$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: qlPjKpxRKESS7XMffASpXNFGWp6kDFQmhphwrgT0PEE= Subject key identifier: 4F:7C:50:38:67:DE:52:01:8A:69:63:73:0A:64:16:73:DA:C0:CA:71 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 0977D98792A4C42376CF2B54F1F976DE327CBB87 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 1A Signing time: Fri 29 May 2026 13:57:55 +0000 Manifest this update: Fri 29 May 2026 13:52:55 +0000 Manifest next update: Sat 30 May 2026 16:48:55 +0000 Files and hashes: 1: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: OmkddcXri2kz1DZSdOe9GTPBCk7CSFVTWwZT4SyhZps=) 2: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:77:d9:87:92:a4:c4:23:76:cf:2b:54:f1:f9:76:de:32:7c:bb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: May 29 13:52:55 2026 GMT Not After : May 30 16:48:55 2026 GMT Subject: CN=4F7C503867DE52018A6963730A641673DAC0CA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:45:6c:25:99:fb:b1:a4:12:ec:a6:aa:1d: f1:ec:37:ab:76:eb:ff:69:f7:52:14:65:49:ae:ff: 99:1b:69:c1:a0:d6:5b:d4:08:57:60:d0:99:b2:8b: a8:8f:2b:9f:76:31:55:fa:5b:15:bf:b4:68:5b:b5: c8:22:77:96:52:94:b4:83:bd:18:84:d0:18:d5:de: ac:34:13:1f:7b:65:3b:2f:6e:b9:76:77:d6:6b:a9: 48:61:2d:a4:47:1f:fa:19:5c:df:ac:fb:86:85:e0: a2:78:01:c1:7a:c2:7d:20:ec:45:5b:04:ed:bc:a9: 2a:15:f0:7e:6c:4a:94:54:bb:65:7e:ed:0a:b8:22: 50:be:03:18:d5:9e:e0:49:1b:7a:31:b3:ce:49:65: a9:27:54:2e:87:19:c8:7d:8c:59:f5:88:b9:ab:d6: 04:d1:27:9f:c4:01:81:74:e2:e7:15:38:d4:ea:28: 6c:47:62:7a:78:b4:8e:c8:8f:27:15:26:7a:99:6c: 15:e5:3b:30:6e:6c:65:95:94:64:ce:55:c5:1f:e5: 31:dc:84:0e:6a:72:95:fc:1f:13:e3:2e:de:45:d6: d8:67:63:d8:aa:67:5c:99:86:af:81:3e:bc:5d:74: 98:a4:9f:13:f8:37:e1:63:34:b8:74:94:f5:15:66: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:50:38:67:DE:52:01:8A:69:63:73:0A:64:16:73:DA:C0:CA:71 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e1:be:30:fc:b4:90:1a:bb:17:63:c8:9b:ff:7b:b1:37:3b: b1:30:1f:53:34:3b:16:ee:aa:20:ff:91:f9:92:cc:19:6a:80: 41:9d:c0:bd:e1:fc:c0:6f:54:ab:cc:b7:af:89:1f:1f:45:04: 1d:0e:2b:71:3a:67:bd:a3:01:82:72:cc:01:39:b8:47:91:04: 8f:f5:d1:0a:fc:8e:ef:82:4e:61:9b:cb:3b:af:22:ad:4c:8b: 15:8e:7b:48:d6:ef:36:e1:b0:64:b6:5a:35:1f:38:91:65:0c: 2d:57:28:4b:d3:7f:76:ae:d7:4d:f9:2b:ae:ae:2b:19:e0:72: dc:83:09:94:a4:24:1c:fd:d7:c8:9e:73:a6:e8:52:f2:de:8c: b4:d3:b0:1e:90:c3:1a:1b:35:60:55:ad:14:10:cd:c2:09:97: 2c:d4:47:2f:81:e1:24:6f:7c:a6:c6:2f:fd:fb:b4:37:cf:74: ab:a6:68:7c:ae:f9:ef:9e:26:7d:66:5d:14:aa:22:f8:1b:69: 58:1d:38:5d:8c:24:45:d9:99:e7:0b:e2:c7:c9:7e:85:4c:e4: 3c:54:f1:48:a6:14:1d:31:98:ff:88:95:4c:89:c8:32:51:7a: 7b:ff:18:3b:5e:a5:25:c7:aa:ee:2e:32:60:47:b9:ad:bf:ad: cf:11:25:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCXfZh5KkxCN2zytU8fl23jJ8u4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA1MjkxMzUyNTVaFw0yNjA1MzAxNjQ4NTVaMDMxMTAvBgNV BAMTKDRGN0M1MDM4NjdERTUyMDE4QTY5NjM3MzBBNjQxNjczREFDMENBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLz0VsJZn7saQS7KaqHfHsN6t2 6/9p91IUZUmu/5kbacGg1lvUCFdg0Jmyi6iPK592MVX6WxW/tGhbtcgid5ZSlLSD vRiE0BjV3qw0Ex97ZTsvbrl2d9ZrqUhhLaRHH/oZXN+s+4aF4KJ4AcF6wn0g7EVb BO28qSoV8H5sSpRUu2V+7Qq4IlC+AxjVnuBJG3oxs85JZaknVC6HGch9jFn1iLmr 1gTRJ5/EAYF04ucVONTqKGxHYnp4tI7IjycVJnqZbBXlOzBubGWVlGTOVcUf5THc hA5qcpX8HxPjLt5F1thnY9iqZ1yZhq+BPrxddJiknxP4N+FjNLh0lPUVZrx1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT3xQOGfeUgGKaWNzCmQWc9rAynEwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOG+MPy0kBq7 F2PIm/97sTc7sTAfUzQ7Fu6qIP+R+ZLMGWqAQZ3AveH8wG9Uq8y3r4kfH0UEHQ4r cTpnvaMBgnLMATm4R5EEj/XRCvyO74JOYZvLO68irUyLFY57SNbvNuGwZLZaNR84 kWUMLVcoS9N/dq7XTfkrrq4rGeBy3IMJlKQkHP3XyJ5zpuhS8t6MtNOwHpDDGhs1 YFWtFBDNwgmXLNRHL4HhJG98psYv/fu0N890q6ZofK75754mfWZdFKoi+BtpWB04 XYwkRdmZ5wvix8l+hUzkPFTxSKYUHTGY/4iVTInIMlF6e/8YO16lJceq7i4yYEe5 rb+tzxElbA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:57 2026 by rpki-client