:6c:56:dc: 96:de:37:37:70:34:de:d5:91:e7:d2:2a:7f:ad:90: 51:82:7d:50:c1:bc:78:c1:aa:70:e6:ff:dd:b9:00: 56:08:d4:b1:6c:16:0f:bc:35:01:19:d5:39:09:eb: 0d:3c:ad:f2:3c:aa:23:74:34:c2:06:0c:a6:f9:80: f4:f5:70:d9:51:9a:01:8c:a0:06:4a:70:cc:5b:6e: 30:55:b6:c9:ea:2d:55:76:30:9e:03:b8:44:b9:c5: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:2C:DB:4B:00:60:CB:20:C7:8C:4D:AF:45:A3:0B:7E:C4:72:17 X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:83:1b:11:7c:d2:55:de:7d:a6:22:30:2c:60:9e:3a:0a: 53:3c:45:c5:ae:ff:75:28:09:65:7a:81:6d:41:d4:f2:f5:b8: b9:ef:28:30:99:5e:ee:3f:e2:22:09:8b:ef:81:3a:88:5f:1f: fc:3a:02:72:79:6e:a9:d4:eb:ad:84:1d:17:bb:8e:fd:8f:28: 13:e6:c3:cd:62:87:2f:a2:4c:61:e3:2f:29:95:ec:79:12:10: fc:be:69:52:8d:e6:37:51:3d:5a:e3:37:db:84:68:11:6a:aa: 00:0d:ea:a3:24:6b:84:13:c9:17:12:68:8a:a1:c8:73:c3:0c: 60:36:02:5b:bf:85:36:c0:23:49:89:86:ac:48:99:07:5a:20: e2:c0:e1:f5:1b:f0:03:cc:f0:8f:69:04:0f:99:88:af:e7:24: 98:be:de:e5:49:ee:9b:56:6f:df:7b:cb:8c:75:4d:6d:3c:df: 53:db:b9:c1:93:9f:04:9c:e8:4e:a2:ab:09:e0:74:4a:3a:5d: 5b:1e:02:53:0a:0d:4b:94:fa:bd:35:69:00:a4:eb:5f:6c:8f: be:1f:b6:81:47:9c:1b:0c:b7:e2:86:3a:c2:72:a9:2e:9c:8a: 97:b9:d3:44:09:c8:b7:01:74:42:08:84:fb:da:46:1f:d5:fe: 3d:29:64:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWC5jnI9YHgyP9aISBujOiaSpNQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjA1MjkxMDAyNDZaFw0yNjA1MzAxMjIwNDZaMDMxMTAvBgNV BAMTKDJCQUIyQ0RCNEIwMDYwQ0IyMEM3OEM0REFGNDVBMzBCN0VDNDcyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWHn7fLMJ4qc3/ygUIutBH8wP bFBm3s33md8VeHUXFz7aVAy9HHz8FS4Se2a03h3XSB/Er9QOPw3goCnK9+oUiRxa yLp2RVgbTZMH10++m7cZ3Xj85kr3oXAbqB1mE7pH4b085drP5w6Pip+2zNdv767V fYIJcwPiCiI3SH/UwLEMaYXf0bMetDOASYZ9qhgmCQvd+eAm0G+U9UYu3/KT6WxW 3JbeNzdwNN7VkefSKn+tkFGCfVDBvHjBqnDm/925AFYI1LFsFg+8NQEZ1TkJ6w08 rfI8qiN0NMIGDKb5gPT1cNlRmgGMoAZKcMxbbjBVtsnqLVV2MJ4DuES5xVwbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK6ss20sAYMsgx4xNr0WjC37EchcwHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIxNTc2OTAyNTMwODI2MzEvMC9BNENGN0Y3MDlFMDYy ODQ5RTZCRjg0RTE0NDc0QTAzMjBFQUI3ODBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj2DGxF80lXe faYiMCxgnjoKUzxFxa7/dSgJZXqBbUHU8vW4ue8oMJle7j/iIgmL74E6iF8f/DoC cnluqdTrrYQdF7uO/Y8oE+bDzWKHL6JMYeMvKZXseRIQ/L5pUo3mN1E9WuM324Ro EWqqAA3qoyRrhBPJFxJoiqHIc8MMYDYCW7+FNsAjSYmGrEiZB1og4sDh9RvwA8zw j2kED5mIr+ckmL7e5Unum1Zv33vLjHVNbTzfU9u5wZOfBJzoTqKrCeB0SjpdWx4C UwoNS5T6vTVpAKTrX2yPvh+2gUecGwy34oY6wnKpLpyKl7nTRAnItwF0QgiE+9pG H9X+PSlk6w== -----END CERTIFICATE-----Generated at Fri May 29 22:03:30 2026 by rpki-client