$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft File: A60990A9CA589164050432BD05473DCF9F93F6F8.mft (raw, json) Hash identifier: 6U3GBM3e9gZie2OUJdGghCUFL1RkC55kr0A8eARh/P8= Subject key identifier: 40:56:63:FD:0E:56:A7:A1:F1:FD:17:6A:75:9F:F0:03:65:A6:9D:7A Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 40C6A65E8D74E6F11D9556081C4C154240AD763A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft Manifest number: 14 Signing time: Fri 29 May 2026 12:47:49 +0000 Manifest this update: Fri 29 May 2026 12:42:49 +0000 Manifest next update: Sat 30 May 2026 16:41:49 +0000 Files and hashes: 1: A60990A9CA589164050432BD05473DCF9F93F6F8.crl (hash: JmF3GjTtVMZcWu02Y4KDnAeiyxGMT6/i01axcazzUgM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c6:a6:5e:8d:74:e6:f1:1d:95:56:08:1c:4c:15:42:40:ad:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: May 29 12:42:49 2026 GMT Not After : May 30 16:41:49 2026 GMT Subject: CN=405663FD0E56A7A1F1FD176A759FF00365A69D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:c6:f2:a9:32:a4:7d:6d:06:80:f6:b5:45: eb:cd:cb:6a:27:2f:53:0c:b3:fe:93:b2:9e:51:41: dd:56:b8:8a:e7:95:a5:8f:56:5c:66:22:3c:e2:fc: 9d:b3:34:d3:82:79:4f:cd:64:0a:5d:7c:db:2b:4a: 32:31:7c:9e:d5:b2:85:7f:dd:5b:63:40:93:ba:70: 38:f3:e7:f4:d7:04:b1:c4:53:04:8c:70:6b:c2:5d: d3:c0:0c:e5:2c:de:e6:93:3a:aa:92:6a:41:4b:b8: 7b:fd:bf:70:d5:36:e8:a3:b3:d2:da:5d:57:7a:01: 2f:69:40:73:4a:4f:7d:83:24:ff:86:70:e2:ca:b1: 3d:59:1f:a8:a1:6a:58:c1:08:89:31:de:f4:a3:fc: a7:2e:c7:b5:09:2d:4a:cc:14:d0:1f:1c:3d:0c:5e: b4:f3:2d:15:33:85:4e:14:17:f2:b4:ab:c7:56:58: e5:54:05:b0:98:01:8f:6d:71:ba:d9:72:bd:2a:b6: 24:cd:25:22:92:c9:c4:0a:aa:34:12:02:0c:b3:9b: af:96:50:97:8b:e0:c5:95:0e:9a:74:3d:b9:6b:b1: 0d:71:9a:f3:6c:f0:e8:f4:32:0a:28:fa:d8:7d:cc: 4b:a8:e9:58:2e:a7:ba:4a:42:42:90:a9:ea:7c:7e: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:63:FD:0E:56:A7:A1:F1:FD:17:6A:75:9F:F0:03:65:A6:9D:7A X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:21:be:b9:e2:6d:48:49:48:5e:b0:73:e9:39:12:e5:a3:09: f1:7e:a6:9d:fc:f9:a5:3c:2e:d4:37:bc:48:d8:86:d2:04:6a: e9:c5:61:00:71:ac:a8:7c:4d:f7:63:c9:85:7b:c2:63:dc:07: d1:12:33:26:70:04:02:3f:bc:e4:f8:56:e0:6c:9a:9d:28:9c: ca:be:36:56:54:53:ab:9a:e4:d8:95:bd:1b:dd:43:97:80:93: e3:9a:a8:45:05:f6:67:65:96:d8:c6:6b:c9:f8:b5:dc:a2:6f: 8c:44:fe:df:2f:d9:dc:c0:6b:f1:2d:4e:97:80:30:c6:53:71: 9a:ee:69:34:8d:c2:c2:c6:2c:fe:26:91:43:74:51:f3:cc:53: 77:21:98:2f:ad:6a:3d:af:f3:34:1e:61:25:f6:2a:78:58:2a: bb:03:da:fb:f0:29:a0:2f:d7:65:9d:c2:1b:c3:a4:56:7b:86: 0d:a6:9f:6f:7f:38:dc:58:e5:5b:96:4e:7b:cb:cc:36:8f:08: 9d:b5:79:b8:c2:56:ae:8d:55:21:a5:52:b8:c0:a6:e0:40:cb: 8e:d3:4b:7e:55:18:9a:10:ab:92:d3:5c:41:d9:96:b0:c7:dd: 0c:1c:14:c7:ea:e4:63:7e:41:39:20:4d:9a:f7:f6:45:50:8f: cf:e7:6a:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQMamXo105vEdlVYIHEwVQkCtdjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA1MjkxMjQyNDlaFw0yNjA1MzAxNjQxNDlaMDMxMTAvBgNV BAMTKDQwNTY2M0ZEMEU1NkE3QTFGMUZEMTc2QTc1OUZGMDAzNjVBNjlEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+8byqTKkfW0GgPa1RevNy2on L1MMs/6Tsp5RQd1WuIrnlaWPVlxmIjzi/J2zNNOCeU/NZApdfNsrSjIxfJ7VsoV/ 3VtjQJO6cDjz5/TXBLHEUwSMcGvCXdPADOUs3uaTOqqSakFLuHv9v3DVNuijs9La XVd6AS9pQHNKT32DJP+GcOLKsT1ZH6ihaljBCIkx3vSj/Kcux7UJLUrMFNAfHD0M XrTzLRUzhU4UF/K0q8dWWOVUBbCYAY9tcbrZcr0qtiTNJSKSycQKqjQSAgyzm6+W UJeL4MWVDpp0PblrsQ1xmvNs8Oj0Mgoo+th9zEuo6Vgup7pKQkKQqep8flr9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQFZj/Q5Wp6Hx/RdqdZ/wA2WmnXowHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NzU0Mzc1MzEyODM0NzcvMC9BNjA5OTBBOUNBNTg5 MTY0MDUwNDMyQkQwNTQ3M0RDRjlGOTNGNkY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiG+ueJtSElI XrBz6TkS5aMJ8X6mnfz5pTwu1De8SNiG0gRq6cVhAHGsqHxN92PJhXvCY9wH0RIz JnAEAj+85PhW4GyanSicyr42VlRTq5rk2JW9G91Dl4CT45qoRQX2Z2WW2MZryfi1 3KJvjET+3y/Z3MBr8S1Ol4AwxlNxmu5pNI3CwsYs/iaRQ3RR88xTdyGYL61qPa/z NB5hJfYqeFgquwPa+/ApoC/XZZ3CG8OkVnuGDaafb3843FjlW5ZOe8vMNo8InbV5 uMJWro1VIaVSuMCm4EDLjtNLflUYmhCrktNcQdmWsMfdDBwUx+rkY35BOSBNmvf2 RVCPz+dqOw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:33 2026 by rpki-client