$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: L0/dxOo7rZAqZEEjMC3paDDfA2YYWBIwgQfWzffTMmU= Subject key identifier: 81:00:AE:F6:C1:5B:5D:75:08:46:F0:95:47:48:BF:40:F4:96:B1:4F Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 2ED3D08D8370270EEC6F8C1807C62FCDB082CDED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: 1A Signing time: Fri 29 May 2026 19:08:05 +0000 Manifest this update: Fri 29 May 2026 19:03:05 +0000 Manifest next update: Sat 30 May 2026 22:03:05 +0000 Files and hashes: 1: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 2: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 3: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: LRIXEGobslnI5IY9YqB+STPNoULcQGJiuEiSluFRegE=) 4: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 5: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) 6: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d3:d0:8d:83:70:27:0e:ec:6f:8c:18:07:c6:2f:cd:b0:82:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: May 29 19:03:05 2026 GMT Not After : May 30 22:03:05 2026 GMT Subject: CN=8100AEF6C15B5D750846F0954748BF40F496B14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:36:0f:66:06:2a:f0:34:56:3f:b3:28:57: 7e:7b:92:74:1d:4a:43:3d:b6:69:a0:bc:26:56:2e: 8d:7c:7b:1c:b4:85:50:b4:e7:38:ef:e5:09:f3:d3: 85:d9:78:87:91:26:bf:ac:cd:28:7c:c4:2b:71:e6: c4:bb:b5:76:3b:dc:f9:33:64:87:b4:78:66:5c:b0: 3b:4a:16:8b:1d:e9:4b:1d:2e:b4:ca:bc:df:99:1d: a0:31:94:eb:5c:d0:27:ef:bd:ed:d3:09:80:9a:0e: 50:95:0d:e4:9e:ac:ed:b9:7d:3f:15:63:c1:66:6d: bb:4e:79:25:d1:6f:7a:d1:6b:1b:e0:8a:90:92:13: 35:a7:38:35:d6:6a:05:93:a5:c7:93:3b:99:1d:07: be:08:f7:83:8c:82:d2:5f:05:00:28:f0:d8:49:2b: fc:7a:a9:d0:4e:cb:06:cb:96:20:0a:5e:2b:b0:07: 5c:ca:e5:4e:78:74:57:34:e0:df:df:d8:42:60:2e: eb:e4:df:14:f6:d7:08:1f:10:f9:33:9e:ec:d5:12: a6:5d:89:ea:9e:05:5f:e1:0e:9d:c7:eb:a6:a1:06: bb:b9:0b:86:0b:c2:da:f6:98:6b:a6:5c:e0:cd:1e: ae:3e:fc:d2:58:d5:ad:52:63:1d:f7:73:b0:d1:e5: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:00:AE:F6:C1:5B:5D:75:08:46:F0:95:47:48:BF:40:F4:96:B1:4F X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3a:53:c4:43:40:29:68:f7:c8:be:8a:a7:92:e1:f9:55:fe: a4:12:34:41:66:4c:8d:e5:65:4b:55:fd:dd:0b:26:a7:74:97: ae:37:65:ab:9f:45:d5:e9:c8:cf:20:0a:3b:f1:f2:5e:93:d0: b5:ac:74:cb:36:1d:f8:3c:ec:9d:21:70:7f:90:ef:c4:93:d4: 37:61:27:e9:fc:cf:63:6e:df:28:6d:d2:80:af:e6:a3:3a:97: 8d:9d:e5:64:6a:b6:36:2c:2a:02:30:7d:1c:d6:5b:ef:a8:ce: 6b:43:ab:3f:34:a2:b7:56:a3:88:1e:3d:22:0b:09:16:77:ad: be:7b:6e:c5:6c:62:ab:96:ee:65:c5:3b:c7:94:07:9b:f3:10: e9:f0:ca:e7:56:fd:a2:d2:c0:e5:09:23:aa:a5:3f:24:a7:3a: ee:e0:e1:de:a8:cb:e3:8f:ff:22:88:c1:93:8e:89:28:8e:34: 26:91:ca:57:c8:33:66:cd:d5:63:cd:7f:ef:13:78:1e:29:87: 0a:91:1c:fa:e3:18:ec:8e:3b:47:5d:41:be:91:a6:1b:9a:e0: 72:86:4f:d3:ec:a9:42:82:70:fe:59:d3:04:0b:0c:af:c4:7d: 5b:3b:46:02:f9:06:f0:60:ae:23:ac:0b:19:c8:bf:35:75:98: 08:34:45:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULtPQjYNwJw7sb4wYB8YvzbCCze0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjA1MjkxOTAzMDVaFw0yNjA1MzAyMjAzMDVaMDMxMTAvBgNV BAMTKDgxMDBBRUY2QzE1QjVENzUwODQ2RjA5NTQ3NDhCRjQwRjQ5NkIxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxjYPZgYq8DRWP7MoV357knQd SkM9tmmgvCZWLo18exy0hVC05zjv5Qnz04XZeIeRJr+szSh8xCtx5sS7tXY73Pkz ZIe0eGZcsDtKFosd6UsdLrTKvN+ZHaAxlOtc0Cfvve3TCYCaDlCVDeSerO25fT8V Y8FmbbtOeSXRb3rRaxvgipCSEzWnODXWagWTpceTO5kdB74I94OMgtJfBQAo8NhJ K/x6qdBOywbLliAKXiuwB1zK5U54dFc04N/f2EJgLuvk3xT21wgfEPkznuzVEqZd ieqeBV/hDp3H66ahBru5C4YLwtr2mGumXODNHq4+/NJY1a1SYx33c7DR5TJhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgQCu9sFbXXUIRvCVR0i/QPSWsU8wHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDpTxENAKWj3 yL6Kp5Lh+VX+pBI0QWZMjeVlS1X93Qsmp3SXrjdlq59F1enIzyAKO/HyXpPQtax0 yzYd+DzsnSFwf5DvxJPUN2En6fzPY27fKG3SgK/mozqXjZ3lZGq2NiwqAjB9HNZb 76jOa0OrPzSit1ajiB49IgsJFnetvntuxWxiq5buZcU7x5QHm/MQ6fDK51b9otLA 5QkjqqU/JKc67uDh3qjL44//IojBk46JKI40JpHKV8gzZs3VY81/7xN4HimHCpEc +uMY7I47R11BvpGmG5rgcoZP0+ypQoJw/lnTBAsMr8R9WztGAvkG8GCuI6wLGci/ NXWYCDRFnQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:56 2026 by rpki-client