$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: DJ54Dknx/h7ccLnQy6CHSZa2aN/1zMLLCtPyOzW2sUE= Subject key identifier: 88:FA:F3:17:B1:5A:26:0B:D3:9E:12:6C:88:59:19:ED:16:6B:97:AB Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 62133A5E5DE12987571179FA96CAE8B82A7D375E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 1F Signing time: Fri 29 May 2026 05:22:39 +0000 Manifest this update: Fri 29 May 2026 05:17:39 +0000 Manifest next update: Sat 30 May 2026 07:31:39 +0000 Files and hashes: 1: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) 2: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: 0/hnYsvMV0++VATxBGyMJ0Kj5NqeJ8g5apq3HsyDwms=) 3: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:13:3a:5e:5d:e1:29:87:57:11:79:fa:96:ca:e8:b8:2a:7d:37:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: May 29 05:17:39 2026 GMT Not After : May 30 07:31:39 2026 GMT Subject: CN=88FAF317B15A260BD39E126C885919ED166B97AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:8f:db:ad:c4:8a:61:b4:3b:21:e9:04:fb: 29:a4:e3:b0:ed:50:1f:cf:ce:61:b3:b3:d0:5e:a0: 3a:de:45:69:a4:8a:1e:e7:fa:9c:2f:19:84:17:15: 2b:d5:47:ba:a7:a8:67:a9:ed:09:88:81:cf:d5:73: 09:fa:b1:2b:ed:9f:1f:4a:27:2c:be:c8:b0:45:bb: a3:25:95:4a:e1:1f:2e:29:85:25:f3:ed:86:09:82: 64:b9:1c:25:49:ac:82:5e:66:1c:0a:f7:c6:df:7f: b9:f5:60:17:fa:26:a5:cf:1c:e4:9f:0d:8a:6b:64: db:d4:34:22:71:a0:ba:e2:b9:5d:60:ab:d4:41:e1: ab:d0:84:ff:b2:08:28:d9:fe:42:52:f8:29:14:9f: 65:f3:90:55:36:4f:07:99:d0:ff:f4:0f:73:07:f1: 45:6f:d9:99:98:d9:16:38:d5:0b:87:c0:ae:81:2c: fd:92:35:b5:5d:8f:fd:ca:9d:19:b6:28:d5:57:99: 8a:04:71:cb:84:85:a0:cc:34:78:b1:9e:a4:63:aa: 99:51:5b:e0:76:32:99:8b:e2:fb:c8:ef:84:62:28: 6a:08:3c:75:b3:d7:c2:d7:c9:66:df:f6:8a:8f:bf: 57:67:66:e8:da:3c:d2:a7:bc:a1:2d:4b:8b:43:5a: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:F3:17:B1:5A:26:0B:D3:9E:12:6C:88:59:19:ED:16:6B:97:AB X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:42:e5:26:b4:42:de:81:d4:65:9f:d1:f9:0b:4f:52:a5:3f: 4e:41:da:60:cc:8e:b6:88:5a:6e:e9:85:69:36:62:63:01:45: 8e:01:68:6d:85:b8:52:ed:1b:6b:d1:8a:9e:8e:18:4a:75:61: e2:bc:67:a7:87:b4:08:9a:5c:ee:6d:42:13:70:be:d4:93:bd: fc:5f:7d:09:b0:1e:b5:17:3d:26:53:22:bf:a9:e9:44:37:c0: 2a:3b:46:fa:06:05:30:d4:8b:e8:28:a2:14:de:3a:64:af:60: 8a:0f:8b:c1:19:15:1d:50:fd:70:78:50:5f:d1:b4:2c:cb:53: 53:73:a6:99:1d:e9:c9:dc:bf:f6:bf:69:66:a0:04:2f:3f:cd: af:8a:36:03:d9:5a:14:6f:65:70:86:71:93:af:7e:c4:25:f6: 6f:7e:8e:4d:b9:02:07:3f:dc:aa:bb:ed:e1:4e:cf:43:e7:ad: a2:d7:80:6e:e8:f7:14:3a:71:e5:f2:40:9e:05:92:ba:32:e8: 1b:38:64:00:67:0d:b0:73:c1:a8:14:8d:04:b3:70:83:4b:9e: b3:7b:ce:05:ef:22:5f:2d:f4:da:24:af:97:00:ff:d1:e3:d1: 4b:fe:f8:c2:32:f2:71:9d:a4:1c:8c:b9:40:ec:a9:a7:50:ef: dd:18:ac:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYhM6Xl3hKYdXEXn6lsrouCp9N14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA1MjkwNTE3MzlaFw0yNjA1MzAwNzMxMzlaMDMxMTAvBgNV BAMTKDg4RkFGMzE3QjE1QTI2MEJEMzlFMTI2Qzg4NTkxOUVEMTY2Qjk3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5Y/brcSKYbQ7IekE+ymk47Dt UB/PzmGzs9BeoDreRWmkih7n+pwvGYQXFSvVR7qnqGep7QmIgc/Vcwn6sSvtnx9K Jyy+yLBFu6MllUrhHy4phSXz7YYJgmS5HCVJrIJeZhwK98bff7n1YBf6JqXPHOSf DYprZNvUNCJxoLriuV1gq9RB4avQhP+yCCjZ/kJS+CkUn2XzkFU2TweZ0P/0D3MH 8UVv2ZmY2RY41QuHwK6BLP2SNbVdj/3KnRm2KNVXmYoEccuEhaDMNHixnqRjqplR W+B2MpmL4vvI74RiKGoIPHWz18LXyWbf9oqPv1dnZujaPNKnvKEtS4tDWgzPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiPrzF7FaJgvTnhJsiFkZ7RZrl6swHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUELlJrRC3oHU ZZ/R+QtPUqU/TkHaYMyOtohabumFaTZiYwFFjgFobYW4Uu0ba9GKno4YSnVh4rxn p4e0CJpc7m1CE3C+1JO9/F99CbAetRc9JlMiv6npRDfAKjtG+gYFMNSL6CiiFN46 ZK9gig+LwRkVHVD9cHhQX9G0LMtTU3OmmR3pydy/9r9pZqAELz/Nr4o2A9laFG9l cIZxk69+xCX2b36OTbkCBz/cqrvt4U7PQ+etoteAbuj3FDpx5fJAngWSujLoGzhk AGcNsHPBqBSNBLNwg0ues3vOBe8iXy302iSvlwD/0ePRS/74wjLycZ2kHIy5QOyp p1Dv3RisYw== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client