$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: /j7NFroC8Mhk41Mg7XHEEqfFdAxJhHsk5fBa8CVtSos= Subject key identifier: 9E:5F:92:5D:57:10:D1:E7:FD:38:F8:80:DA:22:13:EC:D8:6E:8F:01 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 123E6D7AB4C8E48473807E7EBB510ACD48769FC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 0F Signing time: Fri 29 May 2026 19:48:18 +0000 Manifest this update: Fri 29 May 2026 19:43:18 +0000 Manifest next update: Sat 30 May 2026 21:44:18 +0000 Files and hashes: 1: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: LAO9UEP6Nuk71d6LyuK/D4aFreBKlR2VTl3FFpR4BAE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3e:6d:7a:b4:c8:e4:84:73:80:7e:7e:bb:51:0a:cd:48:76:9f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: May 29 19:43:18 2026 GMT Not After : May 30 21:44:18 2026 GMT Subject: CN=9E5F925D5710D1E7FD38F880DA2213ECD86E8F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:ff:f9:57:63:53:58:d7:89:07:73:32:e9: 26:27:88:06:75:f0:b4:e4:93:9e:81:2d:f2:ab:43: 57:84:f0:0b:5e:3c:8e:ab:ba:57:8b:52:3f:ad:0a: b5:13:97:16:25:95:e3:30:8b:f0:d1:a8:07:9e:bf: 52:5d:3f:66:18:48:ad:45:e2:69:2d:9f:22:1a:80: 8d:ef:45:e8:41:1a:be:01:26:2c:4b:a2:fc:2b:57: fb:f2:39:bc:08:59:f7:f1:55:a0:e0:cd:45:c0:7d: d0:74:6d:a4:f7:9a:1c:a7:95:a2:85:27:51:0f:81: 49:ae:0a:21:42:97:6d:dc:ea:e2:26:be:cf:35:46: 3a:2a:f0:42:6a:b0:2e:78:41:ba:ed:de:fa:d8:33: 27:7c:6e:80:e1:d0:1c:1f:01:e8:90:7b:83:c0:8e: 66:2e:2c:e9:3e:3b:de:93:c0:1d:49:bd:8c:c8:ab: 81:09:7d:96:5d:f5:e5:7c:20:a2:bd:db:9b:c5:dd: d0:5f:0d:75:22:39:78:2f:5c:22:92:52:59:b4:b1: 0b:f6:e8:9d:a3:53:0d:71:1e:55:d5:c1:a3:36:63: 0c:54:ca:3c:1c:34:2e:7a:c9:ea:40:14:fd:81:92: 72:53:90:a8:6e:38:64:e0:2d:6b:ab:94:58:eb:ec: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5F:92:5D:57:10:D1:E7:FD:38:F8:80:DA:22:13:EC:D8:6E:8F:01 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:15:83:08:d0:07:b4:2a:4d:b2:7b:1c:4d:43:34:4f:06:10: 30:ca:11:fd:89:b5:9d:bf:8d:23:c8:c6:a9:e5:4b:44:88:ff: 44:3c:f3:1e:b7:25:ad:fb:1e:49:da:51:93:23:3f:e1:26:26: a5:34:db:a0:49:be:25:e0:ea:e2:40:27:bd:e9:bf:34:24:44: 4f:88:90:3d:38:92:39:be:6c:40:88:c3:23:56:21:b3:1a:f3: 6c:c9:4d:5a:18:56:20:99:b9:fd:57:9d:eb:81:ef:a8:98:6f: 94:03:e9:4c:3b:9f:02:71:4f:08:91:33:96:d4:3c:39:20:07: 9b:80:cc:7c:11:4f:b0:3d:e0:60:b6:81:45:ae:8f:12:e7:61: 73:cf:ee:04:da:cd:8e:9f:70:cf:ec:1d:2e:ee:4c:10:f3:91: b6:be:21:e9:eb:f4:c2:bc:fe:3b:ef:6d:c4:0e:c1:1b:76:b4: 21:4c:f1:62:bd:dc:18:d3:5d:45:bc:a3:d7:36:e2:c7:fc:80: c6:7a:0f:2c:84:0a:0c:6a:da:9e:f1:29:7f:15:72:21:15:05: 6f:b3:a2:25:26:19:e8:3f:81:e0:bf:b1:af:0c:ed:5e:88:2a: 60:cb:16:6a:55:93:f9:2f:97:fd:b9:7c:03:04:20:70:50:a7: 36:9d:5a:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEj5terTI5IRzgH5+u1EKzUh2n8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA1MjkxOTQzMThaFw0yNjA1MzAyMTQ0MThaMDMxMTAvBgNV BAMTKDlFNUY5MjVENTcxMEQxRTdGRDM4Rjg4MERBMjIxM0VDRDg2RThGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtg//5V2NTWNeJB3My6SYniAZ1 8LTkk56BLfKrQ1eE8AtePI6ruleLUj+tCrUTlxYlleMwi/DRqAeev1JdP2YYSK1F 4mktnyIagI3vRehBGr4BJixLovwrV/vyObwIWffxVaDgzUXAfdB0baT3mhynlaKF J1EPgUmuCiFCl23c6uImvs81Rjoq8EJqsC54Qbrt3vrYMyd8boDh0BwfAeiQe4PA jmYuLOk+O96TwB1JvYzIq4EJfZZd9eV8IKK925vF3dBfDXUiOXgvXCKSUlm0sQv2 6J2jUw1xHlXVwaM2YwxUyjwcNC56yepAFP2BknJTkKhuOGTgLWurlFjr7BqXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnl+SXVcQ0ef9OPiA2iIT7NhujwEwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxWDCNAHtCpN snscTUM0TwYQMMoR/Ym1nb+NI8jGqeVLRIj/RDzzHrclrfseSdpRkyM/4SYmpTTb oEm+JeDq4kAnvem/NCRET4iQPTiSOb5sQIjDI1YhsxrzbMlNWhhWIJm5/Ved64Hv qJhvlAPpTDufAnFPCJEzltQ8OSAHm4DMfBFPsD3gYLaBRa6PEudhc8/uBNrNjp9w z+wdLu5MEPORtr4h6ev0wrz+O+9txA7BG3a0IUzxYr3cGNNdRbyj1zbix/yAxnoP LIQKDGranvEpfxVyIRUFb7OiJSYZ6D+B4L+xrwztXogqYMsWalWT+S+X/bl8AwQg cFCnNp1aMw== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client