$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json) Hash identifier: h/xL0+jYAaf+FNYyYSRbEZG4Z5Xz83YK9Z2BCI6tf30= Subject key identifier: 6C:7A:12:6F:AA:38:3B:76:94:94:CA:7B:BF:33:1A:8A:1B:7B:70:76 Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Certificate serial: 5BC2ED909806DBF37E8052210921AFA9D27C8DC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft Manifest number: 16 Signing time: Fri 29 May 2026 07:17:42 +0000 Manifest this update: Fri 29 May 2026 07:12:42 +0000 Manifest next update: Sat 30 May 2026 10:10:42 +0000 Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: bZA7rWXqdFlcNm08EU46a4IJJqoWZM0E9NQbKN6ZFa8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c2:ed:90:98:06:db:f3:7e:80:52:21:09:21:af:a9:d2:7c:8d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Validity Not Before: May 29 07:12:42 2026 GMT Not After : May 30 10:10:42 2026 GMT Subject: CN=6C7A126FAA383B769494CA7BBF331A8A1B7B7076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:21:18:77:6a:03:4e:4b:e0:b1:36:27:ea: 24:70:54:90:5c:0c:d0:b3:82:01:10:36:e0:2b:86: 5e:d7:e6:ce:cf:1b:d8:e7:88:30:21:e8:a0:a3:33: 2e:3b:82:0b:ab:0c:4f:f2:7a:48:7a:c4:e9:95:28: 63:dc:f6:67:1c:9f:a9:02:c6:d2:e9:c5:fd:e3:9a: a1:5d:39:c6:a1:29:49:1a:31:ae:70:af:d6:b7:cf: c9:82:24:3e:1c:7a:4b:89:51:cd:3e:de:54:76:fa: b7:d8:d5:ac:86:06:e8:49:75:b8:d6:1e:69:b9:2e: 0b:a7:6b:75:11:31:33:64:d7:a3:08:00:3a:53:f4: da:e5:ac:98:95:74:0e:a0:5d:01:15:4d:81:5c:86: 80:5c:33:49:24:44:3c:11:d3:b7:94:bb:99:66:8d: f8:b3:d2:1e:ec:e0:f5:e2:15:ed:7a:1e:18:88:14: 59:7c:1b:fa:29:de:ea:18:76:53:ba:a9:e3:f0:d0: 41:d9:31:95:9b:11:09:cf:0f:8b:c0:ff:84:8f:06: a8:7e:90:35:d2:9d:d3:f2:ef:f4:70:8f:6e:78:7c: 15:14:15:6c:3f:09:7f:51:0f:07:be:b7:e4:22:19: 97:9b:a4:33:30:71:df:4a:a6:b9:2d:7a:43:32:ed: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:12:6F:AA:38:3B:76:94:94:CA:7B:BF:33:1A:8A:1B:7B:70:76 X509v3 Authority Key Identifier: keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:46:c7:69:ea:9c:5b:b1:17:af:4c:76:a4:ab:02:0e:1c:e5: c4:74:a3:6a:4a:da:6c:e6:25:32:84:f4:81:2c:f6:1a:d2:8f: 21:02:35:a2:52:18:e5:ed:b2:c7:7f:29:24:e6:92:60:d1:59: 44:41:1d:af:e8:61:65:f0:0d:e0:d9:4a:78:64:0e:c4:5d:b5: 67:a0:24:b6:8b:1b:44:bd:13:d2:8a:eb:69:f0:4e:62:78:99: 87:ab:f7:af:bf:5b:32:14:23:4b:f5:01:07:2d:81:02:a8:f9: 55:44:04:0d:ef:01:f0:1c:9e:aa:07:0a:a6:3c:13:4d:c6:ad: a8:29:df:52:0c:7c:13:db:ad:cf:b3:76:99:7c:f3:de:77:88: 09:a2:5e:a4:cc:ca:49:16:59:dd:ee:8f:dc:ef:f3:a6:7b:e0: 7e:72:18:89:9f:59:18:28:35:d6:10:bb:85:04:c2:b9:19:93: 94:3c:98:61:24:0e:43:f8:5a:75:c9:75:ce:d2:11:e1:86:af: 2b:9f:4e:f9:0e:00:d8:24:b0:b7:b7:e7:cc:1b:0c:46:fd:1f: e3:48:d0:9f:35:5a:ce:0f:ae:5b:8f:c0:7d:53:b0:fb:60:4f: b2:e6:a7:bc:ed:4d:9f:16:b5:1b:f2:f6:95:f5:3f:ea:11:1f: 34:90:b5:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW8LtkJgG2/N+gFIhCSGvqdJ8jcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw MDhGMjA0MzAeFw0yNjA1MjkwNzEyNDJaFw0yNjA1MzAxMDEwNDJaMDMxMTAvBgNV BAMTKDZDN0ExMjZGQUEzODNCNzY5NDk0Q0E3QkJGMzMxQThBMUI3QjcwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiyEYd2oDTkvgsTYn6iRwVJBc DNCzggEQNuArhl7X5s7PG9jniDAh6KCjMy47ggurDE/yekh6xOmVKGPc9mccn6kC xtLpxf3jmqFdOcahKUkaMa5wr9a3z8mCJD4cekuJUc0+3lR2+rfY1ayGBuhJdbjW Hmm5Lguna3URMTNk16MIADpT9NrlrJiVdA6gXQEVTYFchoBcM0kkRDwR07eUu5lm jfiz0h7s4PXiFe16HhiIFFl8G/op3uoYdlO6qePw0EHZMZWbEQnPD4vA/4SPBqh+ kDXSndPy7/Rwj254fBUUFWw/CX9RDwe+t+QiGZebpDMwcd9KprktekMy7fd5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbHoSb6o4O3aUlMp7vzMaiht7cHYwHwYDVR0j BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUbHaeqcW7EX r0x2pKsCDhzlxHSjakrabOYlMoT0gSz2GtKPIQI1olIY5e2yx38pJOaSYNFZREEd r+hhZfAN4NlKeGQOxF21Z6AktosbRL0T0orrafBOYniZh6v3r79bMhQjS/UBBy2B Aqj5VUQEDe8B8ByeqgcKpjwTTcatqCnfUgx8E9utz7N2mXzz3neICaJepMzKSRZZ 3e6P3O/zpnvgfnIYiZ9ZGCg11hC7hQTCuRmTlDyYYSQOQ/hadcl1ztIR4YavK59O +Q4A2CSwt7fnzBsMRv0f40jQnzVazg+uW4/AfVOw+2BPsuanvO1Nnxa1G/L2lfU/ 6hEfNJC1gA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client