$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft File: CA269469647823B4286B5E34CC0E3D54FD201592.mft (raw, json) Hash identifier: eQi6cBXK5PIp0XPEu2dIiWjz6Ko1AOSwA62x7QkB+f4= Subject key identifier: B5:DB:66:A4:3A:C5:A7:67:F0:C5:82:5B:F8:A2:50:65:A5:FF:70:E7 Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 Certificate issuer: /CN=CA269469647823B4286B5E34CC0E3D54FD201592 Certificate serial: 5F7C45409AB8D02051506BF24A7B60E44113763E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft Manifest number: 21 Signing time: Fri 29 May 2026 10:47:47 +0000 Manifest this update: Fri 29 May 2026 10:42:47 +0000 Manifest next update: Sat 30 May 2026 11:19:47 +0000 Files and hashes: 1: 3130332e3231322e35302e302f32342d3234203d3e203538353433.roa (hash: xaN0L6MIhYTiVT+4KdxJh2bu0A3f3Mf9iKQ9KbjS3CQ=) 2: CA269469647823B4286B5E34CC0E3D54FD201592.crl (hash: e8rIEwA2qfjpN00DWm/134VcQvY8fX0ByOrR9Xi3nSE=) 3: 3130332e3231322e35312e302f32342d3234203d3e203538353433.roa (hash: B9aDkTKHMGvRXsX22b7vWHUXzf2hOERSdesDrjN6KIw=) 4: 3130332e3231322e34382e302f32342d3234203d3e203538353433.roa (hash: 5/39JD8QAhr2k0Nnag8g+qBgUlArx+iKMhC27wBai7U=) 5: 3130332e3231322e34392e302f32342d3234203d3e203538353433.roa (hash: aTYf9AOnLR4L+m/8HQCj4yM2GzM0NG41z2CqUQXNMRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:45:40:9a:b8:d0:20:51:50:6b:f2:4a:7b:60:e4:41:13:76:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592 Validity Not Before: May 29 10:42:47 2026 GMT Not After : May 30 11:19:47 2026 GMT Subject: CN=B5DB66A43AC5A767F0C5825BF8A25065A5FF70E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:2f:2f:11:9a:46:40:d6:c8:1a:ea:44:31: b1:52:86:fe:8c:ad:89:2e:f7:bf:c0:78:ab:0b:06: 39:eb:38:63:c9:ed:4f:4c:93:4e:00:78:21:5e:c7: d9:0b:04:4b:39:81:b5:01:ec:99:fa:46:b9:5d:98: f9:bb:b5:3e:79:78:0c:da:e5:7d:b3:a9:98:2f:29: 62:7c:0b:1e:40:3d:b9:27:1b:e2:31:a4:7d:db:14: 2e:12:f8:66:b1:df:32:ce:ee:6a:1c:0e:cf:d9:0f: 9f:b1:a1:a3:99:b6:d7:5b:a8:d4:82:69:28:05:f3: 57:f0:3a:e0:eb:ae:39:63:fc:29:ff:80:6a:a9:b3: 7e:c9:24:a7:c2:33:0a:25:56:2e:3b:34:5e:b0:20: 71:01:94:91:ab:bf:ee:f9:42:41:18:91:a8:da:e1: 56:b0:a7:72:50:e4:ea:c9:7f:0e:a8:26:f7:dd:11: 2f:ed:af:73:6e:ff:e7:46:31:11:f9:ca:be:cf:2c: 0f:5b:39:8f:78:ac:17:a7:03:e1:f4:24:f4:24:4f: f0:b4:24:45:25:77:b5:f2:aa:e5:0d:68:bc:b6:95: 88:df:f2:ac:41:8a:22:a7:68:06:0d:c8:fd:9e:63: 53:2c:6d:c7:b5:92:86:9f:5e:22:e3:f9:5f:47:51: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:66:A4:3A:C5:A7:67:F0:C5:82:5B:F8:A2:50:65:A5:FF:70:E7 X509v3 Authority Key Identifier: keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:d2:b6:aa:0d:a6:e5:3f:ab:74:ed:b1:ef:6d:72:7d:64: c6:e9:a7:ee:69:ce:58:9d:5d:89:e0:48:03:ca:da:07:23:b6: e4:79:04:79:27:47:db:53:d3:aa:f0:5a:15:9d:8a:8c:b2:73: d2:dc:7f:87:a8:11:ec:e7:40:4f:a2:a0:41:02:b2:ac:30:02: 2d:5c:80:bc:6c:b4:b2:a8:eb:5b:a1:1c:36:da:fe:7b:7c:77: 7d:16:1f:db:29:e3:82:c7:e0:f9:c5:8a:93:77:1d:90:94:4c: 03:28:ea:9f:e3:c8:3d:e9:84:b2:6a:70:e5:ce:9a:52:d8:bd: 81:5a:e5:f7:5d:a2:bf:3e:5c:6f:f6:94:d1:25:71:6a:6b:1d: 1e:1c:45:f1:93:f8:89:da:6b:c4:e8:33:7c:96:8e:79:93:09: 4d:b9:1c:ec:08:a4:9d:cb:32:80:2d:16:10:0a:c6:4f:12:95: 8c:63:bd:d7:07:33:72:15:10:41:0c:a7:15:c8:71:26:b8:8c: 5b:bf:ae:f1:be:1c:b7:f9:9a:f0:96:05:1f:f8:7a:30:41:b1: ca:44:f1:15:05:d0:4c:87:86:4c:03:a7:02:02:f6:87:e9:f9: 63:78:be:5c:1e:01:7f:a2:ed:ba:de:99:44:06:37:b4:ee:de: 11:01:81:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX3xFQJq40CBRUGvySntg5EETdj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRG RDIwMTU5MjAeFw0yNjA1MjkxMDQyNDdaFw0yNjA1MzAxMTE5NDdaMDMxMTAvBgNV BAMTKEI1REI2NkE0M0FDNUE3NjdGMEM1ODI1QkY4QTI1MDY1QTVGRjcwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kS8vEZpGQNbIGupEMbFShv6M rYku97/AeKsLBjnrOGPJ7U9Mk04AeCFex9kLBEs5gbUB7Jn6RrldmPm7tT55eAza 5X2zqZgvKWJ8Cx5APbknG+IxpH3bFC4S+Gax3zLO7mocDs/ZD5+xoaOZttdbqNSC aSgF81fwOuDrrjlj/Cn/gGqps37JJKfCMwolVi47NF6wIHEBlJGrv+75QkEYkaja 4Vawp3JQ5OrJfw6oJvfdES/tr3Nu/+dGMRH5yr7PLA9bOY94rBenA+H0JPQkT/C0 JEUld7XyquUNaLy2lYjf8qxBiiKnaAYNyP2eY1Msbce1koafXiLj+V9HUaRnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtdtmpDrFp2fwxYJb+KJQZaX/cOcwHwYDVR0j BBgwFoAUyiaUaWR4I7Qoa140zA49VP0gFZIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDY5MjI3MzUxMTEzNzI4NS8wL0NBMjY5NDY5NjQ3ODIzQjQyODZCNUUzNENDMEUz RDU0RkQyMDE1OTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRGRDIwMTU5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2OTIyNzM1MTExMzcyODUvMC9DQTI2OTQ2OTY0Nzgy M0I0Mjg2QjVFMzRDQzBFM0Q1NEZEMjAxNTkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtLStqoNpuU/ q3Ttse9tcn1kxumn7mnOWJ1dieBIA8raByO25HkEeSdH21PTqvBaFZ2KjLJz0tx/ h6gR7OdAT6KgQQKyrDACLVyAvGy0sqjrW6EcNtr+e3x3fRYf2ynjgsfg+cWKk3cd kJRMAyjqn+PIPemEsmpw5c6aUti9gVrl912ivz5cb/aU0SVxamsdHhxF8ZP4idpr xOgzfJaOeZMJTbkc7AikncsygC0WEArGTxKVjGO91wczchUQQQynFchxJriMW7+u 8b4ct/ma8JYFH/h6MEGxykTxFQXQTIeGTAOnAgL2h+n5Y3i+XB4Bf6Ltut6ZRAY3 tO7eEQGBmg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:32 2026 by rpki-client