$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: ZrlCqDbPFUB2u38mg3KPPKelHV/7QINtGdgOft0QwkY= Subject key identifier: 67:81:84:85:D1:B2:09:D0:59:5C:3B:BB:06:57:DE:5B:3E:63:65:8A Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 2F52D7FE429337F4149D07C453C2697E73622C55 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: 4F Signing time: Thu 04 Jun 2026 10:19:29 +0000 Manifest this update: Thu 04 Jun 2026 10:14:29 +0000 Manifest next update: Fri 05 Jun 2026 10:54:29 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: IgFuhBrH/tqOUeMj/8tbB/9K+UxrE+Bo+vsHbyzK+uQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 10:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:52:d7:fe:42:93:37:f4:14:9d:07:c4:53:c2:69:7e:73:62:2c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: Jun 4 10:14:29 2026 GMT Not After : Jun 5 10:54:29 2026 GMT Subject: CN=67818485D1B209D0595C3BBB0657DE5B3E63658A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:75:38:5d:38:2e:6f:eb:f1:33:ff:7d:91: 59:5d:53:88:e1:8c:bb:32:54:e0:c0:33:32:af:94: 6a:e1:95:6d:ab:4a:7c:10:b7:60:17:70:c5:09:ce: 26:d8:f5:62:0c:99:d4:1c:56:07:79:c2:70:2c:a5: 87:d9:7e:ff:de:57:6d:76:95:cc:95:1a:66:0e:7e: 0b:90:2e:47:7f:b3:34:df:de:f9:2c:21:ec:0f:cc: c5:d7:50:17:6b:61:05:84:47:e3:4c:f3:47:a5:a6: 55:47:74:7f:93:90:74:7b:14:3c:9b:fe:29:39:0b: c9:c4:3b:81:4f:77:33:cf:94:aa:aa:60:a0:73:9f: 8f:8f:8d:27:14:f4:37:8a:1c:c2:20:11:41:83:04: 19:46:ab:b8:15:30:33:01:b8:82:0b:f0:54:3f:ea: 8b:df:6b:ce:7f:d5:d4:92:d0:c6:7d:b2:5d:55:5a: 39:50:6f:72:37:f9:53:24:4d:2f:77:6a:ff:be:bc: 78:ae:db:a8:7f:06:61:74:9a:50:3a:72:91:cd:d9: 02:fb:10:9e:75:0d:28:a6:d9:71:dd:d6:a2:5e:3e: 09:8b:4f:5f:2b:e0:97:80:fa:4a:f6:f9:bb:ae:33: e4:50:95:70:29:f2:6f:5d:e1:c1:97:27:a9:3e:f2: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:84:85:D1:B2:09:D0:59:5C:3B:BB:06:57:DE:5B:3E:63:65:8A X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:40:ac:c7:a6:2b:20:6d:5c:23:92:db:21:ec:0f:f4:8d:43: e5:16:37:30:f8:fe:80:07:29:ed:9a:b1:71:f8:80:4e:e8:85: d8:13:dc:d6:12:3e:db:b4:86:15:f3:4b:78:29:02:38:f2:bc: f5:73:97:a6:ab:ce:d1:ac:68:97:12:1a:0d:a0:1f:31:39:e7: 90:64:d6:c6:fc:c0:9a:98:2b:5e:03:10:e9:5f:fc:8b:f4:d3: fc:54:84:f7:c1:cd:a4:1a:22:74:88:00:9c:02:87:e3:7e:48: 99:f0:61:6c:7d:69:d7:27:68:a1:b8:e0:ff:b2:c9:dd:2f:77: c2:de:48:96:b6:b3:f7:59:22:bf:2e:56:3a:0f:71:89:09:8a: 61:f8:c9:ca:4a:fc:ff:68:55:50:28:dd:2b:33:80:30:09:82: de:84:1a:04:5c:d6:8f:95:35:c2:47:81:1d:5f:a7:8a:b7:77: 11:64:50:25:e0:2b:82:0e:4e:13:83:84:a2:fc:52:56:b3:21: 1c:a9:ad:8f:3b:88:09:33:02:b6:d7:73:89:8a:4a:60:81:b8: ac:e7:39:71:c6:2b:68:d0:7b:4b:12:26:a5:10:6b:01:69:7a: b7:bf:14:14:29:17:59:78:2b:7c:5c:22:f7:19:8c:ae:06:86: 4a:62:06:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL1LX/kKTN/QUnQfEU8JpfnNiLFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA2MDQxMDE0MjlaFw0yNjA2MDUxMDU0MjlaMDMxMTAvBgNV BAMTKDY3ODE4NDg1RDFCMjA5RDA1OTVDM0JCQjA2NTdERTVCM0U2MzY1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCXU4XTgub+vxM/99kVldU4jh jLsyVODAMzKvlGrhlW2rSnwQt2AXcMUJzibY9WIMmdQcVgd5wnAspYfZfv/eV212 lcyVGmYOfguQLkd/szTf3vksIewPzMXXUBdrYQWER+NM80elplVHdH+TkHR7FDyb /ik5C8nEO4FPdzPPlKqqYKBzn4+PjScU9DeKHMIgEUGDBBlGq7gVMDMBuIIL8FQ/ 6ovfa85/1dSS0MZ9sl1VWjlQb3I3+VMkTS93av++vHiu26h/BmF0mlA6cpHN2QL7 EJ51DSim2XHd1qJePgmLT18r4JeA+kr2+buuM+RQlXAp8m9d4cGXJ6k+8lfLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ4GEhdGyCdBZXDu7BlfeWz5jZYowHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0Csx6YrIG1c I5LbIewP9I1D5RY3MPj+gAcp7ZqxcfiATuiF2BPc1hI+27SGFfNLeCkCOPK89XOX pqvO0axolxIaDaAfMTnnkGTWxvzAmpgrXgMQ6V/8i/TT/FSE98HNpBoidIgAnAKH 435ImfBhbH1p1ydoobjg/7LJ3S93wt5Ilraz91kivy5WOg9xiQmKYfjJykr8/2hV UCjdKzOAMAmC3oQaBFzWj5U1wkeBHV+nird3EWRQJeArgg5OE4OEovxSVrMhHKmt jzuICTMCttdziYpKYIG4rOc5ccYraNB7SxImpRBrAWl6t78UFCkXWXgrfFwi9xmM rgaGSmIG8Q== -----END CERTIFICATE-----Generated at Thu Jun 4 15:02:44 2026 by rpki-client