$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: Buf7I9K39MlWoHo+vwyMcjeEwj/aUo/4KGsVpjDMBYA= Subject key identifier: 77:87:BA:9E:04:31:B5:3B:D7:4B:6A:96:4E:B6:A5:74:43:20:1F:9E Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 6E52121571D13F0488C712CEADFF30A422F88CEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 0C Signing time: Fri 29 May 2026 20:23:18 +0000 Manifest this update: Fri 29 May 2026 20:18:18 +0000 Manifest next update: Sat 30 May 2026 23:31:18 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: gVWQuchukgsWApXkLxC9nPwLfM9iAm+TrKJq229a3TE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:52:12:15:71:d1:3f:04:88:c7:12:ce:ad:ff:30:a4:22:f8:8c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: May 29 20:18:18 2026 GMT Not After : May 30 23:31:18 2026 GMT Subject: CN=7787BA9E0431B53BD74B6A964EB6A57443201F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:2c:25:d8:66:bd:51:57:d5:27:2f:b3:9b: c1:82:b8:ef:b5:58:e7:d5:28:96:e6:80:27:25:4d: 21:4b:ea:b9:b4:6c:82:a2:e2:c7:27:b7:e9:91:84: 76:e5:9f:46:e2:03:72:be:54:d3:ef:72:48:e8:1b: e7:5a:dd:64:b3:14:f4:67:75:75:7e:62:cf:6d:b6: 45:47:8f:91:47:54:f4:55:a7:1e:a2:8a:be:e9:4e: f1:6e:c1:a8:ca:fd:d4:16:08:d3:bb:80:d2:9d:92: b0:0b:c7:db:aa:18:f0:c1:eb:e4:0a:82:7a:9d:a7: 9f:cc:16:29:8b:ed:2d:08:f7:cf:b1:58:85:8c:8b: d8:38:1e:ca:59:71:67:e7:e0:ed:ea:65:16:ce:2d: 0c:48:3b:63:47:9c:05:c9:71:14:5e:f8:1e:b8:71: 8f:e7:99:df:6a:d0:1e:ce:a4:93:6a:7a:c6:20:29: 14:12:55:3e:1e:60:c0:80:a6:aa:fa:a2:1e:5c:5a: 60:cc:fe:5c:f3:35:8e:a1:4b:5c:b7:17:41:23:26: 0e:73:ec:fd:63:9f:4b:63:9b:ae:ec:7f:f9:4b:dd: 69:e8:a6:eb:46:1c:61:d2:8e:d2:fc:aa:3b:20:2c: af:77:2d:6e:6f:e1:14:2f:85:13:34:81:83:e0:31: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:87:BA:9E:04:31:B5:3B:D7:4B:6A:96:4E:B6:A5:74:43:20:1F:9E X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:95:2d:39:11:48:76:83:81:4c:8d:ca:18:0f:76:96:62: 7d:d5:af:1e:e1:f1:ab:25:47:5a:db:6e:65:42:1e:66:b4:7e: c7:37:d7:64:76:ae:a9:46:fe:f1:9e:b8:dc:69:36:7c:d0:45: a9:d1:21:a1:73:28:95:b3:0c:f0:83:47:20:93:da:05:8b:ef: a2:f4:c2:33:cd:cc:47:38:56:aa:82:72:75:e6:23:d5:11:79: 5f:1b:f5:f0:d7:f2:6e:8b:28:2a:63:3d:28:be:f3:80:9b:49: 05:ff:1f:23:70:d3:fb:9c:16:aa:7a:9c:21:ed:bd:db:db:4b: 76:72:f3:e2:62:42:8e:18:7b:9c:3c:47:4a:4c:5a:0f:a0:e8: d3:75:38:09:8b:fe:be:98:e5:e3:d0:2d:77:25:bf:e2:85:e8: ef:f5:16:f9:8d:99:e2:40:28:b6:f6:b8:bf:18:1d:13:34:1f: f9:f7:5a:ca:4f:03:c3:99:b0:61:43:38:84:12:b9:47:37:8a: b4:13:f7:bd:aa:af:ed:16:e6:e4:49:15:97:03:e0:8f:c3:6b: cb:10:16:62:0d:c8:78:33:00:9c:26:9d:dd:7a:cc:9e:b6:ce: fe:f6:ce:62:a4:65:0e:83:d5:b1:b5:5f:5f:8f:54:55:6c:5c: d7:46:85:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUblISFXHRPwSIxxLOrf8wpCL4jOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA1MjkyMDE4MThaFw0yNjA1MzAyMzMxMThaMDMxMTAvBgNV BAMTKDc3ODdCQTlFMDQzMUI1M0JENzRCNkE5NjRFQjZBNTc0NDMyMDFGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbCwl2Ga9UVfVJy+zm8GCuO+1 WOfVKJbmgCclTSFL6rm0bIKi4scnt+mRhHbln0biA3K+VNPvckjoG+da3WSzFPRn dXV+Ys9ttkVHj5FHVPRVpx6iir7pTvFuwajK/dQWCNO7gNKdkrALx9uqGPDB6+QK gnqdp5/MFimL7S0I98+xWIWMi9g4HspZcWfn4O3qZRbOLQxIO2NHnAXJcRRe+B64 cY/nmd9q0B7OpJNqesYgKRQSVT4eYMCApqr6oh5cWmDM/lzzNY6hS1y3F0EjJg5z 7P1jn0tjm67sf/lL3WnoputGHGHSjtL8qjsgLK93LW5v4RQvhRM0gYPgMZjDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd4e6ngQxtTvXS2qWTraldEMgH54wHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDCVLTkRSHaD gUyNyhgPdpZifdWvHuHxqyVHWttuZUIeZrR+xzfXZHauqUb+8Z643Gk2fNBFqdEh oXMolbMM8INHIJPaBYvvovTCM83MRzhWqoJydeYj1RF5Xxv18NfybosoKmM9KL7z gJtJBf8fI3DT+5wWqnqcIe2929tLdnLz4mJCjhh7nDxHSkxaD6Do03U4CYv+vpjl 49AtdyW/4oXo7/UW+Y2Z4kAotva4vxgdEzQf+fdayk8Dw5mwYUM4hBK5RzeKtBP3 vaqv7Rbm5EkVlwPgj8NryxAWYg3IeDMAnCad3XrMnrbO/vbOYqRlDoPVsbVfX49U VWxc10aFKA== -----END CERTIFICATE-----Generated at Fri May 29 22:03:34 2026 by rpki-client