$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: VQxGrBsqLiT7AUKZllWMvfUvEkbQvuTTm4ymXi8JOd8= Subject key identifier: 71:F8:56:6B:0F:18:18:AA:68:EA:98:5C:F3:87:69:22:8A:43:DF:39 Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 69E0F493AD965C602DB19F9260A09673AAF87DFC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 20 Signing time: Fri 29 May 2026 07:57:44 +0000 Manifest this update: Fri 29 May 2026 07:52:44 +0000 Manifest next update: Sat 30 May 2026 11:08:44 +0000 Files and hashes: 1: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) 2: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: Xy2WVTCk4B6kyn2sRUfe/IUennOxOur+8LMHUkVs/8Y=) 3: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e0:f4:93:ad:96:5c:60:2d:b1:9f:92:60:a0:96:73:aa:f8:7d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: May 29 07:52:44 2026 GMT Not After : May 30 11:08:44 2026 GMT Subject: CN=71F8566B0F1818AA68EA985CF38769228A43DF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:28:6b:95:c3:51:50:6d:81:f6:f7:2e:97: 02:bc:16:c3:2e:b9:f0:86:b6:90:29:48:92:aa:ec: db:e2:d2:e4:d9:1a:41:59:17:50:b5:8a:e7:d4:bb: 1c:89:4e:c8:98:e3:ce:76:cb:0f:ea:7f:44:66:dc: df:45:ae:35:b1:8c:ef:e2:14:e5:38:2e:01:7c:c6: c8:f1:54:53:8c:ee:cb:14:3e:ee:85:15:13:d9:ca: d9:52:63:40:c5:5d:c5:24:ac:43:b8:78:f2:14:44: b4:11:cf:bd:b0:29:8a:9c:d3:51:62:9d:70:02:c9: 79:8c:73:e8:84:45:3b:ab:01:32:9f:ca:74:98:1c: 9b:f0:ab:18:26:f3:be:9a:ae:1a:fc:84:69:7b:8d: 0d:e2:b9:18:f7:ac:d2:9b:b2:b6:6a:64:bc:e7:64: 02:60:08:39:06:79:c6:e8:c7:ae:4a:ba:d0:8c:d9: 62:e0:3d:7d:cb:de:c6:b2:6d:48:c9:c5:93:55:50: 19:ad:a1:86:19:79:be:b9:09:77:94:75:69:29:1a: 35:6e:63:8e:03:74:73:32:c3:a7:2c:86:a7:bb:8c: 3f:c7:62:45:36:7b:32:f1:93:ad:dd:f7:9a:de:4b: 0e:03:d0:c9:ce:66:9d:60:b3:52:65:1e:57:ed:e7: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:56:6B:0F:18:18:AA:68:EA:98:5C:F3:87:69:22:8A:43:DF:39 X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:29:2a:88:c7:04:2f:93:02:c6:a0:e5:6a:a5:33:52:16:57: fb:11:33:77:4f:8d:af:b3:4c:ff:27:be:c0:c1:3c:22:11:c5: 71:33:c3:b9:c8:e4:ed:5f:8a:fc:97:f9:70:07:a6:34:50:20: e9:59:5d:81:28:09:8b:30:f5:ae:ef:9a:49:33:91:14:f9:2d: 12:e5:8c:34:86:a7:d0:c6:04:d4:e4:13:61:00:47:33:2c:25: 96:50:b4:9b:e5:72:25:ec:ec:3b:c0:d2:b9:10:c5:14:1e:29: d2:33:39:3c:e7:58:3f:02:13:ae:5b:8b:32:d1:fe:6f:f7:de: 10:37:c5:e4:6f:e1:b8:4d:6e:00:13:10:00:57:37:2f:c1:ea: d9:2c:7e:34:55:fc:00:57:4a:f5:8a:85:e2:2f:b1:9a:2c:16: a2:d5:d4:ce:19:19:ba:8b:d6:ad:4f:3c:60:ec:71:2f:6b:97: 28:62:4c:a1:07:79:42:4d:99:e8:0b:cb:95:25:35:4d:d8:e8: 11:9e:17:29:8d:23:5e:9c:57:d1:43:60:4b:d1:e4:b8:16:3a: 89:29:8e:cb:b4:52:51:ae:fd:96:97:09:1a:33:bd:cb:b6:9d: 0f:a0:b4:10:e2:fb:96:c0:ca:5a:01:e0:8a:0c:54:ef:c5:94: 4b:b0:e2:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaeD0k62WXGAtsZ+SYKCWc6r4ffwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA1MjkwNzUyNDRaFw0yNjA1MzAxMTA4NDRaMDMxMTAvBgNV BAMTKDcxRjg1NjZCMEYxODE4QUE2OEVBOTg1Q0YzODc2OTIyOEE0M0RGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41ChrlcNRUG2B9vculwK8FsMu ufCGtpApSJKq7Nvi0uTZGkFZF1C1iufUuxyJTsiY4852yw/qf0Rm3N9FrjWxjO/i FOU4LgF8xsjxVFOM7ssUPu6FFRPZytlSY0DFXcUkrEO4ePIURLQRz72wKYqc01Fi nXACyXmMc+iERTurATKfynSYHJvwqxgm876arhr8hGl7jQ3iuRj3rNKbsrZqZLzn ZAJgCDkGecbox65KutCM2WLgPX3L3saybUjJxZNVUBmtoYYZeb65CXeUdWkpGjVu Y44DdHMyw6cshqe7jD/HYkU2ezLxk63d95reSw4D0MnOZp1gs1JlHlft5wa/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcfhWaw8YGKpo6phc84dpIopD3zkwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkykqiMcEL5MC xqDlaqUzUhZX+xEzd0+Nr7NM/ye+wME8IhHFcTPDucjk7V+K/Jf5cAemNFAg6Vld gSgJizD1ru+aSTORFPktEuWMNIan0MYE1OQTYQBHMywlllC0m+VyJezsO8DSuRDF FB4p0jM5POdYPwITrluLMtH+b/feEDfF5G/huE1uABMQAFc3L8Hq2Sx+NFX8AFdK 9YqF4i+xmiwWotXUzhkZuovWrU88YOxxL2uXKGJMoQd5Qk2Z6AvLlSU1TdjoEZ4X KY0jXpxX0UNgS9HkuBY6iSmOy7RSUa79lpcJGjO9y7adD6C0EOL7lsDKWgHgigxU 78WUS7Di/w== -----END CERTIFICATE-----Generated at Fri May 29 22:02:54 2026 by rpki-client