$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json) Hash identifier: O5yzJumky/P4lAmSmaSjRd80twvJyFyXD9M4u4IllAs= Subject key identifier: 62:B9:56:01:B2:C2:23:8F:C7:9C:F8:49:BD:6E:CB:98:B9:83:37:04 Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Certificate serial: 29208DA9150AC3A2A53A04CA5B0E30BA54494781 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft Manifest number: 18 Signing time: Fri 29 May 2026 17:43:04 +0000 Manifest this update: Fri 29 May 2026 17:38:04 +0000 Manifest next update: Sat 30 May 2026 19:12:04 +0000 Files and hashes: 1: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=) 2: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=) 3: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: 2vZ/cacKeK6ppMthYj+TNPXFcZmbIpszd0MRxy6a3Yc=) 4: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:20:8d:a9:15:0a:c3:a2:a5:3a:04:ca:5b:0e:30:ba:54:49:47:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Validity Not Before: May 29 17:38:04 2026 GMT Not After : May 30 19:12:04 2026 GMT Subject: CN=62B95601B2C2238FC79CF849BD6ECB98B9833704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:73:d9:7d:c7:09:20:a8:72:31:b5:af:1e: d8:68:03:8a:1c:9f:e3:40:07:19:16:1e:cb:6a:29: d4:0d:d7:1b:2d:ee:db:59:4e:9d:ee:44:e0:ef:68: 6a:b2:cb:80:79:a0:27:fc:db:c3:77:65:0f:13:c0: c2:f2:c0:18:84:1b:35:2e:e5:30:e6:67:42:ec:b2: 7c:e3:b9:0f:1f:ee:a8:41:0c:7a:fb:63:90:0a:04: 9c:b3:10:0a:7c:d6:c9:e6:eb:ff:7a:58:ce:ec:09: 64:60:dc:09:31:82:67:32:10:1d:cb:57:6e:aa:db: 94:00:c6:3a:3f:87:2c:1e:f8:fc:8b:33:1b:9d:27: ce:b8:ae:bf:fd:fd:4d:62:ed:ed:8b:37:e5:38:fb: 14:70:41:34:5e:e3:73:3d:59:3e:52:95:eb:70:1e: 3b:d5:02:c0:1f:6d:60:5d:80:d5:36:a9:80:8f:60: 84:21:b0:39:0a:af:30:4a:8d:48:ee:59:cd:c5:a6: df:20:be:88:b2:d7:2a:6d:12:40:40:1d:ff:d0:8a: c6:18:db:3a:cb:2f:8d:f1:d6:11:70:aa:95:de:eb: f9:0a:04:cc:bf:0b:6a:ba:96:62:5c:af:f0:56:66: 83:ed:c3:b0:c2:1e:d6:30:8c:2d:52:8a:ba:d1:18: a2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B9:56:01:B2:C2:23:8F:C7:9C:F8:49:BD:6E:CB:98:B9:83:37:04 X509v3 Authority Key Identifier: keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:64:3c:1b:b5:5d:ed:b1:51:e6:77:d2:e9:8d:23:0d:9a: 55:c0:5b:70:d3:45:db:a6:31:bb:7c:65:08:a5:5c:e0:12:1c: 83:c7:fa:5e:ac:d6:8a:d6:6a:ad:d6:6e:48:09:8c:39:84:4b: b9:49:67:d6:91:e3:dd:b8:12:49:64:f9:cd:92:8f:ac:0b:20: d7:06:b3:3c:9a:2c:91:13:27:d2:09:45:78:12:c6:f0:56:56: aa:cb:42:28:01:2c:b4:02:38:a7:97:b1:04:35:03:ee:b1:33: e9:89:36:49:29:19:9d:57:db:68:9f:12:12:05:06:ca:70:d5: 44:41:9a:a4:ad:5f:e9:32:14:df:5f:99:00:e1:5a:a9:f3:c2: f3:3b:a2:ad:62:15:f2:64:b2:9a:51:3e:89:dc:45:45:e1:ca: 97:d7:1f:ec:7a:f4:01:46:7b:64:ab:0a:85:da:ef:15:40:cb: 89:1d:f5:21:5b:47:ce:1a:82:23:6f:c0:4b:af:76:d0:f9:71: e8:35:c0:26:9b:d4:6a:0c:4c:ad:53:39:a0:59:bb:f6:e6:6f: 63:ed:b1:9c:42:49:61:8d:ec:eb:7a:f0:5f:62:8f:02:bd:3f: f6:5e:f6:01:b0:03:9d:6b:df:f6:b7:a3:e2:0e:54:82:c2:c4: 39:4e:05:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKSCNqRUKw6KlOgTKWw4wulRJR4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5 RjczM0YwODAeFw0yNjA1MjkxNzM4MDRaFw0yNjA1MzAxOTEyMDRaMDMxMTAvBgNV BAMTKDYyQjk1NjAxQjJDMjIzOEZDNzlDRjg0OUJENkVDQjk4Qjk4MzM3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBunPZfccJIKhyMbWvHthoA4oc n+NABxkWHstqKdQN1xst7ttZTp3uRODvaGqyy4B5oCf828N3ZQ8TwMLywBiEGzUu 5TDmZ0LssnzjuQ8f7qhBDHr7Y5AKBJyzEAp81snm6/96WM7sCWRg3AkxgmcyEB3L V26q25QAxjo/hywe+PyLMxudJ864rr/9/U1i7e2LN+U4+xRwQTRe43M9WT5Sletw HjvVAsAfbWBdgNU2qYCPYIQhsDkKrzBKjUjuWc3Fpt8gvoiy1yptEkBAHf/QisYY 2zrLL43x1hFwqpXe6/kKBMy/C2q6lmJcr/BWZoPtw7DCHtYwjC1SirrRGKJRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYrlWAbLCI4/HnPhJvW7LmLmDNwQwHwYDVR0j BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAxMDg4MTkvMC9DMTY4NjYwMkY1N0M5 N0JEQjcwNThEQjVGMDU2MjNGNzlGNzMzRjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsZkPBu1Xe2x UeZ30umNIw2aVcBbcNNF26Yxu3xlCKVc4BIcg8f6XqzWitZqrdZuSAmMOYRLuUln 1pHj3bgSSWT5zZKPrAsg1wazPJoskRMn0glFeBLG8FZWqstCKAEstAI4p5exBDUD 7rEz6Yk2SSkZnVfbaJ8SEgUGynDVREGapK1f6TIU31+ZAOFaqfPC8zuirWIV8mSy mlE+idxFReHKl9cf7Hr0AUZ7ZKsKhdrvFUDLiR31IVtHzhqCI2/AS6920Plx6DXA JpvUagxMrVM5oFm79uZvY+2xnEJJYY3s63rwX2KPAr0/9l72AbADnWvf9rej4g5U gsLEOU4FNw== -----END CERTIFICATE-----Generated at Fri May 29 22:02:48 2026 by rpki-client